Android Kernel Cryptographic Module

Certificate details

Certificate ID #4726
Status active
Validation dates 12.07.2024
Sunset date 11-07-2029
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in approved mode
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description Provides general purpose cryptographic services to the Linux kernel.
Tested configurations
  • Linux Kernel 5.10 running on Google Pixel 6 with Google Tensor processor with PAA
  • Linux Kernel 5.10 running on Google Pixel 6 with Google Tensor processor without PAA
Vendor Google, LLC. http://www.google.com
Lab Gossamer Security Solutions
Algorithms
  • AES-CBC-CS3A2268
  • AES-CBCA2268
  • AES-CMACA2268
  • AES-CTRA2268
  • AES-ECBA2268
  • AES-XTSA2268
  • HMAC DRBGA2268
  • HMAC-SHA-1A2268
  • HMAC-SHA2-224A2268
  • HMAC-SHA2-256A2268
  • HMAC-SHA2-384A2268
  • HMAC-SHA2-512A2268
  • SHA-1A2268
  • SHA2-224A2268
  • SHA2-256A2268
  • SHA2-384A2268
  • SHA2-512A2268
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, HMAC, CMAC
Hash functions
SHA-1, SHA256
Schemes
MAC
Randomness
DRBG, RBG
Block cipher modes
XTS

Security level
Level 1, level 1

Title CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B
Subject NIST Special Publication (SP) 800-140B is to be used in conjunction with ISO/IEC 19790 Annex B and ISO/IEC 24759 section 6.14. The special publication modifies only those requirements identified in this document. SP 800-140B also specifies the content of the tabular and graphical information required in ISO/IEC 19790 Annex B. As a validation authority, the Cryptographic Module Validation Program (CMVP) may modify, add, or delete Vendor Evidence (VE) and/or Test Evidence (TE) specified under paragraph 6.14 of the ISO/IEC 24759 and specify the order of the security policy as specified in ISO/IEC 19790:2012 B.1.
Keywords "Cryptographic Module Validation Program; CMVP; FIPS 140 testing; FIPS 140; ISO/IEC 19790; ISO/IEC 24759; testing requirement; vendor evidence; vendor documentation; security policy"
Author Kim Schaffer
Creation date D:20240628130816-04'00'
Modification date D:20240628130816-04'00'
Pages 14
Creator Microsoft® Word 2016
Producer Microsoft® Word 2016

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4726,
  "dgst": "17cbdff9420ba905",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-256A2268",
        "AES-CBC-CS3A2268",
        "HMAC-SHA2-384A2268",
        "SHA2-512A2268",
        "AES-CMACA2268",
        "HMAC DRBGA2268",
        "AES-CTRA2268",
        "HMAC-SHA2-224A2268",
        "SHA-1A2268",
        "#A2268",
        "HMAC-SHA2-256A2268",
        "AES-CBCA2268",
        "HMAC-SHA2-512A2268",
        "AES-ECBA2268",
        "SHA2-224A2268",
        "HMAC-SHA-1A2268",
        "SHA2-384A2268",
        "AES-XTSA2268"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 33,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 7
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "# A2268": 6,
          "AES-CBC 128, 192": 1,
          "AES-CMAC 128": 1,
          "AES-CTR 128": 1,
          "HMAC-SHA-1": 8,
          "HMAC-SHA-1 112": 2,
          "HMAC-SHA256": 2,
          "SHA-1": 5,
          "SHA2-224": 3,
          "SHA2-256": 4,
          "SHA2-384": 3,
          "SHA2-512": 4,
          "SHA256": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA256": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 26
        },
        "RNG": {
          "RBG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 4,
          "FIPS 180-4": 5,
          "FIPS 197": 6,
          "FIPS 198-1": 5,
          "FIPS PUB 140-3": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-38E": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 14,
            "AES-": 2
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 12
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-384A2268",
        "AES-CBC-CS3A2268",
        "SHA2-256A2268",
        "SHA2-512A2268",
        "HMAC DRBGA2268",
        "AES-CMACA2268",
        "AES-CTRA2268",
        "HMAC-SHA2-224A2268",
        "HMAC-SHA2-256A2268",
        "SHA-1A2268",
        "AES-CBCA2268",
        "HMAC-SHA2-512A2268",
        "AES-ECBA2268",
        "SHA2-224A2268",
        "HMAC-SHA-1A2268",
        "SHA2-384A2268",
        "AES-XTSA2268"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2268"
      ]
    },
    "policy_metadata": {
      "/Author": "Kim Schaffer",
      "/CreationDate": "D:20240628130816-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2016",
      "/Keywords": "\"Cryptographic Module Validation Program; CMVP; FIPS 140 testing; FIPS 140; ISO/IEC 19790; ISO/IEC 24759; testing requirement; vendor evidence; vendor documentation; security policy\"",
      "/ModDate": "D:20240628130816-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2016",
      "/Subject": "NIST Special Publication (SP) 800-140B is to be used in conjunction with ISO/IEC 19790 Annex B and ISO/IEC 24759 section 6.14. The special publication modifies only those requirements identified in this document. SP 800-140B also specifies the content of the tabular and graphical information required in ISO/IEC 19790 Annex B. As a validation authority, the Cryptographic Module Validation Program (CMVP) may modify, add, or delete Vendor Evidence (VE) and/or Test Evidence (TE) specified under paragraph 6.14 of the ISO/IEC 24759 and specify the order of the security policy as specified in ISO/IEC 19790:2012 B.1.",
      "/Title": "CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B",
      "pdf_file_size_bytes": 447017,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://ci.android.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 14
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "7e5bb658110de1b4a18bcc23cc015db6df642e73b48ee664a862f4fdf1ba87c2",
      "source_hash": "2bb18a82c6f5acbbdbf3c1fbb5256d181d53fb20fa25cd20e8e3fd35c9971b76",
      "txt_hash": "024b47bf54111c3c71cb31989684ccd2f2752a51306b6bfacca8c23bce74f44a"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
    "date_sunset": "2029-07-11",
    "description": "Provides general purpose cryptographic services to the Linux kernel.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Android Kernel Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "5.10.66-android12-9-00072-g143ac63130f0-ab7955824",
    "tested_conf": [
      "Linux Kernel 5.10 running on Google Pixel 6 with Google Tensor processor with PAA",
      "Linux Kernel 5.10 running on Google Pixel 6 with Google Tensor processor without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-07-12",
        "lab": "Gossamer Security Solutions",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Google, LLC.",
    "vendor_url": "http://www.google.com"
  }
}