This page was not yet optimized for use on mobile devices.
Riverbed Cryptographic Security Module
Certificate details
| Certificate ID | #2099 |
|---|---|
| Status | historical |
| Historical reason | 186-2 transition |
| Validation dates | 07.03.2014 , 16.04.2014 , 25.09.2014 , 15.12.2015 , 01.11.2016 , 02.11.2016 , 09.12.2016 , 05.01.2017 |
| Standard | FIPS 140-2 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When installed, initialized and configured as specified in the Security Policy Section 4 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys |
| Exceptions |
|
| Description | The Riverbed Cryptographic Security Module ("RCSM") provides the cryptographic functionality for a variety of Riverbed's platforms including Steelhead, SteelFusion and SteelCentral products. Using RCSM to provide FIPS compliance across Riverbed solutions, strengthens security and facilitates the product certification and accreditation processes, enabling hybrid enterprises to transform application performance into a competitive advantage by maximizing employee productivity and leveraging IT to create new forms of operational agility. |
| Tested configurations |
|
| Vendor | Riverbed Technology, Inc. http://www.riverbed.com |
| Lab | CGI Information Systems & Management Consultants Inc |
| Algorithms | |
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, HMAC, CMACAsymmetric Algorithms
ECDSA, ECC, DH, DSAHash functions
SHA1, SHA224, SHA256, SHA384, SHA512Schemes
Key Agreement, Key agreementRandomness
DRBG, RNGBlock cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSSecurity level
Level 1, level 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 2099,
"dgst": "1aaf97e300d50bac",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES#2374",
"#2046",
"DSA#745",
"#1476",
"#65",
"#1485",
"#1229",
"#2374",
"ECDSA#392",
"DRBG#310",
"CVL#65",
"#745",
"#1179",
"#310",
"HMAC#1476",
"#392",
"Triple-DES#1485",
"RSA#1229",
"SHS#2046"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 45,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 4
},
"ECDSA": {
"ECDSA": 17
}
},
"FF": {
"DH": {
"DH": 8
},
"DSA": {
"DSA": 17
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 4
},
"CCM": {
"CCM": 4
},
"CFB": {
"CFB": 6
},
"CTR": {
"CTR": 3
},
"ECB": {
"ECB": 4
},
"GCM": {
"GCM": 6
},
"OFB": {
"OFB": 2
},
"XTS": {
"XTS": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 1,
"Key agreement": 2
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES 128/192/256": 2,
"AES 128/192/256 1179": 1,
"AES, 256": 1,
"DRBG 1": 1,
"PKCS#1": 4,
"SHA1": 1,
"SHA224": 1,
"SHA256": 3,
"SHA384": 1,
"SHA512": 2
}
},
"fips_security_level": {
"Level": {
"Level 1": 1,
"level 1": 1
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA1": 1
},
"SHA2": {
"SHA224": 1,
"SHA256": 3,
"SHA384": 1,
"SHA512": 2
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 27
},
"RNG": {
"RNG": 13
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 197": 1,
"FIPS 198": 1
},
"PKCS": {
"PKCS#1": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 22
}
},
"constructions": {
"MAC": {
"CMAC": 17,
"HMAC": 6
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"DRBG#310",
"Triple-DES#1485",
"CVL#65",
"RSA#1229",
"AES#2374",
"SHS#2046",
"DSA#745",
"HMAC#1476",
"ECDSA#392"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#745",
"#1179",
"#1485",
"#310",
"#65",
"#1229",
"#2374",
"#2046",
"#1476",
"#392"
]
},
"policy_metadata": {
"/Author": "CPUBuilders Customer",
"/CreationDate": "D:20161108101945-05\u002700\u0027",
"/Creator": "Writer",
"/Producer": "LibreOffice 4.2",
"pdf_file_size_bytes": 567571,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://csrc.nist.gov/groups/STM/cmvp/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 20
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "8e8cb50d6f85c04b1dae82220995fb496e0765be9896e1795066b092f96c1b72",
"source_hash": "e3ca58ee51cfa173bdbe59895666eda4fa0aa7f71c0b72da6ec81c351b3b24e1",
"txt_hash": "4b34d8671742061373d67ef8d24de3351f58200c93f4cb01f1b3dadbe4cd1932"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in the Security Policy Section 4 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0039.pdf",
"date_sunset": null,
"description": "The Riverbed Cryptographic Security Module (\"RCSM\") provides the cryptographic functionality for a variety of Riverbed\u0027s platforms including Steelhead, SteelFusion and SteelCentral products. Using RCSM to provide FIPS compliance across Riverbed solutions, strengthens security and facilitates the product certification and accreditation processes, enabling hybrid enterprises to transform application performance into a competitive advantage by maximizing employee productivity and leveraging IT to create new forms of operational agility.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical Security: N/A",
