This page was not yet optimized for use on mobile devices.
Chainguard FIPS Provider for OpenSSL
Certificate details
| Certificate ID | #5523 |
|---|---|
| Status | active |
| Validation dates | 15.09.2026 |
| Sunset date | 14-09-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Chainguard FIPS Provider for OpenSSL is defined as a software module in a multi-chip standalone embodiment. It provides a C language application program interface (API) for use by other applications that require cryptographic functionality. The module consists of one software component, the "FIPS provider", which implements FIPS requirements, and the cryptographic functionality provided to the operator. |
| Vendor | Chainguard, Inc. http://www.chainguard.dev |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES256, CAST, TDES, HMAC, HMAC-SHA-256, KMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, EdDSA, ECC, DHE, DH, Diffie-Hellman, DSAPost-quantum Algorithms
ML-DSA, ML-KEM, SLH-DSAHash functions
SHA-256, SHA2, SHA-3, SHA3-256, SHA3-384, SHA3-512, SHAKE256, PBKDF2, PBKDFSchemes
MAC, KEM, Key Exchange, Key AgreementProtocols
SSH, TLS v1.2, TLS v1.3, TLS 1.2, TLS 1.3, TLS, IKERandomness
DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, P-192, curve P-192, K-283, K-571, B-283, B-571, K-163, B-233, B-409, Ed25519, Ed448Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSJavaCard API constants
X25519Trusted Execution Environments
PSP, SSCVendor
BroadcomSecurity level
Level 1Standards
FIPS 140-3, FIPS 203, FIPS 204, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 205, FIPS 140, FIPS 197, SP 800-132, SP 800-227, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-135, SP 800-108, SP 800-185, SP 800-56B, SP 800-90B, PKCS 1, PKCS#1, RFC7627, RFC 8446, RFC 5288, RFC8446, RFC 4253, RFC 6668, RFC 3526, RFC 7919Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5523,
"dgst": "13b1475cbe243903",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"RSA SigVer (FIPS186-4)A7614",
"#A7597",
"#A7593",
"#A7587",
"KTS-IFCA7614",
"AES-KWPA7613",
"#A7600",
"KDF SP800-108A7614",
"TLS v1.2 KDF RFC7627A7614",
"#A7610",
"#A7613",
"KDA HKDF SP800-56Cr2A7614",
"ML-KEM KeyGenA7612",
"Safe Primes Key GenerationA7586",
"HMAC-SHA2-384A7614",
"Safe Primes Key VerificationA7586",
"HMAC-SHA2-256A7614",
"#A7596",
"#A7586",
"AES-CBCA7613",
"KDA TwoStep SP800-56Cr2A7614",
"HMAC DRBGA7614",
"HMAC-SHA3-512A7612",
"#A7579",
"AES-XTS Testing Revision 2.0A7613",
"#A7591",
"AES-CFB1A7613",
"#A7588",
"#A7595",
"KAS-FFC-SSC Sp800-56Ar3A7586",
"HMAC-SHA2-512/256A7614",
"AES-CFB128A8282",
"#A7594",
"ML-DSA SigVerA7612",
"#A7585",
"SLH-DSA SigGenA7614",
"SHA3-512A7612",
"#A7608",
"ML-DSA KeyGenA7612",
"ML-DSA SigGenA7612",
"AES-KWA7613",
"#A7603",
"EDDSA KeyGenA7614",
"#A7601",
"KDF ANS 9.42A7614",
"#A8282",
"ECDSA KeyGen (FIPS186-5)A7614",
"KAS-ECC-SSC Sp800-56Ar3A7614",
"SHAKE-256A7612",
"#A7612",
"EDDSA SigGenA7614",
"RSA KeyGen (FIPS186-5)A7614",
"#A7611",
"AES-CMACA7613",
"SHAKE-128A7612",
"TLS v1.3 KDFA7614",
"AES-OFBA7613",
"#A7607",
"ECDSA KeyVer (FIPS186-5)A7614",
"SHA2-512A7614",
"PBKDFA7614",
"Counter DRBGA7613",
"Hash DRBGA7614",
"SHA2-512/256A7614",
"AES-CBC-CS3A7613",
"SHA3-384A7612",
"AES-CBC-CS2A7613",
"#A7604",
"AES-GCMA7603",
"Deterministic ECDSA SigGen (FIPS186-5)A7614",
"#A8281",
"KDF KMAC Sp800-108r1A7612",
"#A7605",
"#A7609",
"HMAC-SHA3-384A7612",
"AES-CTRA7613",
"#A7598",
"#A7599",
"ECDSA KeyVer (FIPS186-4)A7614",
"KDA OneStep SP800-56Cr2A7614",
"KMAC-128A7612",
"AES-CFB8A7613",
"AES-CBC-CS1A7613",
"#A7606",
"#A7614",
"AES-GMACA7603",
"#A7592",
"#A7590",
"#A7580",
"SHA2-256A7614",
"ECDSA SigVer (FIPS186-4)A7614",
"KDF SSHA7615",
"#A7584",
"KMAC-256A7612",
"ECDSA SigGen (FIPS186-5)A7614",
"SHA3-256A7612",
"#A7583",
"HMAC-SHA3-256A7612",
"RSA SigGen (FIPS186-5)A7614",
"KAS-IFC-SSCA8281",
"SLH-DSA KeyGenA7614",
"#A7582",
"SLH-DSA SigVerA7614",
"AES-ECBA7613",
"HMAC-SHA2-512A7614",
"AES-CCMA7613",
"SHA2-384A7614",
"#A7581",
"ECDSA SigVer (FIPS186-5)A7614",
"#A7602",
"EDDSA KeyVerA7614",
"#A7615",
"RSA SigVer (FIPS186-5)A7614",
"EDDSA SigVerA7614",
"KDF ANS 9.63A7614",
"ML-KEM EncapDecapA7612",
"#A7589"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 1,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-524288 Increment 8",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613, A8282",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Generation Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A7580, A7581, A7582, A7589, A7590, A7596,",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "A7597, A7598, A7599, A7600, A7601, A7602, A7603",
"properties": "Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128-65536 Increment 128 AAD Length - AAD Length: 0-65536 Increment 8",
"reference": ""
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A7580, A7581, A7582, A7589, A7590, A7596, A7597, A7598, A7599, A7600, A7601, A7602, A7603",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 0-65536 Increment 8",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher, Inverse Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher, Inverse Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7596, A7613",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes Additional Input - Additional Input: 0-512 Increment 128, Additional Input: 256, Additional Input: 320, Additional Input: 384 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256, Entropy Input: 320, Entropy Input: 384 Nonce - Nonce: 0, Nonce: 128, Nonce: 64, Nonce: 96 Personalization String Length - Personalization String Length: 0-512 Increment 128, Personalization String Length: 256, Personalization String Length: 320, Personalization String Length: 384 Returned Bits - 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7584",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - P-192",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Component - No, Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7584",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 Component - No, Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 Component - No, Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Component - No Curve - P-192 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A7584",
"properties": "Component - No Curve - P-192 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Component - No Curve - P-192 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A7584",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyGen",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - ED-25519",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyGen",
"cavpCertName": "A7584",
"properties": "Curve - ED-25519, ED-448",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyGen",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Curve - ED-448",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyVer",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - ED-25519",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyVer",
"cavpCertName": "A7584",
"properties": "Curve - ED-25519, ED-448",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyVer",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Curve - ED-448",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - ED-25519 Context Length - Context Length: 0-255 Increment 1 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A7584",
"properties": "Curve - ED-25519, ED-448 Context Length - Context Length: 0-255 Increment 1 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Curve - ED-448 Context Length - Context Length: 0-255 Increment 1 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Curve - ED-25519 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A7584",
"properties": "Curve - ED-25519, ED-448 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Curve - ED-448 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Prediction Resistance - No, Yes Mode - SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A7584",
"properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0-512 Increment 128 Additional Input - Additional Input: 0-512 Increment 128 Returned Bits - 256, 384, 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Prediction Resistance - No, Yes Mode - SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A7584",
"properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0-512 Increment 128 Additional Input - Additional Input: 0-512 Increment 128 Returned Bits - 256, 384, 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A7583, A7584, A7591, A7604,",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "",
"cavpCertName": "A7606, A7608, A7614",
"properties": "",
