IBM® Crypto for C

Certificate #4755

Webpage information

Status active
Validation dates 09.08.2024
Sunset date 08-08-2026
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in sections 11.1 and 11.2 of the Security Policy
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The IBM Crypto for C version 8.8.1.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group.
Tested configurations
  • IBM AIX 7.2 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA
  • IBM AIX 7.2 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA
  • IBM z/OS 2.3 on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 with PAI
  • IBM z/OS 2.3 on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 without PAI
  • Microsoft Windows Server 2019 64-bit on Lenovo ThinkSystem SR630 with Intel Xeon® Gold 5217 with PAA
  • Microsoft Windows Server 2019 64-bit on Lenovo ThinkSystem SR630 with Intel Xeon® Gold 5217 without PAA
  • Red Hat Linux Enterprise Server 7.9 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA
  • Red Hat Linux Enterprise Server 7.9 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA
  • Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA
  • Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA
  • Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on Lenovo ThinkSystem SR630 with Intel Xeon® Gold 5217 with PAA
  • Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on Lenovo ThinkSystem SR630 with Intel Xeon® Gold 5217 without PAA
  • zLinux Red Hat Linux Enterprise Server 8.6 64-bit (Big Endian) on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 with PAI
  • zLinux Red Hat Linux Enterprise Server 8.6 64-bit (Big Endian) on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 without PAI
Vendor IBM Corporation
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, RC2, RC4, DES, Triple-DES, TDES, ChaCha20, Blowfish, Camellia, HMAC, CMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD4, MD5, RIPEMD, PBKDF
Schemes
MAC, Key Agreement
Protocols
SSH, SSL, TLS 1.3, TLSv1.3, TLS
Randomness
DRBG, RNG
Libraries
OpenSSL
Elliptic Curves
P-224, P-256, P-384, P-521, P-192, K-233, K-283, K-409, K-571, B-233, B-283, B-409, B-571, K-163, B-163
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Trusted Execution Environments
SSC
Vendor
Microsoft

Security level
level 1, Level 1

Standards
FIPS 140-3, FIPS PUB 140-3, FIPS197, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 202, FIPS180-4, FIPS140-3, FIPS198-1, FIPS202, NIST SP 800-140F, SP 800-90A, NIST SP 800-90B, SP 800-140x, PKCS#1, RFC 5869, RFC 5288, RFC3394, RFC5649, ISO/IEC 24759

File metadata

Creation date D:20240728214943Z00'00'
Modification date D:20240728214943Z00'00'
Pages 47
Producer macOS Version 13.6.7 (Build 22G720) Quartz PDFContext

