This page was not yet optimized for use on mobile devices.

Oracle OpenSSL FIPS Object Module

Certificate #3335

Webpage information ?

Status	historical
Historical reason	Moved to historical list due to sunsetting
Validation dates	03.12.2018 , 18.07.2019 , 29.04.2020 , 23.10.2020 , 02.03.2021 , 17.05.2021 , 03.08.2021 , 29.07.2022
Standard	FIPS 140-2
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Exceptions	Roles, Services, and Authentication: Level 2 Physical Security: N/A Design Assurance: Level 3 Mitigation of Other Attacks: N/A
Description	Oracle OpenSSL FIPS Object Module is a software library providing a C language application program interface (API) for use by processes that require cryptographic services. It is implemented in products such as Oracle Solaris 11, Oracle Integrated Lights Out Manager (ILOM), and Oracle ZFS Storage Appliance.
Tested configurations	Oracle ILOM OS v5.1 running on AST2600 Server Management Processor with Oracle ILOM SP v6 (ARM v7) without PAA Oracle® ILOM OS v3.0 running on Emulex Pilot-4 Orion mainboard with Oracle® ILOM SP v2 (ARM v5) without PAA Oracle® ILOM OS v3.0 running on Oracle X5-2 server with Oracle® ILOM SP v3 (ARM v7) with PAA Oracle® ILOM OS v3.0 running on Oracle X5-2 server with Oracle® ILOM SP v3 (ARM v7) without PAA Oracle® ILOM OS v4.0 running on AST2400 Server Management Processor with Oracle® ILOM SP v4 (ARM v9) without PAA Oracle® ILOM OS v5.0 running on AST2520 Server Management Processor with Oracle® ILOM SP v5 (ARM v11) without PAA Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with AMD® EPYC® 7551 with PAA Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with AMD® EPYC® 7551 without PAA Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with Intel® Xeon® Silver 4114 with PAA Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with Intel® Xeon® Silver 4114 without PAA Oracle® Linux 7.8 64 bit running on Marvell MIPS III 64-bit (T73) without PAA Oracle® Linux 7.8 64 bit running on Marvell ThunderX2 (ARM 8.1) without PAA Oracle® Solaris 11.4 running on Oracle S7-2L with an Oracle® SPARC S7 without PAA Oracle® Solaris 11.4 running on Oracle S7-2L with Oracle® SPARC S7 with PAA Oracle® Solaris 11.4 running on Oracle X5-2 server with Intel Xeon E5-2600 with PAA Oracle® Solaris 11.4 running on Oracle X5-2 server with Intel Xeon E5-2600 without PAA Oracle® Solaris 11.4 running on Oracle® SPARC T8 server with SPARC M8 with PAA Oracle® Solaris 11.4 running on Oracle® SPARC T8 server with SPARC M8 without PAA Oracle® Solaris 11.4 running on Oracle® X8-2 server with Intel Xeon Gold 5200 series with PAA Oracle® Solaris 11.4 running on Oracle® X8-2 server with Intel Xeon Gold 5200 series without PAA Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-2 with Intel Xeon E5 with PAA Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-2 with Intel Xeon E5 without PAA Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-4 with Intel Xeon E7 Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-4 with Intel Xeon E7 without PAA Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD® EPYC® 7742 with PAA Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD® EPYC® 7742 without PAA Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel® Xeon® CPU ES-2695 v4 with PAA Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel® Xeon® CPU ES-2695 v4 without PAA (single-user mode)
Vendor	Oracle Corporation
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES-128, AES-192, AES-256, AES, TDES, Triple-DES, TDEA, HMAC, CMAC

Asymmetric Algorithms

ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSA

Hash functions

SHA-1, SHA1, SHA-224, SHA-384, SHA-512, SHA-256, SHA256, SHA-2, SHA2

Schemes

Key Agreement

Protocols

TLS

Randomness

DRBG

Libraries

OpenSSL

Elliptic Curves

P-224, P-384, P-192, P-256, P-521, K-233, K-409, B-233, B-409, B-163, K-283, K-571

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Security level

Level 1, level 1

Standards

FIPS 140-2, FIPS 197, FIPS 180-4, FIPS 198, FIPS 186-2, FIPS 186-4, FIPS 198-1, SP 800-90A, SP 800-133, SP 800-67, SP 800-38A, SP 800-38B, SP 800-38C, SP 800-38D, SP 800-38E, SP 800-56C, SP 800-135, NIST SP 800-38D, SP 800-56A, SP 800-89, SP 800-131A, PKCS#1, RFC 5288, RFC 5246

File metadata

Creation date	D:20220728174322-07'00'
Modification date	D:20220728174322-07'00'
Pages	29
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

References

Incoming

4142 - active - Oracle Solaris Userland Cryptographic Framework
4178 - historical - Cellcrypt Core V4 FIPS 140-2 Module

Heuristics ?

No heuristics are available for this certificate.

References ?

Updates ?

14.10.2024 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The direct_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-1999-0046']} values added.
- The indirect_transitive_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-1999-0046']} values added.
02.01.2024 The certificate data changed.
Certificate changed

The web extraction data was updated.
- The status property was set to historical.
- The historical_reason property was set to Moved to historical list due to sunsetting.
- The date_sunset property was set to None.
18.05.2023 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The direct_transitive_cves property was set to {'_type': 'Set', 'elements': ['CVE-2017-3623', 'CVE-2016-2334']}.
- The indirect_transitive_cves property was set to {'_type': 'Set', 'elements': ['CVE-2017-3623', 'CVE-2016-2334']}.
19.03.2023 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The direct_transitive_cves property was set to None.
- The indirect_transitive_cves property was set to None.
09.02.2023 The certificate data changed.
Certificate changed

The cert_id was updated.
- The new value is 3335.
The web extraction data was updated.
- The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2018-12-03', 'validation_type': 'Initial', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2019-07-18', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2020-04-29', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2020-10-23', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-03-02', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-05-17', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2021-08-03', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2022-07-29', 'validation_type': 'Update', 'lab': 'ACUMEN SECURITY, LLC'}], 'vendor_url': 'http://www.oracle.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/Dec2018Cert.pdf', 'hw_versions': None, 'fw_versions': None}.
- The standard property was set to FIPS 140-2.
- The status property was set to active.
- The level property was set to 1.
- The embodiment property was set to Multi-Chip Stand Alone.
- The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].
The PDF extraction data was updated.
- The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 682093, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 29, '/Producer': 'Microsoft® Word for Microsoft 365', '/Creator': 'Microsoft® Word for Microsoft 365', '/CreationDate': "D:20220728174322-07'00'", '/ModDate': "D:20220728174322-07'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://csrc.nist.gov/projects/cryptographic-module-validation-program', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/DSA#1400', 'http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf', 'http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf', 'https://github.com/oracle/solaris-openssl-fips/', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/AES#5445', 'http://www.arm.com/products/processors/technologies/neon.php', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/TDES#2735', 'http://csrc.nist.gov/publications/nistpubs/800-67/SP800-67.pdf', 'http://csrc.nist.gov/publications/fips/fips186-3/fips_186-3.pdf', 'https://tools.ietf.org/html/rfc5246', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/RSA#2921', 'https://github.com/oracle/solaris-openssl-fips/releases/download/v1.0/OpenSSL_2.0.13_OracleFIPS_1.0.tar.gz', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35122', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/SHS#4364', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/ECDSA#1449', 'http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf', 'http://csrc.nist.gov/publications/nistpubs/800-89/SP-800-89_November2006.pdf', 'http://www.intel.com/support/processors/sb/CS-030123.htm?wapkw=sse2', 'https://linux-git.us.oracle.com/oraclelinux/oracle-openssl-fips/tree/OpenSSL_2.0.13_OracleFIPS_1.1', 'http://www.oracle.com/', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32292', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/HMAC#3603', 'https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/DRBG#2129', 'http://csrc.nist.gov/publications/nistpubs/800-90/SP800-90revised_March2007.pdf', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35125', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13352', 'http://csrc.nist.gov/publications/nistpubs/800-56A/SP800-56A_Revision1_Mar08-2007.pdf', 'https://tools.ietf.org/html/rfc5288', 'http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-131A.pdf', 'http://csrc.nist.gov/publications/fips/fips180-3/fips180-3_final.pdf', 'http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf']}}}.
- The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].
The computed heuristics were updated.
- The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': []}, 'module_prunned_references': {'_type': 'Set', 'elements': []}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': {'_type': 'Set', 'elements': ['4178', '4142']}, 'indirectly_referenced_by': {'_type': 'Set', 'elements': ['4178', '4142']}, 'directly_referencing': None, 'indirectly_referencing': None}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': {'_type': 'Set', 'elements': ['3503']}, 'indirectly_referenced_by': {'_type': 'Set', 'elements': ['3638', '4015', '4024', '3569', '3503']}, 'directly_referencing': None, 'indirectly_referencing': None}, 'direct_transitive_cves': {'_type': 'Set', 'elements': ['CVE-2017-3623', 'CVE-2016-2334']}, 'indirect_transitive_cves': {'_type': 'Set', 'elements': ['CVE-2017-3623', 'CVE-2016-2334']}}.
- The algorithms property was set to {'_type': 'Set', 'elements': ['AES#5445', 'AES#A861', 'Triple-DES#A2514', 'Triple-DES#2735', 'DSA#C1651', 'DRBG#A861', 'HMAC#3603', 'HMAC#A861', 'Triple-DES#A2511', 'DRBG#A2511', 'DRBG#2129', 'RSA#A861', 'ECDSA#A2514', 'ECDSA#A2511', 'RSA#2921', 'AES#C1651', 'DSA#A861', 'HMAC#A2511', 'DSA#1400', 'ECDSA#C1651', 'ECDSA#1449', 'HMAC#A2514', 'SHS#A2514', 'RSA#A2511', 'Triple-DES#C1651', 'SHS#A861', 'AES#A2514', 'DSA#A2514', 'DSA#A2511', 'DRBG#A2514', 'SHS#A2511', 'RSA#C1651', 'SHS#4364', 'RSA#A2514', 'Triple-DES#A861', 'HMAC#C1651', 'ECDSA#A861', 'SHS#C1651', 'AES#A2511', 'DRBG#C1651']}.
- The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].
The state was updated.
- The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '2b005153baa0d4995c55d796cea80dfef422400357723b3b8f637e2f3edb972c', 'policy_txt_hash': 'd2f34b43c629eba0c560ff43132b7b9d030380f4d9d1fbea0c8fe07934b93225'}.
- The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
05.11.2022 The certificate data changed.
Certificate changed

The web extraction data was updated.
- The algorithms property was set to {'_type': 'Set', 'elements': []}.
The computed heuristics were updated.
- The algorithms property was set to {'_type': 'Set', 'elements': []}.
01.11.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The st_references property was updated, with the {'directly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4142']}}, 'indirectly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4142']}}} data.
31.10.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The st_references property was updated, with the {'directly_referenced_by': {'__discard__': {'_type': 'Set', 'elements': ['4142']}}, 'indirectly_referenced_by': {'__discard__': {'_type': 'Set', 'elements': ['4142']}}} data.
25.10.2022 The certificate data changed.
Certificate changed

The PDF extraction data was updated.
- The keywords property was updated, with the {'fips_cert_id': {}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-1': 19, 'SHA-224': 15, 'SHA1': 2, 'AES-256': 2}, '__delete__': ['PKCS1', 'AES (128', 'AES (256', 'AES-192 192', 'AES KAT 128', 'DES (3', 'DSA (2048']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES-256': 3, 'AES': 19}, '__delete__': ['AES-']}}, '__delete__': ['E2']}, 'DES': {'__delete__': ['DES']}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 7}}}}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 4, 'DH': 6}}, 'DSA': {'__update__': {'DSA': 16}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 38, 'SHA1': 2}}, 'SHA2': {'__update__': {'SHA-2': 5, 'SHA2': 1}}}, '__delete__': ['SHA3']}}}, 'crypto_scheme': {'__update__': {'KA': {'__delete__': ['KA']}}, '__delete__': ['MAC']}, 'crypto_protocol': {'__update__': {'TLS': {'__delete__': ['SSL']}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 18}}}, '__delete__': ['RNG']}, 'cipher_mode': {'__update__': {'ECB': {'__update__': {'ECB': 3}}, 'CBC': {'__update__': {'CBC': 3}}, 'CTR': {'__update__': {'CTR': 1}}, 'CFB': {'__update__': {'CFB': 3}}, 'OFB': {'__update__': {'OFB': 1}}, 'GCM': {'__update__': {'GCM': 7}}, 'XTS': {'__update__': {'XTS': 5}}}}, 'ecc_curve': {'__update__': {'NIST': {'__update__': {'P-224': 4, 'P-256': 2, 'P-384': 2, 'P-521': 2, 'P-192': 6, 'K-233': 2, 'K-283': 1, 'K-409': 1, 'K-571': 1, 'B-233': 2, 'B-409': 2, 'B-163': 2}, '__delete__': ['B-283', 'B-571', 'K-163']}}}, 'crypto_library': {'__update__': {'OpenSSL': {'__update__': {'OpenSSL': 41}}}, '__delete__': ['NSS']}, 'side_channel_analysis': {}, 'tee_name': {}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 17}}, 'NIST': {'SP 800-90A': 4, 'SP 800-133': 1, 'SP 800-67': 1, 'SP 800-38A': 2, 'SP 800-38B': 2, 'SP 800-38C': 2, 'SP 800-38D': 2, 'SP 800-38E': 1, 'SP 800-56C': 1, 'SP 800-135': 1, 'NIST SP 800-38D': 1, 'SP 800-56A': 2, 'SP 800-89': 1, 'SP 800-131A': 1}, 'PKCS': {'__delete__': ['PKCS1']}, 'RFC': {'RFC 5288': 1, 'RFC 5246': 1}}}} data.
The computed heuristics were updated.
- The st_references property was updated, with the {'directly_referenced_by': {'_type': 'Set', 'elements': ['4178', '4142']}, 'indirectly_referenced_by': {'_type': 'Set', 'elements': ['4178', '4142']}} data.
- The web_references property was updated, with the {'directly_referenced_by': {'_type': 'Set', 'elements': ['3503']}, 'indirectly_referenced_by': {'_type': 'Set', 'elements': ['3638', '4015', '4024', '3569', '3503']}} data.
The state was updated.
- The tables_done property was set to True.
31.07.2022 The certificate data changed.
Certificate changed

The web extraction data was updated.
- The date_validation property was updated, with the [[7, '2022-07-29']] values inserted.
- The algorithms property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}]} values added.
- The tested_conf property was updated, with the [[0, 'Oracle ILOM OS v5.1 running on AST2600 Server Management Processor with Oracle ILOM SP v6 (ARM v7) without PAA'], [10, 'Oracle® Linux 7.8 64 bit running on Marvell MIPS III 64-bit (T73) without PAA'], [24, 'Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD® EPYC® 7742 with PAA'], [25, 'Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD® EPYC® 7742 without PAA'], [26, 'Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel® Xeon® CPU ES-2695 v4 with PAA'], [27, 'Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel® Xeon® CPU ES-2695 v4 without PAA (single-user mode)']] values inserted.
- The sw_versions property was set to OpenSSL_2.0.13_OracleFIPS_1.0; OpenSSL_2.0.13_OracleFIPS_1.1; OpenSSL_2.0.13_OracleFIPS_1.2.
The PDF extraction data was updated.
- The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'# A2514': 1}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 23}}, 'E2': {'__update__': {'E2': 1}}}}}}, 'crypto_protocol': {'__update__': {'TLS': {'__update__': {'SSL': {'__update__': {'SSL': 74}}}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 38}}, 'RNG': {'__update__': {'RBG': 38}, '__delete__': ['RNG']}}}, 'crypto_library': {'__update__': {'OpenSSL': {'__update__': {'OpenSSL': 75}}}}, 'side_channel_analysis': {'__update__': {'SCA': {'__update__': {'SPA': 13}}}}} data.
- The st_metadata property was updated, with the {'pdf_file_size_bytes': 682093, 'pdf_number_of_pages': 29, '/CreationDate': "D:20220728174322-07'00'", '/ModDate': "D:20220728174322-07'00'", 'pdf_hyperlinks': {'__add__': {'_type': 'Set', 'elements': ['https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35125', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35122']}}} data.
The computed heuristics were updated.
- The algorithms property was updated, with the {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2511', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A2514', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}]} values added.
17.07.2022 The certificate data changed.
Certificate changed

The _type was updated.
- The new value is sec_certs.sample.fips.FIPSCertificate.
The computed heuristics were updated.
- The following values were inserted: {'clean_cert_ids': {}}.
- The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.
- The keywords property was set to {}.
- The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#3603', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2129', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2921', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1449', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'ECDSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2735', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#4364', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#5445', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1400', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#A861', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#C1651', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}]}.
- The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
- The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
The state was updated.
- The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.
- The following properties were deleted: ['fragment_path'].
29.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
25.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
23.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
21.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
14.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The pdf_scan was updated.
- The keywords property was updated, with the {'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 180-4', 'FIPS 186-2', 'FIPS 186-4']}, 'FIPS ?(?:PUB )?[0-9]+?': {'__update__': {'FIPS 197': {'__update__': {'count': 1}}}, '__delete__': ['FIPS 198']}}}, 'rules_block_cipher_modes': {'__insert__': {'CCM': {'CCM': {'count': 1}}, 'XTS': {'XTS': {'count': 1}}}, '__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'CFB': {'__update__': {'CFB': {'__update__': {'count': 1}}}}, 'OFB': {'__update__': {'OFB': {'__update__': {'count': 1}}}}, 'GCM': {'__update__': {'GCM': {'__update__': {'count': 1}}}}}}, 'rules_ecc_curves': {'__insert__': {'(NIST)? ?[PBK]-[0-9]{3}': {'K-233': {'count': 1}}}, '__update__': {'(?:Curve |curve |)P-(192|224|256|384|521)': {'__update__': {'P-224': {'__update__': {'count': 1}}}, '__delete__': ['P-192', 'P-256', 'P-384', 'P-521']}}}, 'rules_crypto_libs': {'__update__': {'OpenSSL': {'__update__': {'OpenSSL': {'__update__': {'count': 1}}}}}}} data.
The computed heuristics were updated.
- The keywords property was updated, with the {'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 180-4', 'FIPS 186-2', 'FIPS 186-4']}, 'FIPS ?(?:PUB )?[0-9]+?': {'__update__': {'FIPS 197': {'__update__': {'count': 1}}}, '__delete__': ['FIPS 198']}}}, 'rules_block_cipher_modes': {'__insert__': {'CCM': {'CCM': {'count': 1}}, 'XTS': {'XTS': {'count': 1}}}, '__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'CFB': {'__update__': {'CFB': {'__update__': {'count': 1}}}}, 'OFB': {'__update__': {'OFB': {'__update__': {'count': 1}}}}, 'GCM': {'__update__': {'GCM': {'__update__': {'count': 1}}}}}}, 'rules_ecc_curves': {'__insert__': {'(NIST)? ?[PBK]-[0-9]{3}': {'K-233': {'count': 1}}}, '__update__': {'(?:Curve |curve |)P-(192|224|256|384|521)': {'__update__': {'P-224': {'__update__': {'count': 1}}}, '__delete__': ['P-192', 'P-256', 'P-384', 'P-521']}}}, 'rules_crypto_libs': {'__update__': {'OpenSSL': {'__update__': {'OpenSSL': {'__update__': {'count': 1}}}}}}} data.
- The algorithms property was updated.
07.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
24.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
22.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
20.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
19.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
18.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
17.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
13.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
18.04.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
11.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
10.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
08.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
- The following properties were deleted: ['connections'].
