{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "0d8be8cfcf9aa1b7", "cert_id": 5313, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Microsoft SymCrypt Cryptographic Library", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-05", "validation_type": "Initial", "lab": "DEKRA Cybersecurity Certification Laboratory"}], "vendor_url": "http://www.microsoft.com/", "vendor": "Microsoft Corporation", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. The module generates SSPs (e.g., keys) and random strings whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "The module is a software library that provides cryptographic services to calling applications.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-04", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"level 1": 2, "Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 12, "HMAC- SHA-1": 2, "HMAC SHA-1": 1, "SHA-1": 21, "SHA2-256": 19, "SHA2-384": 11, "SHA2-512": 15, "SHA3-256": 5, "SHA3-384": 4, "SHA3-512": 4, "SHA2-224": 3, "SHA3-224": 2, "SHA2- 384": 8, "SHA2- 256": 9, "SHA3- 256": 1, "SHA-3": 4, "SHA- 3": 1, "SHA2- 512": 4, "SHA1": 1, "SHA2": 1, "- PKCS 1": 1, "PKCS 1": 7, "AES-256": 4, "AES-128": 1, "AES-192": 1}}, "vendor": {"Microsoft": {"Microsoft": 17, "Microsoft Corporation": 84}}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 4, "AES": 39, "AES-128": 1, "AES-192": 1, "AES-": 8}, "CAST": {"CAST": 102}, "RC": {"RC2": 2, "RC4": 2}}, "DES": {"DES": {"DES": 2}, "3DES": {"Triple-DES": 2}}, "djb": {"ChaCha": {"ChaCha20": 2}, "Poly": {"Poly1305": 2}}, "constructions": {"MAC": {"HMAC": 21, "KMAC": 7, "CMAC": 4}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 20}, "ECDSA": {"ECDSA": 46}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 10, "DH": 20}, "DSA": {"DSA": 24}}}, "pq_crypto": {"FIPS": {"ML-DSA": 3, "ML-KEM": 2}, "XMSS": {"XMSS": 3}, "LMS": {"LMS": 3}}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 21, "SHA1": 1}, "SHA2": {"SHA2": 1}, "SHA3": {"SHA3-256": 5, "SHA3-384": 4, "SHA3-512": 4, "SHA3-224": 2, "SHA-3": 4}}, "MD": {"MD4": {"MD4": 2}, "MD5": {"MD5": 3}}, "PBKDF": {"PBKDF": 6, "PBKDF2": 27}}, "crypto_scheme": {"MAC": {"MAC": 3}, "KA": {"Key Agreement": 7}}, "crypto_protocol": {"SSH": {"SSH": 10, "SSHv2": 3}, "TLS": {"TLS": {"TLS": 20, "TLS v1.2": 6, "TLS 1.2": 3, "TLS v1.1": 1, "TLS 1.1": 1}}}, "randomness": {"PRNG": {"DRBG": 61}, "RNG": {"RNG": 1, "RBG": 4}}, "cipher_mode": {"CTR": {"CTR": 11}, "GCM": {"GCM": 4}, "CCM": {"CCM": 2}, "XTS": {"XTS": 6}}, "ecc_curve": {"NIST": {"P-256": 38, "P-384": 12, "P-521": 32}, "Curve": {"Curve25519": 1}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 5}, "IBM": {"SSC": 6}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140": 1, "FIPS 140-3": 13, "FIPS 202": 8, "FIPS PUB 140-3": 1, "FIPS186-4": 6, "FIPS 186-4": 6, "FIPS186-5": 24, "FIPS 186-5": 10, "FIPS 198-1": 8, "FIPS 180-4": 5, "FIPS 197": 1}, "NIST": {"SP 800-38A": 5, "SP 800-38C": 1, "SP 800-38B": 1, "SP 800-38D": 2, "SP 800-38E": 1, "SP 800-90A": 1, "SP 800-185": 4, "SP 800-56A": 5, "SP 800-56C": 1, "SP 800-108": 2, "SP 800-135": 4, "SP 800-132": 2, "SP 800-56B": 1, "NIST SP 800-56A": 3, "NIST SP 800-133": 2, "NIST SP 800-38A": 1, "NIST SP 800-38B": 1, "NIST SP 800-38C": 1, "NIST SP 800-38D": 1, "NIST SP 800-38E": 1, "NIST SP 800-38F": 1, "NIST SP 800-52": 1, "NIST SP 800-56B": 1, "NIST SP 800-90A": 1, "NIST SP 800-90B": 1, "NIST SP 800-108": 1, "NIST SP 800-131A": 1, "NIST SP 800-132": 1, "NIST SP 800-135": 1}, "PKCS": {"PKCS 1": 4}, "RFC": {"RFC7627": 4, "RFC4252": 1, "RFC4253": 1, "RFC5647": 1}, "ISO": {"ISO/IEC 19790:2012": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {"OutOfScope": {"out of scope": 1, "to the module. The elements outside