Motorola Solutions Advanced Crypto Engine (MACE) HSM – Security Level 3
Motorola Solutions Advanced Crypto Engine (MACE) HSM – Security Level 3, from Motorola Solutions, Inc., holds FIPS 140-3 certificate #4978 at overall level 3. The validation is active, with a sunset date of 2030-02-26. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of the minimum strength of generated SSPs
Certificate
| Certificate number | 4978 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2030-02-26 |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Single Chip |
| Vendor | Motorola Solutions, Inc. · website |
| Hardware versions | P/N 5185912T05 |
| Firmware versions | R04.01.04 with [AES128 R01.00.05 and AES256 R01.00.07] |
Module description
Quoted from the NIST CMVP entry for this certificate.
The MACE is a single-chip cryptographic module to meet FIPS 140-3 Level-3 physical security requirements. The Module provides encryption and decryption services for secure key management, and secure voice/data traffic for Motorola Solutions Micro HSM product.
Security level exceptions
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (20)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A5273, A5274, A5275 |
| AES-CFB8 | A5273 |
| AES-CTR | A5274, A5275 |
| AES-ECB | A5273, A5274, A5275 |
| AES-GCM | A5273, A5274, A5275 |
| AES-GMAC | A5273, A5274, A5275 |
| AES-KW | A2527, A2528 |
| AES-OFB | A5273, A5274, A5275 |
| Counter DRBG | A2529 |
| ECDSA KeyGen (FIPS186-4) | A2532 |
| ECDSA SigGen (FIPS186-4) | A2532 |
| ECDSA SigVer (FIPS186-4) | A2532 |
| HMAC-SHA2-384 | A2531 |
| KAS-ECC Sp800-56Ar3 | A2533 |
| KDF SRTP | A2534 |
| KDF TLS | A2535 |
| RSA SigVer (FIPS186-5) | A5253 |
| SHA2-256 | A2530, SHS 817 |
| SHA2-384 | A2530 |
| TLS v1.3 KDF | A2535 |
Allowed algorithms
KTS ([IG D.G]; AES CBC Cert. #A5273 (unwrapping only); Key establishment methodology provides 256 bits strength.)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-02-27 | Initial | UL Verification Services, Inc. |
| 2026-01-29 | Update | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-02-27