kbrain

Google HSM

Google, LLC - FIPS 140 #5272

activeLevel 3

An embedded chip designed to securely manage and protect cryptographic keys and perform cryptographic operations.

Key facts

Scheme
FIPS 140
Certificate
5272
Standard
FIPS 140-3
Security level
Level 3
Status
active
Vendor
Google, LLC
Module type
Hardware
Embodiment
SingleChip
Lab
Gossamer Security Solutions
First validated
May 19, 2026
Sunset date
May 18, 2031
Caveat
None

Algorithms

  • AES-GCM
  • ECDSA KeyGen (FIPS186-5)
  • ECDSA SigGen (FIPS186-5)
  • ECDSA SigVer (FIPS186-5)
  • HMAC DRBG
  • HMAC-SHA2-256
  • KAS-ECC-SSC Sp800-56Ar3
  • KDF SP800-108
  • SHA2-256

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain