Non-Volatile Memory express (NVMe) Data Path Security Cluster (DPSC) Module
Google, LLC - FIPS 140 #5455
The Data Path Security Cluster is a hardware IP providing XTS-AES encryption to NVMe data in transit over the network. The cryptographic module accepts from its outside and stores cryptographic keys for multiple NVMe connections. Depending on the content of received data, the module shall or shall not apply cryptographic processing to the data. The DPSC contains 4 identical XTS-AES-256 decrypt engines, 4 identical XTS-AES-256 encrypt engines, key cache arbiter and key cache SRAM which is zeroized on reset. The data interfaces exposed to the NVMe Protocol Layer (NPL) within the NVMe Protocol Initiator (NPI) are read and write DMA interfaces. XTS keys are written to the module’s SRAM via Control/Status Register (CSR) writes from the Integrated Management Complex (IMC) located outside of the module boundary. On-demand self- tests may be initiated from the NPI using an on-demand self-test trigger over a wire interface.
Key facts
- Scheme
- FIPS 140
- Certificate
- 5455
- Standard
- FIPS 140-3
- Security level
- Level 1
- Status
- active
- Vendor
- Google, LLC
- Module type
- Hardware
- Embodiment
- SingleChip
- Lab
- Acumen Security
- First validated
- July 30, 2026
- Sunset date
- July 29, 2031
- Caveat
- No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Algorithms
- AES-XTS Testing Revision 2.0
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain