Motorola BoringCrypto Android 14

Certificate details

Certificate ID #5519
Status active
Validation dates 11.09.2026
Sunset date 26-01-2030
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.
Vendor Motorola Mobility Inc http://www.motorola.com
Lab Gossamer Security Solutions
Algorithms
  • AES-CBCA4687
  • AES-CCMA4687
  • AES-CTRA4687
  • AES-ECBA4687
  • AES-GCMA4687
  • AES-GMACA4687
  • AES-KWA4687
  • AES-KWPA4687
  • Counter DRBGA4687
  • ECDSA KeyGen (FIPS186-4)A4687
  • ECDSA KeyVer (FIPS186-4)A4687
  • ECDSA SigGen (FIPS186-4)A4687
  • ECDSA SigVer (FIPS186-4)A4687
  • HMAC-SHA-1A4687
  • HMAC-SHA2-224A4687
  • HMAC-SHA2-256A4687
  • HMAC-SHA2-384A4687
  • HMAC-SHA2-512/256A4687
  • HMAC-SHA2-512A4687
  • KAS-ECC-SSC Sp800-56Ar3A4687
  • KAS-FFC-SSC Sp800-56Ar3A4687
  • KDA HKDF Sp800-56Cr1A4687
  • RSA KeyGen (FIPS186-4)A4687
  • RSA SigGen (FIPS186-4)A4687
  • RSA SigVer (FIPS186-4)A4687
  • SHA-1A4687
  • SHA2-224A4687
  • SHA2-256A4687
  • SHA2-384A4687
  • SHA2-512/256A4687
  • SHA2-512A4687
  • TLS v1.2 KDF RFC7627A4687
  • TLS v1.3 KDFA4687
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES-256, AES, AES-, CAST, DES, Triple-DES, HMAC, HMAC-SHA-256
Asymmetric Algorithms
ECDSA, DHE, DH
Hash functions
SHA-1, SHA-256, MD4, MD5
Schemes
MAC, Key Agreement
Protocols
TLS v1.2, TLS v1.3, TLS, TLS 1.2, TLS 1.3
Randomness
DRBG, RBG
Libraries
BoringSSL
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
CBC, GCM, SIV

Trusted Execution Environments
PSP, SSC

Security level
Level 1, level 1

Title Microsoft Word - TID-28-e072-RBND-IS-2608271143_140sp.docx
Author jjing
Creation date D:20260908145833-04'00'
Modification date D:20260908145833-04'00'
Pages 40
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 26.0 (Windows)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5519,
  "dgst": "20f1a57d5d8c667c",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-512/256A4687",
        "SHA2-224A4687",
        "KDA HKDF Sp800-56Cr1A4687",
        "TLS v1.2 KDF RFC7627A4687",
        "ECDSA KeyVer (FIPS186-4)A4687",
        "RSA KeyGen (FIPS186-4)A4687",
        "TLS v1.3 KDFA4687",
        "AES-KWPA4687",
        "AES-CCMA4687",
        "HMAC-SHA2-224A4687",
        "AES-GCMA4687",
        "KAS-ECC-SSC Sp800-56Ar3A4687",
        "AES-ECBA4687",
        "HMAC-SHA2-256A4687",
        "AES-CTRA4687",
        "SHA2-384A4687",
        "SHA-1A4687",
        "ECDSA SigVer (FIPS186-4)A4687",
        "AES-CBCA4687",
        "AES-KWA4687",
        "HMAC-SHA2-384A4687",
        "AES-GMACA4687",
        "RSA SigVer (FIPS186-4)A4687",
        "ECDSA KeyGen (FIPS186-4)A4687",
        "HMAC-SHA2-512A4687",
        "SHA2-256A4687",
        "Counter DRBGA4687",
        "SHA2-512/256A4687",
        "#A4687",
        "SHA2-512A4687",
        "ECDSA SigGen (FIPS186-4)A4687",
        "RSA SigGen (FIPS186-4)A4687",
        "KAS-FFC-SSC Sp800-56Ar3A4687",
        "HMAC-SHA-1A4687"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "14"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A4687",
            "properties": "Key Length - 128 Tag Length - 32, 64 IV Length - IV Length: 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-524288 Increment 8",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - Yes Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 0-65536 Increment 8 AAD Length - AAD Length: 0-65536 Increment 8",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GMAC",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 0-65536 Increment 8",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 64",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KWP",
            "cavpCertName": "A4687",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A4687",
            "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0-384",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Increment 16 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-384 Increment 16 Returned Bits - 2048",
            "reference": ""
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Curve - P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/256",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2- 256, SHA2-384, SHA2-512, SHA2-512/256",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A4687",
            "properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A4687",
            "properties": "MAC - MAC: 32-224 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A4687",
            "properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A4687",
            "properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A4687",
            "properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512/256",
            "cavpCertName": "A4687",
            "properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A4687",
            "properties": "Domain Parameter Generation Methods - P- 224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder staticUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A4687",
            "properties": "Domain Parameter Generation Methods - FB, FC Scheme - dhEphem - KAS Role - initiator",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDA HKDF Sp800-56Cr1",
            "cavpCertName": "A4687",
            "properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-65336 Increment 8 HMAC Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/256",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - Yes Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Private Key Format - Standard",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A4687",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Public Exponent Mode - Fixed Fixed Public Exponent - 010001",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A4687",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A4687",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A4687",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A4687",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A4687",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512/256",
            "cavpCertName": "A4687",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A4687",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "TLS v1.3 KDF (CVL)",
            "cavpCertName": "A4687",
            "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Module Initializatio n",
            "indicator": "N/A",
            "inputs": "N/A",
            "name": "Module Initializati on",
            "outputs": "Return Code",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "Symmetric encryption of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Plaintext, AAD, IV, encryptio n key",
            "name": "Symmetr ic Encryptio n",
            "outputs": "Return code, ciphertext, tag",
            "rolesSspAccess": "Crypto Officer (CO) - AES Key: W,E - AES- GCM Key: W,E",
            "secFunImpl": "Authenticat ed Encryption Encryption"
          },
          {
            "description": "Symmetric decryption of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Cipherte xt, AAD, IV, tag, decryptio n key",
            "name": "Symmetr ic Decrypti on",
            "outputs": "Return code, plaintext",
            "rolesSspAccess": "Crypto Officer (CO) - AES Key: W,E - AES- GCM Key: W,E",
            "secFunImpl": "Authenticat ed Decryption Decryption"
          },
          {
            "description": "Symmetric message authenticat ion of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Message , key",
            "name": "Keyed Hashing",
            "outputs": "Return code, Message Authenticat ion Code",
            "rolesSspAccess": "Crypto Officer (CO) - HMAC Key: W,E - AES- GCM Key: W,E",
            "secFunImpl": "Message Authenticat ion"
          },
          {
            "description": "Hashing of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Message",
            "name": "Hashing",
            "outputs": "Return code, hash",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "Hashing"
          },
          {
            "description": "Generation of random bits for calling application",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Random Bit Generati on",
            "outputs": "Return code, random bits",
            "rolesSspAccess": "Crypto Officer (CO) - CTR_DR BG Entropy Input: W,E - CTR_DR BG Seed: G,E - CTR_DR BG V: G,E - CTR_DR BG Key: G,E",
            "secFunImpl": "Random Bit Generation"
          },
          {
            "description": "Digital signature of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Message , signing key",
            "name": "Signatur e Generati on",
            "outputs": "Return code, signature",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Signing Key: W,E - RSA Signature Generatio n Key: W,E - CTR_DR BG V: E - CTR_DR BG Key: E",
            "secFunImpl": "Signature Generation"
          },
          {
            "description": "Digital signature verification of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Signatur e, verificatio n key",
            "name": "Signatur e Verificati on",
            "outputs": "Return code",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Verificatio n Key: W,E - RSA Signature Verificatio",
            "secFunImpl": "Signature Verification"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "n Key: W,E",
            "secFunImpl": ""
          },
          {
            "description": "Symmetric key wrapping service of calling application key",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, unwrapp ed key, wrapping key",
            "name": "Key Wrap Service",
            "outputs": "Return code, wrapped key",
            "rolesSspAccess": "Crypto Officer (CO) - AES Wrapping Key: W,E - Unwrapp ed Key: W - Wrapped Key: G,R",
            "secFunImpl": "AES- KeyWrap"
          },
          {
            "description": "Symmetric key unwrappin g service of calling application key",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, wrapped key",
            "name": "Key Unwrap Service",
            "outputs": "Return code, unwrapped key",
            "rolesSspAccess": "Crypto Officer (CO) - AES Wrapping Key: W,E - Wrapped Key: W - Unwrapp ed Key: G,R",
            "secFunImpl": "AES- KeyWrap"
          },
          {
            "description": "API service call parameter s",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Return code, shared secret",
            "name": "Key Agreeme nt Service",
            "outputs": "Return code, shared secret",
            "rolesSspAccess": "Crypto Officer (CO) - EC DH Private Key: G,E - EC DH Public Key: G,R - Other Party EC DH Public Key: W,E - DH Private Key: G,E - DH Public Key: W,E",
            "secFunImpl": "KAS-ECC- SSC KAS-FFC- SSC"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Other Party DH Public Key: W,E - KAS Shared Secret: G,R",
            "secFunImpl": ""
          },
          {
            "description": "Hash based key derivation for calling application",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, shared secret",
            "name": "Key Derivatio n KDA",
            "outputs": "Return code, derived keying material",
            "rolesSspAccess": "Crypto Officer (CO) - KDA Shared Secret: W,E - Derived Keying Material: G,R",
            "secFunImpl": "Key Derivation Hash Based"
          },
          {
            "description": "TLS Key derivation for calling application",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, TLS master secret",
            "name": "TLS Key Derivatio n",
            "outputs": "Return code, TLS Key",
            "rolesSspAccess": "Crypto Officer (CO) - TLS Master Secret: W,E - TLS Key Material:",
            "secFunImpl": "Key Derivation TLS 1.2 Key Derivation TLS 1.3"
          },
          {
            "description": "Asymmetri c key generation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Key Generati on",
            "outputs": "Return code, key pair",
            "rolesSspAccess": "G,R Crypto Officer (CO) - ECDSA Signing Key: G,R - ECDSA Verificatio n Key: G,R - RSA Signature Generatio n Key: G,R - RSA Signature Verificatio",
            "secFunImpl": "Signature Key Generation"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "n Key: G,R - CTR_DR BG V: E - CTR_DR BG Key: E",
            "secFunImpl": ""
          },
          {
            "description": "Asymmetri c key pair validation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, key pair",
            "name": "Key Verificati on",
            "outputs": "Return code",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Signing Key: W,E - ECDSA Verificatio n Key: W,E",
            "secFunImpl": "Signature Key Validation"
          },
          {
            "description": "On- Demand Self-Test",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "N/A",
            "name": "On- Demand Self-Test",
            "outputs": "Return Code",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "Authenticat ed Decryption Authenticat ed Encryption Decryption Encryption Hashing KAS-ECC- SSC KAS-FFC- SSC Key Derivation Hash Based Key Derivation TLS 1.2 Key Derivation TLS 1.3 Message Authenticat ion Random Bit Generation Signature"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": "Generation Signature Verification"
          },
          {
            "description": "Zeroisation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "N/A",
            "name": "Zeroisati on",
            "outputs": "N/A",
            "rolesSspAccess": "Crypto Officer (CO) - AES Key: Z - AES- GCM Key: Z - AES Wrapping Key: Z - Wrapped Key: Z - Unwrapp ed Key: Z - ECDSA Signing Key: Z - ECDSA Verificatio n Key: Z - EC DH Private Key: Z - EC DH Public Key: Z - Other Party EC DH Public Key: Z - DH Private Key: Z - DH Public Key: Z - Other Party DH Public Key: Z - KAS Shared",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Secret: Z - KDA Shared Secret: Z - HMAC Key: Z - RSA Signature Generatio n Key: Z - RSA Signature Verificatio n Key: Z - TLS Master Secret: Z - CTR_DR BG Entropy Input: Z - CTR_DR BG Seed: Z - CTR_DR BG V: Z - CTR_DR BG Key: Z - Derived Keying Material: Z",
            "secFunImpl": ""
          },
          {
            "description": "Show Status",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Show Status",
            "outputs": "Return code, status",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "Show module name",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Show Name",
            "outputs": "Return code, string of module name",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "Show module version",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Show Version",
            "outputs": "Return code, string of",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "module version",
            "rolesSspAccess": "",
            "secFunImpl": ""
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES- CBC Encrypt KAT",
            "condition": "module power-up",
            "details": "Encrypt",
            "indicator": "None on success. \"AES- CBC-encrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- CBC Decrypt KAT",
            "condition": "module power-up",
            "details": "Decrypt",
            "indicator": "None on success. \"AES- CBC-decrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- GCM Encrypt KAT",
