Atalla Cryptographic Subsystem (ACS)
Caveat: Interim validation. When installed, initialized and configured as specified in Section 11 of the Security Policy
Certificate
| Certificate number | 4992 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2027-03-24 |
| Overall level | 3 |
| Module type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Vendor | Utimaco Inc. · website |
| Hardware versions | C9B60-2108A[1], C9B60-2108B[2], C9B60-2108C[3], C9B60-2108D[4], and C9B60-2108E[5] |
| Firmware versions | Loader 1.24[1][2][3][4][5], PSMCU 1.0.1[1][2][3] and 1.0.3[3][4][5], CMS-OCT 1.0.0[1][2][3] and 1.0.3[3][4][5], CMS-NTX 1.0.0[1], Loader Stage 1 1.10[1][2][3][4][5], Loader Stage 2 1.20[1][2][3][4][5], Boot 1.23[1][2][3][4][5] |
| Entropy | ENT (P) |
Module description
The ACS is a multi-chip embedded cryptographic module. It consists of a secure hardware platform, a firmware secure loader, and three separate microcontrollers, collectively called the Physical Security Monitor Central Unit or PSMCU). The purpose of the cryptographic module is to load Approved (RSA and ECDSA signed) application programs, called "personalities", in a secure manner.
Security level exceptions
- Operational environment: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | AES 4600 |
| AES-CCM | A2606 |
| Conditioning Component Block Cipher Derivation Function SP800-90B | A2606 |
| Counter DRBG | A2606 |
| ECDSA SigVer (FIPS186-4) | A2606 |
| RSA SigVer (FIPS186-4) | A2606 |
| SHA2-512 | SHS 3776 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-03-25 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-09-02 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-03-25