Inline Crypto Engine (ICE)
Google, LLC - FIPS 140 #4425
The Inline Crypto Engine (ICE) module is comprised of a sub-chip cryptographic subsystem in the Google IN762 SoC. The module provides a cryptographic engine supporting cryptographic offload for IPsec and PSP protocols. The ICE module processes network infrastructure packets in both the Ingress and Egress directions. In addition to providing the cryptographic primitives for the security protocols it also provides packet integrity authentication and anti-replay protection.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4425
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- Moved to historical list due to sunsetting
- Vendor
- Google, LLC
- Module type
- Hardware
- Embodiment
- Single Chip
- Lab
- Acumen Security
- First validated
- January 26, 2023
- Versions
- 1.0
- Caveat
- None
- Level exceptions
- Mitigation of Other Attacks: N/A
Algorithms
- AES
- KBKDF
- KTS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
Tested environments
- IN762 SoC B1
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain