{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "13b1475cbe243903", "cert_id": 5523, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Chainguard FIPS Provider for OpenSSL", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-09-15", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.chainguard.dev", "vendor": "Chainguard, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2026_071026_0710.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "The Chainguard FIPS Provider for OpenSSL is defined as a software module in a multi-chip standalone embodiment. It provides a C language application program interface (API) for use by other applications that require cryptographic functionality. The module consists of one software component, the \"FIPS provider\", which implements FIPS requirements, and the cryptographic functionality provided to the operator.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-09-14", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 2}}, "fips_certlike": {"Certlike": {"HMAC- SHA-256": 2, "HMAC-SHA-256": 2, "SHA-3": 12, "SHA-256": 3, "SHA2-256": 40, "SHA2-384": 25, "SHA2-512": 29, "SHA3-256": 26, "SHA3-384": 20, "SHA3-512": 20, "SHA2- 256": 2, "SHA2": 4, "PKCS 1": 2, "PKCS#1": 6, "AES-128": 2, "AES-192": 2, "AES-256": 4, "AES256": 1, "DRBG 128": 1}}, "vendor": {"Broadcom": {"Broadcom": 1}}, "eval_facility": {"atsec": {"atsec": 131}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 56, "AES-128": 2, "AES-192": 2, "AES-256": 4, "AES256": 1}, "CAST": {"CAST": 78}}, "DES": {"3DES": {"TDES": 1}}, "constructions": {"MAC": {"HMAC": 33, "HMAC-SHA-256": 1, "KMAC": 18, "CMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 37}, "ECDSA": {"ECDSA": 73}, "EdDSA": {"EdDSA": 50}, "ECC": {"ECC": 2}}, "FF": {"DH": {"DHE": 1, "DH": 39, "Diffie-Hellman": 7}, "DSA": {"DSA": 49}}}, "pq_crypto": {"FIPS": {"ML-DSA": 58, "ML-KEM": 100, "SLH-DSA": 56}}, "hash_function": {"SHA": {"SHA2": {"SHA-256": 3, "SHA2": 4}, "SHA3": {"SHA-3": 12, "SHA3-256": 26, "SHA3-384": 20, "SHA3-512": 20}}, "SHAKE": {"SHAKE256": 1}, "PBKDF": {"PBKDF2": 14, "PBKDF": 13}}, "crypto_scheme": {"MAC": {"MAC": 38}, "KEM": {"KEM": 85}, "KEX": {"Key Exchange": 2}, "KA": {"Key Agreement": 3}}, "crypto_protocol": {"SSH": {"SSH": 22}, "TLS": {"TLS": {"TLS v1.2": 5, "TLS v1.3": 5, "TLS 1.2": 15, "TLS 1.3": 12, "TLS": 31}}, "IKE": {"IKE": 6}}, "randomness": {"PRNG": {"DRBG": 55}, "RNG": {"RNG": 1, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 2}, "CTR": {"CTR": 2}, "CFB": {"CFB": 1}, "OFB": {"OFB": 1}, "GCM": {"GCM": 19}, "CCM": {"CCM": 2}, "XTS": {"XTS": 8}}, "ecc_curve": {"NIST": {"P-224": 40, "P-256": 34, "P-384": 26, "P-521": 32, "P-192": 31, "curve P-192": 1, "K-283": 2, "K-571": 2, "B-283": 1, "B-571": 2, "K-163": 1, "B-233": 1, "B-409": 1}, "Edwards": {"Ed25519": 6, "Ed448": 4}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 141}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 15}, "IBM": {"SSC": 3}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 146, "FIPS 203": 15, "FIPS 204": 9, "FIPS PUB 140-3": 3, "FIPS186-5": 45, "FIPS 186-5": 42, "FIPS186-4": 8, "FIPS 186-4": 9, "FIPS 198-1": 9, "FIPS 180-4": 6, "FIPS 202": 8, "FIPS 205": 6, "FIPS 140": 1, "FIPS 197": 1}, "NIST": {"SP 800-132": 10, "SP 800-227": 10, "SP 800-38A": 14, "SP 800-38C": 2, "SP 800-38B": 3, "SP 800-38D": 6, "SP 800-38F": 3, "SP 800-38E": 5, "SP 800-90A": 5, "SP 800-56A": 5, "SP 800-56C": 10, "SP 800-135": 9, "SP 800-108": 6, "SP 800-185": 3, "SP 800-56B": 2, "SP 800-90B": 3}, "PKCS": {"PKCS 1": 1, "PKCS#1": 3}, "RFC": {"RFC7627": 3, "RFC 8446": 2, "RFC 5288": 3, "RFC8446": 1, "RFC 4253": 1, "RFC 6668": 1, "RFC 3526": 3, "RFC 7919": 3}}, "javacard_version": {}, "javacard_api_const": {"curves": {"X25519": 24}}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1370928, "pdf_is_encrypted": false, "pdf_number_of_pages": 135, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260909152701-04'00'", "/ModDate": "D:20260909152701-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["http://www.atsec.com/", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf", "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf", "https://www.ietf.org/rfc/rfc5288.txt", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "http://www.ietf.org/rfc/rfc3447.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://www.ietf.org/rfc/rfc8446.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf", "https://www.ietf.org/rfc/rfc7919.txt", "https://webstore.ansi.org/standards/ascx9/ansix9422001", "https://webstore.ansi.org/standards/ascx9/ansix9632001", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://www.ietf.org/rfc/rfc3526.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf"]}}, "module_algorithms": {"_type": "Set", "elements": ["AES-CBCA7613", "RSA SigVer (FIPS186-4)A7614", "Counter DRBGA7613", "AES-GCMA7603", "SHA2-256A7614", "SHAKE-128A7612", "AES-KWPA7613", "AES-CBC-CS1A7613", "ECDSA KeyVer (FIPS186-4)A7614", "RSA SigVer (FIPS186-5)A7614", "AES-OFBA7613", "KDA TwoStep SP800-56Cr2A7614", "KDF SSHA7615", "ECDSA KeyGen (FIPS186-5)A7614", "RSA SigGen (FIPS186-5)A7614", "SHA3-256A7612", "AES-CBC-CS2A7613", "HMAC-SHA2-384A7614", "Hash DRBGA7614", "AES-KWA7613", "AES-XTS Testing Revision 2.0A7613", "AES-CTRA7613", "AES-CFB128A8282", "EDDSA SigGenA7614", "AES-CFB1A7613", "KMAC-256A7612", "KDF SP800-108A7614", "Safe Primes Key VerificationA7586", "EDDSA KeyVerA7614", "Safe Primes Key GenerationA7586", "HMAC-SHA2-512/256A7614", "KAS-IFC-SSCA8281", "HMAC-SHA3-384A7612", "SLH-DSA SigVerA7614", "Deterministic ECDSA SigGen (FIPS186-5)A7614", "SHA2-384A7614", "AES-ECBA7613", "HMAC-SHA2-512A7614", "KTS-IFCA7614", "SLH-DSA SigGenA7614", "KMAC-128A7612", "KAS-ECC-SSC Sp800-56Ar3A7614", "ML-KEM KeyGenA7612", "AES-CBC-CS3A7613", "ECDSA KeyVer (FIPS186-5)A7614", "EDDSA KeyGenA7614", "ML-KEM EncapDecapA7612", "AES-CMACA7613", "ML-DSA SigGenA7612", "HMAC DRBGA7614", "ECDSA SigVer (FIPS186-4)A7614", "SHAKE-256A7612", "PBKDFA7614", "ML-DSA SigVerA7612", "SHA3-512A7612", "HMAC-SHA3-256A7612", "AES-CCMA7613", "HMAC-SHA3-512A7612", "KDA HKDF SP800-56Cr2A7614", "TLS v1.3 KDFA7614", "SLH-DSA KeyGenA7614", "SHA2-512A7614", "TLS v1.2 KDF RFC7627A7614", "KDF ANS 9.42A7614", "SHA2-512/256A7614", "RSA KeyGen (FIPS186-5)A7614", "ECDSA SigGen (FIPS186-5)A7614", "KAS-FFC-SSC Sp800-56Ar3A7586", "KDF ANS 9.63A7614", "AES-CFB8A7613", "KDF KMAC Sp800-108r1A7612", "AES-GMACA7603", "SHA3-384A7612", "KDA OneStep SP800-56Cr2A7614", "ML-DSA KeyGenA7612", "HMAC-SHA2-256A7614", "EDDSA SigVerA7614", "ECDSA SigVer (FIPS186-5)A7614"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A7592", "#A7614", "#A7583", "#A7606", "#A7609", "#A7600", "#A7591", "#A8281", "#A7602", "#A7581", "#A7611", "#A7607", "#A7589", "#A7597", "#A7601", "#A7593", "#A7594", "#A7610", "#A7595", "#A7587", "#A7603", "#A7585", "#A7613", "#A7605", "#A7579", "#A7599", "#A7588", "#A7590", "#A7582", "#A7598", "#A7615", "#A7580", "#A8282", "#A7604", "#A7612", "#A7586", "#A7596", "#A7608", "#A7584"]}, "is_br1_format": true, "br1_deviations": 1, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "1"}, {"section": "6", "title": "Operational environment", "level": "1"}, {"section": "7", "title": "Physical security", "level": "N/A"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "1"}, {"section": "12", "title": "Mitigation of other attacks", "level": "1"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"packageFileName": "fips.so on Chainguard Image 20230214 on Amazon Linux 2023 on EC2 m7i.metal-24xl on Intel Sapphire Rapids Xeon Platinum 8488C", "swFwVersion": "3.6.0-r4", "features": "N/A", "integrityTest": "HMAC- SHA-256"}, {"packageFileName": "fips.so on Chainguard Image 20230214 on Amazon Linux 2023 on EC2 m7g.metal on Amazon Graviton3 AWS Graviton3", "swFwVersion": "3.6.0-r4", "features": "N/A", "integrityTest": "HMAC- SHA-256"}]}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023", "hardwarePlatform": "EC2 m7i.metal- 24xl", "processors": "Intel Xeon Platinum 8488C", "paa_pai": "Yes", "hypervisorHostOs": "N/A", "version": "3.6.0-r4"}, {"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023", "hardwarePlatform": "EC2 m7i.metal- 24xl", "processors": "Intel Xeon Platinum 8488C", "paa_pai": "No", "hypervisorHostOs": "N/A", "version": "3.6.0-r4"}, {"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023", "hardwarePlatform": "EC2 m7g.metal", "processors": "AWS Graviton3", "paa_pai": "Yes", "hypervisorHostOs": "N/A", "version": "3.6.0-r4"}, {"operatingSystem": "Chainguard Image 20230214 on Amazon Linux 2023", "hardwarePlatform": "EC2 m7g.metal", "processors": "AWS Graviton3", "paa_pai": "No", "hypervisorHostOs": "N/A", "version": "3.6.0-r4"}]}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "glibc 2.34+ (Host)", "hardwarePlatform": "Generic Hardware Platform ELF x86-64-v2+"}, {"operatingSystem": "glibc 2.34+ (Host)", "hardwarePlatform": "Generic Hardware Platform ELF ARMv8a+"}, {"operatingSystem": "AlmaLinux 9", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "AlmaLinux 9", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "AlmaLinux 10", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "AlmaLinux 10", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Amazon Linux 2", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Amazon Linux 2", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Amazon Linux 2023", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Amazon Linux 2023", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Azure Linux 2", "hardwarePlatform": "Azure Esv5-series with Intel Xeon Platinum 8473C, PAA/PAI, under Azure Host Hypervisor"}, {"operatingSystem": "Azure Linux 2", "hardwarePlatform": "Azure Dpsv6-series with Azure Cobalt 100, PAA/PAI, under Azure Host Hypervisor"}, {"operatingSystem": "Azure Linux 3", "hardwarePlatform": "Azure Esv5-series with Intel Xeon Platinum 8473C, PAA/PAI, under Azure Host Hypervisor"}, {"operatingSystem": "Azure Linux 3", "hardwarePlatform": "Azure Dpsv6-series with Azure Cobalt 100, PAA/PAI, under Azure Host Hypervisor"}, {"operatingSystem": "Bottlerocket", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488CC, PAA/PAI"}, {"operatingSystem": "Bottlerocket", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Centos Stream 9", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Centos Stream 9", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Centos Stream 10", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Centos Stream 10", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Chainguard", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Chainguard", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "Azure Esv5-series with Intel Xeon Platinum 8473C, PAA/PAI, under Azure Host Hypervisor"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "Azure Dpsv6-series with Azure Cobalt 100, PAA/PAI, under Azure Host Hypervisor"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "GCP c3-highcpu-192-metal with Intel Xeon Platinum 8481C, PAA/PAI, under Titanium"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "GCP c4a with Google Axion, PAA/PAI"}, {"operatingSystem": "Chainguard (Host)", "hardwarePlatform": "Raspberry Pi 5 B Rev 1.0 8GB with Broadcom BCM2712, PAA/PAI"}, {"operatingSystem": "Debian 12 Bookworm", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Debian 12 Bookworm", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Debian 13 Trixie", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Debian 13 Trixie", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Google COS", "hardwarePlatform": "GCP c3-highcpu-192-metal with Intel Xeon Platinum 8481C"}, {"operatingSystem": "Google COS", "hardwarePlatform": "GCP c4a with Google Axion, PAA/PAI, under Titanium"}, {"operatingSystem": "RHEL 9", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "RHEL 9", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "RHEL 10", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "RHEL 10", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "RockyLinux 9", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "RockyLinux 9", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "RockyLinux 10", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "RockyLinux 10", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "SUSE Linux Enterprise Server 15 SP6", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "SUSE Linux Enterprise Server 15 SP6", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "SUSE Linux Enterprise Server 16", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "SUSE Linux Enterprise Server 16", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Ubuntu 20.04", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Ubuntu 20.04", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Ubuntu 22.04", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Ubuntu 22.04", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Ubuntu 24.04", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Ubuntu 24.04", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}, {"operatingSystem": "Ubuntu 26.04", "hardwarePlatform": "AWS EC2 m7i.metal-24x with Intel Xeon Platinum 8488C, PAA/PAI"}, {"operatingSystem": "Ubuntu 26.04", "hardwarePlatform": "AWS EC2 m7g.metal with AWS Graviton3, PAA/PAI"}]}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC-CS1", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC-CS2", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC-CS3", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8", "reference": "SP 800-38A"}, {"algorithm": "AES-CCM", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-524288 Increment 8", "reference": "SP 800-38C"}, {"algorithm": "AES-CFB1", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CFB128", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613, A8282", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CFB8", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CMAC", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Generation Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8", "reference": "SP 800-38B"}, {"algorithm": "AES-CTR", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-GCM", "cavpCertName": "A7580, A7581, A7582, A7589, A7590, A7596,", "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2", "reference": "SP 800-38D"}, {"algorithm": "", "cavpCertName": "A7597, A7598, A7599, A7600, A7601, A7602, A7603", "properties": "Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128-65536 Increment 128 AAD Length - AAD Length: 0-65536 Increment 8", "reference": ""}, {"algorithm": "AES-GMAC", "cavpCertName": "A7580, A7581, A7582, A7589, A7590, A7596, A7597, A7598, A7599, A7600, A7601, A7602, A7603", "properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 0-65536 Increment 8", "reference": "SP 800-38D"}, {"algorithm": "AES-KW", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Cipher - Cipher, Inverse Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128", "reference": "SP 800-38F"}, {"algorithm": "AES-KWP", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Cipher - Cipher, Inverse Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8", "reference": "SP 800-38F"}, {"algorithm": "AES-OFB", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7596, A7613", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "Counter DRBG", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes Additional Input - Additional Input: 0-512 Increment 128, Additional Input: 256, Additional Input: 320, Additional Input: 384 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256, Entropy Input: 320, Entropy Input: 384 Nonce - Nonce: 0, Nonce: 128, Nonce: 64, Nonce: 96 Personalization String Length - Personalization String Length: 0-512 Increment 128, Personalization String Length: 256, Personalization String Length: 320, Personalization String Length: 384 Returned Bits - 256", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Component - No", "reference": "FIPS 186-5"}, {"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7584", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 Component - No", "reference": "FIPS 186-5"}, {"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 Component - No", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA KeyGen (FIPS186-5)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA KeyVer (FIPS186-4)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - P-192", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA KeyVer (FIPS186-5)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - P-224, P-256, P-384, P-521", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Component - No, Yes", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7584", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 Component - No, Yes", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 Component - No, Yes", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186-4)", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Component - No Curve - P-192 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA SigVer (FIPS186-4)", "cavpCertName": "A7584", "properties": "Component - No Curve - P-192 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA SigVer (FIPS186-4)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Component - No Curve - P-192 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A7584", "properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-256, SHA3-384, SHA3-512", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA KeyGen", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - ED-25519", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA KeyGen", "cavpCertName": "A7584", "properties": "Curve - ED-25519, ED-448", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA KeyGen", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Curve - ED-448", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA KeyVer", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - ED-25519", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA KeyVer", "cavpCertName": "A7584", "properties": "Curve - ED-25519, ED-448", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA KeyVer", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Curve - ED-448", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigGen", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - ED-25519 Context Length - Context Length: 0-255 Increment 1 PreHash - Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigGen", "cavpCertName": "A7584", "properties": "Curve - ED-25519, ED-448 Context Length - Context Length: 0-255 Increment 1 PreHash - Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigGen", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Curve - ED-448 Context Length - Context Length: 0-255 Increment 1 PreHash - Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigVer", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Curve - ED-25519 PreHash - Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigVer", "cavpCertName": "A7584", "properties": "Curve - ED-25519, ED-448 PreHash - Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigVer", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Curve - ED-448 PreHash - Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "Hash DRBG", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Prediction Resistance - No, Yes Mode - SHA2-256, SHA2-512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "Hash DRBG", "cavpCertName": "A7584", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0-512 Increment 128 Additional Input - Additional Input: 0-512 Increment 128 Returned Bits - 256, 384, 512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "HMAC DRBG", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Prediction Resistance - No, Yes Mode - SHA2-256, SHA2-512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "HMAC DRBG", "cavpCertName": "A7584", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0-512 Increment 128 Additional Input - Additional Input: 0-512 Increment 128 Returned Bits - 256, 384, 512", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "HMAC-SHA2- 256", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2- 384", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2- 512", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2- 512/256", "cavpCertName": "A7583, A7584, A7591, A7604,", "properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "", "cavpCertName": "A7606, A7608, A7614", "properties": "", "reference": ""}, {"algorithm": "HMAC-SHA3- 256", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3- 384", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3- 512", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "KAS-ECC-SSC Sp800-56Ar3", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Domain Parameter Generation Methods - P-224, P-256, P- 384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KAS-FFC-SSC Sp800-56Ar3", "cavpCertName": "A7586", "properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KAS-IFC-SSC", "cavpCertName": "A8281", "properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2- prime-factor Scheme - KAS1 - KAS Role - initiator, responder KAS2 - KAS Role - initiator, responder Fixed Public Exponent - 010001", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KDA HKDF SP800-56Cr2", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDA HKDF SP800-56Cr2", "cavpCertName": "A7584", "properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "", "cavpCertName": "", "properties": "Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No", "reference": ""}, {"algorithm": "KDA HKDF SP800-56Cr2", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA3-256, SHA3-384, SHA3-512 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDA OneStep SP800-56Cr2", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA2-256 Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDA OneStep SP800-56Cr2", "cavpCertName": "A7584", "properties": "Auxiliary Function Methods - Auxiliary Function Name - HMAC-SHA2-256 MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDA OneStep SP800-56Cr2", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA3-256 Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDA TwoStep SP800-56Cr2", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256 Fixed Data Order - after fixed data Counter Lengths - 8", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "", "cavpCertName": "", "properties": "The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No", "reference": ""}, {"algorithm": "KDA TwoStep SP800-56Cr2", "cavpCertName": "A7584", "properties": "MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256, HMAC-SHA3- 256, HMAC-SHA3-384, HMAC-SHA3-512 Fixed Data Order - after fixed data Counter Lengths - 8 The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDA TwoStep SP800-56Cr2", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512 Fixed Data Order - after fixed data Counter Lengths - 8 The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No", "reference": "SP 800-56C Rev. 2"}, {"algorithm": "KDF ANS 9.42 (CVL)", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "KDF Type - DER Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256 zz Length - zz Length: 112-4096 Increment 8", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "", "cavpCertName": "", "properties": "Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW", "reference": ""}, {"algorithm": "KDF ANS 9.42 (CVL)", "cavpCertName": "A7584", "properties": "KDF Type - DER Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 zz Length - zz Length: 112-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF ANS 9.42 (CVL)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "KDF Type - DER Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 zz Length - zz Length: 112-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF ANS 9.63 (CVL)", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF ANS 9.63 (CVL)", "cavpCertName": "A7584", "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2- 512/256, SHA3-256, SHA3-384, SHA3-512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF ANS 9.63 (CVL)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Hash Algorithm - SHA3-256, SHA3-384, SHA3-512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "KDF KMAC Sp800-108r1", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Key Derivation Key Length - Key Derivation Key Length: 128 Context Length - Context Length: 128 Label Length - Label Length: 128 Derived Key Length - Derived Key Length: 256 MAC Modes - KMAC-128, KMAC-256", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A7579, A7587, A7588, A7594, A7595, A7613", "properties": "KDF Mode - Counter, Feedback MAC Mode - CMAC-AES128, CMAC-AES192, CMAC- AES256 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A7584", "properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/256, HMAC-SHA3- 256, HMAC-SHA3-384, HMAC-SHA3-512 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KDF SSH (CVL)", "cavpCertName": "A7583, A7584, A7591, A7592, A7604, A7605, A7606, A7607,", "properties": "Custom Key In Length - 0 Cipher - AES-128, AES-192, AES-256, TDES Hash Algorithm - SHA2-256, SHA2-384, SHA2-512", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "", "cavpCertName": "A7608, A7609, A7614, A7615", "properties": "", "reference": ""}, {"algorithm": "KMAC-128", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - Yes Supports eXtendable-Output Functions - No, Yes", "reference": "SP 800-185"}, {"algorithm": "KMAC-256", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - Yes Supports eXtendable-Output Functions - No, Yes", "reference": "SP 800-185"}, {"algorithm": "KTS-IFC", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Function - keyPairGen, partialVal IUT ID - 0123456789abcdef Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2- prime-factor Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Hash Algorithms - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Supports Null Associated Data - Yes Associated Data Pattern - uPartyInfo||vPartyInfo Associated Data Encoding - concatenation Key Length - 768", "reference": "SP 800-56B Rev. 2"}, {"algorithm": "KTS-IFC", "cavpCertName": "A7584", "properties": "Function - keyPairGen, partialVal IUT ID - 0123456789abcdef Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2- prime-factor Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Hash Algorithms - SHA2-256 Supports Null Associated Data - Yes Associated Data Pattern - uPartyInfo||vPartyInfo Associated Data Encoding - concatenation Key Length - 768", "reference": "SP 800-56B Rev. 2"}, {"algorithm": "ML-DSA KeyGen", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87", "reference": "FIPS 204"}, {"algorithm": "ML-DSA SigGen", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Signature Interfaces - external, internal Pre Hash - pure Deterministic - No, Yes External Mu - No, Yes Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87 Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8", "reference": "FIPS 204"}, {"algorithm": "ML-DSA SigVer", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Signature Interfaces - external, internal Pre Hash - pure External Mu - No, Yes Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87 Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8", "reference": "FIPS 204"}, {"algorithm": "ML-KEM EncapDecap", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Parameter Sets - ML-KEM-1024, ML-KEM-512, ML-KEM- 768 Functions - Decapsulation, Decapsulation Key Check, Encapsulation, Encapsulation Key Check", "reference": "FIPS 203"}, {"algorithm": "ML-KEM KeyGen", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Parameter Sets - ML-KEM-1024, ML-KEM-512, ML-KEM- 768", "reference": "FIPS 203"}, {"algorithm": "PBKDF", "cavpCertName": "A7583, A7591, A7604, A7606, A7608, A7614", "properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8", "reference": "SP 800-132"}, {"algorithm": "PBKDF", "cavpCertName": "A7584", "properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA2-256, SHA2-384, SHA2-512, SHA2-512/256, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8", "reference": "SP 800-132"}, {"algorithm": "PBKDF", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8", "reference": "SP 800-132"}, {"algorithm": "RSA KeyGen (FIPS186-5)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Key Generation Mode - probableWithProbableAux Modulo - 2048, 3072, 4096, 6144, 8192 p mod 8 - 0 Primality Tests - 2powSecStr", "reference": "FIPS 186-5"}, {"algorithm": "", "cavpCertName": "", "properties": "q mod 8 - 0 Info Generated By Server - Yes Private Key Format - standard Public Exponent Mode - random", "reference": ""}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Hash Pair - Hash Algorithm - SHA3-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-4)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-256 Public Exponent Mode - Random", "reference": "FIPS 186-4"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A7585, A7593, A7610, A7611, A7612", "properties": "Hash Pair - Hash Algorithm - SHA3-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "Safe Primes Key Generation", "cavpCertName": "A7586", "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "Safe Primes Key Verification", "cavpCertName": "A7586", "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "SHA2-256", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A7583, A7584, A7591, A7604,", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 180-4"}, {"algorithm": "", "cavpCertName": "A7606, A7608, A7614", "properties": "", "reference": ""}, {"algorithm": "SHA2-512", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-512/256", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA3-256", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-384", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-512", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-128", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-256", "cavpCertName": "A7584, A7585, A7593, A7610, A7611, A7612", "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SLH-DSA KeyGen", "cavpCertName": "A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614", "properties": "Parameter Sets - SLH-DSA-SHA2-128f, SLH-DSA-SHA2- 128s, SLH-DSA-SHA2-192f, SLH-DSA-SHA2-192s, SLH- DSA-SHA2-256f, SLH-DSA-SHA2-256s, SLH-DSA-SHAKE- 128f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-256f, SLH-DSA- SHAKE-256s", "reference": "FIPS 205"}, {"algorithm": "SLH-DSA SigGen", "cavpCertName": "A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614", "properties": "Deterministic - No, Yes Signature Interfaces - external, internal Pre Hash - pure Parameter Sets - SLH-DSA-SHA2-128f, SLH-DSA-SHA2- 128s, SLH-DSA-SHA2-192f, SLH-DSA-SHA2-192s, SLH- DSA-SHA2-256f, SLH-DSA-SHA2-256s, SLH-DSA-SHAKE- 128f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-256f, SLH-DSA- SHAKE-256s", "reference": "FIPS 205"}, {"algorithm": "", "cavpCertName": "", "properties": "Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8", "reference": ""}, {"algorithm": "SLH-DSA SigVer", "cavpCertName": "A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614", "properties": "Signature Interfaces - external, internal Pre Hash - pure Parameter Sets - SLH-DSA-SHA2-128f, SLH-DSA-SHA2- 128s, SLH-DSA-SHA2-192f, SLH-DSA-SHA2-192s, SLH- DSA-SHA2-256f, SLH-DSA-SHA2-256s, SLH-DSA-SHAKE- 128f, SLH-DSA-SHAKE-128s, SLH-DSA-SHAKE-192f, SLH-DSA-SHAKE-192s, SLH-DSA-SHAKE-256f, SLH-DSA- SHAKE-256s Message Length - Message Length: 8-65536 Increment 8 Context Length - Context Length: 0-248 Increment 8", "reference": "FIPS 205"}, {"algorithm": "TLS v1.2 KDF RFC7627 (CVL)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "TLS v1.3 KDF (CVL)", "cavpCertName": "A7583, A7584, A7591, A7604, A7606, A7608, A7614", "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE", "reference": "SP 800-135 Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "Asymmetric Cryptographic Key Generation (CKG)", "algoPropList": "Key Type:Asymmetric", "implName": "N/A", "reference": "SP 800-133r2, section 4, direct DRBG output without XOR"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "X25519 shared secret computation", "caveat": "No security claimed, compliant with IG D.S Scenario 2 and IG 2.4.A", "use": "Provides 128 bits of security, Key Agreement; used only in the context of hybrid ML-KEM and X25519"}, {"name": "X25519 KeyGen", "caveat": "No security claimed, compliant with IG D.S Scenario 2 and IG 2.4.A", "use": "Provides 128 bits of security, Key Generation; used only in the context of hybrid ML-KEM and X25519"}]}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES GCM encryption with external IV", "use": "Encryption"}, {"name": "HMAC with key length < 112 bits", "use": "Message Authentication Code"}, {"name": "KMAC with key length < 112 bits or tag length < 32 bits", "use": "Message Authentication Code"}, {"name": "PBKDF2 with password length < 8 characters or salt length < 128 bits or output key length < 112 bits or iteration count < 1000", "use": "Key Derivation Function"}, {"name": "TLS 1.2 KDF without extended master secret or with SHA2-512/256 or with SHA-3 functions or with input secret length < 112 bits", "use": "Key Derivation Function"}, {"name": "KBKDF with input key length < 112 bits", "use": "Key Derivation Function"}, {"name": "Hash_DRBG or HMAC_DRBG with SHA2-384 or SHA2-512/256 or SHA-3 functions or KMAC", "use": "Deterministic Random Bit Generation"}, {"name": "ECDH with P-192", "use": "Shared Secret Computation"}, {"name": "RSA SigGen with X9.31 padding or with modulus length < 2048 bits or with PSS salt length > digest length or without hashing (primitive)", "use": "Digital Signature Generation"}, {"name": "RSA SigVer with modulus length < 2048 bits or with PSS salt length > digest length or without hashing (primitive)", "use": "Digital Signature Verification"}, {"name": "ECDSA SigGen with P-192 or with SHA2-512/256; ECDSA deterministic SigGen with P-192 or with SHA2-512/256; ECDSA SigGen component with P-192", "use": "Digital Signature Generation"}, {"name": "ECDSA SigVer with SHA2-512/256; ECDSA SigVer component", "use": "Digital Signature Verification"}, {"name": "ECDSA KeyGen with P-192", "use": "Key Pair Generation"}, {"name": "ML-KEM encapsulation with user-provided randomness", "use": "Key Encapsulation"}, {"name": "SSH KDF with SHA2-512/256 or with SHA-3 functions or with input secret length < 112 bits", "use": "Key Derivation Function"}, {"name": "TLS 1.3 KDF with SHA2-512 or SHA2-512/256 or SHA-3 functions or input secret length < 112 bits", "use": "Key Derivation Function"}, {"name": "One step KDF, two step KDF, HKDF, ANS X9.42 KDF, ANS X9.63 KDF with input secret length < 112 bits", "use": "Key Derivation Function"}]}, "ports_interfaces": {"section": 3, "subsection": 1, "found": false, "entries": []}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": false, "entries": []}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Message Digest", "description": "Comput e a message digest", "indicator": "EVP_DigestFinal returns 1", "inputs": "Message", "outputs": "Message digest", "secFunImpl": "Message Digest with SHA Message Digest with SHAKE", "rolesSspAccess": "Crypto Officer"}, {"name": "Symmetri c Encryptio n", "description": "Encrypt a plaintext", "indicator": "EVP_EncryptFinal_ex returns 1", "inputs": "AES Key, plaintext, IV", "outputs": "Ciphertext", "secFunImpl": "Encryptio n with AES", "rolesSspAccess": "Crypto Officer - AES Key: W,E"}, {"name": "Symmetri c Decrypti on", "description": "Decrypt a cipherte xt", "indicator": "EVP_DecryptFinal_ex returns 1", "inputs": "AES Key, ciphertext, IV", "outputs": "Plaintext", "secFunImpl": "Decrypti on with AES", "rolesSspAccess": "Crypto Officer - AES Key: W,E"}, {"name": "Authenti cated Symmetri c", "description": "Encrypt and authenti cate a plaintext", "indicator": "GCM: OSSL_CIPHER_PARAM_AEAD_IV_GE NERATED is 1; CCM: EVP_EncryptFinal_ex returns 1", "inputs": "AES Key, plaintext/key to be wrapped, IV", "outputs": "Ciphertext/ wrapped key, MAC tag", "secFunImpl": "Authenti cated Encryptio n with AES", "rolesSspAccess": "Crypto Officer - AES Key: W,E"}, {"name": "Encryptio n", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- GCM IV: G,R,E"}, {"name": "Authenti cated Symmetri c Decrypti on", "description": "Decrypt and authenti cate a cipherte xt", "indicator": "EVP_DecryptFinal_ex returns non- negative value", "inputs": "AES Key, ciphertext/wr apped key, MAC tag, IV", "outputs": "Plaintext or Failure", "secFunImpl": "Authenti cated Decrypti on with AES", "rolesSspAccess": "Crypto Officer - AES Key: W,E - GCM IV: W,E"}, {"name": "AES Message Authenti cation Generatio n", "description": "Comput e a MAC tag using AES", "indicator": "EVP_MAC_final returns 1", "inputs": "AES Key, message", "outputs": "MAC tag", "secFunImpl": "Message Authenti cation Generatio n with AES", "rolesSspAccess": "Crypto Officer - AES Key: W,E"}, {"name": "HMAC Message Authenti cation Generatio n", "description": "Comput e a MAC tag using HMAC", "indicator": "OSSL_MAC_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "HMAC Key, message", "outputs": "MAC tag", "secFunImpl": "Message Authenti cation Generatio n with HMAC", "rolesSspAccess": "Crypto Officer - HMAC Key: W,E"}, {"name": "KMAC Message Authenti cation Generatio n", "description": "Comput e a MAC tag using KMAC", "indicator": "OSSL_MAC_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "KMAC Key, message", "outputs": "MAC tag", "secFunImpl": "Message Authenti cation Generatio n with KMAC", "rolesSspAccess": "Crypto Officer - KMAC Key: W,E"}, {"name": "TLS KDF Key Derivatio n", "description": "TLS key derivatio n", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Pre-master secret", "outputs": "TLS Derived Key", "secFunImpl": "Key Derivatio n with TLS 1.2 KDF Key Derivatio n with TLS 1.3 KDF", "rolesSspAccess": "Crypto Officer - Shared Secret: W,E - TLS Derived Key: G,R - TLS Master Secret: G,E,Z"}, {"name": "KBKDF Key Derivatio n", "description": "Derive a key from a key- derivatio n key", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Key- Derivation Key", "outputs": "KBKDF Derived Key", "secFunImpl": "Key Derivatio n with KBKDF", "rolesSspAccess": "Crypto Officer - Key- Derivati on Key: W,E - KBKDF Derived Key: G,R"}, {"name": "ANS X9.42 Key Derivatio n", "description": "Derive a key from a shared secret", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Shared Secret", "outputs": "ANS X9.42 Derived Key", "secFunImpl": "Key Derivatio n with ANS X9.42 KDF", "rolesSspAccess": "Crypto Officer - ANS X9.42 Derived Key: G,R - Shared Secret: W,E"}, {"name": "ANS X9.63 Key Derivatio n", "description": "Derive a key from a shared secret", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Shared Secret", "outputs": "ANS X9.63 Derived Key", "secFunImpl": "Key Derivatio n with X9.63 KDF", "rolesSspAccess": "Crypto Officer - Shared Secret: W,E - ANS X9.63 Derived Key: G,R"}, {"name": "HKDF Key Derivatio n", "description": "Derive a key from a shared secret", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Shared Secret/Concat enated hybrid shared secret (ML-KEM and ECDH)/Conc atenated hybrid shared secret (ML-", "outputs": "HKDF Derived key/Hybrid ML-KEM Shared Secret Key", "secFunImpl": "Key Derivatio n with KDA HKDF", "rolesSspAccess": "Crypto Officer - Shared Secret: W,E - HKDF Derived Key: G,R - Concate"}, {"name": "", "description": "", "indicator": "", "inputs": "KEM and X25519)", "outputs": "", "secFunImpl": "", "rolesSspAccess": "nated hybrid shared secret (ML- KEM and ECDH): W,E - Concate nated hybrid shared secret (ML- KEM and X25519): W,E - Hybrid ML- KEM Shared Secret Key:"}, {"name": "OneStep KDA Key Derivatio n", "description": "Derive a key from a shared secret", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Shared Secret", "outputs": "KDA OneStep Derived Key", "secFunImpl": "Key Derivatio n with KDA OneStep", "rolesSspAccess": "G,R Crypto Officer - Shared Secret: W,E - KDA OneStep Derived Key: G,R"}, {"name": "TwoStep KDA Key Derivatio n", "description": "Derive a key from a shared secret", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Shared Secret", "outputs": "KDA TwoStep Derived Key", "secFunImpl": "Key Derivatio n with KDA TwoStep", "rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KDA"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "TwoStep Derived Key: G,R"}, {"name": "SSH KDF key derivatio n", "description": "Derive a key from a shared secret", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Shared Secret", "outputs": "SSH KDF Derived Key", "secFunImpl": "Key Derivatio n with SSH KDF", "rolesSspAccess": "Crypto Officer - Shared Secret: W,E - SSH KDF Derived Key: G,R"}, {"name": "PBKDF Key Derivatio n", "description": "Derive a key from a passwor d", "indicator": "OSSL_KDF_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Password", "outputs": "PBKDF Derived Key", "secFunImpl": "Key Derivatio n with PBKDF2", "rolesSspAccess": "Crypto Officer - Passwor d: W,E - PBKDF Derived Key:"}, {"name": "Random Number Generatio n", "description": "Generate random number", "indicator": "OSSL_RAND_PARAM_FIPS_APPROVE D_INDICATOR is 1", "inputs": "Number of bits", "outputs": "Random number", "secFunImpl": "Random Number Generatio n with DRBG", "rolesSspAccess": "G,R Crypto Officer - Entropy Input: W,E,Z - DRBG Seed: G,E,Z - DRBG Internal State (V, Key): G,W,E - DRBG Internal State (V,"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "C): G,W,E"}, {"name": "KAS- FFC-SSC Shared Secret Computat ion", "description": "Comput e a shared secret", "indicator": "EVP_PKEY_derive returns 1", "inputs": "DH Private Key (owner), DH Public Key (peer)", "outputs": "Shared Secret", "secFunImpl": "Shared Secret Computat ion", "rolesSspAccess": "Crypto Officer - Shared Secret: G,R - DH Private Key: W,E - DH Public Key: W,E"}, {"name": "KAS- ECC-SSC Shared Secret Computat ion", "description": "Comput e a shared secret", "indicator": "OSSL_EXCHANGE_PARAM_FIPS_APP ROVED_INDICATOR is 1", "inputs": "EC Private Key (owner), EC Public Key (peer)", "outputs": "Shared Secret", "secFunImpl": "Shared Secret Computat ion", "rolesSspAccess": "Crypto Officer - Shared Secret: G,R - EC Private Key: W,E - EC Public Key: W,E"}, {"name": "RSA Digital Signature Generatio n", "description": "Generate a digital signatur e with RSA", "indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1", "inputs": "RSA Private Key, message, hash algorithm", "outputs": "Signature", "secFunImpl": "Signature Generatio n with RSA", "rolesSspAccess": "Crypto Officer - RSA Private Key: W,E"}, {"name": "ECDSA Digital Signature Generatio n", "description": "Generate a digital signatur e with ECDSA", "indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1", "inputs": "EC Private Key, message, hash algorithm", "outputs": "Signature", "secFunImpl": "Signature Generatio n with ECDSA", "rolesSspAccess": "Crypto Officer - EC Private Key: W,E"}, {"name": "RSA Digital", "description": "Verify a digital", "indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and", "inputs": "RSA Public Key, message,", "outputs": "Pass or Fail", "secFunImpl": "Signature Verificati", "rolesSspAccess": "Crypto Officer"}, {"name": "Signature Verificati on", "description": "signatur e using RSA", "indicator": "OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1", "inputs": "signature, hash algorithm", "outputs": "", "secFunImpl": "on with RSA Signature Verificati on with RSA (Legacy)", "rolesSspAccess": "- RSA Public Key: W,E"}, {"name": "ECDSA Digital Signature Verificati on", "description": "Verify a digital signatur e using ECDSA", "indicator": "OSSL_SIGNATURE_PARAM_FIPS_APP ROVED_INDICATOR is 1 and OSSL_SIGNATURE_PARAM_FIPS_VER IFY_MESSAGE is 1", "inputs": "EC Public Key, message, signature, hash algorithm", "outputs": "Pass or Fail", "secFunImpl": "Signature Verificati on with ECDSA Signature Verificati on with ECDSA (Legacy)", "rolesSspAccess": "Crypto Officer - EC Public Key: W,E"}, {"name": "RSA Key Pair Generatio n", "description": "Generate an RSA key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "Modulus bits", "outputs": "Module Generated RSA Private Key, Module Generated RSA Public Key", "secFunImpl": "Key Pair Generatio n with RSA", "rolesSspAccess": "Crypto Officer - Module Generat ed RSA Private Key: G,R - Module Generat ed RSA Public Key: G,R - Interme diate Key Generati on Value: G,E,Z"}, {"name": "ECDSA Key Pair Generatio n", "description": "Generate an EC key pair", "indicator": "OSSL_PKEY_PARAM_FIPS_APPROVE D_INDICATOR is 1", "inputs": "Curve", "outputs": "Module Generated EC Private Key, Module Generated EC Public Key", "secFunImpl": "Key Pair Generatio n with ECDSA", "rolesSspAccess": "Crypto Officer - Module Generat ed EC Private Key: G,R - Module Generat ed EC Public Key: G,R - Interme diate Key Generati on"}, {"name": "Safe Primes Key Pair Generatio n", "description": "Generate a DH key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "Group", "outputs": "Module Generated DH Private Key, Module Generated DH Public Key", "secFunImpl": "Key Pair Generatio n with Safe Primes", "rolesSspAccess": "Value: G,E,Z Crypto Officer - Module Generat ed DH Private Key: G,R - Module Generat ed DH Public Key: G,R - Interme diate"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Key Generati on Value: G,E,Z"}, {"name": "ECDSA Public Key Verificati on", "description": "Verify an EC public key", "indicator": "EVP_PKEY_check or EVP_PKEY_public_check returns 1", "inputs": "EC Public Key", "outputs": "Pass or Fail", "secFunImpl": "Public Key Verificati on with ECDSA", "rolesSspAccess": "Crypto Officer - EC Public Key: W,E"}, {"name": "Safe Prime Key Pair Verificati on", "description": "Verify a DH key pair", "indicator": "EVP_PKEY_check or EVP_PKEY_public_check or EVP_PKEY_private_check returns 1", "inputs": "DH Private Key, DH Public Key", "outputs": "Pass or Fail", "secFunImpl": "Key Pair Verificati on with Safe Primes", "rolesSspAccess": "Crypto Officer - DH Private Key: W,E - DH Public Key:"}, {"name": "Show Version", "description": "Return the name and version informat ion", "indicator": "None", "inputs": "None", "outputs": "Module name and version", "secFunImpl": "None", "rolesSspAccess": "W,E Crypto Officer"}, {"name": "Show Status", "description": "Return the module status", "indicator": "None", "inputs": "None", "outputs": "Module status", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "Self-Test", "description": "Perform the CASTs and integrity test", "indicator": "None", "inputs": "None", "outputs": "Pass or Fail of self-tests", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer"}, {"name": "Zeroizati on", "description": "Zeroize any SSP", "indicator": "None", "inputs": "An SSP", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer - AES Key: Z"}, {"name": "Name", "description": "Descrip tion", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Outputs", "secFunImpl": "Security Functio SSP Access", "rolesSspAccess": ""}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "- HMAC Key: Z - KMAC Key: Z - Key- Derivati on Key: Z - Shared Secret: Z - Passwor d: Z - PBKDF Derived Key: Z - KBKDF Derived Key: Z - ANS X9.42 Derived Key: Z - ANS X9.63 Derived Key: Z - HKDF Derived Key: Z - KDA OneStep Derived Key: Z - KDA TwoStep Derived Key: Z - TLS Derived Key: Z", "rolesSspAccess": ""}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- SSH KDF Derived Key: Z - Entropy Input: Z - DRBG Internal State (V, Key): Z - DRBG Seed: Z - DH Private Key: Z - DH Public Key: Z - EC Private Key: Z - EC Public Key: Z - RSA Private Key: Z - RSA Public Key: Z - Module Generat ed DH Private Key: Z - Module Generat ed DH Public Key: Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Module Generat ed EC Private Key: Z - Module Generat ed EC Public Key: Z - Module Generat ed RSA Private Key: Z - Module Generat ed RSA Public Key: Z - ML- DSA Public Key: Z - ML- DSA Private Key: Z - ML- KEM Public Key: Z - ML- KEM Private Key: Z - SLH- DSA Public"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Key: Z - SLH- DSA Private Key: Z - Module Generat ed ML- DSA Public Key: Z - Module Generat ed ML- DSA Private Key: Z - Module Generat ed ML- KEM Public Key: Z - Module Generat ed ML- KEM Private Key: Z - Module Generat ed SLH- DSA Public Key: Z - Module Generat"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "ed SLH- DSA Private Key: Z - ML- KEM Seed: Z - ML- DSA Seed: Z - SLH- DSA Seed: Z - ML- KEM Shared Secret: Z - EdDSA public key: Z - EdDSA private key: Z - Concate nated hybrid shared secret (ML- KEM and X25519): Z - Concate nated hybrid shared secret (ML- KEM and"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "ECDH): Z"}, {"name": "ML-KEM Key Generatio n", "description": "Generate a ML- KEM key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "None", "outputs": "Module Generated ML-KEM Private Key, Module Generated ML-KEM Public Key", "secFunImpl": "Key Generatio n with ML-KEM", "rolesSspAccess": "Crypto Officer - Module Generat ed ML- KEM Public Key: G,R - Module Generat ed ML- KEM Private Key: G,R - ML- KEM Seed: G,E - Interme diate Key Generati on Value: G,E,Z"}, {"name": "ML-KEM Key Encapsul ation", "description": "Perform encapsul ation to compute an ML- KEM shared secret and cipherte xt", "indicator": "OSSL_KEM_PARAM_FIPS_APPROVED _INDICATOR is 1", "inputs": "Encapsulation Key", "outputs": "Shared Secret, Ciphertext", "secFunImpl": "Key Encapsul ation with ML- KEM", "rolesSspAccess": "Crypto Officer - ML- KEM Public Key: W,E - ML- KEM Shared"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Secret: G,R"}, {"name": "ML-KEM Key Decapsul ation", "description": "Perform decapsul ation to compute an ML- KEM shared secret", "indicator": "EVP_PKEY_decapsulate returns 1", "inputs": "Decapsulation Key, Ciphertext", "outputs": "Shared Secret", "secFunImpl": "Key Decapsul ation with ML- KEM", "rolesSspAccess": "Crypto Officer - ML- KEM Private Key: W,E - ML- KEM Shared Secret: G,R"}, {"name": "ML-DSA Key Generatio n", "description": "Generate a ML- DSA key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "None", "outputs": "Module Generated ML-DSA Private Key, Module Generated ML-DSA Public Key", "secFunImpl": "Key Generatio n with ML-DSA", "rolesSspAccess": "Crypto Officer - Module Generat ed ML- DSA Public Key: G,R - Module Generat ed ML- DSA Private Key: G,R - ML- DSA Seed: G,E - Interme diate Key Generati on"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Value: G,E,Z"}, {"name": "ML-DSA Signature Generatio n (External Interface)", "description": "Generate a digital signatur e with ML-DSA", "indicator": "EVP_PKEY_sign returns 1", "inputs": "ML-DSA private Key, message, context string", "outputs": "Digital Signature", "secFunImpl": "Signature Generatio n with ML-DSA", "rolesSspAccess": "Crypto Officer - ML- DSA Private Key: W,E"}, {"name": "ML-DSA Signature Generatio n (Internal Interface)", "description": "Generate a digital signatur e with ML-DSA", "indicator": "EVP_PKEY_sign returns 1", "inputs": "ML-DSA private Key, M', randomness rnd", "outputs": "Digital Signature", "secFunImpl": "Signature Generatio n with ML-DSA", "rolesSspAccess": "Crypto Officer - ML- DSA Private Key: W,E"}, {"name": "ML-DSA Signature Verificati on (External Interface)", "description": "Verify a digital signatur e with ML-DSA", "indicator": "EVP_PKEY_verify returns 1", "inputs": "ML-DSA public key, message, signature, context string", "outputs": "Pass or Fail", "secFunImpl": "Signature Verificati on with ML-DSA", "rolesSspAccess": "Crypto Officer - ML- DSA Public Key: W,E"}, {"name": "ML-DSA Signature Verificati on (Internal Interface)", "description": "Verify a digital signatur e with ML-DSA", "indicator": "EVP_PKEY_verify returns 1", "inputs": "ML-DSA public key, M', signature", "outputs": "Pass or Fail", "secFunImpl": "Signature Verificati on with ML-DSA", "rolesSspAccess": "Crypto Officer - ML- DSA Public Key: W,E"}, {"name": "SLH-DSA Key Generatio n", "description": "Generate a SLH- DSA key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "None", "outputs": "Module Generated SLH-DSA Private Key, Module Generated SLH-DSA Public Key", "secFunImpl": "Key Generatio n with SLH-DSA", "rolesSspAccess": "Crypto Officer - Module Generat ed SLH- DSA Public Key: G,R - Module"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Generat ed SLH- DSA Private Key: G,R - SLH- DSA Seed: G,E - Interme diate Key Generati on Value:"}, {"name": "SLH-DSA Signature Generatio n (External Interface)", "description": "Generate a digital signatur e with SLH- DSA", "indicator": "EVP_PKEY_sign returns 1", "inputs": "SLH-DSA private key, message, context string", "outputs": "Digital Signature", "secFunImpl": "Signature Generatio n with SLH-DSA", "rolesSspAccess": "G,E,Z Crypto Officer - SLH- DSA Private Key: W,E"}, {"name": "SLH-DSA Signature Generatio n (Internal Interface)", "description": "Generate a digital signatur e with SLH- DSA", "indicator": "EVP_PKEY_sign returns 1", "inputs": "SLH-DSA private key, M', randomness addrnd", "outputs": "Digital Signature", "secFunImpl": "Signature Generatio n with SLH-DSA", "rolesSspAccess": "Crypto Officer - SLH- DSA Private Key: W,E"}, {"name": "SLH-DSA Signature Verificati on (External Interface)", "description": "Verify a digital signatur e with SLH- DSA", "indicator": "EVP_PKEY_verify returns 1", "inputs": "SLH-DSA public key, message, signature, context string", "outputs": "Pass or Fail", "secFunImpl": "Signature Verificati on with SLH-DSA", "rolesSspAccess": "Crypto Officer - SLH- DSA Public Key: W,E"}, {"name": "SLH-DSA Signature Verificati", "description": "Verify a digital signatur", "indicator": "EVP_PKEY_verify returns 1", "inputs": "SLH-DSA public key, M', signature", "outputs": "Pass or Fail", "secFunImpl": "Signature Verificati", "rolesSspAccess": "Crypto Officer - SLH-"}, {"name": "on (Internal Interface)", "description": "e with SLH- DSA", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "on with SLH-DSA", "rolesSspAccess": "DSA Public Key: W,E"}, {"name": "MLX- KEM Hybrid Key Generatio n", "description": "Generate an ML- KEM key pair and X25519 key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "None", "outputs": "Module Generated ML-KEM Encapsulatio n Key, Module Generated ML-KEM Decapsulatio n Key, X25519 public key, X25519 private key", "secFunImpl": "Key Generatio n with KEM- Hybrid- MLX- KEM", "rolesSspAccess": "Crypto Officer - ML- KEM Seed: G,E,Z - Module Generat ed ML- KEM Public Key: G,R - Module Generat ed ML- KEM Private Key: G,R - Interme diate Key Generati on Value:"}, {"name": "MLX- KEM Key Encapsul ation", "description": "Perform hybrid ML- KEM and X25519 encapsul ation to produce", "indicator": "OSSL_KEM_PARAM_FIPS_APPROVED _INDICATOR parameter of ML-KEM EVP_PKEY_CTX is 1", "inputs": "X public key, X private key, ML-KEM encapsulation key", "outputs": "Concatenate d hybrid shared secret (ML-KEM and X25519), ciphertext", "secFunImpl": "Key Encapsul ation with KEM- Hybrid- MLX- KEM", "rolesSspAccess": "G,E,Z Crypto Officer - ML- KEM Public Key: W,E - Concate"}, {"name": "", "description": "an ML- KEM cipherte xt and concaten ated hybrid shared secret.", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "nated hybrid shared secret (ML- KEM and X25519): G,R"}, {"name": "MLX- KEM Key Decapsul ation", "description": "Perform hybrid ML- KEM and X25519 decapsul ation to produce a concaten ated hybrid shared secret.", "indicator": "EVP_PKEY_decapsulate returns 1", "inputs": "X private key, ML-KEM decapsulation key, ciphertext", "outputs": "Concatenate d hybrid shared secret (ML-KEM and X25519)", "secFunImpl": "Key Decapsul ation with KEM- Hybrid- MLX- KEM", "rolesSspAccess": "Crypto Officer - ML- KEM Private Key: W,E - Concate nated hybrid shared secret (ML- KEM and X25519):"}, {"name": "ML-KEM Key Verificati on", "description": "Verificat ion of encapsul ation key or decapsul ation key", "indicator": "EVP_PKEY_check or EVP_PKEY_public_check or EVP_PKEY_private_check returns 1", "inputs": "ML-KEM encapsulation key or decapsulation key", "outputs": "Success/failu re", "secFunImpl": "Key verificati on of ML-KEM encapsula tion key Key verificati on of ML-KEM decapsula tion key", "rolesSspAccess": "G,R Crypto Officer - ML- KEM Public Key: W,E - ML- KEM Private Key: W,E"}, {"name": "EdDSA Digital Signature", "description": "Generate a digital signatur", "indicator": "EVP_PKEY_sign returns 1", "inputs": "EdDSA private key, message", "outputs": "Signature", "secFunImpl": "Signature Generatio", "rolesSspAccess": "Crypto Officer - EdDSA"}, {"name": "Generatio n", "description": "e with ECDSA", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "n with EdDSA", "rolesSspAccess": "private key: W,E"}, {"name": "EdDSA Digital Verificati on", "description": "Verify a digital signatur e with EdDSA", "indicator": "EVP_PKEY_verify returns 1", "inputs": "EdDSA public key, message, signature", "outputs": "Success/failu re", "secFunImpl": "Signature Verificati on with EdDSA", "rolesSspAccess": "Crypto Officer - EdDSA public key: W,E"}, {"name": "EdDSA Public Key Verificati on", "description": "Verify an EdDSA public key", "indicator": "EVP_PKEY_check or EVP_PKEY_public_check returns 1", "inputs": "EdDSA public key", "outputs": "Success/failu re", "secFunImpl": "Verificati on of EdDSA Public Key", "rolesSspAccess": "Crypto Officer - EdDSA public key: W,E"}, {"name": "EdDSA Key Pair Generatio n", "description": "Generate an EdDSA key pair", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "Desired EdDSA curve", "outputs": "EdDSA public key, EdDSA private key", "secFunImpl": "EdDSA Key Pair Generatio n", "rolesSspAccess": "Crypto Officer - Module generate d EdDSA public key: G,R - Module generate d EdDSA private key: G,R - Interme diate Key Generati on Value: G,E,Z"}, {"name": "Hybrid- ML- KEM-", "description": "Generate an ML- KEM", "indicator": "EVP_PKEY_keygen returns 1", "inputs": "Desired ML- KEM", "outputs": "ML-KEM encapsulatio n key, ML-", "secFunImpl": "Key Generatio n with", "rolesSspAccess": "Crypto Officer -"}, {"name": "ECDH Key Pair Generatio n", "description": "key pair and an EC P- curve key pair", "indicator": "", "inputs": "parameter set and P curve", "outputs": "KEM decapsulatio n key, EC public key, EC private key", "secFunImpl": "Hybrid- ML- KEM- ECDH", "rolesSspAccess": "Module Generat ed EC Private Key: G,R - Module Generat ed EC Public Key: G,R - Module Generat ed ML- KEM Public Key: G,R - Module Generat ed ML- KEM Private Key: G,R - Interme diate Key Generati on Value: G,E,Z"}, {"name": "Hybrid- ML- KEM- ECDH encapsula tion", "description": "Perform hybrid ML- KEM and ECDH", "indicator": "OSSL_KEM_PARAM_FIPS_APPROVED _INDICATOR parameter of ML-KEM EVP_PKEY_CTX is 1", "inputs": "ML-KEM encapsulation key, EC public key, EC