of the module\u2019s cryptographic boundary depicted in Figure 1 are out of scope of this evaluation and do not interfere with the secure operation of the module in its approved": 1}}}, "policy_metadata": {"pdf_file_size_bytes": 1072107, "pdf_is_encrypted": false, "pdf_number_of_pages": 76, "/Author": "Robert Durff", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260601112707-04'00'", "/ModDate": "D:20260601112707-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/publications/detail/sp/800-56b/rev-2/final", "https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/curvegen.pdf", "https://csrc.nist.gov/pubs/sp/800/52/r2/final", "https://csrc.nist.gov/publications/detail/fips/197/final", "https://csrc.nist.gov/publications/detail/sp/800-38b/final", "https://csrc.nist.gov/publications/detail/sp/800-132/final", "https://csrc.nist.gov/publications/detail/fips/186/4/final", "https://csrc.nist.gov/publications/detail/sp/800-90a/rev-1/final", "https://csrc.nist.gov/publications/detail/sp/800-131a/rev-2/final", "https://csrc.nist.gov/publications/detail/fips/180/4/final", "https://csrc.nist.gov/publications/detail/sp/800-90b/final", "https://csrc.nist.gov/publications/detail/fips/140/3/final", "https://csrc.nist.gov/publications/detail/sp/800-108/rev-1/final", "https://csrc.nist.gov/publications/detail/sp/800-38a/final", "https://csrc.nist.gov/publications/detail/sp/800-56a/rev-3/final", "https://csrc.nist.gov/publications/detail/fips/198/1/final", "https://csrc.nist.gov/pubs/fips/186-5/final", "https://csrc.nist.gov/publications/detail/sp/800-38c/final", "https://csrc.nist.gov/publications/detail/sp/800-135/rev-1/final", "https://cr.yp.to/ecdh/curve25519-20060209.pdf", "https://csrc.nist.gov/publications/detail/fips/202/final", "https://csrc.nist.gov/publications/detail/sp/800-38e/final", "https://github.com/microsoft/SymCrypt/commit/53be637dab201a4c9d95e1cf58040c85d71cf3c2", "https://csrc.nist.gov/publications/detail/sp/800-38f/final", "http://csrc.nist.gov/groups/ST/toolkit/documents/dss/NISTReCur.pdf", "https://csrc.nist.gov/publications/detail/sp/800-133/rev-2/final", "https://csrc.nist.gov/publications/detail/sp/800-38d/final"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["RSA Signature PrimitiveA6701", "KAS-ECC Sp800-56Ar3A6701", "KMAC-256A6701", "SHAKE-256A6701", "KDF SP800-108A6701", "cSHAKE-256A6701", "cSHAKE-128A6701", "ECDSA SigVer (FIPS186-5)A6701", "SHA3-256A6701", "RSA Decryption Primitive Sp800-56Br2A6701", "PBKDFA6701", "HMAC-SHA2-256A6701", "AES-CMACA6701", "RSA KeyGen (FIPS186-5)A6701", "HMAC-SHA3-256A6701", "KDF SRTPA6701", "KDF SSHA6701", "Counter DRBGA6701", "HMAC-SHA-1A6701", "KDF TLSA6701", "AES-CFB8A6701", "ECDSA KeyGen (FIPS186-5)A6701", "KAS-ECC-SSC Sp800-56Ar3A6701", "KDA OneStep SP800-56Cr2A6701", "Safe Primes Key GenerationA6701", "SHA2-256A6701", "KAS-FFC Sp800-56Ar3A6701", "AES-ECBA6701", "ECDSA SigGen (FIPS186-5)A6701", "HMAC-SHA2-384A6701", "HMAC-SHA3-512A6701", "HMAC-SHA2-512A6701", "KMAC-128A6701", "RSA SigVer (FIPS186-5)A6701", "TLS v1.2 KDF RFC7627A6701", "SHA2-512A6701", "SHA3-512A6701", "AES-CCMA6701", "AES-XTS Testing Revision 2.0A6701", "ECDSA KeyVer (FIPS186-5)A6701", "DSA PQGVer (FIPS186-4)A6701", "RSA SigGen (FIPS186-5)A6701", "DSA SigVer (FIPS186-4)A6701", "AES-GCMA6701", "SHA3-384A6701", "SHAKE-128A6701", "SHA2-384A6701", "KAS-FFC-SSC Sp800-56Ar3A6701", "RSA SigVer (FIPS186-4)A6701", "AES-CFB128A6701", "AES-CTRA6701", "HMAC-SHA3-384A6701", "AES-CBCA6701", "AES-GMACA6701", "SHA-1A6701"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "18f166da5bb5205369f199aad73b33a7127d82c9f64d784a66520bc06f98cdcf", "txt_hash": "853e4325ebb5389d25ca83311e57f2a0d730b14d5ca5b484c005b7fc8070377c", "json_hash": null}}}