Oracle Linux 9 NSS Cryptographic Module

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5339,
  "dgst": "09b48c75998cdc00",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "KDF IKEv2A4764",
        "#A4767",
        "KAS-ECC-SSC Sp800-56Ar3A4760",
        "KDF SP800-108A4763",
        "#A4760",
        "AES-ECBA4769",
        "AES-KWA4768",
        "SHA2-384A4760",
        "#A4768",
        "ECDSA KeyVer (FIPS186-4)A4760",
        "RSA SigGen (FIPS186-4)A4760",
        "#A4763",
        "AES-KWPA4768",
        "KDA HKDF Sp800-56Cr1A4759",
        "SHA2-256A4760",
        "RSA SigVer (FIPS186-2)A4760",
        "AES-CBC-CS1A4765",
        "#A4762",
        "AES-GCMA4769",
        "AES-CMACA4762",
        "SHA2-512A4760",
        "#A4761",
        "HMAC-SHA2-256A4760",
        "KAS-FFC-SSC Sp800-56Ar3A4760",
        "DSA SigVer (FIPS186-4)A4760",
        "HMAC-SHA2-384A4760",
        "ECDSA SigVer (FIPS186-4)A4760",
        "RSA KeyGen (FIPS186-4)A4760",
        "TLS v1.2 KDF RFC7627A4760",
        "PBKDFA4760",
        "#A4765",
        "ECDSA SigGen (FIPS186-4)A4760",
        "HMAC-SHA2-512A4760",
        "SHA2-224A4760",
        "ECDSA KeyGen (FIPS186-4)A4760",
        "#A4759",
        "#A4766",
        "HMAC-SHA2-224A4760",
        "RSA SigVer (FIPS186-4)A4760",
        "Hash DRBGA4760",
        "AES-CTRA4769",
        "AES-CBCA4769",
        "Safe Primes Key GenerationA4760",
        "#A4769",
        "#A4764",
        "KDF TLSA4760"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2025-4598",
        "CVE-2023-22024",
        "CVE-2022-21505"
      ]
    },
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A4760",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A4767",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A4769",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC-CS1",
            "cavpCertName": "A4765",
            "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A4762",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A4760",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A4769",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4760",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4767",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4769",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A4760",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96, 128 Payload Length - Payload Length: 128, 1024, 120, 248 AAD Length - AAD Length: 0, 128, 1024, 120, 248",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A4767",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96, 128 Payload Length - Payload Length: 128, 1024, 120, 248 AAD Length - AAD Length: 0, 128, 1024, 120, 248",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A4769",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96, 128 Payload Length - Payload Length: 128, 1024, 120, 248 AAD Length - AAD Length: 0, 128, 1024, 120, 248",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A4761",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A4766",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A4768",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KWP",
            "cavpCertName": "A4761",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KWP",
            "cavpCertName": "A4766",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KWP",
            "cavpCertName": "A4768",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "DSA SigVer (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "L - 1024, 2048, 3072 N - 160, 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2- 512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Curve - P-256, P-384, P-521 Secret Generation Mode - Extra Bits",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Curve - P-256, P-384, P-521",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Component - No Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Component - No Curve - P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2- 512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A4760",
            "properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA2-256 Entropy Input - Entropy Input: 256 Nonce - Nonce: 256 Personalization String Length - Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 256 Returned Bits - 1024",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA2- 224",
            "cavpCertName": "A4760",
            "properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 256",
            "cavpCertName": "A4760",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 384",
            "cavpCertName": "A4760",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512",
            "cavpCertName": "A4760",
            "properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A4760",
            "properties": "Domain Parameter Generation Methods - P-256, P-384, P-521 Scheme -",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "ephemeralUnified - KAS Role - initiator, responder",
            "reference": ""
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A4760",