            "condition": "module power-up",
            "details": "Encrypt",
            "indicator": "None on success. \"AES- GCM-encrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- GCM Decrypt KAT",
            "condition": "module power-up",
            "details": "Decrypt",
            "indicator": "None on success. \"AES- GCM-decrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "Counter DRBG KAT",
            "condition": "module power-up",
            "details": "Instantiat e, Reseed, Generate",
            "indicator": "None on success. \"CTR- DRBG failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "initialize, reseed, generate tests, per SP 800- 90Arev1 Section 11.3",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigGen KAT",
            "condition": "On first use",
            "details": "Sign",
            "indicator": "None on success. \"ECDSA-sign KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigVer KAT",
            "condition": "On first use",
            "details": "Verify",
            "indicator": "None on success. \"ECDSA-verify KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA2- 256 KAT",
            "condition": "module power-up",
            "details": "MAC",
            "indicator": "None on success. \"HMAC-SHA-256 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS- ECC- SSC Sp800- 56Ar3 KAT",
            "condition": "On first use",
            "details": "SSC",
            "indicator": "None on success. \"Z- computation KAT failed.\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS- FFC- SSC Sp800- 56Ar3 KAT",
            "condition": "On first use",
            "details": "SSC",
            "indicator": "None on success. \"FFDH failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KDA HKDF Sp800- 56Cr1 KAT",
            "condition": "module power-up",
            "details": "KDF",
            "indicator": "None on success. \"HKDF failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "HMAC SHA-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA SigGen KAT",
            "condition": "On first use",
            "details": "Sign",
            "indicator": "None on success. \"RSA- sign KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA SigVer KAT",
            "condition": "On first use",
            "details": "Verify",
            "indicator": "None on success. \"RSA- verify KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA-1 KAT",
            "condition": "module power-up",
            "details": "Hash",
            "indicator": "None on success. \"SHA- 1 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "n/a",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA2- 256 KAT",
            "condition": "module power-up",
            "details": "Hash",
            "indicator": "None on success. \"SHA- 256 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "n/a",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA2- 512 KAT",
            "condition": "module power-up",
            "details": "Hash",
            "indicator": "None on success. \"SHA- 512 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "n/a",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC762 7 KAT",
            "condition": "module power-up",
            "details": "KDF",
            "indicator": "None on success. \"TLS12-KDF KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.3 KDF KAT",
            "condition": "module power-up",
            "details": "KDF",
            "indicator": "None on success. \"TLS13-KDF KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen PCT",
            "condition": "Keypair generated",
            "details": "Sign/Veri fy PCT",
            "indicator": "None on success. \"EC_KEY_generate_key_ fips failed\" on stderr on failure.",
            "testMethod": "Sign/Veri fy PCT",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen PCT",
            "condition": "Keypair generated",
            "details": "Sign/Veri fy PCT",
            "indicator": "None on success. \"RSA_generate_key_fips failed\" on stderr on failure.",
            "testMethod": "Sign/Veri fy PCT",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KAS- ECC- SSC Sp800- 56Ar3 PCT",
            "condition": "Keypair generated",
            "details": "SP 800- 56Arev3 validity tests",
            "indicator": "None on success. Module aborted on failure.",
            "testMethod": "SP 800- 56Arev3 validity tests",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KAS- FFC- SSC Sp800- 56Ar3 PCT",
            "condition": "Keypair generated",
            "details": "SP 800- 56Arev3 validity tests",
            "indicator": "None on success. Module aborted on failure.",
            "testMethod": "SP 800- 56Arev3 validity tests",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Failure of any FIPS self-test",
            "description": "The module\u0027s error state",
            "indicator": "Possible indication of failed test on stderr. Module aborts.",
            "name": "Error state",
