Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5272

Details

Module Name
Google HSM
Standard
FIPS 140-3
Status
Active
Sunset Date
5/18/2031
Overall Level
3
Caveat
None
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Hardware
Embodiment
SingleChip
Description
An embedded chip designed to securely manage and protect cryptographic keys and perform cryptographic operations.
Approved Algorithms
AES-GCM
A6546
ECDSA KeyGen (FIPS186-5)
A6546
ECDSA SigGen (FIPS186-5)
A6546
ECDSA SigVer (FIPS186-5)
A6546
HMAC DRBG
A6546
HMAC-SHA2-256
A6546
KAS-ECC-SSC Sp800-56Ar3
A6546
KDF SP800-108
A6546
SHA2-256
A6546

Vendor

Google, LLC
1600 Amphitheatre Parkway
Mountain View, California 94043
USA

FIPS Crypto Officer
[email protected]
Phone: 650-253-0000

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
5/19/2026 Initial Gossamer Security Solutions