The pdf_scan was updated.
- The following properties were deleted: ['connections'].
The computed heuristics were updated.
- The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}}.
- The algorithms property was updated.
- The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
23.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
18.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
- The extracted_versions property was set to {'_type': 'Set', 'elements': ['-']}.
12.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
11.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
03.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
02.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The module_type property was set to Software.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
31.01.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
30.01.2022 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3335,
  "dgst": "0457c48d8fc39719",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DSA#A861",
        "ECDSA#A861",
        "AES#A2511",
        "DSA#C1651",
        "HMAC#A2514",
        "SHS#C1651",
        "RSA#C1651",
        "HMAC#A2511",
        "Triple-DES#A2511",
        "DSA#A2514",
        "DRBG#2129",
        "DRBG#A2514",
        "HMAC#C1651",
        "RSA#A2514",
        "ECDSA#A2514",
        "DSA#1400",
        "ECDSA#A2511",
        "HMAC#A861",
        "Triple-DES#2735",
        "SHS#A2511",
        "AES#5445",
        "RSA#A861",
        "ECDSA#1449",
        "Triple-DES#C1651",
        "Triple-DES#A861",
        "HMAC#3603",
        "SHS#4364",
        "AES#C1651",
        "DRBG#A861",
        "RSA#A2511",
        "SHS#A861",
        "ECDSA#C1651",
        "DRBG#C1651",
        "Triple-DES#A2514",
        "RSA#2921",
        "DRBG#A2511",
        "AES#A2514",
        "AES#A861",
        "SHS#A2514",
        "DSA#A2511"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2017-3623",
        "CVE-1999-0046",
        "CVE-2016-2334"
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2017-3623",
        "CVE-1999-0046",
        "CVE-2016-2334"
      ]
    },
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "3503"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4024",
          "3569",
          "3638",
          "3503",
          "4015"
        ]
      },
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4178",
          "4142"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4178",
          "4142"
        ]
      },
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 15
          }
        },
        "FF": {
          "DH": {
            "DH": 6,
            "Diffie-Hellman": 4
          },
          "DSA": {
            "DSA": 16
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 3
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 3
        },
        "GCM": {
          "GCM": 7
        },
        "OFB": {
          "OFB": 1
        },
        "XTS": {
          "XTS": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 41
        }
      },
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 2
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 2,
          "B-233": 2,
          "B-409": 2,
          "K-233": 2,
          "K-283": 1,
          "K-409": 1,
          "K-571": 1,
          "P-192": 6,
          "P-224": 4,
          "P-256": 2,
          "P-384": 2,
          "P-521": 2
        }
      },
      "eval_facility": {
        "Acumen": {
          "Acumen Security": 1
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "# A2514": 1,
          "AES 128/ 192/256": 1,
          "AES 128/192/256": 1,
          "AES GCM3": 1,
          "AES, 256": 1,
          "AES-128": 3,
          "AES-128 128": 1,
          "AES-192": 2,
          "AES-256": 2,
          "AES-256 256": 1,
          "DRBG1": 1,
          "HMAC SHA-1": 1,
          "HMAC-SHA-1": 28,
          "HMAC-SHA1": 2,
          "PKCS#1": 2,
          "SHA- 256": 2,
          "SHA-1": 19,
          "SHA-1 128": 1,
          "SHA-1, 224": 18,
          "SHA-2": 3,
          "SHA-2 (224": 2,
          "SHA-224": 15,
          "SHA-256": 3,
          "SHA-384": 5,
          "SHA-512": 4,
          "SHA-512 256": 1,
          "SHA1": 2,
          "SHA2": 1,
          "SHA256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 38,
            "SHA1": 2