            "recoveryMethod": "Restart the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "When all self-tests pass and only Approved algorithms are invoked",
            "name": "Approved",
            "statusIndicator": "Per service indication",
            "type": "Approved"
          },
          {
            "description": "When a non-Approved algorithm is invoked",
            "name": "Non- Approved",
            "statusIndicator": "Per service indication",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "MD5, MD4",
            "use": "Non-Approved Hashing"
          },
          {
            "name": "POLYVAL",
            "use": "Non-Approved authenticated encryption"
          },
          {
            "name": "DES, Triple-DES (non-compliant)",
            "use": "Non-Approved encryption/decryption"
          },
          {
            "name": "AES (non-compliant)",
            "use": "Non-Approved encryption/decryption"
          },
          {
            "name": "DH (non-compliant)",
            "use": "Non-Approved key agreement"
          },
          {
            "name": "RSA PKCS #1 v1.5 key wrapping (non-compliant)",
            "use": "Non-Approved key wrapping"
          },
          {
            "name": "TLS 1.0/1.1 KDF (non-compliant)",
            "use": "Non-Approved TLS key derivation"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "TLS 1.0/1.1 KDF (non-compliant)",
            "description": "Perform hashing operations when used with the TLS protocol version 1.0 and 1.1",
            "name": "TLS 1.0/1.1 KDF",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "MD5, MD4",
            "description": "Perform hashing operations",
            "name": "Hashing",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "POLYVAL",
            "description": "Used as part of AES-GCM- SIV",
            "name": "Hashing for GCM-SIV",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "DES, Triple-DES (non-compliant) AES (non-compliant)",
            "description": "Perform symmetric encryption and/or decryption operations",
            "name": "Symmetric encryption/decryption",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "RSA PKCS #1 v1.5 key wrapping (non- compliant)",
            "description": "Perform RSA PKCS #1 v1.5 key transport",
            "name": "Key Transport",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "DH (non-compliant)",
            "description": "Perform non-compliant DH key agreement",
            "name": "Key Agreement",
            "role": "Crypto Officer (CO)"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input parameters",
            "logicalInterface": "Data Input",
            "physicalPort": "n/a"
          },
          {
            "data": "API output parameters and return values",
            "logicalInterface": "Data Output",
            "physicalPort": "n/a"
          },
          {
            "data": "API input parameters",
            "logicalInterface": "Control Input",
            "physicalPort": "n/a"
          },
          {
            "data": "API return values",
            "logicalInterface": "Status Output",
            "physicalPort": "n/a"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer (CO)",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A4687)",
            "details": "Single HMAC over entire module",
            "indicator": "return code of 1 for success, 0 for failure",
            "testMethod": "Integrity",
            "testProps": "Hardcoded 512 bit key",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "RAM",
            "distribution": "N/A",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "PT Input",
            "sfiAlgo": "",
            "source": "Calling Application"
          },
          {
            "dest": "Calling Application",
            "distribution": "N/A",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "PT Output",
            "sfiAlgo": "",
            "source": "RAM"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Turn off or power cycle the host computer to clear all RAM contents",
            "method": "Power Cycle Host",
            "operatorId": "Procedural - turn off or power cycle host",
            "rationale": "All module SSPs are held ephemerally in RAM, so turning off or power cycling the computer will cause them to be irretrievably lost."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Ephemeral storage in RAM",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "",
            "integrityTest": "Yes - single encompassing test",
            "packageFileName": "bcm.o",
            "swFwVersion": "2023042800"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Google Pixel 8",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 14",
            "paa_pai": "Yes",
            "processors": "Google Tensor G3 64- bit",
            "version": "2023042800"
          },
          {
            "hardwarePlatform": "Google Pixel 8",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 14",
            "paa_pai": "No",
            "processors": "Google Tensor G3 64- bit",