            "properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem -",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDA HKDF Sp800-56Cr1",
            "cavpCertName": "A4759",
            "properties": "KAS Role - initiator, responder Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-65336 Increment 8 HMAC Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "KDF IKEv2 (CVL)",
            "cavpCertName": "A4764",
            "properties": "Initiator Nonce Length - Initiator Nonce Length: 128, 256, 512, 2048 Responder Nonce Length - Responder Nonce Length: 128, 256, 512, 2048 Diffie-Hellman Shared Secret Length - Diffie-Hellman Shared Secret Length: 224, 2048, 8192 Derived Keying Material Length - Derived Keying Material Length: 1056, 3072 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF SP800-108",
            "cavpCertName": "A4763",
            "properties": "KDF Mode - Counter, Double Pipeline Iteration, Feedback MAC Mode - CMAC-AES128, CMAC-AES192, CMAC-AES256, HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2- 384, HMAC-SHA2-512 Supported Lengths - Supported Lengths: 8, 72, 128, 776, 3456, 4096 Fixed Data Order - After Fixed Data, Before Fixed Data Counter Length - 16, 24, 32, 8 Supports Empty IV - No Requires Empty IV - No",
            "reference": "SP 800-108 Rev. 1"
          },
          {
            "algorithm": "KDF TLS (CVL)",
            "cavpCertName": "A4760",
            "properties": "Custom Key In Length - 0 TLS Version - v1.0/1.1",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "PBKDF",
            "cavpCertName": "A4760",
            "properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2- 512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-256 Increment 8",
            "reference": "SP 800-132"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.3 Info Generated By Server - No Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Private Key Format - Standard",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-2)",
            "cavpCertName": "A4760",
            "properties": "Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536 Hash Pair - Hash Algorithm - SHA-1",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A4760",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Fixed Fixed Public Exponent - 010001",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "Safe Primes Key Generation",
            "cavpCertName": "A4760",
            "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A4760",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A4760",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A4760",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A4760",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A4760",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Compute a message digest",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Message",
            "name": "Message Digest",
            "outputs": "Message digest",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "Message Digest"
          },
          {
            "description": "Encrypt a plaintext",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "AES Key, plaintext, IV",
            "name": "Encryption",
            "outputs": "Ciphertext",
            "rolesSspAccess": "Crypto Officer - AES Key: W,E",
            "secFunImpl": "Encryption UnAuth Encryption"
          },
          {
            "description": "Decrypt a ciphertext",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "AES Key, ciphertext , IV",
            "name": "Decryption",
            "outputs": "Plaintext",
            "rolesSspAccess": "Crypto Officer - AES Key: W,E",
            "secFunImpl": "Decryption UnAuth Decryption"
          },
          {
            "description": "Wrap a key",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "AES key, key to be wrapped",
            "name": "Key Wrapping",
            "outputs": "Wrapped key",
            "rolesSspAccess": "Crypto Officer - Key Wrapping Key: W,E - Wrapped key: R - Key To Be Wrapped: W,E",
            "secFunImpl": "Key Wrapping"
          },
          {
            "description": "Unwrap a key",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "AES key, key to unwrap",
            "name": "Key Unwrapping",
            "outputs": "Unwrappe d key",
            "rolesSspAccess": "Crypto Officer - Key Unwrapping Key: W,E - Unwrapped key: R - Key To Be Unwrapped: W,E",
            "secFunImpl": "Key Unwrapping"
          },
          {
            "description": "Compute a MAC tag",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "AES key, message",
            "name": "Message Authenticatio n CMAC",
            "outputs": "MAC tag",
            "rolesSspAccess": "Crypto Officer - AES Key: W,E",
            "secFunImpl": "Message Authenticatio n"
          },
          {
            "description": "Compute a MAC tag",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "HMAC key, message",
            "name": "Message Authenticatio n HMAC",
            "outputs": "MAC tag",
