This page was not yet optimized for use on mobile devices.
TuxCare Kernel Crypto API
Certificate details
| Certificate ID | #5374 |
|---|---|
| Status | active |
| Validation dates | 07.07.2026 |
| Sunset date | 06-07-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Linux kernel crypto API implementation provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface. |
| Vendor | Cloud Linux Software, Inc. d/b/a TuxCare http://www.tuxcare.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, CAST, HMAC, HMAC-SHA-256, CMACAsymmetric Algorithms
ECDSAHash functions
SHA-1, SHA-256, SHA512, SHA-2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2Schemes
MACProtocols
IKEv2, IPsecRandomness
DRBG, RNG, RBGElliptic Curves
P-256, P-384Block cipher modes
ECB, CBC, CTR, CFB, GCM, CCM, XTSTrusted Execution Environments
PSPSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 197, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38E, SP 800-90A, PKCS#1, RFC 4106, RFC 7296Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5374,
"dgst": "1b8f39475cb531e8",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC DRBGA7064",
"SHA3-256A7052",
"HMAC-SHA3-256A7052",
"SHA3-384A7052",
"HMAC-SHA3-224A7052",
"HMAC-SHA2-224A7064",
"#A7063",
"SHA2-512A7064",
"#A7056",
"HMAC-SHA3-384A7052",
"SHA3-224A7052",
"#A7058",
"AES-CFB128A7059",
"HMAC-SHA2-384A7064",
"#A7060",
"HMAC-SHA2-512A7064",
"HMAC-SHA2-256A7064",
"#A7057",
"#A7064",
"#A7054",
"AES-CCMA7059",
"SHA2-256A7064",
"#A7062",
"AES-GMACA7059",
"AES-GCMA7061",
"HMAC-SHA3-512A7052",
"AES-CMACA7059",
"Counter DRBGA7061",
"HMAC-SHA-1A7064",
"SHA2-384A7064",
"#A7051",
"#A7061",
"AES-CTRA7059",
"RSA SigVer (FIPS186-5)A7064",
"ECDSA SigVer (FIPS186-4)A7055",
"Hash DRBGA7064",
"#A7052",
"#A7053",
"SHA3-512A7052",
"AES-OFBA7059",
"AES-CBCA7059",
"AES-XTS Testing Revision 2.0A7059",
"#A7059",
"#A7055",
"SHA2-224A7064",
"AES-CBC-CS3A7059",
"AES-ECBA7061",
"ECDSA SigVer (FIPS186-5)A7055"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A7051, A7056, A7059",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A7051, A7056, A7059",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A7051, A7059",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A7051, A7059",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A7051, A7059",
"properties": "Direction - Generation Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A7051, A7056, A7059",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A7051, A7053, A7054, A7056, A7057, A7058, A7059, A7060, A7061",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A7051, A7054, A7056, A7058, A7059, A7061",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A7053, A7057, A7060",
"properties": "Direction - Encrypt IV Generation - Internal",
"reference": "SP 800-38D"
},
{
"algorithm": "Algorithm",
"cavpCertName": "CAVP Cert",
"properties": "IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": ""
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A7051, A7056, A7059",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A7051, A7059",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A7051, A7056, A7059",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A7051, A7053, A7054, A7056, A7057, A7058, A7059, A7060, A7061",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A7055",
"properties": "Component - No Curve - P-256, P-384 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A7055",
"properties": "Curve - P-256, P-384 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512",
"reference": "FIPS 186-5"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A7051, A7053, A7054, A7056, A7057, A7058, A7059, A7060, A7061, A7062, A7063, A7064",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A7051, A7053, A7054, A7056, A7057, A7058, A7059, A7060, A7061, A7062, A7063, A7064",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A7052",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A7052",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A7052",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A7052",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A7051, A7062, A7063, A7064",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A7052",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A7052",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A7052",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A7052",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Symmetri c Encryptio n using AES",
"indicator": "crypto_skcipher_setkey return 0",
"inputs": "Plaintex t, AES key",
"name": "Symmetric Encryption",
"outputs": "Cipherte xt",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetric Encryption with AES"
},
{
"description": "Symmetri c Decryptio n using AES",
"indicator": "crypto_skcipher_setkey return 0",
"inputs": "Ciphert ext, AES key",
"name": "Symmetric Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetric Decryption with AES"
},
{
"description": "Encrypt and authentica te a plaintext",
"indicator": "For all except AES GCM: crypto_aead_setkey returns 0; For AES GCM: crypto_aead_get_flags(tfm) has the CRYPTO_TFM_FIPS_COM PLIANCE flag set",
"inputs": "Plaintex t, AES key, IV",
"name": "Authentica ted Symmetric Encryption",
"outputs": "Cipherte xt, MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E - GCM IV: G,R,E",
"secFunImpl": "Authentica ted Symmetric Encryption with AES"
},
{
"description": "Decrypt and authentica te a ciphertext",
"indicator": "For all except AES GCM: crypto_aead_setkey returns 0; For AES GCM: crypto_aead_get_flags(tfm) has the CRYPTO_TFM_FIPS_COM PLIANCE flag set",
"inputs": "Ciphert ext, AES key, MAC tag, IV",
"name": "Authentica ted Symmetric Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E - GCM IV: W,E",
