Canon MFP Security Chip
Canon MFP Security Chip, from Canon Inc., holds FIPS 140-3 certificate #4785 at overall level 2. The validation is active, with a sunset date of 2029-09-02. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy. When entropy is externally loaded, no assurance of the minimum strength of generated SSPs (e.g., keys)
Certificate
| Certificate number | 4785 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-09-02 |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | Canon Inc. · website |
| Hardware versions | 3.0 |
| Firmware versions | 3.00, 3.00(V05L00), 3.00(V05L01) |
| Entropy | ENT (P) |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Canon MFP Security Chip handles cryptography for the storage device of the Canon MFP/printer. The Canon MFP Security Chip realizes high-speed data encryption/decryption through a serial ATA interface, using AES XTS mode. This allows the Canon MFP/printer's storage device to be protected against the risk of information leakage, without compromising objectives such as extensibility, flexibility, usability, and high performance.
Security level exceptions
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (4)
| Algorithm | CAVP certificates |
|---|---|
| AES-XTS | C217 |
| Hash DRBG | DRBG 2300 |
| RSA SigVer (FIPS186-4) | RSA 3059 |
| SHA2-256 | SHS 4547 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-09-03 | Initial | IT SECURITY CENTER |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-09-03