This page was not yet optimized for use on mobile devices.
AWS-LC Cryptographic Module (static)
Certificate details
| Certificate ID | #4816 |
|---|---|
| Status | active |
| Validation dates | 01.10.2024 |
| Sunset date | 30-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys) |
| Exceptions |
|
| Description | AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project. |
| Vendor | Amazon Web Services Inc. http://aws.amazon.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, HMAC-RIPEMD-160Asymmetric Algorithms
ECDH, ECDSA, Diffie-HellmanHash functions
SHA-1, SHA-3, MD4, MD5, RIPEMD-160, PBKDF, PBKDF2Schemes
MACProtocols
SSH, TLS, TLS 1.2, TLS 1.3Randomness
DRBG, RBGElliptic Curves
P-224, P-256, P-384, P-521, secp256k1Block cipher modes
OFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Side-channel analysis
timing attacks, Fault InductionStandards
FIPS 140-3, FIPS 2, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, SP 800-56A, SP 800-56C, SP 800-135, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-38D, PKCS 1, PKCS#1, RFC5288, RFC8446, RFC 4253, RFC 6668, RFC 5288Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4816,
"dgst": "21445af8f7acc5de",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"SHA2-512/256A4534",
"AES-ECBA4530",
"AES-XTS Testing Revision 2.0A4527",
"ECDSA KeyVer (FIPS186-5)A4534",
"#A4534",
"AES-CMACA4527",
"#A4526",
"#A4518",
"#A4520",
"Counter DRBGA4527",
"#A4515",
"#A4523",
"#A4519",
"RSA SigVer (FIPS186-5)A4534",
"#A4529",
"#A4524",
"SHA2-256A4534",
"SHA2-384A4534",
"#A4528",
"HMAC-SHA2-224A4534",
"AES-CBCA4527",
"HMAC-SHA2-384A4534",
"KDF TLSA4534",
"#A4516",
"#A4533",
"#A4509",
"RSA SigVer (FIPS186-4)A4534",
"HMAC-SHA-1A4534",
"#A4517",
"AES-KWPA4527",
"#A4527",
"#A4532",
"#A4510",
"#A4522",
"ECDSA KeyGen (FIPS186-5)A4534",
"#A4521",
"SHA2-512A4534",
"#A4530",
"#A4513",
"KAS-ECC-SSC Sp800-56Ar3A4534",
"#A4514",
"RSA KeyGen (FIPS186-5)A4534",
"RSA SigGen (FIPS186-5)A4534",
"ECDSA SigVer (FIPS186-4)A4534",
"HMAC-SHA2-512A4534",
"AES-CCMA4527",
"KDF SSHA4534",
"#A4511",
"ECDSA SigVer (FIPS186-5)A4534",
"SHA-1A4534",
"#A4512",
"AES-KWA4527",
"SHA2-224A4534",
"#A4531",
"KDA HKDF Sp800-56Cr1A4534",
"HMAC-SHA2-512/256A4534",
"HMAC-SHA2-256A4534",
"ECDSA SigGen (FIPS186-5)A4534",
"AES-CTRA4527",
"AES-GCMA4530",
"#A4525",
"PBKDFA4534",
"AES-GMACA4530"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 1,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4509",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4509",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4509",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4509",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4509",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4509",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4509",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4509",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4509",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4509",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4509",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4509",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4509",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4509",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4509",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4509",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4509",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4509",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4509",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4509",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4509",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4509",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4509",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4509",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4509",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4509",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4510",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4510",
"properties": "Direction - Generation, Verification Key Length - 128, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4510",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4510",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - No",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4511",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4511",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4511",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4512",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4512",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4512",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4513",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4513",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4513",
"properties": "Direction - Generation, Verification Key Length - 128, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4513",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4513",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4513",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4513",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4513",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4513",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - No",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4514",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4514",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4514",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4515",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4515",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4515",