private key", "outputs": "Concatenate d hybrid shared secret (ML-KEM and ECDH),", "secFunImpl": "Key Encapsul ation with Hybrid- ML-", "rolesSspAccess": "Crypto Officer - EC Public Key: R,W,E"}, {"name": "", "description": "encapsul ation to produce ML- KEM cipherte xt and concaten ated hybrid shared secret.", "indicator": "", "inputs": "", "outputs": "EC public key", "secFunImpl": "KEM- ECDH", "rolesSspAccess": "- ML- KEM Public Key: W,E - Concate nated hybrid shared secret (ML- KEM and ECDH): G,R - EC Private Key: W,E"}, {"name": "Hybrid- ML- KEM- ECDH decapsula tion", "description": "Perform hybrid ML- KEM and ECDH decapsul ation to produce a concaten ated hybrid shared secret.", "indicator": "EVP_PKEY_decapsulate returns 1", "inputs": "ML-KEM decapsulation key, EC public key, EC private key", "outputs": "Concatenate d hybrid shared secret (ML-KEM and ECDH)", "secFunImpl": "Key Decapsul ation with Hybrid- ML- KEM- ECDH", "rolesSspAccess": "Crypto Officer - ML- KEM Private Key: W,E - EC Private Key: W,E - EC Public Key: W,E - Concate nated hybrid shared secret (ML- KEM"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "and ECDH): G,R"}, {"name": "RSA key encapsula tion", "description": "Key encapsul ation with RSA", "indicator": "EVP_PKEY_encrypt returns 1", "inputs": "RSA Public Key, Key to encapsulate", "outputs": "Encapsulate d key", "secFunImpl": "RSA key encapsula tion", "rolesSspAccess": "Crypto Officer - RSA Public Key: W,E"}, {"name": "RSA key un- encapsula tion", "description": "Key un- encapsul ation with RSA", "indicator": "EVP_PKEY_decrypt returns 1", "inputs": "RSA Private Key, Key to un- encapsulate", "outputs": "Un- encapsulated key", "secFunImpl": "RSA key un- encapsula tion", "rolesSspAccess": "Crypto Officer - RSA Private Key: W,E"}, {"name": "RSA- based shared secret computat ion", "description": "KAS- IFC-SSC", "indicator": "EVP_PKEY_encapsulate or EVP_PKEY_decapsulate returns 1", "inputs": "RSA private key, RSA public key", "outputs": "Shared secret", "secFunImpl": "Shared Secret Computat ion", "rolesSspAccess": "Crypto Officer - RSA Private Key: W,E - RSA Public Key: W,E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": true, "entries": [{"name": "Encryption", "description": "AES GCM (external IV)", "alg_accessed": "AES GCM encryption with external IV", "role": "CO"}, {"name": "ML-KEM encapsulation with user-provided randomness", "description": "Key encapsulation", "alg_accessed": "ML-KEM encapsulation with user- provided randomness", "role": "CO"}, {"name": "Hybrid ML-KEM and X25519 encapsulation with user-provided randomness", "description": "Hybrid ML-KEM and X25519 encapsulation with user-provided randomness for use in ML-KEM encapsulation", "alg_accessed": "ML-KEM encapsulation with user- provided randomness", "role": "CO"}, {"name": "Non-approved Digital Signature Generation", "description": "Non-approved RSA or ECDSA signature generation", "alg_accessed": "RSA SigGen with X9.31 padding or with modulus length < 2048 bits or with PSS salt length > digest length or without hashing (primitive) ECDSA SigGen with P-192 or with SHA2-512/256; ECDSA deterministic SigGen with P-192 or with SHA2- 512/256; ECDSA SigGen component with P-192", "role": "CO"}, {"name": "Non-approved Digital Signature Verification", "description": "Non-approved RSA or ECDSA signature verification", "alg_accessed": "RSA SigVer with modulus length < 2048 bits or with PSS salt length > digest length or without hashing (primitive) ECDSA SigVer with SHA2-512/256; ECDSA SigVer component", "role": "CO"}, {"name": "Non-approved Key Derivation", "description": "Non-approved PBKDF, TLS, KBKDF, SSH, One step KDF, two step KDF, HKDF, ANS X9.42 KDF, ANS X9.63 KDF", "alg_accessed": "PBKDF2 with password length < 8 characters or salt length < 128 bits or output key length < 112 bits or iteration count < 1000 TLS 1.2 KDF without extended master secret or with SHA2-512/256 or with SHA-3 functions or with input secret length < 112 bits KBKDF with input key length < 112 bits SSH KDF with SHA2-512/256 or with SHA-3 functions or with input secret length < 112 bits TLS 1.3 KDF with SHA2-512 or SHA2- 512/256 or SHA-3 functions or input secret length < 112 bits One step KDF, two step KDF, HKDF, ANS X9.42 KDF, ANS X9.63 KDF with input secret length < 112 bits", "role": "CO"}, {"name": "Non-approved Random Bit Generation", "description": "Non-approved HMAC_DRBG or Hash_DRBG", "alg_accessed": "Hash_DRBG or HMAC_DRBG with SHA2-384 or SHA2-512/256 or SHA-3 functions or KMAC", "role": "CO"}, {"name": "Non-approved Message Authentication Code Generation", "description": "Non-approved HMAC or KMAC", "alg_accessed": "HMAC with key length < 112 bits KMAC with key length < 112 bits or tag length < 32 bits", "role": "CO"}, {"name": "Non-approved Shared Secret Computation", "description": "Non-approved elliptic curve Diffie-Hellman", "alg_accessed": "ECDH with P-192", "role": "CO"}, {"name": "Non-approved Key Generation", "description": "Non-approved key generation", "alg_accessed": "ECDSA KeyGen with P-192", "role": "CO"}]}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": false, "entries": []}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "RAM", "description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs.", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "API input parameters", "source": "Operator calling application (TOEPP)", "dest": "Cryptographic module", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "API output parameters", "source": "Cryptographic module", "dest": "Operator calling application (TOEPP)", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Free cipher handle", "description": "Zeroizes the SSPs contained within the cipher handle: EVP_CIPHER_CTX_free() clears and frees symmetric cipher context, EVP_MAC_CTX_free() clears and frees MAC context, EVP_KDF_CTX_free() clears and frees KDF context, EVP_RAND_CTX_free() clears and frees DRBG context, EVP_PKEY_free() clears and frees asymmetric key pair structures", "rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the", "operatorId": "By calling the cipher related zeroization API"}, {"method": "", "description": "", "rationale": "zeroization procedure succeeded.", "operatorId": ""}, {"method": "Automatic", "description": "Automatically zeroized by the module when no longer needed", "rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable.", "operatorId": "N/A"}, {"method": "Module reset", "description": "De-allocates the volatile memory used to store SSPs", "rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed.", "operatorId": "By unloading and reloading the module"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "HMAC-SHA2- 256 (A7583)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A7584)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A7591)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A7604)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A7606)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A7608)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A7614)", "testProps": "256-bit key", "testMethod": "Message Authentication", "type": "SW/FW Integrity", "indicator": "Module becomes operational and services are available for use", "details": "Integrity test for fips.so"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-ECB", "testProps": "Decrypt with 128- bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Symmetric operation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "AES-GCM Encryption", "testProps": "Encrypt with 256-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Symmetric operation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "AES-GCM Decryption", "testProps": "Decrypt with 256- bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Symmetric operation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SHA2-512", "testProps": "3-byte message", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Message digest", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SHA3-256", "testProps": "4-byte message", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Message digest", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "Counter DRBG", "testProps": "128 bit keys, DF, with PR", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Compliant with SP 800-90Ar1 including health test per section 11.3: performs instantiation, reseeding, and generation.", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "HMAC DRBG", "testProps": "HMAC-SHA-256, with PR", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational", "details": "Compliant with SP 800-90Ar1 including health test per", "condition": "Test runs at power-on"}, {"algorithmOrTest": "", "testProps": "", "testMethod": "", "type": "", "indicator": "and services are available for use", "details": "section 11.3: performs instantiation, reseeding, and generation.", "condition": "before the integrity test"}, {"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3", "testProps": "P-256 curve", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Shared secret computation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3", "testProps": "ffdhe2048", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Shared secret computation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "KDF SP800-108", "testProps": "HMAC-SHA2-256 with 128-bit key; KMAC-128 with 128-bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Key based key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "KDA OneStep SP800-56Cr2", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Shared secret key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "KDF ANS 9.42", "testProps": "SHA-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Industry-based ANS X9.42 key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "KDF