SafeNet PCIe Hardware Security Module and SafeNet PCIe Hardware Security Module for SafeNet Network HSM

Certificate #3208

Webpage information

Status historical
Historical reason SP 800-56Arev3 transition
Validation dates 26.06.2018
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Multi-Chip Embedded
Caveat When operated in FIPS mode and initialized to Overall Level 2 per Security Policy
Exceptions
  • Physical Security: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3
Description The SafeNet PCI-E Hardware Security Module is a multi-chip embedded hardware cryptographic module in the form of a PCI-Express card that typically resides within a custom computing or secure communications appliance. The cryptographic module is contained in its own secure enclosure that provides physical resistance to tampering. The cryptographic boundary of the module is defined to encompass all components inside the secure enclosure on the PCI-E card.
Version (Hardware) VBD-05-0100 [1, 2], VBD-05-0101 [1, 2], VBD-05-0102 [1, 2] and VBD-05-0103 [1, 2]
Version (Firmware) 6.24.6 [1] and 6.24.7 [2]
Vendor Gemalto
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, CAST5, RC2, RC5, DES, ARIA, SEED, HMAC, CMAC
Asymmetric Algorithms
RSA 2048, RSA 4096, ECDH, ECDSA, ECIES, ECC, DH, DSA
Hash functions
MD5
Schemes
MAC, Key Agreement
Protocols
SSL, TLS
Randomness
PRNG, DRBG, RNG, RBG
Block cipher modes
ECB, CBC, CTR, OFB

Vendor
Gemalto

Security level
Level 2, level 3, Level 3, level 2
Side-channel analysis
physical probing, Timing attacks

Standards
FIPS PUB 197, FIPS PUB 113, PKCS #11, PKCS#11, PKCS #1, X.509

File metadata

Title Microsoft Word - 002-010962-001_Level 2 PCIe - FIPS Security Policy_RevE.docx
Author wtung
Creation date D:20180618120540-04'00'
Modification date D:20180618120540-04'00'
Pages 51
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 15.0 (Windows)

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3208,
  "dgst": "204d81c4117dbac5",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "CVL#1565",
        "Triple-DES MAC#2552",
        "KBKDF#165",
        "Triple-DES#2552",
        "DSA#1316",
        "KTS#5021",
        "KAS#155",
        "AES#4960",
        "RSA#2706",
        "ECDSA#1280",
        "Triple-DES#2588",
        "HMAC#3306",
        "DSA#1298",
        "AES#4849",
        "ECDSA#1242",
        "AES#5021",
        "ECDSA#1281",
        "SHS#3988",
        "Triple-DES MAC#2573",
        "SHS#4080",
        "RSA#2691",
        "DSA#1317",
        "DRBG#1704",
        "Triple-DES MAC#2588",
        "Triple-DES#2573",
        "HMAC#3335"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "6.24.7",
        "6.24.6"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 26
          },
          "ECDH": {
            "ECDH": 3
          },
          "ECDSA": {
            "ECDSA": 7
          },
          "ECIES": {
            "ECIES": 4
          }
        },
        "FF": {
          "DH": {
            "DH": 2
          },
          "DSA": {
            "DSA": 9
          }
        },
        "RSA": {
          "RSA 2048": 3,
          "RSA 4096": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CTR": {
          "CTR": 5
        },
        "ECB": {
          "ECB": 6
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 6
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 3
        },
        "MAC": {
          "MAC": 6
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 4,
          "#11": 6,
          "#1242": 2,
          "#1280": 2,
          "#1281": 2,
          "#1298": 2,
          "#1316": 2,
          "#1317": 2,
          "#155": 1,
          "#1565": 1,
          "#165": 1,
          "#1704": 1,
          "#2552": 2,
          "#2573": 2,
          "#2588": 3,
          "#2691": 2,
          "#2706": 2,
          "#3306": 2,
          "#3335": 2,
          "#3988": 1,
          "#4080": 1,
          "#4849": 1,
          "#4960": 1,
          "#5021": 4
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#2588 AES": 1,
          "AES 128, 192": 2,
          "AES 128, 192 and 256": 1,
          "AES 256": 4,
          "AES Cert. #5021": 1,
          "DSA 2048": 1,
          "PKCS #1": 8,
          "PKCS #11": 12,
          "PKCS#11": 2,
          "RSA 2048": 3,
          "RSA 4096": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 16,
          "Level 3": 2,
          "level 2": 1,
          "level 3": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 32,
          "PRNG": 1
        },
        "RNG": {
          "RBG": 1,
          "RNG": 1
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Timing attacks": 1,
          "physical probing": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS PUB 113": 1,
          "FIPS PUB 197": 2
        },
        "PKCS": {
          "PKCS #1": 4,
          "PKCS #11": 6,
          "PKCS#11": 1
        },
        "X509": {
          "X.509": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 24
          },
          "CAST": {
            "CAST5": 2
          },
          "RC": {
            "RC2": 2,
            "RC5": 2
          }
        },
        "DES": {
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 9
          }
        },
        "miscellaneous": {
          "ARIA": {
            "ARIA": 2
          },
          "SEED": {
            "SEED": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Gemalto": {
          "Gemalto": 10
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "wtung",
      "/CreationDate": "D:20180618120540-04\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20180618120540-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 15.0 (Windows)",
      "/Title": "Microsoft Word - 002-010962-001_Level 2 PCIe - FIPS Security Policy_RevE.docx",
      "pdf_file_size_bytes": 593218,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 51
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "edb9419e245b5166186fb209c56b83a85b01119976c3bd10b00304524c93c3d1",
    "policy_txt_hash": "ea04deec4f70b2d00d7113cd06113c3469b6534c5cc312cccc44b65fde2ab45d"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode and initialized to Overall Level 2 per Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/JuneCertFinal.pdf",
    "date_sunset": null,
    "description": "The SafeNet PCI-E Hardware Security Module is a multi-chip embedded hardware cryptographic module in the form of a PCI-Express card that typically resides within a custom computing or secure communications appliance. The cryptographic module is contained in its own secure enclosure that provides physical resistance to tampering. The cryptographic boundary of the module is defined to encompass all components inside the secure enclosure on the PCI-E card.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Physical Security: Level 3",
      "EMI/EMC: Level 3",
      "Design Assurance: Level 3"
    ],
    "fw_versions": "6.24.6 [1] and 6.24.7 [2]",
    "historical_reason": "SP 800-56Arev3 transition",
    "hw_versions": "VBD-05-0100 [1, 2], VBD-05-0101 [1, 2], VBD-05-0102 [1, 2] and VBD-05-0103 [1, 2]",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "SafeNet PCIe Hardware Security Module and SafeNet PCIe Hardware Security Module for SafeNet Network HSM",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-06-26",
        "lab": "EWA - Canada",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Gemalto",
    "vendor_url": "http://www.gemalto.com"
  }
}