"properties": "Direction - Generation, Verification Key Length - 128, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4515",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4515",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4515",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4515",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4515",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4515",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - No",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4516",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4516",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4516",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4517",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4517",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4517",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4517",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4517",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4517",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4517",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4517",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4517",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4517",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4517",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4517",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4517",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4517",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4517",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4517",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4517",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4517",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4517",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4517",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4517",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4517",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4517",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4517",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4517",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4517",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4518",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4518",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4518",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4518",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4518",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4518",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4518",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4518",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4518",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4518",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4518",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4518",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4518",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4518",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4518",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4518",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4518",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4518",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4518",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4518",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4519",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4519",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4519",
"properties": "Direction - Generation, Verification Key Length - 128, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4519",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4519",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4519",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4519",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4519",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4519",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - No",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4520",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4520",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4520",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4521",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4521",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4521",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4522",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4522",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4522",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": ""
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4523",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4523",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4523",
"properties": "Direction - Generation, Verification Key Length - 128, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4523",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4523",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4523",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4523",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4523",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4523",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - No",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4524",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4524",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4524",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4525",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4525",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4525",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4526",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4526",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4526",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4527",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4527",
"properties": "Key Length - 128",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4527",
"properties": "Direction - Generation, Verification Key Length - 128, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4527",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4527",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4527",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4527",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4527",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4527",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - No",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4528",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4528",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4528",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4529",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4529",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4529",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4530",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4530",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4530",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4531",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4531",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4531",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-",