"reference": ""
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P- 384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A7586",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-IFC-SSC",
"cavpCertName": "A8281",
"properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2- prime-factor Scheme - KAS1 - KAS Role - initiator, responder KAS2 - KAS Role - initiator, responder Fixed Public Exponent - 010001",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF SP800-56Cr2",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA HKDF SP800-56Cr2",
"cavpCertName": "A7584",
"properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": ""
},
{
"algorithm": "KDA HKDF SP800-56Cr2",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA3-256, SHA3-384, SHA3-512 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA2-256 Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A7584",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - HMAC-SHA2-256 MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA3-256 Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA TwoStep SP800-56Cr2",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256 Fixed Data Order - after fixed data Counter Lengths - 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": ""
},
{
"algorithm": "KDA TwoStep SP800-56Cr2",
"cavpCertName": "A7584",
"properties": "MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256, HMAC-SHA3- 256, HMAC-SHA3-384, HMAC-SHA3-512 Fixed Data Order - after fixed data Counter Lengths - 8 The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA TwoStep SP800-56Cr2",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512 Fixed Data Order - after fixed data Counter Lengths - 8 The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "KDF Type - DER Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256 zz Length - zz Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW",
"reference": ""
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A7584",
"properties": "KDF Type - DER Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 zz Length - zz Length: 112-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "KDF Type - DER Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 zz Length - zz Length: 112-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A7584",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF KMAC Sp800-108r1",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Key Derivation Key Length - Key Derivation Key Length: 128 Context Length - Context Length: 128 Label Length - Label Length: 128 Derived Key Length - Derived Key Length: 256 MAC Modes - KMAC-128, KMAC-256",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613",
"properties": "KDF Mode - Counter, Feedback MAC Mode - CMAC-AES128, CMAC-AES192, CMAC- AES256 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A7584",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256, HMAC-SHA3- 256, HMAC-SHA3-384, HMAC-SHA3-512 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A7583, A7584, A7591, A7592, A7604, A7605, A7606, A7607,",
"properties": "Custom Key In Length - 0 Cipher - AES-128, AES-192, AES-256, TDES Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "A7608, A7609, A7614, A7615",
"properties": "",
"reference": ""
},
{
"algorithm": "KMAC-128",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - Yes Supports eXtendable-Output Functions - No, Yes",
"reference": "SP 800-185"
},
{
"algorithm": "KMAC-256",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - Yes Supports eXtendable-Output Functions - No, Yes",
"reference": "SP 800-185"
},
{
"algorithm": "KTS-IFC",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Function - keyPairGen, partialVal IUT ID - 0123456789abcdef Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2- prime-factor Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Hash Algorithms - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Supports Null Associated Data - Yes Associated Data Pattern - uPartyInfo||vPartyInfo Associated Data Encoding - concatenation Key Length - 768",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "KTS-IFC",
"cavpCertName": "A7584",
"properties": "Function - keyPairGen, partialVal IUT ID - 0123456789abcdef Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2- prime-factor Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Hash Algorithms - SHA2-256 Supports Null Associated Data - Yes Associated Data Pattern - uPartyInfo||vPartyInfo Associated Data Encoding - concatenation Key Length - 768",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "ML-DSA KeyGen",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87",
"reference": "FIPS 204"
},
{
"algorithm": "ML-DSA SigGen",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Signature Interfaces - external, internal Pre Hash - pure Deterministic - No, Yes External Mu - No, Yes Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87 Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8",
"reference": "FIPS 204"
},
{
"algorithm": "ML-DSA SigVer",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Signature Interfaces - external, internal Pre Hash - pure External Mu - No, Yes Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87 Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8",
"reference": "FIPS 204"
},
{
"algorithm": "ML-KEM EncapDecap",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Parameter Sets - ML-KEM-1024, ML-KEM-512, ML-KEM- 768 Functions - Decapsulation, Decapsulation Key Check, Encapsulation, Encapsulation Key Check",
"reference": "FIPS 203"
},
{
"algorithm": "ML-KEM KeyGen",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Parameter Sets - ML-KEM-1024, ML-KEM-512, ML-KEM- 768",
"reference": "FIPS 203"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A7584",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Key Generation Mode - probableWithProbableAux Modulo - 2048, 3072, 4096, 6144, 8192 p mod 8 - 0 Primality Tests - 2powSecStr",
"reference": "FIPS 186-5"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "q mod 8 - 0 Info Generated By Server - Yes Private Key Format - standard Public Exponent Mode - random",
"reference": ""
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Hash Pair - Hash Algorithm - SHA3-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-256 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Public Exponent Mode - random",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A7585, A7593, A7610, A7611, A7612",
"properties": "Hash Pair - Hash Algorithm - SHA3-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Public Exponent Mode - random",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A7586",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A7586",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A7583, A7584, A7591, A7604,",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "",
"cavpCertName": "A7606, A7608, A7614",
"properties": "",
"reference": ""
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SLH-DSA KeyGen",
"cavpCertName": "A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614",
"properties": "Parameter Sets - SLH-DSA-SHA2-128f, SLH-DSA-SHA2- 128s, SLH-DSA-SHA2-192f, SLH-DSA-SHA2-192s, SLH- DSA-SHA2-256f, SLH-DSA-SHA2-256s, SLH-DSA-SHAKE- 128f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-256f, SLH-DSA- SHAKE-256s",
"reference": "FIPS 205"
},
{
"algorithm": "SLH-DSA SigGen",
"cavpCertName": "A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614",
"properties": "Deterministic - No, Yes Signature Interfaces - external, internal Pre Hash - pure Parameter Sets - SLH-DSA-SHA2-128f, SLH-DSA-SHA2- 128s, SLH-DSA-SHA2-192f, SLH-DSA-SHA2-192s, SLH- DSA-SHA2-256f, SLH-DSA-SHA2-256s, SLH-DSA-SHAKE- 128f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-256f, SLH-DSA- SHAKE-256s",
"reference": "FIPS 205"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8",
"reference": ""
},
{
"algorithm": "SLH-DSA SigVer",
"cavpCertName": "A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614",
"properties": "Signature Interfaces - external, internal Pre Hash - pure Parameter Sets - SLH-DSA-SHA2-128f, SLH-DSA-SHA2- 128s, SLH-DSA-SHA2-192f, SLH-DSA-SHA2-192s, SLH- DSA-SHA2-256f, SLH-DSA-SHA2-256s, SLH-DSA-SHAKE- 128f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-256f, SLH-DSA- SHAKE-256s Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8",
"reference": "FIPS 205"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Comput e a message digest",
"indicator": "EVP_DigestFinal returns 1",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest with SHA Message Digest with SHAKE"
},
{
"description": "Encrypt a plaintext",
"indicator": "EVP_EncryptFinal_ex returns 1",
"inputs": "AES Key, plaintext, IV",
"name": "Symmetri c Encryptio n",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryptio n with AES"
},
{
"description": "Decrypt a cipherte xt",
"indicator": "EVP_DecryptFinal_ex returns 1",
"inputs": "AES Key, ciphertext, IV",
"name": "Symmetri c Decrypti on",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Decrypti on with AES"
},
{
"description": "Encrypt and authenti cate a plaintext",
"indicator": "GCM: OSSL_CIPHER_PARAM_AEAD_IV_GE NERATED is 1; CCM: EVP_EncryptFinal_ex returns 1",
"inputs": "AES Key, plaintext/key to be wrapped, IV",
"name": "Authenti cated Symmetri c",
"outputs": "Ciphertext/ wrapped key, MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenti cated Encryptio n with AES"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "Encryptio n",
"outputs": "",
"rolesSspAccess": "- GCM IV: G,R,E",
"secFunImpl": ""
},
{
"description": "Decrypt and authenti cate a cipherte xt",
"indicator": "EVP_DecryptFinal_ex returns non- negative value",
"inputs": "AES Key, ciphertext/wr apped key, MAC tag, IV",
"name": "Authenti cated Symmetri c Decrypti on",
"outputs": "Plaintext or Failure",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - GCM IV: W,E",
"secFunImpl": "Authenti cated Decrypti on with AES"
},
{
"description": "Comput e a MAC tag using AES",
"indicator": "EVP_MAC_final returns 1",
"inputs": "AES Key, message",
"name": "AES Message Authenti cation Generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Message Authenti cation Generatio n with AES"
},
{
"description": "Comput e a MAC tag using HMAC",
"indicator": "OSSL_MAC_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "HMAC Key, message",
"name": "HMAC Message Authenti cation Generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC Key: W,E",
"secFunImpl": "Message Authenti cation Generatio n with HMAC"
},
{
"description": "Comput e a MAC tag using KMAC",
"indicator": "OSSL_MAC_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "KMAC Key, message",
"name": "KMAC Message Authenti cation Generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - KMAC Key: W,E",
"secFunImpl": "Message Authenti cation Generatio n with KMAC"
},
{
"description": "TLS key derivatio n",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Pre-master secret",
"name": "TLS KDF Key Derivatio n",
"outputs": "TLS Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - TLS Derived Key: G,R - TLS Master Secret: G,E,Z",
"secFunImpl": "Key Derivatio n with TLS 1.2 KDF Key Derivatio n with TLS 1.3 KDF"
},
{
"description": "Derive a key from a key- derivatio n key",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Key- Derivation Key",
"name": "KBKDF Key Derivatio n",
"outputs": "KBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - Key- Derivati on Key: W,E - KBKDF Derived Key: G,R",
"secFunImpl": "Key Derivatio n with KBKDF"
},
{
"description": "Derive a key from a shared secret",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Shared Secret",
"name": "ANS X9.42 Key Derivatio n",
"outputs": "ANS X9.42 Derived Key",
"rolesSspAccess": "Crypto Officer - ANS X9.42 Derived Key: G,R - Shared Secret: W,E",
"secFunImpl": "Key Derivatio n with ANS X9.42 KDF"
},
{
"description": "Derive a key from a shared secret",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Shared Secret",
"name": "ANS X9.63 Key Derivatio n",
"outputs": "ANS X9.63 Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - ANS X9.63 Derived Key: G,R",
"secFunImpl": "Key Derivatio n with X9.63 KDF"
},
{
"description": "Derive a key from a shared secret",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Shared Secret/Concat enated hybrid shared secret (ML-KEM and ECDH)/Conc atenated hybrid shared secret (ML-",
"name": "HKDF Key Derivatio n",
"outputs": "HKDF Derived key/Hybrid ML-KEM Shared Secret Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - HKDF Derived Key: G,R - Concate",
"secFunImpl": "Key Derivatio n with KDA HKDF"
},
{
"description": "",
"indicator": "",
"inputs": "KEM and X25519)",
"name": "",
"outputs": "",
"rolesSspAccess": "nated hybrid shared secret (ML- KEM and ECDH): W,E - Concate nated hybrid shared secret (ML- KEM and X25519): W,E - Hybrid ML- KEM Shared Secret Key:",
"secFunImpl": ""
},
{
"description": "Derive a key from a shared secret",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Shared Secret",
"name": "OneStep KDA Key Derivatio n",
"outputs": "KDA OneStep Derived Key",
"rolesSspAccess": "G,R Crypto Officer - Shared Secret: W,E - KDA OneStep Derived Key: G,R",
"secFunImpl": "Key Derivatio n with KDA OneStep"
},
{
"description": "Derive a key from a shared secret",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Shared Secret",
"name": "TwoStep KDA Key Derivatio n",
"outputs": "KDA TwoStep Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KDA",
"secFunImpl": "Key Derivatio n with KDA TwoStep"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "TwoStep Derived Key: G,R",
"secFunImpl": ""
},
{
"description": "Derive a key from a shared secret",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Shared Secret",
"name": "SSH KDF key derivatio n",
"outputs": "SSH KDF Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - SSH KDF Derived Key: G,R",
"secFunImpl": "Key Derivatio n with SSH KDF"
},
{
"description": "Derive a key from a passwor d",
"indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Password",
"name": "PBKDF Key Derivatio n",
"outputs": "PBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - Passwor d: W,E - PBKDF Derived Key:",
"secFunImpl": "Key Derivatio n with PBKDF2"
},
{
"description": "Generate random number",
"indicator": "OSSL_RAND_PARAM_FIPS_APPROVE D_INDICATOR is 1",
"inputs": "Number of bits",
"name": "Random Number Generatio n",
"outputs": "Random number",
"rolesSspAccess": "G,R Crypto Officer - Entropy Input: W,E,Z - DRBG Seed: G,E,Z - DRBG Internal State (V, Key): G,W,E - DRBG Internal State (V,",
"secFunImpl": "Random Number Generatio n with DRBG"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "C): G,W,E",
"secFunImpl": ""
},
{
"description": "Comput e a shared secret",
"indicator": "EVP_PKEY_derive returns 1",
"inputs": "DH Private Key (owner), DH Public Key (peer)",
"name": "KAS- FFC-SSC Shared Secret Computat ion",
"outputs": "Shared Secret",
"rolesSspAccess": "Crypto Officer - Shared Secret: G,R - DH Private Key: W,E - DH Public Key: W,E",
"secFunImpl": "Shared Secret Computat ion"
},
{
"description": "Comput e a shared secret",
"indicator": "OSSL_EXCHANGE_PARAM_FIPS_APP ROVED_INDICATOR is 1",
"inputs": "EC Private Key (owner), EC Public Key (peer)",
"name": "KAS- ECC-SSC Shared Secret Computat ion",
"outputs": "Shared Secret",
"rolesSspAccess": "Crypto Officer - Shared Secret: G,R - EC Private Key: W,E - EC Public Key: W,E",
"secFunImpl": "Shared Secret Computat ion"
},
{
"description": "Generate a digital signatur e with RSA",
"indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1",
"inputs": "RSA Private Key, message, hash algorithm",
"name": "RSA Digital Signature Generatio n",
"outputs": "Signature",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E",
"secFunImpl": "Signature Generatio n with RSA"
},
{
"description": "Generate a digital signatur e with ECDSA",
"indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1",
"inputs": "EC Private Key, message, hash algorithm",
"name": "ECDSA Digital Signature Generatio n",
"outputs": "Signature",
"rolesSspAccess": "Crypto Officer - EC Private Key: W,E",
"secFunImpl": "Signature Generatio n with ECDSA"
},
{
"description": "Verify a digital",
"indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and",
"inputs": "RSA Public Key, message,",
"name": "RSA Digital",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Signature Verificati"
},
{
"description": "signatur e using RSA",
"indicator": "OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1",
"inputs": "signature, hash algorithm",
"name": "Signature Verificati on",
"outputs": "",
"rolesSspAccess": "- RSA Public Key: W,E",
"secFunImpl": "on with RSA Signature Verificati on with RSA (Legacy)"
},
{
"description": "Verify a digital signatur e using ECDSA",
"indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1",
"inputs": "EC Public Key, message, signature, hash algorithm",
"name": "ECDSA Digital Signature Verificati on",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E",
"secFunImpl": "Signature Verificati on with ECDSA Signature Verificati on with ECDSA (Legacy)"
},
{
"description": "Generate an RSA key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "Modulus bits",
"name": "RSA Key Pair Generatio n",
"outputs": "Module Generated RSA Private Key, Module Generated RSA Public Key",
"rolesSspAccess": "Crypto Officer - Module Generat ed RSA Private Key: G,R - Module Generat ed RSA Public Key: G,R - Interme diate Key Generati on Value: G,E,Z",
"secFunImpl": "Key Pair Generatio n with RSA"
},
{
"description": "Generate an EC key pair",
"indicator": "OSSL_PKEY_PARAM_FIPS_APPROVE D_INDICATOR is 1",
"inputs": "Curve",
"name": "ECDSA Key Pair Generatio n",
"outputs": "Module Generated EC Private Key, Module Generated EC Public Key",
"rolesSspAccess": "Crypto Officer - Module Generat ed EC Private Key: G,R - Module Generat ed EC Public Key: G,R - Interme diate Key Generati on",
"secFunImpl": "Key Pair Generatio n with ECDSA"
},
{
"description": "Generate a DH key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "Group",
"name": "Safe Primes Key Pair Generatio n",
"outputs": "Module Generated DH Private Key, Module Generated DH Public Key",
"rolesSspAccess": "Value: G,E,Z Crypto Officer - Module Generat ed DH Private Key: G,R - Module Generat ed DH Public Key: G,R - Interme diate",
"secFunImpl": "Key Pair Generatio n with Safe Primes"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Key Generati on Value: G,E,Z",
"secFunImpl": ""
},
{
"description": "Verify an EC public key",
"indicator": "EVP_PKEY_check or EVP_PKEY_public_check returns 1",
"inputs": "EC Public Key",
"name": "ECDSA Public Key Verificati on",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E",
"secFunImpl": "Public Key Verificati on with ECDSA"
},
{
"description": "Verify a DH key pair",
"indicator": "EVP_PKEY_check or EVP_PKEY_public_check or EVP_PKEY_private_check returns 1",
"inputs": "DH Private Key, DH Public Key",
"name": "Safe Prime Key Pair Verificati on",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - DH Private Key: W,E - DH Public Key:",
"secFunImpl": "Key Pair Verificati on with Safe Primes"
},
{
"description": "Return the name and version informat ion",
"indicator": "None",
"inputs": "None",
"name": "Show Version",
"outputs": "Module name and version",
"rolesSspAccess": "W,E Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module status",
"indicator": "None",
"inputs": "None",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and integrity test",
"indicator": "None",
"inputs": "None",
"name": "Self-Test",
"outputs": "Pass or Fail of self-tests",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize any SSP",
"indicator": "None",
"inputs": "An SSP",
"name": "Zeroizati on",
"outputs": "None",
"rolesSspAccess": "Crypto Officer - AES Key: Z",
"secFunImpl": "None"
},
{
"description": "Descrip tion",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "",
"secFunImpl": "Security Functio SSP Access"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "- HMAC Key: Z - KMAC Key: Z - Key- Derivati on Key: Z - Shared Secret: Z - Passwor d: Z - PBKDF Derived Key: Z - KBKDF Derived Key: Z - ANS X9.42 Derived Key: Z - ANS X9.63 Derived Key: Z - HKDF Derived Key: Z - KDA OneStep Derived Key: Z - KDA TwoStep Derived Key: Z - TLS Derived Key: Z"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- SSH KDF Derived Key: Z - Entropy Input: Z - DRBG Internal State (V, Key): Z - DRBG Seed: Z - DH Private Key: Z - DH Public Key: Z - EC Private Key: Z - EC Public Key: Z - RSA Private Key: Z - RSA Public Key: Z - Module Generat ed DH Private Key: Z - Module Generat ed DH Public Key: Z",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- Module Generat ed EC Private Key: Z - Module Generat ed EC Public Key: Z - Module Generat ed RSA Private Key: Z - Module Generat ed RSA Public Key: Z - ML- DSA Public Key: Z - ML- DSA Private Key: Z - ML- KEM Public Key: Z - ML- KEM Private Key: Z - SLH- DSA Public",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Key: Z - SLH- DSA Private Key: Z - Module Generat ed ML- DSA Public Key: Z - Module Generat ed ML- DSA Private Key: Z - Module Generat ed ML- KEM Public Key: Z - Module Generat ed ML- KEM Private Key: Z - Module Generat ed SLH- DSA Public Key: Z - Module Generat",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "ed SLH- DSA Private Key: Z - ML- KEM Seed: Z - ML- DSA Seed: Z - SLH- DSA Seed: Z - ML- KEM Shared Secret: Z - EdDSA public key: Z - EdDSA private key: Z - Concate nated hybrid shared secret (ML- KEM and X25519): Z - Concate nated hybrid shared secret (ML- KEM and",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "ECDH): Z",
"secFunImpl": ""
},
{
"description": "Generate a ML- KEM key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "None",
"name": "ML-KEM Key Generatio n",
"outputs": "Module Generated ML-KEM Private Key, Module Generated ML-KEM Public Key",
"rolesSspAccess": "Crypto Officer - Module Generat ed ML- KEM Public Key: G,R - Module Generat ed ML- KEM Private Key: G,R - ML- KEM Seed: G,E - Interme diate Key Generati on Value: G,E,Z",
"secFunImpl": "Key Generatio n with ML-KEM"
},
{
"description": "Perform encapsul ation to compute an ML- KEM shared secret and cipherte xt",
"indicator": "OSSL_KEM_PARAM_FIPS_APPROVED _INDICATOR is 1",
"inputs": "Encapsulation Key",
"name": "ML-KEM Key Encapsul ation",
"outputs": "Shared Secret, Ciphertext",
"rolesSspAccess": "Crypto Officer - ML- KEM Public Key: W,E - ML- KEM Shared",
"secFunImpl": "Key Encapsul ation with ML- KEM"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Secret: G,R",
"secFunImpl": ""
},
{
"description": "Perform decapsul ation to compute an ML- KEM shared secret",
"indicator": "EVP_PKEY_decapsulate returns 1",
"inputs": "Decapsulation Key, Ciphertext",
"name": "ML-KEM Key Decapsul ation",
"outputs": "Shared Secret",
"rolesSspAccess": "Crypto Officer - ML- KEM Private Key: W,E - ML- KEM Shared Secret: G,R",
"secFunImpl": "Key Decapsul ation with ML- KEM"
},
{
"description": "Generate a ML- DSA key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "None",
"name": "ML-DSA Key Generatio n",
"outputs": "Module Generated ML-DSA Private Key, Module Generated ML-DSA Public Key",
"rolesSspAccess": "Crypto Officer - Module Generat ed ML- DSA Public Key: G,R - Module Generat ed ML- DSA Private Key: G,R - ML- DSA Seed: G,E - Interme diate Key Generati on",
"secFunImpl": "Key Generatio n with ML-DSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Value: G,E,Z",
"secFunImpl": ""
},
{
"description": "Generate a digital signatur e with ML-DSA",
"indicator": "EVP_PKEY_sign returns 1",
"inputs": "ML-DSA private Key, message, context string",
"name": "ML-DSA Signature Generatio n (External Interface)",
"outputs": "Digital Signature",
"rolesSspAccess": "Crypto Officer - ML- DSA Private Key: W,E",
"secFunImpl": "Signature Generatio n with ML-DSA"
},
{
"description": "Generate a digital signatur e with ML-DSA",
"indicator": "EVP_PKEY_sign returns 1",
"inputs": "ML-DSA private Key, M\u0027, randomness rnd",
"name": "ML-DSA Signature Generatio n (Internal Interface)",
"outputs": "Digital Signature",
"rolesSspAccess": "Crypto Officer - ML- DSA Private Key: W,E",
"secFunImpl": "Signature Generatio n with ML-DSA"
},
{
"description": "Verify a digital signatur e with ML-DSA",
"indicator": "EVP_PKEY_verify returns 1",
"inputs": "ML-DSA public key, message, signature, context string",
"name": "ML-DSA Signature Verificati on (External Interface)",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - ML- DSA Public Key: W,E",
"secFunImpl": "Signature Verificati on with ML-DSA"
},
{
"description": "Verify a digital signatur e with ML-DSA",
"indicator": "EVP_PKEY_verify returns 1",
"inputs": "ML-DSA public key, M\u0027, signature",
"name": "ML-DSA Signature Verificati on (Internal Interface)",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - ML- DSA Public Key: W,E",
"secFunImpl": "Signature Verificati on with ML-DSA"
},
{
"description": "Generate a SLH- DSA key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "None",
"name": "SLH-DSA Key Generatio n",
"outputs": "Module Generated SLH-DSA Private Key, Module Generated SLH-DSA Public Key",
"rolesSspAccess": "Crypto Officer - Module Generat ed SLH- DSA Public Key: G,R - Module",
"secFunImpl": "Key Generatio n with SLH-DSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Generat ed SLH- DSA Private Key: G,R - SLH- DSA Seed: G,E - Interme diate Key Generati on Value:",
"secFunImpl": ""
},
{
"description": "Generate a digital signatur e with SLH- DSA",
"indicator": "EVP_PKEY_sign returns 1",
"inputs": "SLH-DSA private key, message, context string",
"name": "SLH-DSA Signature Generatio n (External Interface)",
"outputs": "Digital Signature",
"rolesSspAccess": "G,E,Z Crypto Officer - SLH- DSA Private Key: W,E",
"secFunImpl": "Signature Generatio n with SLH-DSA"
},
{
"description": "Generate a digital signatur e with SLH- DSA",
"indicator": "EVP_PKEY_sign returns 1",
"inputs": "SLH-DSA private key, M\u0027, randomness addrnd",
"name": "SLH-DSA Signature Generatio n (Internal Interface)",
"outputs": "Digital Signature",
"rolesSspAccess": "Crypto Officer - SLH- DSA Private Key: W,E",
"secFunImpl": "Signature Generatio n with SLH-DSA"
},
{
"description": "Verify a digital signatur e with SLH- DSA",
"indicator": "EVP_PKEY_verify returns 1",
"inputs": "SLH-DSA public key, message, signature, context string",
"name": "SLH-DSA Signature Verificati on (External Interface)",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - SLH- DSA Public Key: W,E",
"secFunImpl": "Signature Verificati on with SLH-DSA"
},
{
"description": "Verify a digital signatur",
"indicator": "EVP_PKEY_verify returns 1",
"inputs": "SLH-DSA public key, M\u0027, signature",
"name": "SLH-DSA Signature Verificati",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - SLH-",
"secFunImpl": "Signature Verificati"
},
{
"description": "e with SLH- DSA",
"indicator": "",
"inputs": "",
"name": "on (Internal Interface)",
"outputs": "",
"rolesSspAccess": "DSA Public Key: W,E",
"secFunImpl": "on with SLH-DSA"
},
{
"description": "Generate an ML- KEM key pair and X25519 key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "None",
"name": "MLX- KEM Hybrid Key Generatio n",
"outputs": "Module Generated ML-KEM Encapsulatio n Key, Module Generated ML-KEM Decapsulatio n Key, X25519 public key, X25519 private key",
"rolesSspAccess": "Crypto Officer - ML- KEM Seed: G,E,Z - Module Generat ed ML- KEM Public Key: G,R - Module Generat ed ML- KEM Private Key: G,R - Interme diate Key Generati on Value:",
"secFunImpl": "Key Generatio n with KEM- Hybrid- MLX- KEM"
},
{
"description": "Perform hybrid ML- KEM and X25519 encapsul ation to produce",
"indicator": "OSSL_KEM_PARAM_FIPS_APPROVED _INDICATOR parameter of ML-KEM EVP_PKEY_CTX is 1",
"inputs": "X public key, X private key, ML-KEM encapsulation key",
"name": "MLX- KEM Key Encapsul ation",
"outputs": "Concatenate d hybrid shared secret (ML-KEM and X25519), ciphertext",
"rolesSspAccess": "G,E,Z Crypto Officer - ML- KEM Public Key: W,E - Concate",
"secFunImpl": "Key Encapsul ation with KEM- Hybrid- MLX- KEM"
},
{
"description": "an ML- KEM cipherte xt and concaten ated hybrid shared secret.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "nated hybrid shared secret (ML- KEM and X25519): G,R",
"secFunImpl": ""
},
{
"description": "Perform hybrid ML- KEM and X25519 decapsul ation to produce a concaten ated hybrid shared secret.",
"indicator": "EVP_PKEY_decapsulate returns 1",
"inputs": "X private key, ML-KEM decapsulation key, ciphertext",
"name": "MLX- KEM Key Decapsul ation",
"outputs": "Concatenate d hybrid shared secret (ML-KEM and X25519)",
"rolesSspAccess": "Crypto Officer - ML- KEM Private Key: W,E - Concate nated hybrid shared secret (ML- KEM and X25519):",
"secFunImpl": "Key Decapsul ation with KEM- Hybrid- MLX- KEM"
},
{
"description": "Verificat ion of encapsul ation key or decapsul ation key",
"indicator": "EVP_PKEY_check or EVP_PKEY_public_check or EVP_PKEY_private_check returns 1",
"inputs": "ML-KEM encapsulation key or decapsulation key",
"name": "ML-KEM Key Verificati on",
"outputs": "Success/failu re",
"rolesSspAccess": "G,R Crypto Officer - ML- KEM Public Key: W,E - ML- KEM Private Key: W,E",
"secFunImpl": "Key verificati on of ML-KEM encapsula tion key Key verificati on of ML-KEM decapsula tion key"
},
{
"description": "Generate a digital signatur",
"indicator": "EVP_PKEY_sign returns 1",
"inputs": "EdDSA private key, message",
"name": "EdDSA Digital Signature",
"outputs": "Signature",
"rolesSspAccess": "Crypto Officer - EdDSA",
"secFunImpl": "Signature Generatio"
},
{
"description": "e with ECDSA",
"indicator": "",
"inputs": "",
"name": "Generatio n",
"outputs": "",
"rolesSspAccess": "private key: W,E",
"secFunImpl": "n with EdDSA"
},
{
"description": "Verify a digital signatur e with EdDSA",
"indicator": "EVP_PKEY_verify returns 1",
"inputs": "EdDSA public key, message, signature",
"name": "EdDSA Digital Verificati on",
"outputs": "Success/failu re",
"rolesSspAccess": "Crypto Officer - EdDSA public key: W,E",
"secFunImpl": "Signature Verificati on with EdDSA"
},
{
"description": "Verify an EdDSA public key",
"indicator": "EVP_PKEY_check or EVP_PKEY_public_check returns 1",
"inputs": "EdDSA public key",
"name": "EdDSA Public Key Verificati on",
"outputs": "Success/failu re",
"rolesSspAccess": "Crypto Officer - EdDSA public key: W,E",
"secFunImpl": "Verificati on of EdDSA Public Key"
},
{
"description": "Generate an EdDSA key pair",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "Desired EdDSA curve",
"name": "EdDSA Key Pair Generatio n",
"outputs": "EdDSA public key, EdDSA private key",
"rolesSspAccess": "Crypto Officer - Module generate d EdDSA public key: G,R - Module generate d EdDSA private key: G,R - Interme diate Key Generati on Value: G,E,Z",
"secFunImpl": "EdDSA Key Pair Generatio n"
},
{
"description": "Generate an ML- KEM",
"indicator": "EVP_PKEY_keygen returns 1",
"inputs": "Desired ML- KEM",
"name": "Hybrid- ML- KEM-",
"outputs": "ML-KEM encapsulatio n key, ML-",
"rolesSspAccess": "Crypto Officer -",
"secFunImpl": "Key Generatio n with"
},
{
"description": "key pair and an EC P- curve key pair",
"indicator": "",
"inputs": "parameter set and P curve",
"name": "ECDH Key Pair Generatio n",
"outputs": "KEM decapsulatio n key, EC public key, EC private key",
"rolesSspAccess": "Module Generat ed EC Private Key: G,R - Module Generat ed EC Public Key: G,R - Module Generat ed ML- KEM Public Key: G,R - Module Generat ed ML- KEM Private Key: G,R - Interme diate Key Generati on Value: G,E,Z",
"secFunImpl": "Hybrid- ML- KEM- ECDH"
},
{
"description": "Perform hybrid ML- KEM and ECDH",
"indicator": "OSSL_KEM_PARAM_FIPS_APPROVED _INDICATOR parameter of ML-KEM EVP_PKEY_CTX is 1",
"inputs": "ML-KEM encapsulation key, EC public key, EC private key",
"name": "Hybrid- ML- KEM- ECDH encapsula tion",
"outputs": "Concatenate d hybrid shared secret (ML-KEM and ECDH),",
"rolesSspAccess": "Crypto Officer - EC Public Key: R,W,E",
"secFunImpl": "Key Encapsul ation with Hybrid- ML-"
},
{
"description": "encapsul ation to produce ML- KEM cipherte xt and concaten ated hybrid shared secret.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "EC public key",
"rolesSspAccess": "- ML- KEM Public Key: W,E - Concate nated hybrid shared secret (ML- KEM and ECDH): G,R - EC Private Key: W,E",
"secFunImpl": "KEM- ECDH"
},
{
"description": "Perform hybrid ML- KEM and ECDH decapsul ation to produce a concaten ated hybrid shared secret.",
"indicator": "EVP_PKEY_decapsulate returns 1",
"inputs": "ML-KEM decapsulation key, EC public key, EC private key",
"name": "Hybrid- ML- KEM- ECDH decapsula tion",
"outputs": "Concatenate d hybrid shared secret (ML-KEM and ECDH)",
"rolesSspAccess": "Crypto Officer - ML- KEM Private Key: W,E - EC Private Key: W,E - EC Public Key: W,E - Concate nated hybrid shared secret (ML- KEM",
"secFunImpl": "Key Decapsul ation with Hybrid- ML- KEM- ECDH"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "and ECDH): G,R",
"secFunImpl": ""
},
{
"description": "Key encapsul ation with RSA",
"indicator": "EVP_PKEY_encrypt returns 1",
"inputs": "RSA Public Key, Key to encapsulate",
"name": "RSA key encapsula tion",
"outputs": "Encapsulate d key",
"rolesSspAccess": "Crypto Officer - RSA Public Key: W,E",
"secFunImpl": "RSA key encapsula tion"
},
{
"description": "Key un- encapsul ation with RSA",
"indicator": "EVP_PKEY_decrypt returns 1",
"inputs": "RSA Private Key, Key to un- encapsulate",
"name": "RSA key un- encapsula tion",
"outputs": "Un- encapsulated key",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E",
"secFunImpl": "RSA key un- encapsula tion"
},
{
"description": "KAS- IFC-SSC",
"indicator": "EVP_PKEY_encapsulate or EVP_PKEY_decapsulate returns 1",
"inputs": "RSA private key, RSA public key",
"name": "RSA- based shared secret computat ion",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E - RSA Public Key: W,E",
"secFunImpl": "Shared Secret Computat ion"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Decrypt with 128- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Decrypt with 256- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "4-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1 including health test per section 11.3: performs instantiation, reseeding, and generation.",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "128 bit keys, DF, with PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG",
"condition": "Test runs at power-on",
"details": "Compliant with SP 800-90Ar1 including health test per",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, with PR",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "section 11.3: performs instantiation, reseeding, and generation.",
"indicator": "and services are available for use",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108",
"condition": "Test runs at power-on before the integrity test",
"details": "Key based key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256 with 128-bit key; KMAC-128 with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.3 KDF key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256 with 200-bit derived key length, 24- character password, 2 iterations , 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF SP800-56Cr2",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "P-224 with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "P-224 with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Ed25519; Ed4488",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Ed25519; Ed4488",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-512",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (FIPS186-5)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5)",
"condition": "Key pair generation",
"details": "Encryption \u0026 decryption",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Section 6.4.1.1 of SP800-56Br2",
"type": "PCT"
},
{
"algorithmOrTest": "Safe Primes Key Generation",
"condition": "Key pair generation",
"details": "SP 800-56ARev3, 5.6.2.1.4",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Section 5.6.2.1.4 of SP800-56Arev3",
"type": "PCT"
},
{
"algorithmOrTest": "Hash DRBG",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1 including health test per section 11.3: performs instantiation, reseeding, and generation.",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SHA2-256, with PR",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT",
"condition": "Key pair generation",
"details": "Key encapsulation \u0026 decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM Encapsulation",
"condition": "Test runs at power-on before the integrity test",
"details": "Key encapsulation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ML-KEM-512, encap KAT",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM Decapsulation",
"condition": "Test runs at power-on before the integrity test",
"details": "Key decapsulation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ML-KEM-512, decap KAT: implicit rejection path and non-rejection path",
"type": "CAST"
},
{
"algorithmOrTest": "ML-DSA KeyGen PCT",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "ML-DSA SigGen",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ML-DSA-65 (internal interface, covering all rejection paths for ML-DSA- 65 per Note 23 of IG 10.3.A)",
"type": "CAST"
},
{
"algorithmOrTest": "ML-DSA SigVer",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ML-DSA-65 (internal interface)",
"type": "CAST"
},
{
"algorithmOrTest": "SLH-DSA KeyGen PCT",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "SLH-DSA SigGen with SHA2",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SLH-DSA-SHA2- 128f, external signature interface",
"type": "CAST"
},
{
"algorithmOrTest": "SLH-DSA SigGen with SHAKE",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SLH-DSA-SHAKE- 128f, external signature interface",
"type": "CAST"
},
{
"algorithmOrTest": "SLH-DSA SigVer with SHA2",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SLH-DSA-SHA2- 128f, external signature interface",
"type": "CAST"
},
{
"algorithmOrTest": "SLH-DSA SigVer with SHAKE",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SLH-DSA-SHAKE- 128f, external signature interface",
"type": "CAST"
},
{
"algorithmOrTest": "Deterministic ECDSA SigGen (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "P-224, SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen KAT",
"condition": "Test runs at power-on before the integrity test",
"details": "Key generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ML-KEM-512",
"type": "CAST"
},
{
"algorithmOrTest": "ML-DSA KeyGen KAT",
"condition": "Test runs at power-on before the integrity test",
"details": "Key generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "ML-DSA-65",
"type": "CAST"
},
{
"algorithmOrTest": "SLH-DSA KeyGen KAT",
"condition": "Test runs at power-on before the integrity test",
"details": "Key generation",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "SLH-DSA-SHA2- 128f",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source - RCT and APT start-up test",
"condition": "Entropy source initialization",
"details": "Entropy source start- up test",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "RCT and APT",
"testProps": "1024 samples. Repetition count test according to Section 4.4.1 and Adaptive proportion test according to Section 4.4.2 of SP 800-90B",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source - RCT and APT continuous test",
"condition": "Continuously when the entropy source is accessed",
"details": "Entropy source continuous test",
"indicator": "Entropy source is operational",
"testMethod": "RCT and APT",
"testProps": "Repetition count test according to Section 4.4.1 and Adaptive proportion test according to Section 4.4.2 of SP 800-90B",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure",
"description": "An error occurred during the self-tests executed on power-up",
"indicator": "Module will not load",
"name": "Power- up error",
"recoveryMethod": "Re-initialization of the module"
},
{
"conditions": "CAST failure",
"description": "",
"indicator": "",
"name": "",
"recoveryMethod": ""
},
{
"conditions": "PCT failure or entropy source health test failure",
"description": "An error occurred during a PCT or an entropy source health test failure occurred",
"indicator": "Cryptographic functionality and data output is blocked",
"name": "Run-time error",
"recoveryMethod": "Re-initialization of the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [],
"found": false,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [
{
"caveat": "No security claimed, compliant with IG D.S Scenario 2 and IG 2.4.A",
"name": "X25519 shared secret computation",
"use": "Provides 128 bits of security, Key Agreement; used only in the context of hybrid ML-KEM and X25519"
},
{
"caveat": "No security claimed, compliant with IG D.S Scenario 2 and IG 2.4.A",
"name": "X25519 KeyGen",
"use": "Provides 128 bits of security, Key Generation; used only in the context of hybrid ML-KEM and X25519"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM encryption with external IV",
"use": "Encryption"
},
{
"name": "HMAC with key length \u003c 112 bits",
"use": "Message Authentication Code"
},
{
"name": "KMAC with key length \u003c 112 bits or tag length \u003c 32 bits",
"use": "Message Authentication Code"
},
{
"name": "PBKDF2 with password length \u003c 8 characters or salt length \u003c 128 bits or output key length \u003c 112 bits or iteration count \u003c 1000",
"use": "Key Derivation Function"
},
{
"name": "TLS 1.2 KDF without extended master secret or with SHA2-512/256 or with SHA-3 functions or with input secret length \u003c 112 bits",
"use": "Key Derivation Function"
},
{
"name": "KBKDF with input key length \u003c 112 bits",
"use": "Key Derivation Function"
},
{
"name": "Hash_DRBG or HMAC_DRBG with SHA2-384 or SHA2-512/256 or SHA-3 functions or KMAC",
"use": "Deterministic Random Bit Generation"
},
{
"name": "ECDH with P-192",
"use": "Shared Secret Computation"
},
{
"name": "RSA SigGen with X9.31 padding or with modulus length \u003c 2048 bits or with PSS salt length \u003e digest length or without hashing (primitive)",
"use": "Digital Signature Generation"
},
{
"name": "RSA SigVer with modulus length \u003c 2048 bits or with PSS salt length \u003e digest length or without hashing (primitive)",
"use": "Digital Signature Verification"
},
{
"name": "ECDSA SigGen with P-192 or with SHA2-512/256; ECDSA deterministic SigGen with P-192 or with SHA2-512/256; ECDSA SigGen component with P-192",
"use": "Digital Signature Generation"
},
{
"name": "ECDSA SigVer with SHA2-512/256; ECDSA SigVer component",
"use": "Digital Signature Verification"
},
{
"name": "ECDSA KeyGen with P-192",
"use": "Key Pair Generation"
},
{
"name": "ML-KEM encapsulation with user-provided randomness",
"use": "Key Encapsulation"
},
{
"name": "SSH KDF with SHA2-512/256 or with SHA-3 functions or with input secret length \u003c 112 bits",
