Cryptographic Module Validation Program CMVP

Module Name

PrismPlus Cryptographic Module

Standard

FIPS 140-3

Status

Active

Sunset Date

1/26/2030

Overall Level

1

Caveat

None

Security Level Exceptions

• Non-invasive security: N/A
• Mitigation of other attacks: N/A

Module Type

Hardware

Embodiment

Multi-Chip Embedded

Description

The PrismPlus Cryptographic Module is a hardware Module intended for use by US Federal agencies or other markets that require a FIPS 140-3 validated network encryption device. The Module implemented on a PCIe Adapter is intended to be used in Fibre Channel based Storage Area Networks. The Module allows a Connection to be established between one of the multiple Host Initiator Entities (eg 256 Virtual Machine Drivers running on multiple CPU cores) on a Storage Server Appliance and one of the multiple Remote Host Target Entities (eg 1000s of Storage LUNs) on multiple Storage Device Appliances via one of the multiple Physical Ports (eg 4x 64GFC ports). The Connection facilitates transfer of data between a Host Initiator Entity on a Storage Server Appliance and Host Target Entity on a Storage Server Appliance using the FC (Fibre Channel) Protocol. The Module allows multiple (1000s) of connections between Host Initiator Entities on a Storage Server Appliance and Host Target Entities on Storage Device Appliances. The module can be used to support Data-in-Flight Encryption/Decryption between Storage Appliances in a FC-SAN environment. Encryption decisions are made on a connection basis, whereby only a subset of the connections could be enabled for Encryption. If a connection is enabled for Encryption, only a subset of the Frame Types (eg Data Frames only, not Command/Status/Control/etc. Frames) could be enabled for Encryption.

Tested Configuration(s)

• N/A

Approved Algorithms

Allowed Algorithms

N/A (N/A; N/A)

Entropy

ENT (P)

Hardware Versions

G99-00139-01

Firmware Versions

14.2.338.0