This page was not yet optimized for use on mobile devices.
IBM® Crypto for C
Certificate details
| Certificate ID | #4755 |
|---|---|
| Status | historical |
| Historical reason | Replaced by certificate #5486 |
| Validation dates | 09.08.2024 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in sections 11.1 and 11.2 of the Security Policy |
| Exceptions |
|
| Description | The IBM Crypto for C version 8.8.1.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group. |
| Tested configurations |
|
| Vendor | IBM Corporation http://www.ibm.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, RC2, RC4, DES, Triple-DES, TDES, ChaCha20, Blowfish, Camellia, HMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD4, MD5, RIPEMD, PBKDFSchemes
MAC, Key AgreementProtocols
SSH, SSL, TLS 1.3, TLSv1.3, TLSRandomness
DRBG, RNGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, P-192, K-233, K-283, K-409, K-571, B-233, B-283, B-409, B-571, K-163, B-163Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
SSCVendor
MicrosoftSecurity level
level 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4755,
"dgst": "0f6004b615adbb8a",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"ECDSA SigGen (FIPS186-4)A2620",
"AES-ECBA2620",
"HMAC-SHA3-224A2620",
"DSA SigVer (FIPS186-4)A2620",
"AES-CFB1A2620",
"AES-CFB128A2620",
"HMAC-SHA2-512A2620",
"Hash DRBGA2620",
"RSA SigVer (FIPS186-4)A2620",
"SHA3-512A2620",
"SHA3-256A2620",
"HMAC-SHA3-512A2620",
"SHA2-256A2620",
"AES-CMACA2620",
"Safe Primes Key GenerationA2620",
"HMAC-SHA2-256A2620",
"AES-XTS Testing Revision 2.0A2620",
"HMAC-SHA3-256A2620",
"KAS-FFC-SSC Sp800-56Ar3A2620",
"HMAC-SHA2-224A2620",
"Counter DRBGA2620",
"AES-KWPA2620",
"SHA2-512A2620",
"HMAC-SHA3-384A2620",
"AES-OFBA2620",
"HMAC-SHA2-384A2620",
"RSA KeyGen (FIPS186-4)A2620",
"KAS-ECC-SSC Sp800-56Ar3A2620",
"ECDSA KeyGen (FIPS186-4)A2620",
"ECDSA KeyVer (FIPS186-4)A2620",
"RSA SigGen (FIPS186-4)A2620",
"AES-CTRA2620",
"PBKDFA2620",
"SHA2-224A2620",
"SHA2-384A2620",
"AES-GCMA2620",
"HMAC DRBGA2620",
"ECDSA SigVer (FIPS186-4)A2620",
"KDA HKDF Sp800-56Cr1A2620",
"SHA3-384A2620",
"AES-KWA2620",
"AES-CFB8A2620",
"SHA3-224A2620",
"#A2619",
"AES-CBCA2620",
"#A2620",
"AES-CCMA2620"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 32,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 4
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 61
}
},
"FF": {
"DH": {
"DH": 2,
"Diffie-Hellman": 50
},
"DSA": {
"DSA": 27
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 3
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 2
},
"ECB": {
"ECB": 3
},
"GCM": {
"GCM": 4
},
"OFB": {
"OFB": 2
},
"XTS": {
"XTS": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 5
}
},
"crypto_protocol": {
"SSH": {
"SSH": 1
},
"TLS": {
"SSL": {
"SSL": 1
},
"TLS": {
"TLS": 3,
"TLS 1.3": 4,
"TLSv1.3": 2
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"MAC": {
"MAC": 15
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 7,
"B-233": 9,
"B-283": 8,
"B-409": 8,
"B-571": 8,
"K-163": 7,
"K-233": 8,
"K-283": 8,
"K-409": 8,
"K-571": 8,
"P-192": 14,
"P-224": 22,
"P-256": 22,
"P-384": 24,
"P-521": 22
}
},
"eval_facility": {
"atsec": {
"atsec": 48
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES key 128, 192": 1,
"AES-128": 3,
"AES-192": 3,
"AES-256": 3,
"AES-CBC 128, 192 and 256": 2,
"AES-CMAC 128": 2,
"AES-CTR 128": 2,
"AES-GCM 128": 2,
"HMAC-SHA-1": 4,
"HMAC-SHA1": 2,
"PKCS#1": 2,
"SHA-1": 5,
"SHA-224": 2,
"SHA-256": 2,
"SHA-3": 11,
"SHA-384": 2,
"SHA-512": 2,
"SHA2-224": 27,
"SHA2-256": 43,
"SHA2-384": 29,
"SHA2-512": 26,
"SHA2-512 2048": 4,
"SHA3-224": 10,
"SHA3-256": 10,
"SHA3-384": 10,
"SHA3-512": 11
}
},
"fips_security_level": {
"Level": {
"level 1": 2
}
},
"hash_function": {
"MD": {
"MD4": {
"MD4": 2
},
"MD5": {
"MD5": 2
}
},
"PBKDF": {
"PBKDF": 30
},
"RIPEMD": {
"RIPEMD": 2
},
"SHA": {
"SHA1": {
"SHA-1": 5
},
"SHA2": {
"SHA-224": 2,
"SHA-256": 2,
"SHA-384": 2,
"SHA-512": 2
},
"SHA3": {
"SHA-3": 11,
"SHA3-224": 10,
"SHA3-256": 10,
"SHA3-384": 10,
"SHA3-512": 11
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 38
},
"RNG": {
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 59,
"FIPS 1403": 1,
"FIPS 186-4": 12,
"FIPS 198-1": 16,
"FIPS 202": 8,
"FIPS PUB 140-3": 3,
"FIPS140-3": 1,
"FIPS180-4": 9,
"FIPS186-4": 10,
"FIPS197": 23,
"FIPS198-1": 1,
"FIPS202": 1
},
"ISO": {
"ISO/IEC 24759": 2
},
"NIST": {
"NIST SP 800-140F": 1,
"NIST SP 800-90B": 1,
"SP 800-140x": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS#1": 1
},
"RFC": {
"RFC 5288": 1,
"RFC 5869": 2,
"RFC3394": 1,