ANS 9.63", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Industry-based ANS X9.63 key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "TLS v1.2 KDF RFC7627", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Industry-based TLS v1.2 KDF key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "TLS v1.3 KDF", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Industry-based TLS v1.3 KDF key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "PBKDF", "testProps": "HMAC-SHA2-256 with 200-bit derived key length, 24- character password, 2 iterations , 288-bit salt", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Password-based key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "KDA HKDF SP800-56Cr2", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Shared secret key derivation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ECDSA SigGen (FIPS186-5)", "testProps": "P-224 with SHA2- 256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Digital signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ECDSA SigVer (FIPS186-5)", "testProps": "P-224 with SHA2- 256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Digital signature verification", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "RSA SigGen (FIPS186-5)", "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Digital signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "EDDSA SigGen (FIPS186-5)", "testProps": "Ed25519; Ed4488", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Digital signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "RSA SigVer (FIPS186-5)", "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Digital signature verification", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "EDDSA SigVer (FIPS186-5)", "testProps": "Ed25519; Ed4488", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Digital signature verification", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ECDSA KeyGen (FIPS186-5)", "testProps": "SHA2-512", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "Signature generation & verification", "condition": "Key pair generation"}, {"algorithmOrTest": "EDDSA KeyGen (FIPS186-5)", "testProps": "N/A", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "Signature generation & verification", "condition": "Key pair generation"}, {"algorithmOrTest": "RSA KeyGen (FIPS186-5)", "testProps": "Section 6.4.1.1 of SP800-56Br2", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "Encryption & decryption", "condition": "Key pair generation"}, {"algorithmOrTest": "Safe Primes Key Generation", "testProps": "Section 5.6.2.1.4 of SP800-56Arev3", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "SP 800-56ARev3, 5.6.2.1.4", "condition": "Key pair generation"}, {"algorithmOrTest": "Hash DRBG", "testProps": "SHA2-256, with PR", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Compliant with SP 800-90Ar1 including health test per section 11.3: performs instantiation, reseeding, and generation.", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ML-KEM KeyGen PCT", "testProps": "N/A", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "Key encapsulation & decapsulation", "condition": "Key pair generation"}, {"algorithmOrTest": "ML-KEM Encapsulation", "testProps": "ML-KEM-512, encap KAT", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Key encapsulation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ML-KEM Decapsulation", "testProps": "ML-KEM-512, decap KAT: implicit rejection path and non-rejection path", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Key decapsulation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ML-DSA KeyGen PCT", "testProps": "N/A", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "Signature generation & verification", "condition": "Key pair generation"}, {"algorithmOrTest": "ML-DSA SigGen", "testProps": "ML-DSA-65 (internal interface, covering all rejection paths for ML-DSA- 65 per Note 23 of IG 10.3.A)", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ML-DSA SigVer", "testProps": "ML-DSA-65 (internal interface)", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature verification", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SLH-DSA KeyGen PCT", "testProps": "N/A", "testMethod": "PCT", "type": "PCT", "indicator": "Successful key pair generation", "details": "Signature generation & verification", "condition": "Key pair generation"}, {"algorithmOrTest": "SLH-DSA SigGen with SHA2", "testProps": "SLH-DSA-SHA2- 128f, external signature interface", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SLH-DSA SigGen with SHAKE", "testProps": "SLH-DSA-SHAKE- 128f, external signature interface", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SLH-DSA SigVer with SHA2", "testProps": "SLH-DSA-SHA2- 128f, external signature interface", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature verification", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SLH-DSA SigVer with SHAKE", "testProps": "SLH-DSA-SHAKE- 128f, external signature interface", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature verification", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "Deterministic ECDSA SigGen (FIPS186-5)", "testProps": "P-224, SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Signature generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ML-KEM KeyGen KAT", "testProps": "ML-KEM-512", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Key generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "ML-DSA KeyGen KAT", "testProps": "ML-DSA-65", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Key generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "SLH-DSA KeyGen KAT", "testProps": "SLH-DSA-SHA2- 128f", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Key generation", "condition": "Test runs at power-on before the integrity test"}, {"algorithmOrTest": "Entropy Source - RCT and APT start-up test", "testProps": "1024 samples. Repetition count test according to Section 4.4.1 and Adaptive proportion test according to Section 4.4.2 of SP 800-90B", "testMethod": "RCT and APT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Entropy source start- up test", "condition": "Entropy source initialization"}, {"algorithmOrTest": "Entropy Source - RCT and APT continuous test", "testProps": "Repetition count test according to Section 4.4.1 and Adaptive proportion test according to Section 4.4.2 of SP 800-90B", "testMethod": "RCT and APT", "type": "CAST", "indicator": "Entropy source is operational", "details": "Entropy source continuous test", "condition": "Continuously when the entropy source is accessed"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Power- up error", "description": "An error occurred during the self-tests executed on power-up", "conditions": "Software integrity test failure", "recoveryMethod": "Re-initialization of the module", "indicator": "Module will not load"}, {"name": "", "description": "", "conditions": "CAST failure", "recoveryMethod": "", "indicator": ""}, {"name": "Run-time error", "description": "An error occurred during a PCT or an entropy source health test failure occurred", "conditions": "PCT failure or entropy source health test failure", "recoveryMethod": "Re-initialization of the module", "indicator": "Cryptographic functionality and data output is blocked"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-CBCA7613", "RSA SigVer (FIPS186-4)A7614", "Counter DRBGA7613", "AES-GCMA7603", "SHA2-256A7614", "SHAKE-128A7612", "AES-KWPA7613", "AES-CBC-CS1A7613", "#A7591", "ECDSA KeyVer (FIPS186-4)A7614", "RSA SigVer (FIPS186-5)A7614", "AES-OFBA7613", "#A7589", "#A7607", "KDA TwoStep SP800-56Cr2A7614", "#A7597", "#A7601", "KDF SSHA7615", "#A7603", "#A7585", "#A7605", "#A7599", "ECDSA KeyGen (FIPS186-5)A7614", "RSA SigGen (FIPS186-5)A7614", "SHA3-256A7612", "AES-CBC-CS2A7613", "#A7590", "#A7580", "HMAC-SHA2-384A7614", "#A8282", "#A7604", "#A7596", "#A7584", "Hash DRBGA7614", "AES-KWA7613", "#A7583", "AES-XTS Testing Revision 2.0A7613", "AES-CTRA7613", "AES-CFB128A8282", "EDDSA SigGenA7614", "AES-CFB1A7613", "KMAC-256A7612", "KDF SP800-108A7614", "Safe Primes Key VerificationA7586", "#A8281", "EDDSA KeyVerA7614", "Safe Primes Key GenerationA7586", "HMAC-SHA2-512/256A7614", "#A7581", "KAS-IFC-SSCA8281", "HMAC-SHA3-384A7612", "SLH-DSA SigVerA7614", "Deterministic ECDSA SigGen (FIPS186-5)A7614", "#A7594", "SHA2-384A7614", "#A7587", "AES-ECBA7613", "#A7613", "HMAC-SHA2-512A7614", "KTS-IFCA7614", "SLH-DSA SigGenA7614", "KMAC-128A7612", "KAS-ECC-SSC Sp800-56Ar3A7614", "#A7582", "#A7598", "ML-KEM KeyGenA7612", "#A7592", "#A7614", "AES-CBC-CS3A7613", "ECDSA KeyVer (FIPS186-5)A7614", "EDDSA KeyGenA7614", "ML-KEM EncapDecapA7612", "#A7606", "AES-CMACA7613", "#A7600", "ML-DSA SigGenA7612", "#A7602", "HMAC DRBGA7614", "ECDSA SigVer (FIPS186-4)A7614", "SHAKE-256A7612", "PBKDFA7614", "#A7593", "ML-DSA SigVerA7612", "SHA3-512A7612", "HMAC-SHA3-256A7612", "AES-CCMA7613", "HMAC-SHA3-512A7612", "KDA HKDF SP800-56Cr2A7614", "#A7588", "TLS v1.3 KDFA7614", "#A7615", "SLH-DSA KeyGenA7614", "SHA2-512A7614", "TLS v1.2 KDF RFC7627A7614", "KDF ANS 9.42A7614", "SHA2-512/256A7614", "#A7609", "RSA KeyGen (FIPS186-5)A7614", "ECDSA SigGen (FIPS186-5)A7614", "KAS-FFC-SSC Sp800-56Ar3A7586", "#A7611", "KDF ANS 9.63A7614", "#A7610", "#A7595", "AES-CFB8A7613", "KDF KMAC Sp800-108r1A7612", "AES-GMACA7603", "SHA3-384A7612", "#A7579", "KDA OneStep SP800-56Cr2A7614", "ML-DSA KeyGenA7612", "HMAC-SHA2-256A7614", "#A7612", "EDDSA SigVerA7614", "#A7586", "#A7608", "ECDSA SigVer (FIPS186-5)A7614"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "589625e9b79a18635a86db99b15642f8838e38b10a57b9e90c659433450161ab", "txt_hash": "2aeb729f58d181721c2347784d251258d9079da8324f75d76a809962ac8dc5b0", "json_hash": "8eb0e8102f756f32b6476cb2d5b9e743477e2c1a94ba7f6720ce066ea2417738"}}}