"reference": "FIPS 186-5"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "384, SHA2-512 Component - No",
"reference": ""
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4531",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4531",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4531",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4531",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4531",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4531",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4531",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4531",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4531",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4531",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4531",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4531",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4531",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4531",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4531",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4531",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4531",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4531",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4531",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4531",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4531",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4531",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4531",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4532",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4532",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4532",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4532",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4532",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4532",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4532",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4532",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4532",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4532",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4532",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4532",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4532",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4532",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4532",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4532",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4532",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4532",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4532",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4532",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4532",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4532",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4532",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4532",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4532",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4532",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4533",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4533",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4533",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4533",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4533",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4533",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4533",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4533",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4533",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4533",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4533",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4533",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4533",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4533",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4533",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4533",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4533",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4533",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4533",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4533",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4533",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4533",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4533",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4533",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4533",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4533",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A4534",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A4534",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A4534",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4534",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A4534",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4534",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4534",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4534",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4534",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4534",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4534",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4534",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4534",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4534",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A4534",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4534",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 14-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 5)",
"cavpCertName": "A4534",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-5"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Primality Tests - 2powSecStr Private Key Format - standard",
"reference": ""
},
{
"algorithm": "RSA SigGen (FIPS186- 5)",
"cavpCertName": "A4534",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A4534",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A4534",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4534",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4534",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4534",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4534",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4534",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4534",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Encryption",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "AES key, plaintext",
"name": "Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption/Decrypt ion with AES"
},
{
"description": "Decryption",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "AES key, ciphertext",
"name": "Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption/Decrypt ion with AES"
},
{
"description": "Authenticated Encryption",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "AES key, plaintext",
"name": "Authenticate d Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenticated Encryption/Decrypt ion with AES CCM Authenticated Encryption/Decrypt ion with AES GCM"
},
{
"description": "Authenticated Decryption",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "AES key, ciphertext",
"name": "Authenticate d Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenticated Encryption/Decrypt ion with AES CCM Authenticated Encryption/Decrypt ion with AES GCM"
},
{
"description": "Encrypting a key",
"indicator": "Return value 1 from the function: FIPS_ service_",
"inputs": "AES key wrapping key, Key",
"name": "Key Wrapping",
"outputs": "Wrapped key",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Key Wrapping/Unwrapp ing with AES KW, AES-KWP"
},
{
"description": "",
"indicator": "indicator_ check_approve d()",
"inputs": "to be wrapped",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Key Wrapping/Unwrapp ing with AES GCM Key Wrapping/Unwrapp ing with AES CCM"
},
{
"description": "Decrypting a key",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "AES key unwrappi ng key, Key to be unwrappe d",
"name": "Key unwrapping",
"outputs": "Unwrappe d key",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Key Wrapping/Unwrapp ing with AES KW, AES-KWP Key Wrapping/Unwrapp ing with AES GCM Key Wrapping/Unwrapp ing with AES CCM"
},
{
"description": "MAC computation",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "AES key or HMAC key, message",
"name": "Message Authenticati on Generation",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC Key: W,E",
"secFunImpl": "Message Authentication Generation with HMAC Message Authentication Generation with AES"
},
{
"description": "Generating message digest",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest with SHA"
},
{
"description": "Generating random numbers",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Output length",
"name": "Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - Entropy Input: W,E - DRBG Seed: G,E - DRBG Internal State (V, Key): G,W,E",
"secFunImpl": "Random Number Generation with DRBG"
},
{
"description": "Generating a key pair",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Modulus size / Curve",
"name": "Key Generation",
"outputs": "RSA public key, RSA private key / EC public key, EC private key",
"rolesSspAccess": "Crypto Officer - RSA Public Key : G,R - RSA Private Key: G,R - EC Public Key: G,R - EC Private Key: G,R",
"secFunImpl": "Key Generation with RSA Key Generation with ECDSA"
},
{
"description": "Verifying the public key",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Public key",
"name": "Key Verification",
"outputs": "Success/ error",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E",
"secFunImpl": "Key Verification with ECDSA"
},
{
"description": "Generating signature",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Message, EC private key or RSA private key",
"name": "Signature Generation",
"outputs": "Digital signature",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E - EC Private Key: W,E",
"secFunImpl": "Signature Generation with RSA Signature Generation with ECDSA"
},
{
"description": "Verifying signature",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d(",
"inputs": "Signature, EC public key or RSA public key",
"name": "Signature Verification",
"outputs": "Digital signature verificatio n result",
"rolesSspAccess": "Crypto Officer - RSA Public Key : W,E - EC Public Key: W,E",
"secFunImpl": "Signature Verification with ECDSA Signature Verification with RSA"
},
{
"description": "Calculating the Shared Secret",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "EC public key, EC private key",
"name": "Shared Secret Computation",
"outputs": "Shared Secret",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E - EC Private Key: W,E - Shared Secret: G,R",
"secFunImpl": "Shared Secret Computation with EC Diffie-Hellman"
},
{
"description": "Deriving Keys",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "TLS Pre- Master Secret / TLS Master Secret",
"name": "Key Derivation with TLS KDF",
"outputs": "TLS Master secret / TLS Derived Key (AES/HMA C)",
"rolesSspAccess": "Crypto Officer - TLS Pre- Master Secret: W,E - TLS Master Secret : G,W,E - TLS Derived Key (AES/HMAC ): G",
"secFunImpl": "Key Derivation with TLS KDF"
},
{
"description": "Deriving Keys",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Password, salt, iteration count",
"name": "Key Derivation with PBKDF",
"outputs": "PBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - PBKDF Derived Key: G,R - Password: W,E",
"secFunImpl": "Key Derivation with PBKDF"
},
{
"description": "Deriving Keys",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Shared Secret, Key Length, Digest",
"name": "Key Derivation with KDA HKDF",
"outputs": "KDA Derived Key",
"rolesSspAccess": "Crypto Officer - KDA Derived Key: G,R - Shared Secret: W,E",
"secFunImpl": "Key Derivation with KDA HKDF"
},
{
"description": "Deriving Keys",