"RFC5649": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 52,
"AES-": 12,
"AES-128": 3,
"AES-192": 3,
"AES-256": 3
},
"CAST": {
"CAST": 4
},
"RC": {
"RC2": 3,
"RC4": 3
}
},
"DES": {
"3DES": {
"TDES": 1,
"Triple-DES": 3
},
"DES": {
"DES": 4
}
},
"constructions": {
"MAC": {
"CMAC": 7,
"HMAC": 35
}
},
"djb": {
"ChaCha": {
"ChaCha20": 3
}
},
"miscellaneous": {
"Blowfish": {
"Blowfish": 3
},
"Camellia": {
"Camellia": 3
}
}
},
"tee_name": {
"IBM": {
"SSC": 6
}
},
"tls_cipher_suite": {},
"vendor": {
"Microsoft": {
"Microsoft": 1
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"ECDSA SigGen (FIPS186-4)A2620",
"AES-ECBA2620",
"HMAC-SHA3-224A2620",
"DSA SigVer (FIPS186-4)A2620",
"AES-CFB1A2620",
"AES-CFB128A2620",
"HMAC-SHA2-512A2620",
"Hash DRBGA2620",
"RSA SigVer (FIPS186-4)A2620",
"SHA3-512A2620",
"SHA3-256A2620",
"HMAC-SHA3-512A2620",
"SHA2-256A2620",
"AES-CMACA2620",
"Safe Primes Key GenerationA2620",
"HMAC-SHA2-256A2620",
"AES-XTS Testing Revision 2.0A2620",
"HMAC-SHA3-256A2620",
"KAS-FFC-SSC Sp800-56Ar3A2620",
"HMAC-SHA2-224A2620",
"Counter DRBGA2620",
"AES-KWPA2620",
"SHA2-512A2620",
"HMAC-SHA3-384A2620",
"AES-OFBA2620",
"HMAC-SHA2-384A2620",
"RSA KeyGen (FIPS186-4)A2620",
"KAS-ECC-SSC Sp800-56Ar3A2620",
"ECDSA KeyGen (FIPS186-4)A2620",
"ECDSA KeyVer (FIPS186-4)A2620",
"RSA SigGen (FIPS186-4)A2620",
"AES-CTRA2620",
"PBKDFA2620",
"SHA2-224A2620",
"SHA2-384A2620",
"AES-GCMA2620",
"HMAC DRBGA2620",
"ECDSA SigVer (FIPS186-4)A2620",
"KDA HKDF Sp800-56Cr1A2620",
"SHA3-384A2620",
"AES-KWA2620",
"AES-CFB8A2620",
"SHA3-224A2620",
"AES-CBCA2620",
"AES-CCMA2620"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A2619",
"#A2620"
]
},
"policy_metadata": {
"/CreationDate": "D:20240728214943Z00\u002700\u0027",
"/ModDate": "D:20240728214943Z00\u002700\u0027",
"/Producer": "macOS Version 13.6.7 (Build 22G720) Quartz PDFContext",
"pdf_file_size_bytes": 1006808,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
"https://www.ietf.org/rfc/rfc3447.txt",
"https://csrc.nist.gov/publications/nistpubs/800-108/sp800-108.pdf",
"https://www.ietf.org/rfc/rfc3394.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15088",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
"https://doi.org/10.6028/NIST.FIPS.140-3",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-standards",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35231",
"https://www.ietf.org/rfc/rfc5649.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 47
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "00a770b3ee0761345c766082282b29062870a03749175fda895c138dba7bdc2b",
"source_hash": "8893c3b41a204c49d8b672b0d9251b01a15eefe97955eefa41e36e7cecf3d71e",
"txt_hash": "fa88c205543e2cf8678f3299d0f9e77f51cfb8fe791dff38bd6c050159785aef"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in sections 11.1 and 11.2 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
"date_sunset": null,
"description": "The IBM Crypto for C version 8.8.1.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": "Replaced by certificate #5486",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "IBM\u00ae Crypto for C",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "historical",
"sw_versions": "8.8.1.0",
"tested_conf": [
"IBM AIX 7.2 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA",
"IBM AIX 7.2 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA",
"IBM z/OS 2.3 on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 with PAI",
"IBM z/OS 2.3 on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 without PAI",
"Microsoft Windows Server 2019 64-bit on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 with PAA",
"Microsoft Windows Server 2019 64-bit on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 without PAA",
"Red Hat Linux Enterprise Server 7.9 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA",
"Red Hat Linux Enterprise Server 7.9 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA",
"Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA",
"Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA",
"Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 with PAA",
"Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 without PAA",
"zLinux Red Hat Linux Enterprise Server 8.6 64-bit (Big Endian) on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 with PAI",
"zLinux Red Hat Linux Enterprise Server 8.6 64-bit (Big Endian) on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 without PAI"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-08-09",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "IBM Corporation",
"vendor_url": "http://www.ibm.com"
}
}