{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "068cdb9d2f72bda1", "cert_id": 5553, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Qualcomm\u00ae Crypto Engine Core", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-19", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.qualcomm.com", "vendor": "Qualcomm Technologies, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Software/Firmware security: N/A", "Operational environment: N/A", "Physical security: Level 2", "Non-invasive security: N/A", "Life-cycle assurance: Level 2", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-18", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 1, "Level 2": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 6, "HMAC SHA-1": 2, "HMAC-SHA- 1": 2, "HMAC- SHA-1": 1, "SHA-1": 12, "SHA3-256": 8, "SHA3-384": 7, "SHA3-512": 8, "SHA2-256": 7, "SHA2-384": 7, "SHA2-512": 7, "SHA3-224": 7, "SHA3- 384": 2, "SHA2- 256": 1, "SHA2- 384": 1, "SHA2- 512": 1, "SHA3- 224": 1, "SHA3- 256": 1, "SHA3- 512": 1, "SHA1": 1, "SHA- 1": 3, "SHA2": 1, "SHA2 -384": 2, "SHA2 -512": 2, "SHA3 -224": 2, "SHA3 -256": 1, "SHA3 -384": 2, "SHA3 -512": 2, "SHA2 -256": 1, "SHA-3": 1}}, "vendor": {"Qualcomm": {"Qualcomm": 113}}, "eval_facility": {"atsec": {"atsec": 2}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 34, "AES-": 19}, "CAST": {"CAST": 22}}, "DES": {"DES": {"DES": 4}, "3DES": {"TDES": 13, "Triple-DES": 1, "TDEA": 1}}, "miscellaneous": {"SM4": {"SM4": 3}}, "constructions": {"MAC": {"HMAC": 30, "CMAC": 5}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 12, "SHA1": 1}, "SHA2": {"SHA2": 8}, "SHA3": {"SHA3-256": 8, "SHA3-384": 7, "SHA3-512": 8, "SHA3-224": 7, "SHA3": 9, "SHA-3": 1}}}, "crypto_scheme": {"MAC": {"MAC": 22}, "AEAD": {"AEAD": 1}}, "crypto_protocol": {}, "randomness": {"RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 4}, "CBC": {"CBC": 5}, "CTR": {"CTR": 3}, "CCM": {"CCM": 8}, "XEX": {"XEX": 1}, "XTS": {"XTS": 8}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 45, "FIPS 198-1": 6, "FIPS 180-4": 2, "FIPS 202": 2, "FIPS PUB 140-3": 1, "FIPS 197": 1}, "NIST": {"SP 800-38A": 4, "SP 800-38C": 2, "SP 800-38B": 2, "SP 800-38E": 2, "SP 800-67": 1, "NIST SP 800-57": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 918249, "pdf_is_encrypted": false, "pdf_number_of_pages": 36, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20261015082004-04'00'", "/ModDate": "D:20261015082004-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://doi.org/10.6028/NIST.FIPS.202", "https://doi.org/10.6028/NIST.SP.800-38C", "https://doi.org/10.6028/NIST.FIPS.197-upd1", "https://doi.org/10.6028/NIST.FIPS.180-4", "https://doi.org/10.6028/NIST.FIPS.198-1", "https://doi.org/10.6028/NIST.SP.800-38B", "https://doi.org/10.6028/NIST.SP.800-67r2", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "https://doi.org/10.6028/NIST.FIPS.140-3", "https://doi.org/10.6028/NIST.SP.800-38E", "https://doi.org/10.6028/NIST.SP.800-38A"]}}, "module_algorithms": {"_type": "Set", "elements": ["SHA3-224A6506", "SHA2-512A6506", "TDES-CBCA6506", "HMAC-SHA2-512A6506", "AES-CBCA6506", "SHA3-512A6506", "HMAC-SHA3-256A6506", "HMAC-SHA3-512A6506", "SHA3-256A6506", "HMAC-SHA-1A6506", "AES-ECBA6506", "AES-CBC-CS2A6506", "HMAC-SHA3-384A6506", "SHA-1A6506", "HMAC-SHA3-224A6506", "AES-CCMA6506", "SHA2-256A6506", "SHA3-384A6506", "HMAC-SHA2-256A6506", "SHA2-384A6506", "AES-XTS Testing Revision 2.0A6506", "AES-CMACA6506", "AES-CTRA6506", "HMAC-SHA2-384A6506", "TDES-ECBA6506"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A6506"]}, "is_br1_format": true, "br1_deviations": 1, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "N/A"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "2"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "2"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "Qualcomm Dragonwing(TM) Q-6690 with modem", "hwVersion": "5.8.2", "fwVersion": "N/A", "processors": "N/A", "features": "N/A"}, {"modelPartNum": "Qualcomm Dragonwing(TM) Q-6690 without modem", "hwVersion": "5.8.2", "fwVersion": "N/A", "processors": "N/A", "features": "N/A"}, {"modelPartNum": "Snapdragon\u00ae 6 Gen 4 Mobile Platform", "hwVersion": "5.8.2", "fwVersion": "N/A", "processors": "N/A", "features": "N/A"}, {"modelPartNum": "Snapdragon\u00ae 7s Gen 3 Mobile