            "rolesSspAccess": "Crypto Officer - HMAC Key: W,E",
            "secFunImpl": "Message Authenticatio n"
          },
          {
            "description": "Compute a Shared Secret",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Private Key and Public Key",
            "name": "Shared Secret Computation",
            "outputs": "Shared Secret",
            "rolesSspAccess": "Crypto Officer - DH Private Key: W,E - DH Public Key: W,E - EC Private Key: W,E - EC Public Key: W,E - Shared Secret: G,R",
            "secFunImpl": "Shared Secret Computation"
          },
          {
            "description": "Generate a signature",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Private Key, message, hash",
            "name": "Signature Generation",
            "outputs": "Signature",
            "rolesSspAccess": "Crypto Officer - EC Private Key: W,E - RSA Private Key: W,E",
            "secFunImpl": "Signature Generation"
          },
          {
            "description": "Verify a signature",
            "indicator": "CKS_NSS_FIPS_O K; CKS_NSS_FIPS_O K; CKR_OK",
            "inputs": "Public Key, message, signature, hash",
            "name": "Signature Verification",
            "outputs": "Pass or Fail",
            "rolesSspAccess": "Crypto Officer - EC Public Key: W,E - RSA Public Key: W,E",
            "secFunImpl": "Signature Verification"
          },
          {
            "description": "Generate a key pair",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "modulus bits, Curve or Group",
            "name": "Key Pair Generation",
            "outputs": "Generated Private Key and Public Key",
            "rolesSspAccess": "Crypto Officer - EC Private Key: G,R - EC Public Key: G,R - DH Private Key: G,R - DH Public Key: G,R - RSA Public Key: G,R - RSA Private Key: G,R - Intermediate Key Generation Value: G,E,Z Crypto Officer",
            "secFunImpl": "Key Pair Generation"
          },
          {
            "description": "Verify a key pair",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Private Key, Public Key",
            "name": "Key Pair Verification",
            "outputs": "Pass or Fail",
            "rolesSspAccess": "- EC Private Key: G,R - EC Public Key: G,R",
            "secFunImpl": "Key Pair Verification"
          },
          {
            "description": "Generate a secret key",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "random bits",
            "name": "Secret Key Generation",
            "outputs": "Symmetric Key",
            "rolesSspAccess": "Crypto Officer - AES Key: G,R - HMAC Key: G,R",
            "secFunImpl": "None"
          },
          {
            "description": "Derive a key",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Shared Secret",
            "name": "Key Derivation",
            "outputs": "Derived Key",
            "rolesSspAccess": "Crypto Officer - Shared Secret: W,E",
            "secFunImpl": "Key Derivation Key"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Derived Key: G,R",
            "secFunImpl": "Derivation (CVL)"
          },
          {
            "description": "Derive a key from a key",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Derivatio n Key",
            "name": "Key-Based Key Derivation",
            "outputs": "Derived Key",
            "rolesSspAccess": "Crypto Officer - Key-Derivation Key: W,E - Derived Key: G,R",
            "secFunImpl": "Key Derivation"
          },
          {
            "description": "Derive a key from a password",
            "indicator": "CKS_NSS_FIPS_O K",
            "inputs": "Password",
            "name": "Password- Based Key Derivation",
            "outputs": "Derived Key",
            "rolesSspAccess": "Crypto Officer - Password: W,E - Derived Key: G,R",
            "secFunImpl": "Password- Based Key Derivation"
          },
          {
            "description": "Generate random bytes",
            "indicator": "CKR_OK",
            "inputs": "number of bits",
            "name": "Random Number Generation",
            "outputs": "Random Number",
            "rolesSspAccess": "Crypto Officer - Entropy Input: W,E - DRBG Seed: G,E - Internal State (V,C): G,E",
            "secFunImpl": "Random Number Generation"
          },
          {
            "description": "Return the name and version informatio n",
            "indicator": "None",
            "inputs": "None",
            "name": "Show Version",
            "outputs": "Module name and version",
            "rolesSspAccess": "Unauthenticate d",
            "secFunImpl": "None"
          },
          {
            "description": "Return the module status",
            "indicator": "None",
            "inputs": "None",
            "name": "Show Status",
            "outputs": "Module status",
            "rolesSspAccess": "Unauthenticate d",
            "secFunImpl": "None"
          },
          {
            "description": "Perform the CASTs and integrity test",
            "indicator": "None",
            "inputs": "None",
            "name": "Self-Test",
            "outputs": "Pass or Fail",
            "rolesSspAccess": "Unauthenticate d",
            "secFunImpl": "None"
          },
          {
            "description": "Zeroize all SSPs",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Zeroization",
            "outputs": "N/A",
            "rolesSspAccess": "Crypto Officer - Entropy Input: Z - DRBG Seed: Z - Internal State (V,C): Z - AES Key: Z - Wrapped key: Z - Unwrapped key: Z - Key To Be Wrapped: Z - Key To Be Unwrapped: Z - HMAC Key: Z - Key-Derivation Key: Z - Shared Secret:",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Z - Password: Z - Derived Key: Z - DH Public Key: Z - DH Private Key: Z - EC Public Key: Z - EC Private Key: Z - RSA Public Key: Z - RSA Private Key: Z - Intermediate Key Generation Value: Z - Key Wrapping Key: Z - Key Unwrapping Key: Z",
            "secFunImpl": ""
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-GCM (A4769)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "128-bit key, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A4767)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "128-bit key, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "128-bit key, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 224 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-224, HMAC key size 288-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA2-256, HMAC key size 288-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 384 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA2-384, HMAC key size 288-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA2-512, HMAC key size 288-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4760)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256 and respective keys",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-4) (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4760)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256 and respective keys",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "P-224 with SHA- 224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "P-224 with SHA- 224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "P-224 curve",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "MODP-2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A4769)",
            "condition": "Test runs at power-on",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and",
            "testMethod": "KAT",
            "testProps": "128-bit key encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "before the integrity test",
            "details": "",
            "indicator": "services are available for use",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "AES-CBC (A4767)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "128-bit key encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "128-bit key encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A4769)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "128-bit key decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A4767)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "128-bit key decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "128-bit key decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A4762)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message Authentication",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "128, 192, 256- bit key 128-bit message",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Safe Primes Key Generation (A4760)",
            "condition": "Key pair generation",
            "details": "Key Generation, SP 800-56Ar3 section 5.6.2.1.4",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KDF SP800- 108 (A4763)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Key Derivation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "Counter mode HMAC SHA-256 576-bit input key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Random Number Generation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA-256 without prediction resistance",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A4759)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Key Derivation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA-256 512-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF TLS (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Key Derivation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "MD5-SHA-1 288- bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Key Derivation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA-256 288-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Key Derivation",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "SHA-256 14- character password 128- bit salt Iteration count: 5",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "DSA SigVer (FIPS186-4) (A4760)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational and services are available for use",
            "testMethod": "KAT",
            "testProps": "1024-bit key",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Software integrity test failure; CAST failure",
