IBM® Crypto for C

Certificate details

Certificate ID #1994
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 27.08.2013
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Description The IBM Crypto for C v8.2.2.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group.
Tested configurations
  • AIX® 6.1 64-bit running on an IBM RS6000 7037-A50 PowerPC 5 64
  • Microsoft Windows Server 2008® 32-bit running on an IBM 8835 52X AMD Opteron 246
  • Microsoft Windows Server 2008® 64-bit running on an ALTECH SH67H3 Intel® Core™ i7-2600 with PAA
  • Microsoft Windows Server 2008® 64-bit running on an ALTECH SH67H3 Intel® Core™ i7-2600 without PAA
  • Red Hat Linux Enterprise Server 5 32-bit running on an IBM 8835 52X AMD Opteron 246
  • Red Hat Linux Enterprise Server 5 64-bit running on an ALTECH SH67H3 Intel® Core™ i7-2600 with PAA
  • Red Hat Linux Enterprise Server 5 64-bit running on an ALTECH SH67H3 Intel® Core™ i7-2600 without PAA
  • Red Hat Linux Enterprise Server 5 64-bit running on an IBM System p5 185 7037-A50 IBM PowerPC 970
  • Red Hat Linux Enterprise Server 5 64-bit running on an IBM zSeries z196 type 2817 model M32 IBM zSeries z196 with CPACF
  • Red Hat Linux Enterprise Server 5 64-bit running on an IBM zSeries z196 type 2817 model M32 IBM zSeries z196 without CPACF (single user mode)
  • Solaris® 10 64-bit running on an SunFire T1000 UltraSPARC T1
Vendor IBM® Corporation http://www.ibm.com
Lab atsec information security corporation
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, Rijndael, CAST, RC2, RC4, DES, TDEA, Triple-DES, Blowfish, Camellia, HMAC, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512, CMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, DH, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-2, MD4, MD5, RIPEMD
Schemes
MAC, Key agreement, Key Agreement
Protocols
SSL, TLS, TLS 1.0
Randomness
TRNG, PRNG, DRBG, RNG
Libraries
OpenSSL
Elliptic Curves
P-192, P-224, P-256, P-384, K-163, K-233, K-283, K-409, K-571, B-163, B-233, B-283, B-409, B-571
Block cipher modes
ECB, CBC, OFB, GCM, CCM

Vendor
Microsoft

Security level
Level 1, level 1

Title Microsoft Word - Yi_ICC_FIPS140-2_Security_Policy.v1.7.doc
Author Yi Mao
Creation date D:20130724220629-05'00'
Modification date D:20130827110723-04'00'
Pages 38
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 10.1.4 (Windows)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1994,
  "dgst": "1bc3201a9f24a2fe",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#247",
        "AES#2427",
        "AES#2167",
        "DSA#671",
        "#2155",
        "AES#2424",
        "#1319",
        "RSA#1109",
        "DSA#673",
        "AES#2159",
        "Triple-DES#1365",
        "DRBG#248",
        "AES#2426",
        "AES#2171",
        "ECDSA#334",
        "HMAC#1322",
        "ECDSA#331",
        "AES#2172",
        "HMAC#1324",
        "DSA#682",
        "DRBG#331",
        "SHS#1880",
        "Triple-DES#1366",
        "#1109",
        "DRBG#243",
        "RSA#1118",
        "DRBG#252",
        "AES#2441",
        "AES#2162",
        "DSA#677",
        "DRBG#330",
        "SHS#1877",
        "AES#2166",
        "ECDSA#325",
        "DRBG#245",
        "ECDSA#335",
        "RSA#1114",
        "ECDSA#332",
        "HMAC#1323",
        "DSA#756",
        "ECDSA#338",
        "RSA#1117",
        "AES#2425",
        "SHS#1874",
        "SHS#1889",
        "DRBG#244",
        "DSA#680",
        "SHS#1881",
        "SHS#1905",
        "SHS#1882",
        "AES#2430",
        "AES#2170",
        "DSA#679",
        "AES#2440",
        "DSA#675",
        "Triple-DES#1371",
        "HMAC#1333",
        "Triple-DES#1373",
        "ECDSA#337",
        "ECDSA#328",
        "AES#2163",
        "RSA#1113",
        "AES#2431",
        "DRBG#328",
        "RSA#1116",
        "SHS#1879",
        "ECDSA#329",
        "SHS#1878",
        "Triple-DES#1369",
        "HMAC#1319",
        "Triple-DES#1375",
        "SHS#1875",
        "AES#2421",
        "DRBG#242",
        "HMAC#1329",
        "AES#2423",
        "RSA#1123",
        "RSA#1121",
        "DRBG#241",
        "AES#2161",
        "ECDSA#326",
        "AES#2443",
        "AES#2160",
        "HMAC#1326",
        "HMAC#1321",
        "RSA#1112",
        "AES#2439",
        "ECDSA#330",
        "RSA#1253",
        "DSA#757",
        "AES#2433",
        "#1874",
        "Triple-DES#1370",
        "ECDSA#333",
        "SHS#1886",
        "HMAC#1328",
        "HMAC#1327",
        "ECDSA#336",
        "ECDSA#398",
        "#670",
        "HMAC#1331",
        "AES#2155",
        "SHS#1883",
        "Triple-DES#1376",
        "AES#2179",
        "Triple-DES#1374",
        "Triple-DES#1377",
        "#2421",
        "HMAC#1320",
        "AES#2437",
        "DSA#681",
        "DSA#674",
        "DSA#683",
        "DSA#670",
        "RSA#1119",
        "Triple-DES#1372",
        "DSA#676",
        "DRBG#240",
        "Triple-DES#1367",
        "AES#2428",
        "RSA#1111",
        "RSA#1120",
        "AES#2434",
        "SHS#1884",
        "AES#2214",
        "AES#2158",
        "DSA#672",
        "AES#2164",
        "AES#2432",
        "AES#2156",
        "HMAC#1325",
        "AES#2436",
        "HMAC#1507",
        "DRBG#250",
        "AES#2429",
        "DRBG#249",
        "AES#2165",
        "AES#2438",
        "HMAC#1506",
        "DRBG#327",
        "#325",
        "AES#2157",
        "Triple-DES#1379",
        "DRBG#326",
        "SHS#1904",
        "AES#2422",
        "DRBG#329",
        "AES#2213",
        "AES#2435",
        "DRBG#246",
        "RSA#1115",
        "SHS#1885",
        "ECDSA#327",
        "DRBG#253",
        "#1365",
        "RSA#1254",
        "RSA#1110",
        "DRBG#251",
        "AES#2169",
        "#240",
        "HMAC#1330",
        "Triple-DES#1368",
        "DSA#678",
        "ECDSA#399",
        "SHS#1876"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 44,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 5
          },
          "ECDSA": {
            "ECDSA": 11
          }
        },
        "FF": {
          "DH": {
            "DH": 4,
            "Diffie-Hellman": 9
          },
          "DSA": {
            "DSA": 17
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 1
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 3
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 12
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 5,
            "TLS 1.0": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2,
          "Key agreement": 2
        },
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 1,
          "B-233": 1,
          "B-283": 1,
          "B-409": 1,
          "B-571": 1,
          "K-163": 1,
          "K-233": 1,
          "K-283": 1,
          "K-409": 1,
          "K-571": 1,
          "P-192": 2,
          "P-224": 2,
          "P-256": 2,
          "P-384": 6
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 38
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#1109": 3,
          "#1319": 1,
          "#1365": 2,
          "#1874": 2,
          "#2155": 3,
          "#240": 1,
          "#2421": 1,
          "#325": 4,
          "#670": 3
        }
      },
      "fips_certlike": {
        "Certlike": {
          "HMAC-SHA- 224": 2,
          "HMAC-SHA- 256": 2,
          "HMAC-SHA- 384": 2,
          "HMAC-SHA- 512": 2,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-224": 2,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-384": 2,
          "HMAC-SHA-512": 2,
          "HMAC-SHA256": 2,
          "HMACSHA256": 1,
          "PKCS#1": 14,
          "SHA- 256": 3,
          "SHA- 384": 2,
          "SHA-1": 11,
          "SHA-2": 2,
          "SHA-224": 4,
          "SHA-256": 4,
          "SHA-384": 2,
          "SHA-512": 6,
          "SHA1": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 5
          },
          "MD5": {
            "MD5": 7
          }
        },
        "RIPEMD": {
          "RIPEMD": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 11,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-2": 2,
            "SHA-224": 4,
            "SHA-256": 4,
            "SHA-384": 2,
            "SHA-512": 6
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 18,
          "PRNG": 6
        },
        "RNG": {
          "RNG": 9
        },
        "TRNG": {
          "TRNG": 14
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 90,
          "FIPS 180-4": 2,
          "FIPS 186-2": 4,
          "FIPS 186-3": 3,
          "FIPS 197": 4,
          "FIPS 198": 1,
          "FIPS PUB 140-2": 4,
          "FIPS140-2": 2
        },
        "NIST": {
          "SP 800-56A": 1,
          "SP 800-67": 1,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS#1": 7
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 19
          },
          "CAST": {
            "CAST": 1
          },
          "RC": {
            "RC2": 3,
            "RC4": 2
          },
          "Rijndael": {
            "Rijndael": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "Triple-DES": 10
          },
          "DES": {
            "DES": 19
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 7,
            "HMAC-SHA-224": 1,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-384": 1,
            "HMAC-SHA-512": 1
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 1
          },
          "Camellia": {
            "Camellia": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#247",
        "AES#2427",
        "AES#2167",
        "DSA#671",
        "AES#2424",
        "RSA#1109",
        "DSA#673",
        "AES#2159",
        "Triple-DES#1365",
        "DRBG#248",
        "AES#2426",
        "AES#2171",
        "ECDSA#334",
        "HMAC#1322",
        "ECDSA#331",
        "AES#2172",
        "HMAC#1324",
        "DSA#682",
        "DRBG#331",
        "SHS#1880",
        "Triple-DES#1366",
        "DRBG#243",
        "RSA#1118",
        "DRBG#252",
        "AES#2441",
        "AES#2162",
        "DSA#677",
        "DRBG#330",
        "SHS#1877",
        "AES#2166",
        "ECDSA#325",
        "DRBG#245",
        "ECDSA#335",
        "RSA#1114",
        "ECDSA#332",
        "HMAC#1323",
        "DSA#756",
        "ECDSA#338",
        "RSA#1117",
        "AES#2425",
        "SHS#1874",
        "SHS#1889",
        "DRBG#244",
        "DSA#680",
        "SHS#1881",
        "SHS#1905",
        "SHS#1882",
        "AES#2430",
        "AES#2170",
        "DSA#679",
        "AES#2440",
        "DSA#675",
        "Triple-DES#1371",
        "HMAC#1333",
        "Triple-DES#1373",
        "ECDSA#337",
        "ECDSA#328",
        "AES#2163",
        "RSA#1113",
        "AES#2431",
        "DRBG#328",
        "RSA#1116",
        "SHS#1879",
        "ECDSA#329",
        "SHS#1878",
        "Triple-DES#1369",
        "HMAC#1319",
        "Triple-DES#1375",
        "SHS#1875",
        "AES#2421",
        "DRBG#242",
        "HMAC#1329",
        "AES#2423",
        "RSA#1123",
        "RSA#1121",
        "DRBG#241",
        "AES#2161",
        "ECDSA#326",
        "AES#2443",
        "AES#2160",
        "HMAC#1326",
        "HMAC#1321",
        "RSA#1112",
        "AES#2439",
        "ECDSA#330",
        "RSA#1253",
        "DSA#757",
        "AES#2433",
        "Triple-DES#1370",
        "ECDSA#333",
        "SHS#1886",
        "HMAC#1328",
        "HMAC#1327",
        "ECDSA#336",
        "ECDSA#398",
        "HMAC#1331",
        "AES#2155",