            "version": "2023042800"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Asymmetric",
            "implName": "N/A",
            "name": "CKG",
            "reference": "Section 4, example 1: U is directly output without XORing V"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 31
          }
        },
        "FF": {
          "DH": {
            "DH": 45,
            "DHE": 1
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "GCM": {
          "GCM": 6
        },
        "SIV": {
          "SIV": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "BoringSSL": {
          "BoringSSL": 1
        }
      },
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 32,
            "TLS 1.2": 6,
            "TLS 1.3": 7,
            "TLS v1.2": 7,
            "TLS v1.3": 7
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 8
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 12,
          "P-256": 22,
          "P-384": 10,
          "P-521": 10
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 3
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 2,
          "AES- CBC Decrypt KAT 128": 1,
          "AES- CBC Encrypt KAT 128": 1,
          "AES- GCM Decrypt KAT 128": 1,
          "AES- GCM Encrypt KAT 128": 1,
          "AES-256": 1,
          "HMAC SHA-256": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-256": 4,
          "PKCS #1": 3,
          "PKCS 1": 2,
          "RSA PKCS #1": 3,
          "SHA- 1": 1,
          "SHA- 256": 1,
          "SHA- 512": 1,
          "SHA-1": 5,
          "SHA-256": 4,
          "SHA2- 256": 3,
          "SHA2- 512": 1,
          "SHA2-224": 6,
          "SHA2-256": 6,
          "SHA2-384": 7,
          "SHA2-512": 6,
          "SHA2224": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-256": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 15
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 10,
          "FIPS 180-4": 7,
          "FIPS 186-4": 7,
          "FIPS 186-5": 1,
          "FIPS 198-1": 6,
          "FIPS186-4": 14
        },
        "NIST": {
          "NIST SP 800-38D": 1,
          "SP 800-135": 2,
          "SP 800-38A": 3,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-38F": 2,
          "SP 800-56A": 2,
          "SP 800-56C": 1,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS #1": 3,
          "PKCS 1": 2
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1,
          "RFC 7627": 1,
          "RFC 8446": 3,
          "RFC762": 1,
          "RFC7627": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 19,
            "AES-": 14,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 20
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 2
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 9,
            "HMAC-SHA-256": 2
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 6
        },
        "IBM": {
          "SSC": 22
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-512/256A4687",
        "SHA2-224A4687",
        "KDA HKDF Sp800-56Cr1A4687",
        "TLS v1.2 KDF RFC7627A4687",
        "ECDSA KeyVer (FIPS186-4)A4687",
        "RSA KeyGen (FIPS186-4)A4687",
        "TLS v1.3 KDFA4687",
        "AES-KWPA4687",
        "AES-CCMA4687",
        "HMAC-SHA2-224A4687",
        "AES-GCMA4687",
        "KAS-ECC-SSC Sp800-56Ar3A4687",
        "AES-ECBA4687",
        "HMAC-SHA2-256A4687",
        "AES-CTRA4687",
        "SHA2-384A4687",
        "SHA-1A4687",
        "ECDSA SigVer (FIPS186-4)A4687",
        "AES-CBCA4687",
        "AES-KWA4687",
        "HMAC-SHA2-384A4687",
        "AES-GMACA4687",
        "RSA SigVer (FIPS186-4)A4687",
        "ECDSA KeyGen (FIPS186-4)A4687",
        "HMAC-SHA2-512A4687",
        "SHA2-256A4687",
        "Counter DRBGA4687",
        "SHA2-512/256A4687",
        "SHA2-512A4687",
        "ECDSA SigGen (FIPS186-4)A4687",
        "RSA SigGen (FIPS186-4)A4687",
        "KAS-FFC-SSC Sp800-56Ar3A4687",
        "HMAC-SHA-1A4687"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4687"
      ]
    },
    "policy_metadata": {
      "/Author": "jjing",
      "/CreationDate": "D:20260908145833-04\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20260908145833-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 26.0 (Windows)",
      "/Title": "Microsoft Word - TID-28-e072-RBND-IS-2608271143_140sp.docx",
      "pdf_file_size_bytes": 418979,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 40
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "3146d50f63988c111bfdd88939187ad6e022d8b59fd8d9a1b3aece65a5a64659",
      "source_hash": "18b6d7d4234026bd55649d94bb9178ee84c7f6b74e88cd492c81606c137dfb5a",
      "txt_hash": "97e7578d9d203e8a993a33567e013ae51bd5b129ece4db057951fef5e214f250"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": null,
    "date_sunset": "2030-01-26",
    "description": "A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Motorola BoringCrypto Android 14",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-09-11",
        "lab": "Gossamer Security Solutions",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Motorola Mobility Inc",
    "vendor_url": "http://www.motorola.com"
  }
}