"indicator": "Return value 1 from the function: FIPS_ service_ indicator_ check_approve d()",
"inputs": "Shared Secret, Key Length",
"name": "Key Derivation with SSH KDF",
"outputs": "SSH Derived Key",
"rolesSspAccess": "Crypto Officer - SSH Derived Key: G,R - Shared Secret: W,E",
"secFunImpl": "Key Derivation with SSH KDF"
},
{
"description": "Zeroize SSP in volatile memory",
"indicator": "N/A",
"inputs": "SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES Key: Z - HMAC Key: Z - Entropy Input: Z - DRBG Seed: Z - DRBG Internal State (V, Key): Z - RSA Public Key : Z - RSA Private Key: Z - RSA Private Key: Z - EC Public Key: Z - EC Private Key: Z - Shared Secret: Z - TLS Pre- Master Secret: Z - TLS Master Secret : Z - TLS Derived Key (AES/HMAC ): Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- TLS Derived Key (AES/HMAC ): Z - Password: Z - Intermedia te Key Generation Value: Z",
"secFunImpl": ""
},
{
"description": "Initiate power-on self-tests by reset",
"indicator": "N/A",
"inputs": "N/A",
"name": "On-Demand Self-test",
"outputs": "Pass or fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Shared Secret Computation with EC Diffie-Hellman Key Wrapping/Unwrapp ing with AES KW, AES-KWP Key Wrapping/Unwrapp ing with AES GCM Key Wrapping/Unwrapp ing with AES CCM Encryption/Decrypt ion with AES Signature Generation with RSA Signature Generation with ECDSA Key Generation with RSA Key Generation with ECDSA Key Generation with RSA Signature Verification with ECDSA Signature Verification with RSA Key Verification with ECDSA Key Derivation with TLS KDF Key Derivation with SSH KDF Key Derivation with KDA HKDF Key Derivation with PBKDF Message Digest"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "with SHA Random Number Generation with DRBG Message Authentication Generation with HMAC Message Authentication Generation with AES Authenticated Encryption/Decrypt ion with AES CCM Authenticated Encryption/Decrypt ion with AES GCM"
},
{
"description": "Initiate integrity test on-demand",
"indicator": "N/A",
"inputs": "N/A",
"name": "On-Demand Integrity Test",
"outputs": "Pass or fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Authentication Generation with HMAC"
},
{
"description": "Show status of the module state",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show the version of the module using awslc_version_stri ng",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Version",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC (A4513)",
"condition": "Power up",
"details": "Encrypt",
"indicator": "Module is operational",
"testMethod": "Encrypt KAT",
"testProps": "128-bit AES key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4510)",
"condition": "Power up",
"details": "Decrypt",
"indicator": "Module is operational",
"testMethod": "Decrypt KAT",
"testProps": "128-bit AES key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4511)",
"condition": "Power up",
"details": "Encrypt",
"indicator": "Module is operational",
"testMethod": "Encrypt KAT",
"testProps": "128-bit AES key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4511)",
"condition": "Power up",
"details": "Decrypt",
"indicator": "Module is operational",
"testMethod": "Decrypt KAT",
"testProps": "128-bit AES key",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4509)",
"condition": "Power up",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "SHA-1 KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4509)",
"condition": "Power up",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "SHA2-256 KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4509)",
"condition": "Power up",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "SHA2-512 KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4509)",
"condition": "Power up",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "HMAC KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4513)",
"condition": "Power up",
"details": "Seed Generation",
"indicator": "Module is operational",
"testMethod": "CTR_DRBG KAT",
"testProps": "AES 256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4513)",
"condition": "Power up",
"details": "Seed Generation",
"indicator": "Module is operational",
"testMethod": "SP800-90Ar1 Section 11.3 Health Test",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A4509)",
"condition": "Signature Generation or Key Generation service request",
"details": "Sign",
"indicator": "Module is operational",
"testMethod": "Sign KAT",
"testProps": "P-256 Curve and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4509)",
"condition": "Signature verification or Key Generation service request",
"details": "Verify",
"indicator": "Module is operational",
"testMethod": "Verify KAT",
"testProps": "P-256 Curve and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4509)",
"condition": "Shared secret computation request",
"details": "Shared secret computation",
"indicator": "Module is operational",
"testMethod": "Z computation",
"testProps": "P-256 Curve",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A4509)",
"condition": "Key generation",
"details": "Sign and Verify",
"indicator": "Module is operational",
"testMethod": "Signature generation and verification",
"testProps": "Respective Curve and SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "KDF TLS (A4509)",
"condition": "Power up",
"details": "Key derivation",
"indicator": "Module is operational",
"testMethod": "TLS 1.2 KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A4509)",
"condition": "Power up",
"details": "Key derivation",
"indicator": "Module is operational",
"testMethod": "KDA HKDF KAT",
"testProps": "HMAC-SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4509)",
"condition": "Power up",
"details": "Key derivation",
"indicator": "Module is operational",
"testMethod": "PBKDF2 KAT",
"testProps": "HMAC-SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A4509)",
"condition": "Signature Generation or Key Generation service request",
"details": "Sign",
"indicator": "Module is operational",
"testMethod": "Sign KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4509)",
"condition": "Signature Verification or Key Generation service request",
"details": "Verify",