          },
          "SHA2": {
            "SHA-2": 5,
            "SHA-224": 16,
            "SHA-256": 3,
            "SHA-384": 5,
            "SHA-512": 5,
            "SHA2": 1,
            "SHA256": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 18
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 17,
          "FIPS 180-4": 2,
          "FIPS 186-2": 4,
          "FIPS 186-4": 8,
          "FIPS 197": 2,
          "FIPS 198": 1,
          "FIPS 198-1": 1
        },
        "NIST": {
          "NIST SP 800-38D": 1,
          "SP 800-131A": 1,
          "SP 800-133": 1,
          "SP 800-135": 1,
          "SP 800-38A": 2,
          "SP 800-38B": 2,
          "SP 800-38C": 2,
          "SP 800-38D": 2,
          "SP 800-38E": 1,
          "SP 800-56A": 2,
          "SP 800-56C": 1,
          "SP 800-67": 1,
          "SP 800-89": 1,
          "SP 800-90A": 4
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 19,
            "AES-128": 4,
            "AES-192": 3,
            "AES-256": 3
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "TDES": 1,
            "Triple-DES": 7
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 15,
            "HMAC": 7
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20220728174322-07\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20220728174322-07\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 682093,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.oracle.com/",
          "http://csrc.nist.gov/publications/nistpubs/800-67/SP800-67.pdf",
          "http://www.arm.com/products/processors/technologies/neon.php",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35125",
          "http://csrc.nist.gov/publications/nistpubs/800-89/SP-800-89_November2006.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=32292",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/ECDSA#1449",
          "http://csrc.nist.gov/publications/fips/fips180-3/fips180-3_final.pdf",
          "http://www.intel.com/support/processors/sb/CS-030123.htm?wapkw=sse2",
          "https://github.com/oracle/solaris-openssl-fips/",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/DSA#1400",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "http://csrc.nist.gov/publications/nistpubs/800-131A/sp800-131A.pdf",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/TDES#2735",
          "https://tools.ietf.org/html/rfc5246",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/HMAC#3603",
          "https://tools.ietf.org/html/rfc5288",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13352",
          "http://csrc.nist.gov/publications/fips/fips186-3/fips_186-3.pdf",
          "https://github.com/oracle/solaris-openssl-fips/releases/download/v1.0/OpenSSL_2.0.13_OracleFIPS_1.0.tar.gz",
          "http://csrc.nist.gov/publications/nistpubs/800-90/SP800-90revised_March2007.pdf",
          "http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35122",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/SHS#4364",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/RSA#2921",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/DRBG#2129",
          "http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://linux-git.us.oracle.com/oraclelinux/oracle-openssl-fips/tree/OpenSSL_2.0.13_OracleFIPS_1.1",
          "http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Validation/Validation-List/AES#5445",
          "http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-56A/SP800-56A_Revision1_Mar08-2007.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 29
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "2b005153baa0d4995c55d796cea80dfef422400357723b3b8f637e2f3edb972c",
    "policy_txt_hash": "d2f34b43c629eba0c560ff43132b7b9d030380f4d9d1fbea0c8fe07934b93225"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/Dec2018Cert.pdf",
    "date_sunset": null,
    "description": "Oracle OpenSSL FIPS Object Module is a software library providing a C language application program interface (API) for use by processes that require cryptographic services. It is implemented in products such as Oracle Solaris 11, Oracle Integrated Lights Out Manager (ILOM), and Oracle ZFS Storage Appliance.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, Services, and Authentication: Level 2",
      "Physical Security: N/A",