Platform", "hwVersion": "5.8.2", "fwVersion": "N/A", "processors": "N/A", "features": "N/A"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC-CS2", "cavpCertName": "A6506", "properties": "Direction - decrypt, encrypt Key Length - 128, 256 Payload Length - Payload Length: 128- 65536 Increment 8", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC, AES-ECB", "cavpCertName": "A6506", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CCM", "cavpCertName": "A6506", "properties": "Key Length - 128, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0, 256 AAD Length - AAD Length: 256, 65536", "reference": "SP 800-38C"}, {"algorithm": "AES-CMAC", "cavpCertName": "A6506", "properties": "Direction - Generation, Verification Key Length - 128, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8- 524288 Increment 8", "reference": "SP 800-38B"}, {"algorithm": "AES-CTR", "cavpCertName": "A6506", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum", "reference": "SP 800-38A"}, {"algorithm": "", "cavpCertName": "", "properties": "value - Yes Incremental Counter - Yes Counter Tests Performed - Yes", "reference": ""}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A6506", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128- 65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "HMAC-SHA-1", "cavpCertName": "A6506", "properties": "MAC - MAC: 160 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-256, HMAC- SHA3-256", "cavpCertName": "A6506", "properties": "MAC - MAC: 256 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-384, HMAC- SHA3-384", "cavpCertName": "A6506", "properties": "MAC - MAC: 384 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-512, HMAC- SHA3-512", "cavpCertName": "A6506", "properties": "MAC - MAC: 512 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-224", "cavpCertName": "A6506", "properties": "MAC - MAC: 224 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "SHA-1, SHA2-256, SHA2-384, SHA2-512", "cavpCertName": "A6506", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA3-224, SHA3-256, SHA3- 384, SHA3-512", "cavpCertName": "A6506", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "TDES-CBC, TDES-ECB", "cavpCertName": "A6506", "properties": "Direction - Decrypt, Encrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES-GCM (external IV)", "use": "encryption, decryption"}, {"name": "DES-CBC", "use": "encryption, decryption"}, {"name": "DES-ECB", "use": "encryption, decryption"}, {"name": "TDES (two independent keys)", "use": "encryption, decryption"}, {"name": "TDES Encryption (three independent keys)", "use": "encryption"}, {"name": "HMAC SHA-1 with key size other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA2-256 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA2-384 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA2-512 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-224 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-256 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-384 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-512 with key sizes other than 512 bits", "use": "message authentication code"}, {"name": "AEAD-SHA-1 AES-CBC", "use": "encryption, decryption (with message authentication code)"}, {"name": "AEAD-SHA-1 AES-CTR", "use": "encryption, decryption (with message authentication code)"}, {"name": "AEAD-SHA-1 DES-CBC", "use": "encryption, decryption (with message authentication code)"}, {"name": "AEAD-SHA-1 TDES-CBC", "use": "encryption, decryption (with message authentication code)"}, {"name": "SM3", "use": "hashing"}, {"name": "SM4", "use": "encryption, decryption"}]}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "Data In FIFO and Registers", "logicalInterface": "Data Input", "data": "All input data"}, {"physicalPort": "Data Out FIFO", "logicalInterface": "Data Output", "data": "All data output except Status information"}, {"physicalPort": "Registers", "logicalInterface": "Control Input", "data": "Command input"}, {"physicalPort": "Registers", "logicalInterface": "Status Output", "data": "Status information"}, {"physicalPort": "Physical power connector", "logicalInterface": "Power", "data": "Power from SoC power port"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Crypto Officer", "type": "Role", "operatorType": "CO", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "AES