"secFunImpl": "Authentica ted Symmetric Decryption with AES"
},
{
"description": "Compute a MAC tag",
"indicator": "crypto_shash_init returns 0",
"inputs": "AES: AES key, message ; HMAC: HMAC key, message",
"name": "Message Authentica tion Code (MAC)",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E",
"secFunImpl": "Message Authentica tion Code (MAC) with AES Message Authentica tion Code (MAC) with"
},
{
"description": "Generate random bitstrings",
"indicator": "crypto_rng_get_bytes returns 0",
"inputs": "Output length",
"name": "Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - Entropy input: G,E,Z - CTR_DRBG Seed (IG D.L): G,E - Hash_DRBG Seed (IG D.L): G,E - HMAC_DR BG Seed (IG D.L): G,E - CTR_DRBG Internal State (V, Key) (IG D.L): G,W,E - Hash_DRBG Internal State (V, C) (IG D.L): G,W,E - HMAC_DR BG Internal State (V, Key) (IG D.L): G,W,E",
"secFunImpl": "HMAC Random Number Generation with CTR_DRB G Random Number Generation with HMAC_D RBG Random Number Generation with Hash_DRB G"
},
{
"description": "Get entropy from a dedicated instance of the Jitter",
"indicator": "crypto_rng_get_bytes returns 0",
"inputs": "Output length",
"name": "Random number generation using entropy source",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Compute a message digest",
"indicator": "crypto_shash_init returns 0",
"inputs": "Message",
"name": "Message digest",
"outputs": "Digest value",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest with SHA-2 Message Digest with SHA-3"
},
{
"description": "Compress data (deflate, lzo, zlib- deflate)",
"indicator": "None",
"inputs": "Data",
"name": "Compressio n",
"outputs": "Compres sed data",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Use the kernel to perform various non- cryptogra phic",
"indicator": "None",
"inputs": "Identifie r, various argume nts",
"name": "Generic system call",
"outputs": "Various return values",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "operations Compute an EDC (crc32, crct10dif)",
"indicator": "None",
"inputs": "Message",
"name": "Error detection code",
"outputs": "EDC",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module status",
"indicator": "None",
"inputs": "N/A",
"name": "Show status",
"outputs": "Module status",
"rolesSspAccess": "Unauthentic ated",
"secFunImpl": "None"
},
{
"description": "Return the module name and version informatio n",
"indicator": "None",
"inputs": "N/A",
"name": "Show module name and version",
"outputs": "Module name and version",
"rolesSspAccess": "Unauthentic ated",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and",
"indicator": "None",
"inputs": "N/A",
"name": "Self-test",
"outputs": "Pass/fail result of self-tests",
"rolesSspAccess": "Unauthentic ated",
"secFunImpl": "Symmetric Encryption with AES Authentica"
},
{
"description": "integrity tests",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "ted Symmetric Encryption with AES Symmetric Decryption with AES Authentica ted Symmetric Decryption with AES Message Digest with SHA-3 Message Digest with SHA-2 Random Number Generation with CTR_DRB G Random Number Generation with HMAC_D RBG Random Number Generation with Hash_DRB G Message Authentica tion Code (MAC) with HMAC Message Authentica tion Code"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "(MAC) with AES Signature verification with ECDSA Signature verification with ECDSA (legacy use) Signature Verificatio n with RSA"
},
{
"description": "Zeroize SSPs",
"indicator": "None",
"inputs": "Any SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - Entropy input: Z - CTR_DRBG Seed (IG D.L): Z - Hash_DRBG Seed (IG D.L): Z - HMAC_DR BG Seed (IG D.L): Z - CTR_DRBG Internal State (V, Key) (IG D.L): Z - Hash_DRBG Internal State (V, C) (IG D.L): Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- HMAC_DR BG Internal State (V, Key) (IG D.L): Z - GCM IV: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA2-224 (A7051)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A7062)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A7063)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A7064)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A7051)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A7062)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A7063)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A7064)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A7051)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A7062)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A7063)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A7064)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "for use. Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7051)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7062)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7063)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7064)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A7052)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A7052)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A7052)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A7052)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7051)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7051)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7053)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7053)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7054)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7054)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7056)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7056)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7057)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7057)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7058)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7060)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7060)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Encrypt (A7061)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB - Decrypt (A7061)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC - Encrypt (A7051)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC - Decrypt (A7051)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC - Encrypt (A7056)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC - Decrypt (A7056)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CBC - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 - Decrypt (A7051)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Encrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Decrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7051)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7051)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7053)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7053)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7054)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7054)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7056)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7056)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7057)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7057)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7058)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7058)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7060)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; external 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7060)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Encrypt (A7061)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM - Decrypt (A7061)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; Internal 96-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 - Encrypt (A7051)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 - Decrypt (A7051)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 -",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "Encrypt (A7059)",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A7059)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR - Encrypt (A7051)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR - Decrypt (A7051)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM - Encrypt (A7059)",
"condition": "Module initialization",
"details": "Encryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM - Decrypt (A7059)",
"condition": "Module initialization",
"details": "Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A7051)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A7062)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A7063)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A7064)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A7051)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A7062)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A7063)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A7064)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "for use. Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A7051)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A7062)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A7063)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A7064)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A7051)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A7062)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A7063)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A7064)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A7051)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A7062)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A7063)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A7064)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A7052)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-224, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A7052)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A7052)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "for use. Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-384, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A7052)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-512, 32- 1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7051)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7053)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7054)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7056)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7057)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7058)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7059)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7060)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7061)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7051)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7053)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7054)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7056)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate,",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "reseed, generate) health test",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "section 11.3 of SP 800-90Arev1",
"type": ""
},
{
