This page was not yet optimized for use on mobile devices.

Commvault Crypto Library

Certificate #4989

Webpage information

Status	active
Validation dates	18.03.2025
Sunset date	17-03-2027
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	Interim Validation. When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	Commvault Crypto Library (CVCL) is a cryptographic software module used in various products by Commvault Systems, Inc. The module provides a collection of Approved and Non-Approved cryptographic services for key generation, symmetric and asymmetric encryption, hash, HMAC and signature generation/verification.
Tested configurations	Microsoft Windows Server 2019 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 with AES-NI, Microsoft Windows Server 2019 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 without AES-NI, Red Hat Enterprise Linux 8.4 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 with AES-NI, Red Hat Enterprise Linux 8.4 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 without AES-NI
Vendor	Commvault Systems, Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES, AES-, AES256, Twofish, Serpent, CAST, DES, Triple-DES, Blowfish, HMAC

Asymmetric Algorithms

RSA 2048, RSA 4096, RSA 3072, RSA 1024

Hash functions

SHA-1, SHA-512, MD5

Randomness

DRBG

Block cipher modes

ECB, CBC, CTR

Vendor

Microsoft

Security level

Level 1

Standards

FIPS 140-3, FIPS 197, FIPS 198-1, FIPS186-4, FIPS186-2, FIPS 180-4, FIPS 186-4, FIPS 8924, SP 800-38A, ISO/IEC 24759

File metadata

Author	Aniket Ingle Intertek
Creation date	D:20241108123505-05'00'
Modification date	D:20241108123521-05'00'
Pages	24
Creator	Acrobat PDFMaker 24 for Word
Producer	Adobe PDF Library 24.3.212

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
04.04.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4989,
  "dgst": "0709e1008834c2ca",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigVer (FIPS186-2)A2412",
        "HMAC-SHA2-256A2412",
        "AES-CBC-CS2A2412",
        "AES-ECBA2412",
        "RSA KeyGen (FIPS186-4)A2412",
        "Counter DRBGA2412",
        "HMAC-SHA-1A2412",
        "HMAC-SHA2-512A2412",
        "SHA2-256A2412",
        "SHA2-512A2412",
        "RSA SigVer (FIPS186-4)A2412",
        "RSA SigGen (FIPS186-4)A2412",
        "SHA-1A2412"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "RSA": {
          "RSA 1024": 1,
          "RSA 2048": 3,
          "RSA 3072": 2,
          "RSA 4096": 3
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 12
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 11
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 256": 1,
          "AES-CBC 256": 2,
          "AES256": 1,
          "DRBG 256": 1,
          "HMAC SHA-1": 1,
          "HMAC-SHA-1": 12,
          "RSA 1024": 1,
          "RSA 2048": 3,
          "RSA 3072": 2,
          "RSA 4096": 3,
          "SHA-1": 8,
          "SHA-512": 1,
          "SHA2- 256": 1,
          "SHA2- 512": 3,
          "SHA2-256": 15,
          "SHA2-512": 8
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 5
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA2": {
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 22
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 8,
          "FIPS 180-4": 3,
          "FIPS 186-4": 4,
          "FIPS 197": 2,
          "FIPS 198-1": 3,
          "FIPS 8924": 1,
          "FIPS186-2": 1,
          "FIPS186-4": 6
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-38A": 3
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8,
            "AES-": 1,
            "AES256": 1
          },
          "CAST": {
            "CAST": 2
          },
          "Serpent": {
            "Serpent": 2
          },
          "Twofish": {
            "Twofish": 2
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 2
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 8
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 4
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Aniket Ingle  Intertek",
      "/ClassificationContentMarkingFooterFontProps": "#000000,7,Calibri",
      "/ClassificationContentMarkingFooterShapeIds": "2,4,5",
      "/ClassificationContentMarkingFooterText": "Juniper Business Use Only",
      "/Comments": "",
      "/Company": "",
      "/ContentTypeId": "0x0101005FC48ADBEA28F14BA352723A969D8CBC",
      "/CreationDate": "D:20241108123505-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 24 for Word",
      "/GrammarlyDocumentId": "896e2e322b62a89e5c3048edd20999fab4d306ba785fadbc4330191840ba2710",
      "/Keywords": "",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ActionId": "10f4ee9b-e3a9-4cc7-88d2-2f42364a5831",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_ContentBits": "2",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Enabled": "true",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Method": "Standard",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_Name": "0633b888-ae0d-4341-a75f-06e04137d755",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SetDate": "2022-11-30T05:04:04Z",
      "/MSIP_Label_0633b888-ae0d-4341-a75f-06e04137d755_SiteId": "bea78b3c-4cdb-4130-854a-1d193232e5f4",
      "/ModDate": "D:20241108123521-05\u002700\u0027",
      "/Producer": "Adobe PDF Library 24.3.212",
      "/SourceModified": "D:20241108164415",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 606353,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.acumensecurity.net/",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "https://documentation.commvault.com/11.24/expert/1714_deployment.html",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14906"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 24
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "7a28322757cc383123b9cbf0c4b7b1c539a944835d26763bcadffb5ece7c3ce3",
    "policy_txt_hash": "874db04d9122b27d3a7b25919b4929338793632129a0bc778835e7bdaf43b96c"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim Validation. When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)",
    "certificate_pdf_url": null,
    "date_sunset": "2027-03-17",
    "description": "Commvault Crypto Library (CVCL) is a cryptographic software module used in various products by Commvault Systems, Inc. The module provides a collection of Approved and Non-Approved cryptographic services for key generation, symmetric and asymmetric encryption, hash, HMAC and signature generation/verification.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Commvault Crypto Library",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "3.0",
    "tested_conf": [
      "Microsoft Windows Server 2019 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 with AES-NI, Microsoft Windows Server 2019 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 without AES-NI, Red Hat Enterprise Linux 8.4 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 with AES-NI, Red Hat Enterprise Linux 8.4 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 without AES-NI"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-03-18",
        "lab": "Acumen Security",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Commvault Systems, Inc.",
    "vendor_url": "http://www.commvault.com"
  }
}

Sections

Commvault Crypto Library

Certificate #4989

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Randomness

Block cipher modes

Vendor

Security level

Standards

File metadata

Heuristics

References

Updates Feed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Commvault Crypto Library

Certificate #4989

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Randomness

Block cipher modes

Device

Vendor

Security

Security level

Other

Standards

File metadata

Heuristics

References

Updates Feed

Raw data

Toggle raw data