"indicator": "Module is operational",
"testMethod": "Verify KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A4509)",
"condition": "Key generation",
"details": "Sign and Verify",
"indicator": "Module is operational",
"testMethod": "Signature generation and verification",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Pre- operational test failure",
"description": "The library is aborted with SIGABRT signal. Module is no longer operational the data output interface is inhibited",
"indicator": "Error message is output on the stderr and then the module is aborted.",
"name": "Error",
"recoveryMethod": "Module reset"
},
{
"conditions": "Conditional test failure",
"description": "The library is aborted with SIGABRT signal. Module is no longer operational the data output interface is inhibited",
"indicator": "For CAST failure, an error message is output on the stderr and then the module is aborted. For PCT failure, an error message is output in the error queue and then the module generates new key, If the PCT still does not pass, eventually the module will be aborted after 5 tries.",
"name": "PCT Error",
"recoveryMethod": "Module reset"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested.",
"name": "Approved Mode",
"statusIndicator": "Equivalent to the indicator of the requested service.",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested.",
"name": "Non-approved Mode",
"statusIndicator": "Equivalent to the indicator of the requested service.",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES with OFB or CFB1, CFB8 modes",
"use": "Encryption, Decryption"
},
{
"name": "AES GCM, GCM, GMAC, XTS with keys not listed in Table 5",
"use": "Encryption, Decryption"
},
{
"name": "AES using aes_*_generic function",
"use": "Encryption, Decryption"
},
{
"name": "AES GMAC using aes_*_generic",
"use": "Message Authentication Generation"
},
{
"name": "Curve secp256k1",
"use": "Signature Generation, Signature Verification, Shared Secret Computation"
},
{
"name": "Diffie Hellman",
"use": "Shared Secret Computation"
},
{
"name": "HMAC-MD4, HMAC-MD5, HMAC-SHA1, HMAC-SHA-3, HMAC- RIPEMD-160",
"use": "Message Authentication Generation"
},
{
"name": "MD4",
"use": "Message Digest"
},
{
"name": "MD5 (outside of TLS)",
"use": "Message Digest"
},
{
"name": "RSA using RSA_generate_key_ex",
"use": "Key Generation"
},
{
"name": "ECDSA using EC_KEY_generate_key",
"use": "Key Generation"
},
{
"name": "RSA using keys less than 2048 bits",
"use": "Signature Generation"
},
{
"name": "RSA using keys less than 1024 bits",
"use": "Signature Verification"
},
{
"name": "RSA without hashing",
"use": "Sign/Verify primitive operations"
},
{
"name": "RSA encryption primitive with PKCS#1 v1.5 and OAEP padding",
"use": "Encryption"
},
{
"name": "SHA-1, SHA-3",
"use": "Signature Generation"
},
{
"name": "SHAKE, RIPEMD-160, SHA-3",
"use": "Message Digest"
},
{
"name": "TLS KDF using any SHA algorithms other than SHA2-256, SHA2-384, SHA2-512; or TLS KDF using non-extended master secret",
"use": "Key Derivation"
},
{
"name": "RSA",
"use": "Key Encapsulation/Un-encapsulation"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES with OFB or CFB1, CFB8 modes AES GCM, GCM, GMAC, XTS with keys not listed in Table 5 AES using aes_*_generic function AES GMAC using aes_*_generic RSA encryption primitive with PKCS#1 v1.5 and OAEP padding",
"description": "Encryption",
"name": "Encryption",
"role": "CO"
},
{
"alg_accessed": "AES with OFB or CFB1, CFB8 modes AES GCM, GCM, GMAC, XTS with keys not listed in Table 5 AES using aes_*_generic function AES GMAC using aes_*_generic",
"description": "Decryption",
"name": "Decryption",
"role": "CO"
},
{
"alg_accessed": "AES GMAC using aes_*_generic HMAC-MD4, HMAC-MD5, HMAC-SHA1, HMAC-SHA-3, HMAC-RIPEMD-160",
"description": "MAC computation",
"name": "Message Authentication Generation",
"role": "CO"
},
{
"alg_accessed": "MD4 MD5 (outside of TLS) SHAKE, RIPEMD-160, SHA-3",
"description": "Generating message digest",
"name": "Message Digest",
"role": "CO"
},
{
"alg_accessed": "RSA using keys less than 2048 bits RSA without hashing SHA-1, SHA-3",
"description": "Generating signatures",
"name": "Signature Generation",
"role": "CO"
},
{
"alg_accessed": "RSA using keys less than 1024 bits RSA without hashing",
"description": "Verifying signatures",
"name": "Signature Verification",
"role": "CO"
},
{
"alg_accessed": "RSA using RSA_generate_key_ex ECDSA using EC_KEY_generate_key",
"description": "Generating key pair",
"name": "Key Generation",
"role": "CO"
},
{
"alg_accessed": "Curve secp256k1 Diffie Hellman",
"description": "Calculating shared secret",
"name": "Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "TLS KDF using any SHA algorithms other than SHA2- 256, SHA2-384, SHA2-512; or TLS KDF using non- extended master secret",
"description": "Deriving TLS keys",
"name": "Key Derivation",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Encrypting a key",
"name": "Key Encapsulation",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Decrypting a key",
"name": "Key Un- encapsulation",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters for data.",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters for data.",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls.",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "return codes, error message.",
"logicalInterface": "Status Output API",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256 (A4509)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle.",
"method": "Free Cipher Handle",
"operatorId": "By calling the appropriate zeroization functions: OpenSSL_cleanse, EVP_CIPHER_CTX_cleanup, EVP_AEAD_CTX_zero, HMAC_CTX_cleanup, CTR_DRBG_clear, RSA_free, EC_KEY_free",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module.",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
},
{
"description": "Automatically zeroized when no longer needed",
"method": "Automatically",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeros, which renders the SSP values irretrievable."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [],
"found": false,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Amazon Linux 2 with Intel \u00aeXeon \u00ae Platinum 8275CL",