"use": "Key Derivation Function"
},
{
"name": "TLS 1.3 KDF with SHA2-512 or SHA2-512/256 or SHA-3 functions or input secret length \u003c 112 bits",
"use": "Key Derivation Function"
},
{
"name": "One step KDF, two step KDF, HKDF, ANS X9.42 KDF, ANS X9.63 KDF with input secret length \u003c 112 bits",
"use": "Key Derivation Function"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM encryption with external IV",
"description": "AES GCM (external IV)",
"name": "Encryption",
"role": "CO"
},
{
"alg_accessed": "ML-KEM encapsulation with user- provided randomness",
"description": "Key encapsulation",
"name": "ML-KEM encapsulation with user-provided randomness",
"role": "CO"
},
{
"alg_accessed": "ML-KEM encapsulation with user- provided randomness",
"description": "Hybrid ML-KEM and X25519 encapsulation with user-provided randomness for use in ML-KEM encapsulation",
"name": "Hybrid ML-KEM and X25519 encapsulation with user-provided randomness",
"role": "CO"
},
{
"alg_accessed": "RSA SigGen with X9.31 padding or with modulus length \u003c 2048 bits or with PSS salt length \u003e digest length or without hashing (primitive) ECDSA SigGen with P-192 or with SHA2-512/256; ECDSA deterministic SigGen with P-192 or with SHA2- 512/256; ECDSA SigGen component with P-192",
"description": "Non-approved RSA or ECDSA signature generation",
"name": "Non-approved Digital Signature Generation",
"role": "CO"
},
{
"alg_accessed": "RSA SigVer with modulus length \u003c 2048 bits or with PSS salt length \u003e digest length or without hashing (primitive) ECDSA SigVer with SHA2-512/256; ECDSA SigVer component",
"description": "Non-approved RSA or ECDSA signature verification",
"name": "Non-approved Digital Signature Verification",
"role": "CO"
},
{
"alg_accessed": "PBKDF2 with password length \u003c 8 characters or salt length \u003c 128 bits or output key length \u003c 112 bits or iteration count \u003c 1000 TLS 1.2 KDF without extended master secret or with SHA2-512/256 or with SHA-3 functions or with input secret length \u003c 112 bits KBKDF with input key length \u003c 112 bits SSH KDF with SHA2-512/256 or with SHA-3 functions or with input secret length \u003c 112 bits TLS 1.3 KDF with SHA2-512 or SHA2- 512/256 or SHA-3 functions or input secret length \u003c 112 bits One step KDF, two step KDF, HKDF, ANS X9.42 KDF, ANS X9.63 KDF with input secret length \u003c 112 bits",
"description": "Non-approved PBKDF, TLS, KBKDF, SSH, One step KDF, two step KDF, HKDF, ANS X9.42 KDF, ANS X9.63 KDF",
"name": "Non-approved Key Derivation",
"role": "CO"
},
{
"alg_accessed": "Hash_DRBG or HMAC_DRBG with SHA2-384 or SHA2-512/256 or SHA-3 functions or KMAC",
"description": "Non-approved HMAC_DRBG or Hash_DRBG",
"name": "Non-approved Random Bit Generation",
"role": "CO"
},
{
"alg_accessed": "HMAC with key length \u003c 112 bits KMAC with key length \u003c 112 bits or tag length \u003c 32 bits",
"description": "Non-approved HMAC or KMAC",
"name": "Non-approved Message Authentication Code Generation",
"role": "CO"
},
{
"alg_accessed": "ECDH with P-192",
"description": "Non-approved elliptic curve Diffie-Hellman",
"name": "Non-approved Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "ECDSA KeyGen with P-192",
"description": "Non-approved key generation",
"name": "Non-approved Key Generation",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [],
"found": false,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [],
"found": false,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7583)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7584)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7591)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7604)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7606)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7608)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A7614)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle: EVP_CIPHER_CTX_free() clears and frees symmetric cipher context, EVP_MAC_CTX_free() clears and frees MAC context, EVP_KDF_CTX_free() clears and frees KDF context, EVP_RAND_CTX_free() clears and frees DRBG context, EVP_PKEY_free() clears and frees asymmetric key pair structures",
"method": "Free cipher handle",
"operatorId": "By calling the cipher related zeroization API",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the"
},
{
"description": "",
"method": "",
"operatorId": "",
"rationale": "zeroization procedure succeeded."
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC- SHA-256",
"packageFileName": "fips.so on Chainguard Image 20230214 on Amazon Linux 2023 on EC2 m7i.metal-24xl on Intel Sapphire Rapids Xeon Platinum 8488C",
"swFwVersion": "3.6.0-r4"
},
{
"features": "N/A",
"integrityTest": "HMAC- SHA-256",
"packageFileName": "fips.so on Chainguard Image 20230214 on Amazon Linux 2023 on EC2 m7g.metal on Amazon Graviton3 AWS Graviton3",
"swFwVersion": "3.6.0-r4"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "EC2 m7i.metal- 24xl",
"hypervisorHostOs": "N/A",
"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8488C",
"version": "3.6.0-r4"
},
{
"hardwarePlatform": "EC2 m7i.metal- 24xl",
"hypervisorHostOs": "N/A",
"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023",
"paa_pai": "No",
"processors": "Intel Xeon Platinum 8488C",
"version": "3.6.0-r4"
},
{
"hardwarePlatform": "EC2 m7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "AWS Graviton3",
"version": "3.6.0-r4"
},
{
"hardwarePlatform": "EC2 m7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023",
"paa_pai": "No",
"processors": "AWS Graviton3",
"version": "3.6.0-r4"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric",
"implName": "N/A",
"name": "Asymmetric Cryptographic Key Generation (CKG)",
"reference": "SP 800-133r2, section 4, direct DRBG output without XOR"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Generic Hardware Platform ELF x86-64-v2+",
"operatingSystem": "glibc 2.34+ (Host)"
},
{
"hardwarePlatform": "Generic Hardware Platform ELF ARMv8a+",
"operatingSystem": "glibc 2.34+ (Host)"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "AlmaLinux 9"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "AlmaLinux 9"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "AlmaLinux 10"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "AlmaLinux 10"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Amazon Linux 2"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Amazon Linux 2"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Amazon Linux 2023"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Amazon Linux 2023"
},
{
"hardwarePlatform": "Azure Esv5-series with Intel Xeon Platinum 8473C, PAA/PAI, under Azure Host Hypervisor",
"operatingSystem": "Azure Linux 2"
},
{
"hardwarePlatform": "Azure Dpsv6-series with Azure Cobalt 100, PAA/PAI, under Azure Host Hypervisor",
"operatingSystem": "Azure Linux 2"
},
{
"hardwarePlatform": "Azure Esv5-series with Intel Xeon Platinum 8473C, PAA/PAI, under Azure Host Hypervisor",
"operatingSystem": "Azure Linux 3"
},
{
"hardwarePlatform": "Azure Dpsv6-series with Azure Cobalt 100, PAA/PAI, under Azure Host Hypervisor",
"operatingSystem": "Azure Linux 3"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488CC, PAA/PAI",
"operatingSystem": "Bottlerocket"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Bottlerocket"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Centos Stream 9"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Centos Stream 9"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Centos Stream 10"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Centos Stream 10"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Chainguard"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Chainguard"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "Azure Esv5-series with Intel Xeon Platinum 8473C, PAA/PAI, under Azure Host Hypervisor",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "Azure Dpsv6-series with Azure Cobalt 100, PAA/PAI, under Azure Host Hypervisor",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "GCP c3-highcpu-192-metal with Intel Xeon Platinum 8481C, PAA/PAI, under Titanium",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "GCP c4a with Google Axion, PAA/PAI",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "Raspberry Pi 5 B Rev 1.0 8GB with Broadcom BCM2712, PAA/PAI",
"operatingSystem": "Chainguard (Host)"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Debian 12 Bookworm"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Debian 12 Bookworm"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Debian 13 Trixie"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Debian 13 Trixie"