"Mitigation of Other Attacks: N/A"
],
"fw_versions": null,
"historical_reason": "186-2 transition",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Riverbed Cryptographic Security Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": "1.0",
"tested_conf": [
"Granite OS 2.0 running on Riverbed Granite Core Appliance",
"Granite OS 2.0 x86 on VMware ESXi 5.1 running on Dell PowerEdge R210II with AES-NI",
"Granite OS 2.0 x86 on VMware ESXi 5.1 running on Dell PowerEdge R210II without AES-NI",
"Interceptor OS 4.5 running on Riverbed Interceptor Appliance",
"RiOS 8.0 x86 32-bit running on Riverbed Steelhead Appliance",
"RiOS 8.0 x86 64-bit on VMware ESXi 5.1 running on Dell PowerEdge R210II with AES-NI",
"RiOS 8.0 x86 64-bit on VMware ESXi 5.1 running on Dell PowerEdge R210II without AES-NI",
"RiOS 8.0 x86 64-bit running on Riverbed Steelhead Appliance",
"RiOS 8.0 x86 64-bit running on Riverbed Steelhead Appliance with AES-NI",
"RiOS 8.6 32-bit running on Riverbed Steelhead Appliance",
"RiOS 8.6 64-bit on Vmware ESXi 5.1 running on Dell PowerEdge R210II with AES-NI",
"RiOS 8.6 64-bit on Vmware ESXi 5.1 running on Dell PowerEdge R210II without AES-NI",
"RiOS 8.6 64-bit running on Riverbed Steelhead Appliance",
"RiOS 8.6 64-bit running on Riverbed Steelhead Appliance with AES-NI",
"RiOS 9.2 x86 64-bit on KVM 1.0 running on Dell PowerEdge R320 with PAA",
"RiOS 9.2 x86 64-bit on KVM 1.0 running on Dell PowerEdge R320 without PAA",
"RiOS 9.2 x86 64-bit running on Riverbed Steelhead Appliance with PAA",
"RiOS 9.2 x86 64-bit running on Riverbed Steelhead Appliance without PAA",
"RiOS 9.2 x86 on VMware ESXi 5.5 running on Dell PowerEdge R320 with PAA",
"RiOS 9.2 x86 on VMware ESXi 5.5 running on Dell PowerEdge R320 without PAA",
"Riverbed License Manager 1.0 on VMware ESXi 5.5 running on Dell PowerEdge R320 with PAA",
"Riverbed License Manager 1.0 on VMware ESXi 5.5 running on Dell PowerEdge R320 without PAA",
"Riverbed SteelCentral AppResponse 11.2 64bit on VMware ESXi 5.5 running on Dell PowerEdge R320 with PAA",
"Riverbed SteelCentral AppResponse 11.2 64bit on VMware ESXi 5.5 running on Dell PowerEdge R320 without PAA",
"Riverbed SteelCentral AppResponse 11.2 running on Riverbed appliance with PAA",
"Riverbed SteelCentral AppResponse 11.2 running on Riverbed appliance without PAA (single-user mode)",
"SteelCentral Controller for SteelHead Mobile 5.0 on VMware ESXi 5.5 running on Dell PowerEdge R320 with PAA",
"SteelCentral Controller for SteelHead Mobile 5.0 on VMware ESXi 5.5 running on Dell PowerEdge R320 without PAA",
"SteelCentral Controller for SteelHead Mobile 5.0 running on SMC appliance with PAA",
"SteelCentral Controller for SteelHead Mobile 5.0 running on SMC appliance without PAA",
"SteelFusion 4.3 on VMware ESXi 5.5 running on Dell PowerEdge R320 with PAA",
"SteelFusion 4.3 on VMware ESXi 5.5 running on Dell PowerEdge R320 without PAA",
"SteelFusion 4.3 running on Riverbed SteelFusion appliance with PAA",
"SteelFusion 4.3 running on Riverbed SteelFusion appliance without PAA",
"Steelhead Mobile Controller 4.6 on Vmware ESXi 5.1 running on Dell PowerEdge R210II with AES-NI",
"Steelhead Mobile Controller 4.6 on Vmware ESXi 5.1 running on Dell PowerEdge R210II without AES-NI",
"Steelhead Mobile Controller 4.6 running on SMC with AES NI",
"Steelhead Mobile Controller 4.6 running on SMC without AES-NI",
"Stingray Traffic Manager Virtual Appliance x86 on VMware ESXi 5.1 running on Dell PowerEdge R210II with AES-NI",
"Stingray Traffic Manager Virtual Appliance x86 on VMware ESXi 5.1 running on Dell PowerEdge R210II without AES-NI",
"Whitewater OS 3.0 on VMware ESXi 5.1 running on Dell PowerEdge R210II with AES-NI",
"Whitewater OS 3.0 on VMware ESXi 5.1 running on Dell PowerEdge R210II without AES-NI",
"Whitewater OS 3.0 running on Whitewater Appliance with AES-NI",
"Whitewater OS 3.0 running on Whitewater Appliance without AES-NI"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2014-03-07",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2014-04-16",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2014-09-25",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2015-12-15",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2016-11-01",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2016-11-02",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2016-12-09",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-01-05",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
}
],
"vendor": "Riverbed Technology, Inc.",
"vendor_url": "http://www.riverbed.com"
}
}