"algorithmOrTest": "Hash DRBG (A7057)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7058)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7059)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7060)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7061)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7062)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7063)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A7064)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7051)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7053)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7054)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7056)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7057)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7058)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7059)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate,",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR;",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "reseed, generate) health test",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "Health test per section 11.3 of SP 800-90Arev1",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A7060)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7061)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7062)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7063)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A7064)",
"condition": "Module initialization",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, SHA512 With/without PR; Health test per section 11.3 of SP 800-90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A7051)",
"condition": "Module initialization. Before integrity test.",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A7062)",
"condition": "Module initialization. Before integrity test.",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A7063)",
"condition": "Module initialization. Before integrity test.",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A7064)",
"condition": "Module initialization. Before integrity test.",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7055)",
"condition": "Module initialization",
"details": "Signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source RCT startup",
"condition": "Entropy source initialization",
"details": "Entropy source start-up test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "RCT",
"testProps": "1024 samples",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source APT startup",
"condition": "Entropy source initialization",
"details": "Entropy source start-up test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "APT",
"testProps": "1024 samples",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source RCT Continuous",
"condition": "Continuously",
"details": "Entropy source continuous test",
"indicator": "Entropy source is operational",
"testMethod": "RCT",
"testProps": "Cutoff C = 61",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source APT Continuous",
"condition": "Continuously",
"details": "Entropy source continuous test",
"indicator": "Entropy source is operational",
"testMethod": "APT",
"testProps": "Cutoff C = 355",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure CAST failure",
"description": "The Linux kernel immediately stops executing",
"indicator": "Kernel Panic",
"name": "Error",
"recoveryMethod": "Restart of the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever",
"name": "Approved",
"statusIndicator": "Mapped to approved service indicator in Section 4.3 for all approved algorithms except GCM: respective approved",
"type": "Approved"
},
{
"description": "an approved service is requested.",
"name": "",
"statusIndicator": "service function returns indicator 0. For GCM: crypto_aead_get_flags(tfm) has the CRYPTO_TFM_FIPS_COMPLIANCE flag set",
"type": ""
},
{
"description": "Automatically entered whenever a non-approved service is requested.",
"name": "Non- Approved",
"statusIndicator": "No service indicator required for non-approved services per IG 2.4.C",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM with external IV",
"use": "Encryption with external IV (not compliant to FIPS 140-3 IG C.H)"
},
{
"name": "KBKDF (libkcapi)",
"use": "Key derivation with implementation not tested by CAVP"
},
{
"name": "HKDF (libkcapi)",
"use": "Key derivation with implementation not tested by CAVP"
},
{
"name": "PBKDF2 (libkcapi)",
"use": "Password-based Key derivation with implementation not tested by CAVP"
},
{
"name": "RSA",
"use": "Encryption primitive; Decryption primitive (not compliant to SP 800-56Br2)"
},
{
"name": "RSA with PKCS#1 v1.5 padding",
"use": "Signature generation(pre-hashed message) primitive; Signature verification(pre- hashed message) primitive"
},
{
"name": "ECDSA",
"use": "Signature generation(pre-hashed message) primitive; Signature verification(pre- hashed message) primitive"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM with external IV",
"description": "Encryption",
"name": "AES GCM with external IV",
"role": "CO"
},
{
"alg_accessed": "KBKDF (libkcapi)",
"description": "Key derivation",
"name": "KBKDF (libkcapi)",
"role": "CO"
},
{
"alg_accessed": "HKDF (libkcapi)",
"description": "Key derivation",
"name": "HKDF (libkcapi)",
"role": "CO"
},
{
"alg_accessed": "PBKDF2 (libkcapi)",
"description": "Password-based key derivation",
"name": "PBKDF2 (libkcapi)",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Encryption primitive; Decryption primitive",
"name": "RSA",
"role": "CO"
},
{
"alg_accessed": "RSA with PKCS#1 v1.5 padding",
"description": "Signature generation (pre-hashed message); Signature verification (pre-hashed message)",
"name": "RSA with PKCS#1 v1.5 padding",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "Signature generation (pre-hashed message); Signature verification (pre-hashed message)",
"name": "ECDSA",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API data input parameters, AF_ALG type sockets",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters, AF_ALG type sockets",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API control input parameters, AF_ALG type sockets, kernel command line",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return values, AF_ALG type sockets, kernel logs",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-512 (A7064)",