            "description": "An error occurred during the self-tests executed on power- on",
            "indicator": "Module will not load",
            "name": "Power- On Error",
            "recoveryMethod": "The module must be restarted and successfully perform the pre-operational self-test and the CASTs to recover from these errors."
          },
          {
            "conditions": "PCT failure",
            "description": "An error occurred during a PCT",
            "indicator": "Module stops functioning (sftk_fatalError is set to TRUE)",
            "name": "PCT Error",
            "recoveryMethod": "The module must be restarted and successfully perform the PCT tests to recover from these errors."
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Automatically entered whenever an approved service is requested",
            "name": "Approved mode",
            "statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.3",
            "type": "Approved"
          },
          {
            "description": "Automatically entered whenever a non-approved service is requested",
            "name": "Non-approved mode",
            "statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.4",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [
          {
            "caveat": "Only allowed as the PRF in TLSv1.0 and v1.1 per IG 2.4.A",
            "name": "MD5",
            "use": "Message digest used in TLS 1.0/1.1 KDF only"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "MD2, MD5, SHA-1",
            "use": "Message Digest"
          },
          {
            "name": "RC2, RC4, DES, Triple-DES, CDMF, Camellia, SEED, ChaCha20(-Poly1305), AES GCM (external IV)",
            "use": "Encryption"
          },
          {
            "name": "RC2, RC4, DES, Triple-DES, CDMF, Camellia, SEED, ChaCha20(-Poly1305)",
            "use": "Decryption"
          },
          {
            "name": "CBC-MAC, AES XCBC-MAC, AES XCBC-MAC-96, HMAC-SHA-1, HMAC (MD2, MD5; \u003c 112-bit keys), HMAC/SSLv3 MAC (constant-time implementation)",
            "use": "Message Authentication"
          },
          {
            "name": "RSA OAEP",
            "use": "Key Encapsulation/Decapsulation"
          },
          {
            "name": "SEED, ANS X9.63 KDF, SSL 3 PRF, 40v1 PRF, KBKDF, HKDF, TLS 1.0/1.1 KDF, TLS 1.2 KDF, IKEv2 PRF (\u003c 112-bit keys), KBKDF (MD2, MD5), TLS 1.2 KDF (without extended master secret), IKEv1 KDF, IKEv2 PRF (MD2, MD5)",
            "use": "Key Derivation"
          },
          {
            "name": "PKCS#5 PBE, PKCS#12 PBE, PBKDF2 (short password; short salt; insufficient iterations; \u003c 112-bit keys)",
            "use": "Password-Based Key Derivation"
          },
          {
            "name": "J-PAKE, KAS-FFC-SSC (FIPS 186-type groups), KAS-ECC-SSC (P-192)",
            "use": "Shared Secret Computation"
          },
          {
            "name": "DSA SigGen, RSA with SHA-1, RSA (primitive; PKCS#1 v1.5 or PSS with MD2, MD5), ECDSA (P-192)",
            "use": "Signature Generation"
          },
          {
            "name": "RSA with SHA-1, RSA (primitive; PKCS#1 v1.5 or PSS with MD2, MD5), ECDSA (P-192)",
            "use": "Signature Verification"
          },
          {
            "name": "RSA Encryption",
            "use": "Asymmetric Encryption"
          },
          {
            "name": "RSA Decryption",
            "use": "Asymmetric Decryption"
          },
          {
            "name": "DH (FIPS 186-type groups), RSA (\u003c 2048 bits), DSA, ECDSA (P-192)",
            "use": "Key Pair Generation"
          },
          {
            "name": "Symmetric key generation (\u003c 112 bits)",
            "use": "Secret Key Generation"
          },
          {
            "name": "DSA ParmGen",
            "use": "Parameter Generation"
          },
          {
            "name": "DSA ParmVer",
            "use": "Parameter Verification"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "MD2, MD5, SHA-1",
            "description": "Compute a message digest",
            "name": "Message Digest",
            "role": "CO"
          },
          {
            "alg_accessed": "RC2, RC4, DES, Triple-DES, CDMF, Camellia, SEED, ChaCha20(-Poly1305), AES GCM (external IV)",
            "description": "Encrypt a plaintext",
            "name": "Encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "RC2, RC4, DES, Triple-DES, CDMF, Camellia, SEED, ChaCha20(-Poly1305)",
            "description": "Decrypt a ciphertext",
            "name": "Decryption",
            "role": "CO"
          },
          {
            "alg_accessed": "CBC-MAC, AES XCBC-MAC, AES XCBC-MAC- 96, HMAC-SHA-1, HMAC (MD2, MD5; \u003c 112-bit keys), HMAC/SSLv3 MAC (constant- time implementation)",
            "description": "Compute a MAC tag",
            "name": "Message Authentication",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA OAEP",
            "description": "Encapsulate/Decapsulate a key",
            "name": "Key Encapsulation/Decapsulation",
            "role": "CO"
          },
          {