Encrypti on", "description": "Perform data encryption", "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0", "inputs": "AES Key, Plaint ext", "outputs": "Ciphertext, Success/Fail", "secFunImpl": "AES- CBC AES- CBC- CS2 AES- CCM AES- CTR AES- ECB AES-", "rolesSspAccess": "Cry pto Offi cer - AES key: W,E"}, {"name": "AES Decrypti on", "description": "Perform data decryption", "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0", "inputs": "AES Key, Cipher text", "outputs": "Plaintext, Success/Fail", "secFunImpl": "XTS AES- CBC AES- CBC- CS2 AES- CCM AES- CTR AES-", "rolesSspAccess": "Cry pto Offi cer - AES key: W,E"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "ECB AES- XTS", "rolesSspAccess": ""}, {"name": "AES Authenti cated Encrypti on", "description": "Perform data encryption", "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0", "inputs": "AES Key, Plaint ext", "outputs": "Ciphertext, Success/Fail", "secFunImpl": "AES- CCM", "rolesSspAccess": "Cry pto Offi cer - AES key: W,E"}, {"name": "AES Authenti cated Decrypti on", "description": "Perform data decryption", "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 16-18 set to 0", "inputs": "AES Key, Cipher text", "outputs": "Plaintext, Success/Fail", "secFunImpl": "AES- CCM", "rolesSspAccess": "Cry pto Offi cer - AES key: W,E"}, {"name": "CMAC Message Authenti cation", "description": "Message Authentication", "indicator": "CRYPTO0_CRYPT O_STATUS4 bit 29 set to 0", "inputs": "AES Key, Input data", "outputs": "CMAC value", "secFunImpl": "AES- CMA C", "rolesSspAccess": "Cry pto Offi cer - AES key: W,E"}, {"name": "TDES Decrypti on (Legacy Use)", "description": "Decrypt data which was encrypted with 3- key TDES prior to the sunset date provided in IG C.M", "indicator": "CRYPTO0_CRYPT O_STATUS4 bit 19 set to 0", "inputs": "Triple -DES key, cipher text", "outputs": "Plaintext", "secFunImpl": "TDES -ECB (Lega cy Use) TDES -CBC (Lega cy", "rolesSspAccess": "Cry pto Offi cer - Trip le- DES Key: W,E"}, {"name": "HMAC Message Authenti cation", "description": "Message Authentication", "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 25-28 set to 0", "inputs": "HMA C Key, input data", "outputs": "HMAC value", "secFunImpl": "Use) HMA C- SHA- 1 HMA C- SHA2", "rolesSspAccess": "Cry pto Offi cer - HM AC"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "-256 HMA C- SHA2 -384 HMA C- SHA2 -512 HMA C- SHA3 -224 HMA C- SHA3 -256 HMA C- SHA3 -384 HMA C- SHA3 -512", "rolesSspAccess": "key: W,E"}, {"name": "Hash", "description": "Hashing", "indicator": "CRYPTO0_CRYPT O_STATUS4 bits 21-24 set to 0", "inputs": "Input data", "outputs": "Hash output", "secFunImpl": "SHA- 1 SHA2 -256 SHA2 -384 SHA2 -512 SHA3 -224 SHA3 -256 SHA3 -384 SHA3 -512", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "Show Status", "description": "Return code read from CRYPTO0_CRYPTO_B IST_STATUS", "indicator": "None", "inputs": "N/A", "outputs": "Zero (operational) or non-zero (error)", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "Self-Test", "description": "Self-Tests are executed automatically when device is booted or restarted", "indicator": "None", "inputs": "None", "outputs": "Self-test Success/Fail", "secFunImpl": "AES- CCM AES- CMA C AES- ECB HMA C- SHA- 1 HMA C- SHA2 -256 HMA C- SHA2 -512 HMA C- SHA3 -512 TDES -ECB (Lega cy Use)", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "Zeroizati on", "description": "Zeroizes all SSPs", "indicator": "None", "inputs": "None", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer - AES key: Z - HM"}, {"name": "Configur e keys for use by", "description": "Configures the keys for Crypto Officer role", "indicator": "None", "inputs": "AES Key, HMA C Key,", "outputs": "Success/Fail", "secFunImpl": "None", "rolesSspAccess": "AC key: Z Cry pto Offi cer"}, {"name": "Crypto Officer", "description": "", "indicator": "", "inputs": "Triple -DES Key", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- AES key: W - HM AC key: W - Trip le- DES Key: W"}, {"name": "Show identifier and version", "description": "Show the module's identifier and version", "indicator": "None", "inputs": "None", "outputs": "Module identifier and version read from registers CRYPTO0_CRYPT O_FIPS_ID and CRYPTO0_CRYPT