      "Design Assurance: Level 3",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Oracle OpenSSL FIPS Object Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "OpenSSL_2.0.13_OracleFIPS_1.0; OpenSSL_2.0.13_OracleFIPS_1.1; OpenSSL_2.0.13_OracleFIPS_1.2",
    "tested_conf": [
      "Oracle ILOM OS v5.1 running on AST2600 Server Management Processor with Oracle ILOM SP v6 (ARM v7) without PAA",
      "Oracle\u00ae ILOM OS v3.0 running on Emulex Pilot-4 Orion mainboard with Oracle\u00ae ILOM SP v2 (ARM v5) without PAA",
      "Oracle\u00ae ILOM OS v3.0 running on Oracle X5-2 server with Oracle\u00ae ILOM SP v3 (ARM v7) with PAA",
      "Oracle\u00ae ILOM OS v3.0 running on Oracle X5-2 server with Oracle\u00ae ILOM SP v3 (ARM v7) without PAA",
      "Oracle\u00ae ILOM OS v4.0 running on AST2400 Server Management Processor with Oracle\u00ae ILOM SP v4 (ARM v9) without PAA",
      "Oracle\u00ae ILOM OS v5.0 running on AST2520 Server Management Processor with Oracle\u00ae ILOM SP v5 (ARM v11) without PAA",
      "Oracle\u00ae Linux 7.6 64 bit running on Oracle\u00ae X7-2 Server with AMD\u00ae EPYC\u00ae 7551 with PAA",
      "Oracle\u00ae Linux 7.6 64 bit running on Oracle\u00ae X7-2 Server with AMD\u00ae EPYC\u00ae 7551 without PAA",
      "Oracle\u00ae Linux 7.6 64 bit running on Oracle\u00ae X7-2 Server with Intel\u00ae Xeon\u00ae Silver 4114 with PAA",
      "Oracle\u00ae Linux 7.6 64 bit running on Oracle\u00ae X7-2 Server with Intel\u00ae Xeon\u00ae Silver 4114 without PAA",
      "Oracle\u00ae Linux 7.8 64 bit running on Marvell MIPS III 64-bit (T73) without PAA",
      "Oracle\u00ae Linux 7.8 64 bit running on Marvell ThunderX2 (ARM 8.1) without PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle S7-2L with an Oracle\u00ae SPARC S7 without PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle S7-2L with Oracle\u00ae SPARC S7 with PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle X5-2 server with Intel Xeon E5-2600 with PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle X5-2 server with Intel Xeon E5-2600 without PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle\u00ae SPARC T8 server with SPARC M8 with PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle\u00ae SPARC T8 server with SPARC M8 without PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle\u00ae X8-2 server with Intel Xeon Gold 5200 series with PAA",
      "Oracle\u00ae Solaris 11.4 running on Oracle\u00ae X8-2 server with Intel Xeon Gold 5200 series without PAA",
      "Oracle\u00ae ZFS Storage OS 8.8 running on Oracle\u00ae ZFS Storage ZS5-2 with Intel Xeon E5 with PAA",
      "Oracle\u00ae ZFS Storage OS 8.8 running on Oracle\u00ae ZFS Storage ZS5-2 with Intel Xeon E5 without PAA",
      "Oracle\u00ae ZFS Storage OS 8.8 running on Oracle\u00ae ZFS Storage ZS5-4 with Intel Xeon E7",
      "Oracle\u00ae ZFS Storage OS 8.8 running on Oracle\u00ae ZFS Storage ZS5-4 with Intel Xeon E7 without PAA",
      "Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD\u00ae EPYC\u00ae 7742 with PAA",
      "Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD\u00ae EPYC\u00ae 7742 without PAA",
      "Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel\u00ae Xeon\u00ae CPU ES-2695 v4 with PAA",
      "Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel\u00ae Xeon\u00ae CPU ES-2695 v4 without PAA (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-12-03",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2019-07-18",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2020-04-29",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2020-10-23",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-03-02",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-05-17",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-08-03",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2022-07-29",
        "lab": "ACUMEN SECURITY, LLC",
        "validation_type": "Update"
      }
    ],
    "vendor": "Oracle Corporation",
    "vendor_url": "http://www.oracle.com"
  }
}

Oracle OpenSSL FIPS Object Module

Certificate #3335

Webpage information ?

Security policy ?

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Security

Security level

Other

Standards

File metadata

References

Heuristics ?

References ?

Updates ?

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data