            "alg_accessed": "SEED, ANS X9.63 KDF, SSL 3 PRF, 40v1 PRF, KBKDF, HKDF, TLS 1.0/1.1 KDF, TLS 1.2 KDF, IKEv2 PRF (\u003c 112-bit keys), KBKDF (MD2, MD5), TLS 1.2 KDF (without extended master secret), IKEv1 KDF, IKEv2 PRF (MD2, MD5)",
            "description": "Derive a key",
            "name": "Key Derivation",
            "role": "CO"
          },
          {
            "alg_accessed": "PKCS#5 PBE, PKCS#12 PBE, PBKDF2 (short password; short salt; insufficient iterations; \u003c 112-bit keys)",
            "description": "Derive a key from a password",
            "name": "Password-Based Key Derivation",
            "role": "CO"
          },
          {
            "alg_accessed": "J-PAKE, KAS-FFC-SSC (FIPS 186-type groups), KAS-ECC-SSC (P-192)",
            "description": "Compute a shared secret",
            "name": "Shared Secret Computation",
            "role": "CO"
          },
          {
            "alg_accessed": "DSA SigGen, RSA with SHA-1, RSA (primitive; PKCS#1 v1.5 or PSS with MD2, MD5), ECDSA (P-192)",
            "description": "Generate a signature",
            "name": "Signature Generation",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA with SHA-1, RSA (primitive; PKCS#1 v1.5 or PSS with MD2, MD5), ECDSA (P-192)",
            "description": "Verify a signature",
            "name": "Signature Verification",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA Encryption",
            "description": "Encrypt a plaintext",
            "name": "Asymmetric Encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA Decryption",
            "description": "Decrypt a ciphertext",
            "name": "Asymmetric Decryption",
            "role": "CO"
          },
          {
            "alg_accessed": "DSA ParmGen",
            "description": "Generate domain parameters",
            "name": "Parameter Generation",
            "role": "CO"
          },
          {
            "alg_accessed": "DSA ParmVer",
            "description": "Verify domain parameters",
            "name": "Parameter Verification",
            "role": "CO"
          },
          {
            "alg_accessed": "DH (FIPS 186-type groups), RSA (\u003c 2048 bits), DSA, ECDSA (P-192)",
            "description": "Generate a key pair",
            "name": "Key Pair Generation",
            "role": "CO"
          },
          {
            "alg_accessed": "Symmetric key generation (\u003c 112 bits)",
            "description": "Generate a secret key",
            "name": "Secret Key Generation",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API data input parameters",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API output parameters",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A"
          },
          {
            "data": "API function calls, API control input parameters",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API return codes, error queue",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "1",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A4760)",
            "details": "Integrity test for libfreeblpriv3.so and libfsoftokn3.so",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "HMAC",
            "testProps": "SHA2-256",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Cryptographic module",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API input parameters (plaintext)",
            "sfiAlgo": "",
            "source": "Operator calling application (TOEPP)"
          },
          {
            "dest": "Cryptographic module",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "API input parameters (encrypted)",
            "sfiAlgo": "Key Unwrapping",
            "source": "Operator calling application (TOEPP)"
          },
          {
            "dest": "Operator calling application (TOEPP)",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API output parameters (plaintext)",
            "sfiAlgo": "",
            "source": "Cryptographic module"
          },
          {
            "dest": "Operator calling application (TOEPP)",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "API output parameters (encrypted)",
            "sfiAlgo": "Key Wrapping",
            "source": "Cryptographic module"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Zeroizes the SSPs contained within the cipher handle.",
            "method": "Wipe and Free memory block allocated",
            "operatorId": "By calling the cipher related zeroization API",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
          },
          {
            "description": "Automatically zeroized by the module when no longer needed",
            "method": "Automatic",
            "operatorId": "N/A",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
          },
          {
            "description": "De-allocates the volatile memory used to store SSPs",
            "method": "Module Reset",
            "operatorId": "By unloading and reloading the module",
            "rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "ORACLE SERVER X9-2c",