"details": "Integrity test for kernel binary, libkcapi, and sha512hmac software components",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A7051)",
"details": "Integrity test for kernel crypto object files",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Signature Verification",
"testProps": "4096-bit key with SHA- 256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters; AF_ALG_type sockets (input)",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters; AF_ALG_type sockets (output)",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle.",
"method": "Free cipher handle",
"operatorId": "By calling the appropriate cipher related zeroization API functions: AES key: crypto_free_skcipher and crypto_free_aead; HMAC key: crypto_free_shash and crypto_free_ahash; DRBG internal state: crypto_free_rng; EC public key, RSA public key: public_key_free",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Remove power from the module",
"operatorId": "By removing power",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed. Module power off indicates that the zeroization procedure succeeded. The successful removal of power implicitly indicates that the zeroization is complete."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "GIGABYTE E163- S30-AAG1",
"hypervisorHostOs": "N/A",
"operatingSystem": "AlmaLinux OS 9.6",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Gold 5512U",
"version": "5.14.0- 570.62.1.el9_6.tuxcare.5 1.4.0-2.el9_6.tuxcare.1"
},
{
"hardwarePlatform": "GIGABYTE E163- S30-AAG1",
"hypervisorHostOs": "N/A",
"operatingSystem": "AlmaLinux OS 9.6",
"paa_pai": "No",
"processors": "Intel\u00ae Xeon\u00ae Gold 5512U",
"version": "5.14.0- 570.62.1.el9_6.tuxcare.5 1.4.0-2.el9_6.tuxcare.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "GIGABYTE E163-S30-AAG1 on Intel\u00ae Xeon\u00ae Gold 5512U",
"operatingSystem": "Rocky Linux 9.6"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 16
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 22
},
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKEv2": 1
},
"IPsec": {
"IPsec": 7
}
},
"crypto_scheme": {
"MAC": {
"MAC": 18
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 6,
"P-384": 4
}
},
"eval_facility": {
"atsec": {
"atsec": 2
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"HMAC-SHA- 1": 8,
"HMAC-SHA-1": 10,
"HMAC-SHA-256": 24,
"HMACSHA2512": 1,
"PKCS#1": 10,
"SHA -512": 1,
"SHA- 1": 1,
"SHA- 256": 2,
"SHA-1": 5,
"SHA-2": 3,
"SHA-256": 17,
"SHA-3": 4,
"SHA2- 256": 1,
"SHA2- 512": 1,
"SHA2-224": 19,
"SHA2-256": 20,
"SHA2-384": 19,
"SHA2-512": 21,
"SHA3-224": 5,
"SHA3-256": 6,
"SHA3-384": 5,
"SHA3-512": 5,
"SHA512": 12
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF2": 4
},
"SHA": {
"SHA1": {
"SHA-1": 5
},
"SHA2": {
"SHA-2": 3,
"SHA-256": 17,
"SHA512": 12
},
"SHA3": {
"SHA-3": 4,
"SHA3-224": 5,
"SHA3-256": 6,
"SHA3-384": 5,
"SHA3-512": 5
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 83
},
"RNG": {
"RBG": 4,
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 75,
"FIPS 180-4": 5,
"FIPS 186-4": 2,
"FIPS 186-5": 2,
"FIPS 197": 1,
"FIPS 198-1": 10,
"FIPS 202": 5,
"FIPS PUB 140-3": 2,
"FIPS186-4": 2,
"FIPS186-5": 16
},
"NIST": {
"SP 800-38A": 8,
"SP 800-38B": 2,
"SP 800-38C": 2,
"SP 800-38D": 4,
"SP 800-38E": 3,
"SP 800-90A": 3
},
"PKCS": {
"PKCS#1": 5
},
"RFC": {
"RFC 4106": 3,
"RFC 7296": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 70,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1
},
"CAST": {
"CAST": 292
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 41,
"HMAC-SHA-256": 12
}
}
},
"tee_name": {
"AMD": {
"PSP": 1
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC DRBGA7064",
"SHA3-256A7052",
"HMAC-SHA3-256A7052",
"SHA3-384A7052",
"HMAC-SHA3-224A7052",
"HMAC-SHA2-224A7064",
"SHA2-512A7064",
"HMAC-SHA3-384A7052",
"SHA3-224A7052",
"AES-CFB128A7059",
"HMAC-SHA2-384A7064",
"HMAC-SHA2-512A7064",
"HMAC-SHA2-256A7064",
"AES-CCMA7059",
"SHA2-256A7064",
"AES-GCMA7061",
"AES-GMACA7059",
"HMAC-SHA3-512A7052",
"AES-CMACA7059",
"Counter DRBGA7061",
"HMAC-SHA-1A7064",
"SHA2-384A7064",
"AES-CTRA7059",
"RSA SigVer (FIPS186-5)A7064",
"ECDSA SigVer (FIPS186-4)A7055",
"Hash DRBGA7064",
"SHA3-512A7052",
"AES-OFBA7059",
"AES-CBCA7059",
"AES-XTS Testing Revision 2.0A7059",
"SHA2-224A7064",
"AES-CBC-CS3A7059",
"AES-ECBA7061",
"ECDSA SigVer (FIPS186-5)A7055"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A7057",
"#A7051",
"#A7061",
"#A7059",
"#A7054",
"#A7055",
"#A7064",
"#A7063",
"#A7052",
"#A7056",
"#A7053",
"#A7062",
"#A7058",
"#A7060"
]
},
"policy_metadata": {
"/CreationDate": "D:20260706091736-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260706091736-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 868881,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
"https://www.ietf.org/rfc/rfc3447.txt",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://datatracker.ietf.org/doc/html/rfc4106",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 68
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "f103b1a0c851c9f8626ce8409bb28685c9a585bd0451b25f1d18059e838a6d7b",
"source_hash": "43fa2ed6493588b68c6aca65b5dd2da5248cc0dfd261b1ee525f0f409bb9b3e1",
"txt_hash": "7cf01b118439ec36a0c156d1ef935a61430b387f211376fcafa632a43546d2e6"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
"date_sunset": "2031-07-06",
"description": "The Linux kernel crypto API implementation provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "TuxCare Kernel Crypto API",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-07-07",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Cloud Linux Software, Inc. d/b/a TuxCare",
"vendor_url": "http://www.tuxcare.com"
}
}