O_VERSION", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": true, "entries": [{"name": "Encryption", "description": "Encrypts data using symmetric cryptography", "alg_accessed": "AES-GCM (external IV) DES-CBC DES-ECB TDES (two independent keys) TDES Encryption (three independent keys) SM4", "role": "CO"}, {"name": "Decryption", "description": "Decrypts data using symmetric cryptography", "alg_accessed": "AES-GCM (external IV) DES-CBC DES-ECB", "role": "CO"}, {"name": "", "description": "", "alg_accessed": "TDES (two independent keys) SM4", "role": ""}, {"name": "Hash", "description": "Hashing algorithm", "alg_accessed": "SM3", "role": "CO"}, {"name": "Message Authentication", "description": "Computes the MAC value of data", "alg_accessed": "HMAC SHA-1 with key size other than 512 bits HMAC SHA2-256 with key sizes other than 512 bits HMAC SHA2-384 with key sizes other than 512 bits HMAC SHA2-512 with key sizes other than 512 bits HMAC SHA3-224 with key sizes other than 512 bits HMAC SHA3-256 with key sizes other than 512 bits HMAC SHA3-384 with key sizes other than 512 bits HMAC SHA3-512 with key sizes other than 512 bits", "role": "CO"}, {"name": "Authenticated Encryption/Decryption [AEAD]", "description": "Encrypts or decrypts data using symmetric cryptography", "alg_accessed": "AEAD-SHA-1 AES-CBC AEAD-SHA-1 AES-CTR AEAD-SHA-1 DES-CBC AEAD-SHA-1 TDES-CBC", "role": "CO"}]}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Tamper evident coating", "inspectFreq": "N/A", "inspectGuidance": "N/A"}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "Hardware FIFO", "description": "Temporary storage for SSPs used by the module as part of service execution", "persistance": "Dynamic"}, {"name": "Registers", "description": "Temporary storage for SSPs used by the module as part of service execution", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Input parameter", "source": "Caller within the physical perimeter", "dest": "Hardware FIFO and Registers", "format": "Plaintext", "distribution": "N/A", "entry": "N/A", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Power-off", "description": "All SSPs will be zeroized", "rationale": "The registers holding the SSPs are set to all zeroes", "operatorId": "Operator can initiate this zeroization method by powering off the module"}]}, "self_tests": {"section": 10, "subsection": 1, "found": false, "entries": []}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-CCM (A6506) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CCM (A6506) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-ECB (A6506) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-ECB (A6506) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CMAC (A6506)", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA-1 (A6506)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A6506)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA2- 512 (A6506)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA3- 512 (A6506)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "TDES-ECB (A6506)", "testProps": "168 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption (Legacy)", "condition": "Performed during module power-up"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Error", "description": "No cryptographic operation can be performed. No data input or output is possible.", "conditions": "KAT failure", "recoveryMethod": "Power cycling", "indicator": "CRYPTO0_CRYPTO_BIST_STATUS register is non-zero"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA3-224A6506", "SHA2-512A6506", "TDES-CBCA6506", "HMAC-SHA2-512A6506", "AES-CBCA6506", "#A6506", "SHA3-512A6506", "HMAC-SHA3-256A6506", "HMAC-SHA3-512A6506", "SHA3-256A6506", "HMAC-SHA-1A6506", "AES-ECBA6506", "AES-CBC-CS2A6506", "HMAC-SHA3-384A6506", "SHA-1A6506", "HMAC-SHA3-224A6506", "AES-CCMA6506", "SHA2-256A6506", "SHA3-384A6506", "HMAC-SHA2-256A6506", "SHA2-384A6506", "AES-XTS Testing Revision 2.0A6506", "AES-CMACA6506", "AES-CTRA6506", "HMAC-SHA2-384A6506", "TDES-ECBA6506"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "fc0d816b0c6c205b6f0ba6caef15982a069616f552e5d145fdbb74dc24a3a687", "txt_hash": "2f9e02b2a4ac4d70d9de5046e26017397e39c21d3e9b705d833c7a951154dd82", "json_hash": "778d5acc436a77f4223e0de6fb0c24b9eb981353e27b39639d89bd626c5d0963"}}}