            "hypervisorHostOs": "KVM on Oracle Linux 8",
            "operatingSystem": "Oracle Linux 9",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Platinum 8358",
            "version": "4.35.0- 381552536e763d0c"
          },
          {
            "hardwarePlatform": "ORACLE SERVER E4-2c",
            "hypervisorHostOs": "KVM on Oracle Linux 8",
            "operatingSystem": "Oracle Linux 9",
            "paa_pai": "Yes",
            "processors": "AMD EPYC 7J13",
            "version": "4.35.0- 381552536e763d0c"
          },
          {
            "hardwarePlatform": "ORACLE SERVER A1-2c",
            "hypervisorHostOs": "KVM on Oracle Linux 8",
            "operatingSystem": "Oracle Linux 9",
            "paa_pai": "Yes",
            "processors": "Ampere\u00ae Altra\u00ae Q80- 30",
            "version": "4.35.0- 381552536e763d0c"
          },
          {
            "hardwarePlatform": "ORACLE SERVER X9-2c",
            "hypervisorHostOs": "KVM on Oracle Linux 8",
            "operatingSystem": "Oracle Linux 9",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae Platinum 8358",
            "version": "4.35.0- 381552536e763d0c"
          },
          {
            "hardwarePlatform": "ORACLE SERVER E4-2c",
            "hypervisorHostOs": "KVM on Oracle Linux 8",
            "operatingSystem": "Oracle Linux 9",
            "paa_pai": "No",
            "processors": "AMD EPYC 7J13",
            "version": "4.35.0- 381552536e763d0c"
          },
          {
            "hardwarePlatform": "ORACLE SERVER A1-2c",
            "hypervisorHostOs": "KVM on Oracle Linux 8",
            "operatingSystem": "Oracle Linux 9",
            "paa_pai": "No",
            "processors": "Ampere\u00ae Altra\u00ae Q80- 30",
            "version": "4.35.0- 381552536e763d0c"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Symmetric and Asymmetric Symmetric Key Generation:112-256 bits with 112- 256 bits of key strength. RSA:2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. ECDSA: P-256, P-384, P-521 elliptic curves with 128- 256 bits of key strength Safe Primes Key Generation:MODP-2048, MODP- 3072, MODP-4096, MODP-6144, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192 with 112-200 bits of key strength",
            "implName": "N/A",
            "name": "Cryptographic Key Generation (CKG)",
            "reference": "SP 800-133Rev2 section 4, example 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Oracle X Series Servers",
            "operatingSystem": "Oracle Linux 9"
          },
          {
            "hardwarePlatform": "Oracle E Series Servers",
            "operatingSystem": "Oracle Linux 9"
          },
          {
            "hardwarePlatform": "Oracle A Series Servers",
            "operatingSystem": "Oracle Linux 9"
          },
          {
            "hardwarePlatform": "Marvell T93 LiquidIO III (ARM v8.x) SmartNIC",
            "operatingSystem": "Oracle Linux 9"
          },
          {
            "hardwarePlatform": "Pensando DSC-200-R (ARM v8.x) SmartNIC",
            "operatingSystem": "Oracle Linux 9"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 2
          },
          "ECDSA": {
            "ECDSA": 22
          }
        },
        "FF": {
          "DH": {
            "DH": 23,
            "Diffie-Hellman": 5
          },
          "DSA": {
            "DSA": 12
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CCM": {
          "CCM": 1
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 14
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "NSS": {
          "NSS": 54
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 3,
          "IKEv1": 2,
          "IKEv2": 7
        },
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 18,
            "TLS 1.2": 7,
            "TLS 1.3": 4,
            "TLS v1.2": 4,
            "TLSv1.0": 1
          }
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 16
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 16,
          "P-224": 6,
          "P-256": 12,
          "P-384": 12,
          "P-521": 12
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 3
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 3,
          "HMAC SHA-256": 1,
          "HMAC-SHA-1": 6,
          "HMAC-SHA-256": 10,
          "PKCS 1": 3,
          "PKCS#1": 14,
          "PKCS#11": 2,
          "PKCS#12": 6,
          "PKCS#5": 6,
          "PKCS#7": 2,
          "SHA- 224": 2,
          "SHA-1": 16,
          "SHA-256": 6,
          "SHA-3": 1,
          "SHA1": 1,
          "SHA2- 256": 2,
          "SHA2- 512": 3,
          "SHA2-224": 11,
          "SHA2-256": 16,
          "SHA2-384": 12,
          "SHA2-512": 9
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 13
          }
        },
        "PBKDF": {
          "PBKDF": 4,
          "PBKDF2": 7
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 16,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-256": 6
          },
          "SHA3": {
            "SHA-3": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 19
        },
        "RNG": {
          "RBG": 3,