        "SHS#1883",
        "Triple-DES#1376",
        "AES#2179",
        "Triple-DES#1374",
        "Triple-DES#1377",
        "HMAC#1320",
        "AES#2437",
        "DSA#681",
        "DSA#674",
        "DSA#683",
        "DSA#670",
        "RSA#1119",
        "Triple-DES#1372",
        "DSA#676",
        "DRBG#240",
        "Triple-DES#1367",
        "AES#2428",
        "RSA#1111",
        "RSA#1120",
        "AES#2434",
        "SHS#1884",
        "AES#2214",
        "AES#2158",
        "DSA#672",
        "AES#2164",
        "AES#2432",
        "AES#2156",
        "HMAC#1325",
        "AES#2436",
        "HMAC#1507",
        "DRBG#250",
        "AES#2429",
        "DRBG#249",
        "AES#2165",
        "AES#2438",
        "HMAC#1506",
        "DRBG#327",
        "AES#2157",
        "Triple-DES#1379",
        "DRBG#326",
        "SHS#1904",
        "AES#2422",
        "DRBG#329",
        "AES#2213",
        "AES#2435",
        "DRBG#246",
        "RSA#1115",
        "SHS#1885",
        "ECDSA#327",
        "DRBG#253",
        "RSA#1254",
        "RSA#1110",
        "DRBG#251",
        "AES#2169",
        "HMAC#1330",
        "Triple-DES#1368",
        "DSA#678",
        "ECDSA#399",
        "SHS#1876"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#670",
        "#325",
        "#2155",
        "#240",
        "#1874",
        "#1319",
        "#1109",
        "#2421",
        "#1365"
      ]
    },
    "policy_metadata": {
      "/Author": "Yi Mao",
      "/CreationDate": "D:20130724220629-05\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20130827110723-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 10.1.4 (Windows)",
      "/Title": "Microsoft Word - Yi_ICC_FIPS140-2_Security_Policy.v1.7.doc",
      "pdf_file_size_bytes": 193056,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "88078a4c1d30d9cbdec3d530f3a39ee8e1ac9e175c150b6619910b900761af8d",
      "source_hash": "4d79a7c657cbb415204e61c51b11470b6d9fbf3e59cfb135f1a1eaf750118228",
      "txt_hash": "1f05adb501823ff0fea278f447dcd99490ce77d58c2ea06e4db456d3ac205ebe"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0032.pdf",
    "date_sunset": null,
    "description": "The IBM Crypto for C v8.2.2.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": null,
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "IBM\u00ae Crypto for C",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "8.2.2.0",
    "tested_conf": [
      "AIX\u00ae 6.1 64-bit running on an IBM RS6000 7037-A50 PowerPC 5 64",
      "Microsoft Windows Server 2008\u00ae 32-bit running on an IBM 8835 52X AMD Opteron 246",
      "Microsoft Windows Server 2008\u00ae 64-bit running on an ALTECH SH67H3 Intel\u00ae Core\u2122 i7-2600 with PAA",
      "Microsoft Windows Server 2008\u00ae 64-bit running on an ALTECH SH67H3 Intel\u00ae Core\u2122 i7-2600 without PAA",
      "Red Hat Linux Enterprise Server 5 32-bit running on an IBM 8835 52X AMD Opteron 246",
      "Red Hat Linux Enterprise Server 5 64-bit running on an ALTECH SH67H3 Intel\u00ae Core\u2122 i7-2600 with PAA",
      "Red Hat Linux Enterprise Server 5 64-bit running on an ALTECH SH67H3 Intel\u00ae Core\u2122 i7-2600 without PAA",
      "Red Hat Linux Enterprise Server 5 64-bit running on an IBM System p5 185 7037-A50 IBM PowerPC 970",
      "Red Hat Linux Enterprise Server 5 64-bit running on an IBM zSeries z196 type 2817 model M32 IBM zSeries z196 with CPACF",
      "Red Hat Linux Enterprise Server 5 64-bit running on an IBM zSeries z196 type 2817 model M32 IBM zSeries z196 without CPACF (single user mode)",
      "Solaris\u00ae 10 64-bit running on an SunFire T1000 UltraSPARC T1"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2013-08-27",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "IBM\u00ae Corporation",
    "vendor_url": "http://www.ibm.com"
  }
}