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4755,
  "dgst": "0f6004b615adbb8a",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "KAS-FFC-SSC Sp800-56Ar3A2620",
        "HMAC-SHA2-512A2620",
        "AES-CTRA2620",
        "AES-CFB128A2620",
        "RSA SigGen (FIPS186-4)A2620",
        "Safe Primes Key GenerationA2620",
        "SHA2-224A2620",
        "SHA2-512A2620",
        "ECDSA SigGen (FIPS186-4)A2620",
        "SHA3-384A2620",
        "KAS-ECC-SSC Sp800-56Ar3A2620",
        "ECDSA SigVer (FIPS186-4)A2620",
        "AES-KWPA2620",
        "HMAC-SHA2-256A2620",
        "ECDSA KeyVer (FIPS186-4)A2620",
        "SHA3-224A2620",
        "ECDSA KeyGen (FIPS186-4)A2620",
        "HMAC-SHA3-384A2620",
        "DSA SigVer (FIPS186-4)A2620",
        "AES-OFBA2620",
        "SHA3-256A2620",
        "SHA2-384A2620",
        "AES-KWA2620",
        "HMAC-SHA3-224A2620",
        "AES-XTS Testing Revision 2.0A2620",
        "AES-CCMA2620",
        "HMAC-SHA2-224A2620",
        "RSA KeyGen (FIPS186-4)A2620",
        "KDA HKDF Sp800-56Cr1A2620",
        "AES-CMACA2620",
        "HMAC-SHA3-512A2620",
        "HMAC DRBGA2620",
        "HMAC-SHA2-384A2620",
        "SHA2-256A2620",
        "HMAC-SHA3-256A2620",
        "RSA SigVer (FIPS186-4)A2620",
        "SHA3-512A2620",
        "AES-CFB8A2620",
        "AES-CBCA2620",
        "Counter DRBGA2620",
        "Hash DRBGA2620",
        "PBKDFA2620",
        "AES-ECBA2620",
        "AES-GCMA2620",
        "AES-CFB1A2620"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 3
          },
          "ECDSA": {
            "ECDSA": 61
          }
        },
        "FF": {
          "DH": {
            "DH": 2,
            "Diffie-Hellman": 44
          },
          "DSA": {
            "DSA": 27
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 3
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 3
        },
        "GCM": {
          "GCM": 5
        },
        "OFB": {
          "OFB": 2
        },
        "XTS": {
          "XTS": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 5
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 1
        },
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 3,
            "TLS 1.3": 4,
            "TLSv1.3": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 11
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 7,
          "B-233": 9,
          "B-283": 8,
          "B-409": 8,
          "B-571": 8,
          "K-163": 7,
          "K-233": 8,
          "K-283": 8,
          "K-409": 8,
          "K-571": 8,
          "P-192": 14,
          "P-224": 22,
          "P-256": 22,
          "P-384": 24,
          "P-521": 22
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 49
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES key 128, 192": 1,
          "AES-128": 3,
          "AES-192": 3,
          "AES-256": 3,
          "AES-CBC 128, 192 and 256": 2,
          "AES-CMAC 128": 2,
          "AES-CTR 128": 2,
          "AES-GCM 128": 2,
          "HMAC-SHA-1": 4,
          "HMAC-SHA1": 2,
          "PKCS#1": 2,
          "SHA-1": 5,
          "SHA-224": 2,
          "SHA-256": 2,
          "SHA-3": 11,
          "SHA-384": 2,
          "SHA-512": 2,
          "SHA2-224": 26,
          "SHA2-256": 42,
          "SHA2-384": 28,
          "SHA2-512": 25,
          "SHA2-512 2048": 4,
          "SHA3-224": 10,
          "SHA3-256": 10,
          "SHA3-384": 10,
          "SHA3-512": 11
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 2
          }
        },
        "PBKDF": {
          "PBKDF": 28
        },
        "RIPEMD": {
          "RIPEMD": 2
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-224": 2,
            "SHA-256": 2,
            "SHA-384": 2,
            "SHA-512": 2
          },
          "SHA3": {
            "SHA-3": 11,
            "SHA3-224": 10,
            "SHA3-256": 10,
            "SHA3-384": 10,
            "SHA3-512": 11
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 36
        },
        "RNG": {
          "RNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 59,
          "FIPS 186-4": 11,
          "FIPS 198-1": 16,
          "FIPS 202": 8,
          "FIPS PUB 140-3": 2,
          "FIPS140-3": 1,
          "FIPS180-4": 9,
          "FIPS186-4": 10,
          "FIPS197": 23,
          "FIPS198-1": 1,
          "FIPS202": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-140F": 1,
          "NIST SP 800-90B": 1,
          "SP 800-140x": 1,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC 5288": 1,
          "RFC 5869": 2,
          "RFC3394": 1,
          "RFC5649": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 52,
            "AES-": 13,
            "AES-128": 3,
            "AES-192": 3,
            "AES-256": 3
          },
          "CAST": {
            "CAST": 4
          },
          "RC": {
            "RC2": 3,
            "RC4": 3
          }
        },
        "DES": {
          "3DES": {
            "TDES": 1,
            "Triple-DES": 3
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 7,
            "HMAC": 32
          }
        },
        "djb": {
          "ChaCha": {
            "ChaCha20": 3
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 3
          },
          "Camellia": {
            "Camellia": 3
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SSC": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 1
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20240728214943Z00\u002700\u0027",
      "/ModDate": "D:20240728214943Z00\u002700\u0027",
      "/Producer": "macOS Version 13.6.7 (Build 22G720) Quartz PDFContext",
      "pdf_file_size_bytes": 1006808,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.ietf.org/rfc/rfc5649.txt",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-standards",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=15088",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-108/sp800-108.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35231",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
          "https://www.ietf.org/rfc/rfc3394.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 47
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "8893c3b41a204c49d8b672b0d9251b01a15eefe97955eefa41e36e7cecf3d71e",
    "policy_txt_hash": "400ccaac77db7e3e7dd479e001c69314a1e94dbdcad2543fc9297d308928c4d4"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in sections 11.1 and 11.2 of the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
    "date_sunset": "2026-08-08",
    "description": "The IBM Crypto for C version 8.8.1.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "IBM\u00ae Crypto for C",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "8.8.1.0",
    "tested_conf": [
      "IBM AIX 7.2 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA",
      "IBM AIX 7.2 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA",
      "IBM z/OS 2.3 on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 with PAI",
      "IBM z/OS 2.3 on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 without PAI",
      "Microsoft Windows Server 2019 64-bit on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 with PAA",
      "Microsoft Windows Server 2019 64-bit on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 without PAA",
      "Red Hat Linux Enterprise Server 7.9 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA",
      "Red Hat Linux Enterprise Server 7.9 64-bit (Big Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA",
      "Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 with PAA",
      "Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on IBM PowerVM 3.1 running on IBM Power System S914 (9009-41A) with IBM POWER9 without PAA",
      "Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 with PAA",
      "Red Hat Linux Enterprise Server 8.4 64-bit (Little Endian) on Lenovo ThinkSystem SR630 with Intel Xeon\u00ae Gold 5217 without PAA",
      "zLinux Red Hat Linux Enterprise Server 8.6 64-bit (Big Endian) on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 with PAI",
      "zLinux Red Hat Linux Enterprise Server 8.6 64-bit (Big Endian) on IBM z/VM 7.2 running on IBM z15 (8561 T01) with IBM z15 without PAI"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-08-09",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "IBM Corporation",
    "vendor_url": "http://www.ibm.com"
  }
}