          "RNG": 2
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Timing attack": 1,
          "Timing attacks": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 11,
          "FIPS 180-4": 5,
          "FIPS 186-4": 13,
          "FIPS 186-5": 3,
          "FIPS 197": 1,
          "FIPS 198-1": 5,
          "FIPS 202": 1,
          "FIPS PUB 140-3": 2,
          "FIPS186-2": 2,
          "FIPS186-4": 30
        },
        "NIST": {
          "SP 800-108": 1,
          "SP 800-132": 7,
          "SP 800-135": 3,
          "SP 800-38A": 11,
          "SP 800-38B": 2,
          "SP 800-38D": 3,
          "SP 800-38F": 7,
          "SP 800-56A": 3,
          "SP 800-56C": 1,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS 1": 3,
          "PKCS#1": 7,
          "PKCS#11": 1,
          "PKCS#12": 3,
          "PKCS#5": 3,
          "PKCS#7": 1
        },
        "RFC": {
          "RFC 3526": 2,
          "RFC 5288": 2,
          "RFC 7627": 1,
          "RFC 7919": 2,
          "RFC 8446": 1,
          "RFC7627": 3,
          "RFC8446": 2
        },
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 32
          },
          "CAST": {
            "CAST": 64
          },
          "RC": {
            "RC2": 4,
            "RC4": 4
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 4
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 2,
            "CMAC": 3,
            "HMAC": 22,
            "HMAC-SHA-256": 5
          }
        },
        "djb": {
          "ChaCha": {
            "ChaCha20": 4
          }
        },
        "miscellaneous": {
          "Camellia": {
            "Camellia": 4
          },
          "SEED": {
            "SEED": 6
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 7
        },
        "IBM": {
          "SSC": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "KDF IKEv2A4764",
        "KAS-ECC-SSC Sp800-56Ar3A4760",
        "KDF SP800-108A4763",
        "AES-ECBA4769",
        "AES-KWA4768",
        "SHA2-384A4760",
        "ECDSA KeyVer (FIPS186-4)A4760",
        "RSA SigGen (FIPS186-4)A4760",
        "AES-KWPA4768",
        "KDA HKDF Sp800-56Cr1A4759",
        "SHA2-256A4760",
        "RSA SigVer (FIPS186-2)A4760",
        "AES-CBC-CS1A4765",
        "AES-GCMA4769",
        "AES-CMACA4762",
        "SHA2-512A4760",
        "HMAC-SHA2-256A4760",
        "KAS-FFC-SSC Sp800-56Ar3A4760",
        "DSA SigVer (FIPS186-4)A4760",
        "HMAC-SHA2-384A4760",
        "ECDSA SigVer (FIPS186-4)A4760",
        "RSA KeyGen (FIPS186-4)A4760",
        "TLS v1.2 KDF RFC7627A4760",
        "PBKDFA4760",
        "ECDSA SigGen (FIPS186-4)A4760",
        "HMAC-SHA2-512A4760",
        "SHA2-224A4760",
        "ECDSA KeyGen (FIPS186-4)A4760",
        "HMAC-SHA2-224A4760",
        "RSA SigVer (FIPS186-4)A4760",
        "Hash DRBGA4760",
        "AES-CTRA4769",
        "AES-CBCA4769",
        "Safe Primes Key GenerationA4760",
        "KDF TLSA4760"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4763",
        "#A4761",
        "#A4767",
        "#A4759",
        "#A4766",
        "#A4762",
        "#A4760",
        "#A4769",
        "#A4764",
        "#A4768",
        "#A4765"
      ]
    },
    "policy_metadata": {
      "/Author": "Dick Sikkema",
      "/CreationDate": "D:20260616134840-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260616134840-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 825575,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://www.ietf.org/rfc/rfc7919.txt",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://yum.oracle.com/repo/OracleLinux/OL9/3/security/validation/x86_64/getPackage/nss-softokn-3.90.0-3.0.1.el9_2_fips.x86_64.rpm",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "https://www.ietf.org/rfc/rfc5288.txt",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://yum.oracle.com/repo/OracleLinux/OL9/3/security/validation/x86_64/index.html",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
          "http://www.oracle.com/",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://www.ietf.org/rfc/rfc3526.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "http://www.atsec.com/",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://www.ietf.org/rfc/rfc8446.txt",
          "https://yum.oracle.com/repo/OracleLinux/OL9/3/security/validation/x86_64/getPackage/nss-softokn-freebl-3.90.0-3.0.1.el9_2_fips.x86_64.rpm",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 47
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "48c493fc136342c95997301475ffc43ff5d513878a9a6adcfcae3e02ce01e683",
      "source_hash": "c92c2c42a6514ab29f49e2eea5561a3b2ae990119946d397cc7d571071cf262a",
      "txt_hash": "83a8600fa58245befc28ae033e85c9dfef5143c50b711d00dcc8644bd165ce23"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2029-09-15",
    "description": "Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Oracle Linux 9 NSS Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-17",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Oracle Corporation",
    "vendor_url": "http://www.oracle.com"
  }
}