},
{
"hardwarePlatform": "GCP c3-highcpu-192-metal with Intel Xeon Platinum 8481C",
"operatingSystem": "Google COS"
},
{
"hardwarePlatform": "GCP c4a with Google Axion, PAA/PAI, under Titanium",
"operatingSystem": "Google COS"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "RHEL 9"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "RHEL 9"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "RHEL 10"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "RHEL 10"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "RockyLinux 9"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "RockyLinux 9"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "RockyLinux 10"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "RockyLinux 10"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "SUSE Linux Enterprise Server 16"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "SUSE Linux Enterprise Server 16"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Ubuntu 20.04"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Ubuntu 20.04"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Ubuntu 22.04"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Ubuntu 22.04"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Ubuntu 24.04"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Ubuntu 24.04"
},
{
"hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI",
"operatingSystem": "Ubuntu 26.04"
},
{
"hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI",
"operatingSystem": "Ubuntu 26.04"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 37
},
"ECDSA": {
"ECDSA": 73
},
"EdDSA": {
"EdDSA": 50
}
},
"FF": {
"DH": {
"DH": 39,
"DHE": 1,
"Diffie-Hellman": 7
},
"DSA": {
"DSA": 49
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 2
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 19
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 141
}
},
"crypto_protocol": {
"IKE": {
"IKE": 6
},
"SSH": {
"SSH": 22
},
"TLS": {
"TLS": {
"TLS": 31,
"TLS 1.2": 15,
"TLS 1.3": 12,
"TLS v1.2": 5,
"TLS v1.3": 5
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 3
},
"KEM": {
"KEM": 85
},
"KEX": {
"Key Exchange": 2
},
"MAC": {
"MAC": 38
}
},
"device_model": {},
"ecc_curve": {
"Edwards": {
"Ed25519": 6,
"Ed448": 4
},
"NIST": {
"B-233": 1,
"B-283": 1,
"B-409": 1,
"B-571": 2,
"K-163": 1,
"K-283": 2,
"K-571": 2,
"P-192": 31,
"P-224": 40,
"P-256": 34,
"P-384": 26,
"P-521": 32,
"curve P-192": 1
}
},
"eval_facility": {
"atsec": {
"atsec": 131
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-128": 2,
"AES-192": 2,
"AES-256": 4,
"AES256": 1,
"DRBG 128": 1,
"HMAC- SHA-256": 2,
"HMAC-SHA-256": 2,
"PKCS 1": 2,
"PKCS#1": 6,
"SHA-256": 3,
"SHA-3": 12,
"SHA2": 4,
"SHA2- 256": 2,
"SHA2-256": 40,
"SHA2-384": 25,
"SHA2-512": 29,
"SHA3-256": 26,
"SHA3-384": 20,
"SHA3-512": 20
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 13,
"PBKDF2": 14
},
"SHA": {
"SHA2": {
"SHA-256": 3,
"SHA2": 4
},
"SHA3": {
"SHA-3": 12,
"SHA3-256": 26,
"SHA3-384": 20,
"SHA3-512": 20
}
},
"SHAKE": {
"SHAKE256": 1
}
},
"ic_data_group": {},
"javacard_api_const": {
"curves": {
"X25519": 24
}
},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {
"FIPS": {
"ML-DSA": 58,
"ML-KEM": 100,
"SLH-DSA": 56
}
},
"randomness": {
"PRNG": {
"DRBG": 55
},
"RNG": {
"RBG": 2,
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140": 1,
"FIPS 140-3": 146,
"FIPS 180-4": 6,
"FIPS 186-4": 9,
"FIPS 186-5": 42,
"FIPS 197": 1,
"FIPS 198-1": 9,
"FIPS 202": 8,
"FIPS 203": 15,
"FIPS 204": 9,
"FIPS 205": 6,
"FIPS PUB 140-3": 3,
"FIPS186-4": 8,
"FIPS186-5": 45
},
"NIST": {
"SP 800-108": 6,
"SP 800-132": 10,
"SP 800-135": 9,
"SP 800-185": 3,
"SP 800-227": 10,
"SP 800-38A": 14,
"SP 800-38B": 3,
"SP 800-38C": 2,
"SP 800-38D": 6,
"SP 800-38E": 5,
"SP 800-38F": 3,
"SP 800-56A": 5,
"SP 800-56B": 2,
"SP 800-56C": 10,
"SP 800-90A": 5,
"SP 800-90B": 3
},
"PKCS": {
"PKCS 1": 1,
"PKCS#1": 3
},
"RFC": {
"RFC 3526": 3,
"RFC 4253": 1,
"RFC 5288": 3,
"RFC 6668": 1,
"RFC 7919": 3,
"RFC 8446": 2,
"RFC7627": 3,
"RFC8446": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 56,
"AES-128": 2,
"AES-192": 2,
"AES-256": 4,
"AES256": 1
},
"CAST": {
"CAST": 78
}
},
"DES": {
"3DES": {
"TDES": 1
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 33,
"HMAC-SHA-256": 1,
"KMAC": 18
}
}
},
"tee_name": {
"AMD": {
"PSP": 15
},
"IBM": {
"SSC": 3
}
},
"tls_cipher_suite": {},
"vendor": {
"Broadcom": {
"Broadcom": 1
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"RSA SigVer (FIPS186-4)A7614",
"KTS-IFCA7614",
"AES-KWPA7613",
"KDF SP800-108A7614",
"TLS v1.2 KDF RFC7627A7614",
"KDA HKDF SP800-56Cr2A7614",
"ML-KEM KeyGenA7612",
"Safe Primes Key GenerationA7586",
"HMAC-SHA2-384A7614",
"Safe Primes Key VerificationA7586",
"HMAC-SHA2-256A7614",
"AES-CBCA7613",
"KDA TwoStep SP800-56Cr2A7614",
"HMAC DRBGA7614",
"HMAC-SHA3-512A7612",
"AES-XTS Testing Revision 2.0A7613",
"AES-CFB1A7613",
"KAS-FFC-SSC Sp800-56Ar3A7586",
"HMAC-SHA2-512/256A7614",
"AES-CFB128A8282",
"ML-DSA SigVerA7612",
"SLH-DSA SigGenA7614",
"SHA3-512A7612",
"ML-DSA KeyGenA7612",
"ML-DSA SigGenA7612",
"AES-KWA7613",
"EDDSA KeyGenA7614",
"KDF ANS 9.42A7614",
"ECDSA KeyGen (FIPS186-5)A7614",
"KAS-ECC-SSC Sp800-56Ar3A7614",
"SHAKE-256A7612",
"EDDSA SigGenA7614",
"RSA KeyGen (FIPS186-5)A7614",
"AES-CMACA7613",
"SHAKE-128A7612",
"TLS v1.3 KDFA7614",
"AES-OFBA7613",
"ECDSA KeyVer (FIPS186-5)A7614",
"SHA2-512A7614",
"PBKDFA7614",
"Counter DRBGA7613",
"Hash DRBGA7614",
"SHA2-512/256A7614",
"AES-CBC-CS3A7613",
"SHA3-384A7612",
"AES-CBC-CS2A7613",
"AES-GCMA7603",
"Deterministic ECDSA SigGen (FIPS186-5)A7614",
"KDF KMAC Sp800-108r1A7612",
"HMAC-SHA3-384A7612",
"AES-CTRA7613",
"ECDSA KeyVer (FIPS186-4)A7614",
"KDA OneStep SP800-56Cr2A7614",
"KMAC-128A7612",
"AES-CFB8A7613",
"AES-CBC-CS1A7613",
"AES-GMACA7603",
"SHA2-256A7614",
"ECDSA SigVer (FIPS186-4)A7614",
"KDF SSHA7615",
"KMAC-256A7612",
"ECDSA SigGen (FIPS186-5)A7614",
"SHA3-256A7612",
"HMAC-SHA3-256A7612",
"RSA SigGen (FIPS186-5)A7614",
"KAS-IFC-SSCA8281",
"SLH-DSA KeyGenA7614",
"SLH-DSA SigVerA7614",
"AES-ECBA7613",
"HMAC-SHA2-512A7614",
"AES-CCMA7613",
"SHA2-384A7614",
"ECDSA SigVer (FIPS186-5)A7614",
"EDDSA KeyVerA7614",
"RSA SigVer (FIPS186-5)A7614",
"EDDSA SigVerA7614",
"KDF ANS 9.63A7614",
"ML-KEM EncapDecapA7612"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A7592",
"#A7597",
"#A7593",
"#A7580",
"#A7590",
"#A7587",
"#A7591",
"#A7588",
"#A7595",
"#A7584",
"#A7594",
"#A7585",
"#A7600",
"#A7583",
"#A7608",
"#A7603",
"#A7601",
"#A8282",
"#A7610",
"#A7604",
"#A7613",
"#A7582",
"#A8281",
"#A7612",
"#A7611",
"#A7605",
"#A7609",
"#A7598",
"#A7599",
"#A7596",
"#A7581",
"#A7586",
"#A7602",
"#A7615",
"#A7606",
"#A7614",
"#A7607",
"#A7579",
"#A7589"
]
},
"policy_metadata": {
"/CreationDate": "D:20260909152701-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260909152701-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1370928,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
"https://www.ietf.org/rfc/rfc7919.txt",
"http://www.ietf.org/rfc/rfc3447.txt",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://www.ietf.org/rfc/rfc5288.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf",
"https://webstore.ansi.org/standards/ascx9/ansix9422001",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://www.ietf.org/rfc/rfc3526.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://webstore.ansi.org/standards/ascx9/ansix9632001",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf",
"https://www.ietf.org/rfc/rfc8446.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 135
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "8eb0e8102f756f32b6476cb2d5b9e743477e2c1a94ba7f6720ce066ea2417738",
"source_hash": "589625e9b79a18635a86db99b15642f8838e38b10a57b9e90c659433450161ab",
"txt_hash": "2aeb729f58d181721c2347784d251258d9079da8324f75d76a809962ac8dc5b0"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": null,
"date_sunset": "2031-09-14",
"description": "The Chainguard FIPS Provider for OpenSSL is defined as a software module in a multi-chip standalone embodiment. It provides a C language application program interface (API) for use by other applications that require cryptographic functionality. The module consists of one software component, the \"FIPS provider\", which implements FIPS requirements, and the cryptographic functionality provided to the operator.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Chainguard FIPS Provider for OpenSSL",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-09-15",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Chainguard, Inc.",
"vendor_url": "http://www.chainguard.dev"
}
}