HP Poly Cryptographic Module

Certificate details

Certificate ID #5011
Status active
Validation dates 29.04.2025 , 15.12.2025 , 12.02.2026 , 14.05.2026
Sunset date 22-07-2029
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat No assurance of the minimum strength of generated SSPs (e.g., keys). When operated in approved mode.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The HP Poly Cryptographic Module is a general-purpose cryptographic library incorporated into the CCX line of products to provide FIPS 140-3 validated cryptography for the protection of sensitive information.
Tested configurations
  • Android 12 running on CCX 400 with Rockchip PX30 ARMv8-A with PAA
  • Android 12 running on CCX 600 with NXP i.MX 8M ARMv8-A with PAA
  • Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 32-bit with PAA
  • Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 32-bit without PAA
  • Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 64-bit with PAA
  • Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 64-bit without PAA
  • Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 32-bit with PAA
  • Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 32-bit without PAA
  • Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 64-bit with PAA
  • Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 64-bit without PAA
  • Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 32-bit with PAA
  • Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 32-bit without PAA
  • Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 64-bit with PAA
  • Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 64-bit without PAA
  • Android 13 running on Google Pixel 6 Pro with Google Tensor 32-bit with PAA
  • Android 13 running on Google Pixel 6 Pro with Google Tensor 32-bit without PAA
  • Android 13 running on Google Pixel 6 Pro with Google Tensor 64-bit with PAA
  • Android 13 running on Google Pixel 6 Pro with Google Tensor 64-bit without PAA
  • Android 13 running on Google Pixel 7 Pro with Google Tensor G2 32-bit with PAA
  • Android 13 running on Google Pixel 7 Pro with Google Tensor G2 32-bit without PAA
  • Android 13 running on Google Pixel 7 Pro with Google Tensor G2 64-bit with PAA
  • Android 13 running on Google Pixel 7 Pro with Google Tensor G2 64-bit without PAA
Vendor Hewlett Packard, Inc. http://www.hp.com
Lab Acumen Security
Algorithms
  • AES-CBCA6962
  • AES-CCMA6962
  • AES-CTRA6962
  • AES-ECBA6962
  • AES-GCMA6962
  • AES-KWA6962
  • AES-KWPA6962
  • Counter DRBGA6962
  • ECDSA KeyGen (FIPS186-4)A6962
  • ECDSA KeyVer (FIPS186-4)A6962
  • ECDSA SigGen (FIPS186-4)A6962
  • ECDSA SigVer (FIPS186-4)A6962
  • HMAC-SHA-1A6962
  • HMAC-SHA2-224A6962
  • HMAC-SHA2-256A6962
  • HMAC-SHA2-384A6962
  • HMAC-SHA2-512A6962
  • KAS-ECC-SSC Sp800-56Ar3A6962
  • KDF TLSA6962
  • RSA KeyGen (FIPS186-4)A6962
  • RSA SigGen (FIPS186-4)A6962
  • RSA SigVer (FIPS186-4)A6962
  • SHA-1A6962
  • SHA2-224A6962
  • SHA2-256A6962
  • SHA2-384A6962
  • SHA2-512/256A6962
  • SHA2-512A6962
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, CAST, DES, Triple-DES, HMAC
Asymmetric Algorithms
ECDSA, ECC, DH, Diffie-Hellman
Hash functions
SHA-1, MD4, MD5
Schemes
MAC, Key Agreement
Protocols
SSL, TLS, TLS 1.2, TLS v1.2
Randomness
DRBG
Libraries
BoringSSL
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM

Trusted Execution Environments
PSP
Vendor
NXP, Qualcomm

Security level
Level 1

Cross-references

Outgoing
  • 210 - historical - VPN 3000 Concentrator Series
Subject FIPS 140-2 Security Policy Template
Author webex
Creation date D:20260506165806-04'00'
Modification date D:20260506165806-04'00'
Pages 22
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5011,
  "dgst": "03afa3478417ff50",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA SigGen (FIPS186-4)A6962",
        "KDF TLSA6962",
        "HMAC-SHA2-256A6962",
        "SHA2-256A6962",
        "SHA2-512A6962",
        "AES-CCMA6962",
        "HMAC-SHA2-512A6962",
        "RSA KeyGen (FIPS186-4)A6962",
        "HMAC-SHA2-224A6962",
        "ECDSA SigVer (FIPS186-4)A6962",
        "AES-ECBA6962",
        "HMAC-SHA-1A6962",
        "ECDSA KeyGen (FIPS186-4)A6962",
        "SHA2-224A6962",
        "RSA SigGen (FIPS186-4)A6962",
        "KAS-ECC-SSC Sp800-56Ar3A6962",
        "AES-KWPA6962",
        "ECDSA KeyVer (FIPS186-4)A6962",
        "HMAC-SHA2-384A6962",
        "AES-GCMA6962",
        "AES-KWA6962",
        "SHA-1A6962",
        "SHA2-512/256A6962",
        "#A2811",
        "AES-CTRA6962",
        "#A6962",
        "Counter DRBGA6962",
        "AES-CBCA6962",
        "SHA2-384A6962",
        "RSA SigVer (FIPS186-4)A6962"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "210"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "210",
          "147",
          "100"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "210"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDSA": {
            "ECDSA": 23
          }
        },
        "FF": {
          "DH": {
            "DH": 9,
            "Diffie-Hellman": 1
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 7
        },
        "CCM": {
          "CCM": 5
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 5
        },
        "ECB": {
          "ECB": 5
        },
        "GCM": {
          "GCM": 6
        },
        "OFB": {
          "OFB": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "BoringSSL": {
          "BoringSSL": 1
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 22,
            "TLS 1.2": 1,
            "TLS v1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 7
        },
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 4,
          "P-256": 10,
          "P-384": 4,
          "P-521": 4
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#210": 1,
          "Cert 1": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-256": 1,
          "AES-GCM IV 4": 1,
          "HMAC-SHA-1": 6,
          "PKCS 1": 2,
          "SHA-1": 2,
          "SHA-1 3": 1,
          "SHA2-224": 2,
          "SHA2-256": 4,
          "SHA2-384": 3,
          "SHA2-512": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 4
          },
          "MD5": {
            "MD5": 5
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 13
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 29,
          "FIPS 180-4": 2,
          "FIPS 186-4": 3,
          "FIPS 197": 5,
          "FIPS 198-1": 2,
          "FIPS PUB 140-3": 1
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-38D": 1,
          "NIST SP 800-52": 1,
          "SP 800-131A": 1,
          "SP 800-133": 1,
          "SP 800-135": 1,
          "SP 800-38A": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 1,
          "SP 800-38F": 1,
          "SP 800-52": 1,
          "SP 800-56A": 1,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS 1": 1
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 21,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 3
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 3
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 5
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "NXP": {
          "NXP": 1
        },
        "Qualcomm": {
          "Qualcomm": 6
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA SigGen (FIPS186-4)A6962",
        "KDF TLSA6962",
        "HMAC-SHA2-256A6962",
        "SHA2-256A6962",
        "SHA2-512A6962",
        "AES-CCMA6962",
        "HMAC-SHA2-512A6962",
        "RSA KeyGen (FIPS186-4)A6962",
        "HMAC-SHA2-224A6962",
        "ECDSA SigVer (FIPS186-4)A6962",
        "AES-ECBA6962",
        "HMAC-SHA-1A6962",
        "ECDSA KeyGen (FIPS186-4)A6962",
        "SHA2-224A6962",
        "RSA SigGen (FIPS186-4)A6962",
        "KAS-ECC-SSC Sp800-56Ar3A6962",
        "AES-KWPA6962",
        "ECDSA KeyVer (FIPS186-4)A6962",
        "HMAC-SHA2-384A6962",
        "AES-GCMA6962",
        "AES-KWA6962",
        "SHA-1A6962",
        "SHA2-512/256A6962",
        "AES-CTRA6962",
        "Counter DRBGA6962",
        "AES-CBCA6962",
        "SHA2-384A6962",
        "RSA SigVer (FIPS186-4)A6962"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2811",
        "#A6962"
      ]
    },
    "policy_metadata": {
      "/Author": "webex",
      "/CreationDate": "D:20260506165806-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260506165806-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Subject": "FIPS 140-2 Security Policy Template",
      "pdf_file_size_bytes": 735896,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 22
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "280cfa22adeeb6db77640a0f8e79b423a33221bb6217ba98a214a7bf328bb88f",
      "source_hash": "a358cdc5f9fd7acc6328bbb73dfb8479895d8f430bcf3b47fed4864b0031726d",
      "txt_hash": "caa34ceb88affd57f4d6842fe571d866b03cc2a7f0f4d8b319308b7448f841fe"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys). When operated in approved mode.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2025_010525_0659.pdf",
    "date_sunset": "2029-07-22",
    "description": "The HP Poly Cryptographic Module is a general-purpose cryptographic library incorporated into the CCX line of products to provide FIPS 140-3 validated cryptography for the protection of sensitive information.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "HP Poly Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "2022061300",
    "tested_conf": [
      "Android 12 running on CCX 400 with Rockchip PX30 ARMv8-A with PAA",
      "Android 12 running on CCX 600 with NXP i.MX 8M ARMv8-A with PAA",
      "Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 32-bit with PAA",
      "Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 32-bit without PAA",
      "Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 64-bit with PAA",
      "Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 64-bit without PAA",
      "Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 32-bit with PAA",
      "Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 32-bit without PAA",
      "Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 64-bit with PAA",
      "Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 64-bit without PAA",
      "Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 32-bit with PAA",
      "Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 32-bit without PAA",
      "Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 64-bit with PAA",
      "Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 64-bit without PAA",
      "Android 13 running on Google Pixel 6 Pro with Google Tensor 32-bit with PAA",
      "Android 13 running on Google Pixel 6 Pro with Google Tensor 32-bit without PAA",
      "Android 13 running on Google Pixel 6 Pro with Google Tensor 64-bit with PAA",
      "Android 13 running on Google Pixel 6 Pro with Google Tensor 64-bit without PAA",
      "Android 13 running on Google Pixel 7 Pro with Google Tensor G2 32-bit with PAA",
      "Android 13 running on Google Pixel 7 Pro with Google Tensor G2 32-bit without PAA",
      "Android 13 running on Google Pixel 7 Pro with Google Tensor G2 64-bit with PAA",
      "Android 13 running on Google Pixel 7 Pro with Google Tensor G2 64-bit without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-04-29",
        "lab": "Acumen Security",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-12-15",
        "lab": "Acumen Security",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-02-12",
        "lab": "Acumen Security",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-05-14",
        "lab": "Acumen Security",
        "validation_type": "Update"
      }
    ],
    "vendor": "Hewlett Packard, Inc.",
    "vendor_url": "http://www.hp.com"
  }
}