"swFwVersion": "AWS-LC FIPS 2.0.0"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Amazon Linux 2023 with Intel \u00aeXeon \u00ae Platinum 8275CL",
"swFwVersion": "AWS-LC FIPS 2.0.0"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Ubuntu 22.04 with Intel \u00aeXeon \u00ae Platinum 8275CL",
"swFwVersion": "AWS-LC FIPS 2.0.0"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Amazon Linux 2 with Gravition3",
"swFwVersion": "AWS-LC FIPS 2.0.0"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Amazon Linux 2023 with Gravition3",
"swFwVersion": "AWS-LC FIPS 2.0.0"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Ubuntu 22.04 with Gravition3",
"swFwVersion": "AWS-LC FIPS 2.0.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Amazon EC2 c5.metal with 192 GiB system memory and Elastic Block Store (EBS) 200 GiB",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Platinum 8275CL",
"version": "AWS-LC FIPS 2.0.0"
},
{
"hardwarePlatform": "Amazon EC2 c5.metal with 192 GiB system memory and Elastic Block Store (EBS) 200 GiB",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Platinum 8275CL",
"version": "AWS-LC FIPS 2.0.0"
},
{
"hardwarePlatform": "Amazon EC2 c5.metal with 192 GiB system memory and Elastic Block Store (EBS) 200 GiB",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Platinum 8275CL",
"version": "AWS-LC FIPS 2.0.0"
},
{
"hardwarePlatform": "Amazon EC2 c7g.metal with 128 GiB system memory and Elastic Block Store (EBS) 200 GiB",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2",
"paa_pai": "Yes",
"processors": "Graviton3",
"version": "AWS-LC FIPS 2.0.0"
},
{
"hardwarePlatform": "Amazon EC2 c7g.metal with 128 GiB system memory and Elastic Block Store (EBS) 200 GiB",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Graviton3",
"version": "AWS-LC FIPS 2.0.0"
},
{
"hardwarePlatform": "Amazon EC2 c7g.metal with 128 GiB system memory and Elastic Block Store (EBS) 200 GiB",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "Yes",
"processors": "Graviton3",
"version": "AWS-LC FIPS 2.0.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength",
"implName": "AWS-LC Cryptographic Module (static build) (SHA_ASM)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
},
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength.",
"implName": "AWS-LC Cryptographic Module (static build) (SHA_CE)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
},
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength.",
"implName": "AWS-LC Cryptographic Module (static build) (NEON)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
},
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength.",
"implName": "AWS-LC Cryptographic Module (static build) (SHA_SHANI)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
},
{
"algoPropList": "EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength.",
"implName": "",
"name": "",
"reference": ""
},
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength.",
"implName": "AWS-LC Cryptographic Module (static build) (SHA_AVX2)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
},
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength.",
"implName": "AWS-LC Cryptographic Module (static build) (SHA_AVX)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
},
{
"algoPropList": "RSA (FIPS 186-5):2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. EC (FIPS 186-5):P-224, P-256, P 384, P-521 elliptic curves with 112-256 bits of key strength.",
"implName": "AWS-LC Cryptographic Module (static build) (SHA_SSSE3)",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 5.1 and 5.2"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 2
},
"ECDSA": {
"ECDSA": 88
}
},
"FF": {
"DH": {
"Diffie-Hellman": 5
}
}
},
"certification_process": {},
"cipher_mode": {
"CCM": {
"CCM": 12
},
"GCM": {
"GCM": 25
},
"OFB": {
"OFB": 3
},
"XTS": {
"XTS": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"SSH": {
"SSH": 32
},
"TLS": {
"TLS": {
"TLS": 77,
"TLS 1.2": 5,
"TLS 1.3": 4
}
}
},
"crypto_scheme": {
"MAC": {
"MAC": 6
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 92,
"P-256": 116,
"P-384": 94,
"P-521": 110,
"secp256k1": 2
}
},
"eval_facility": {
"atsec": {
"atsec": 62
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 7,
"AES 256": 1,
"AES-128": 8,
"AES-192": 8,
"AES-256": 15,
"AES-GCM 2": 1,
"HMAC-SHA-1": 28,
"HMAC-SHA-3": 4,
"HMAC-SHA1": 4,
"PKCS 1": 7,
"PKCS#1": 8,
"RSA 2024": 1,
"SHA-1": 45,
"SHA-3": 4,
"SHA2- 256": 3,
"SHA2- 384": 13,
"SHA2-224": 39,
"SHA2-256": 68,
"SHA2-384": 35,
"SHA2-512": 59,
"SHA2512": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"MD": {
"MD4": {
"MD4": 2
},
"MD5": {
"MD5": 3
}
},
"PBKDF": {
"PBKDF": 28,
"PBKDF2": 6
},
"RIPEMD": {
"RIPEMD-160": 3
},
"SHA": {
"SHA1": {
"SHA-1": 45
},
"SHA3": {
"SHA-3": 4
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 45
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {
"FI": {
"Fault Induction": 2
},
"SCA": {
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 66,
"FIPS 180-4": 42,
"FIPS 186-4": 14,
"FIPS 186-5": 65,
"FIPS 198-1": 42,
"FIPS 2": 15,
"FIPS PUB 140-3": 1,
"FIPS186-4": 20,
"FIPS186-5": 72
},
"NIST": {
"SP 800-132": 11,
"SP 800-135": 14,
"SP 800-38A": 31,
"SP 800-38B": 6,
"SP 800-38C": 6,
"SP 800-38D": 26,
"SP 800-38E": 7,
"SP 800-38F": 12,
"SP 800-56A": 7,
"SP 800-56C": 7,
"SP 800-90A": 6
},
"PKCS": {
"PKCS 1": 7,
"PKCS#1": 4
},
"RFC": {
"RFC 4253": 1,
"RFC 5288": 1,
"RFC 6668": 1,
"RFC5288": 1,
"RFC8446": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 81,
"AES-": 2,
"AES-128": 8,
"AES-192": 8,
"AES-256": 15
},
"CAST": {
"CAST": 37
}
},
"constructions": {
"MAC": {
"HMAC": 25,
"HMAC-RIPEMD-160": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 2
},
"IBM": {
"SSC": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"SHA2-512/256A4534",
"AES-ECBA4530",
"AES-XTS Testing Revision 2.0A4527",
"ECDSA KeyVer (FIPS186-5)A4534",
"AES-CMACA4527",
"Counter DRBGA4527",
"RSA SigVer (FIPS186-5)A4534",
"SHA2-256A4534",
"SHA2-384A4534",
"HMAC-SHA2-224A4534",
"AES-CBCA4527",
"HMAC-SHA2-384A4534",
"KDF TLSA4534",
"RSA SigVer (FIPS186-4)A4534",
"HMAC-SHA-1A4534",
"AES-KWPA4527",
"ECDSA KeyGen (FIPS186-5)A4534",
"SHA2-512A4534",
"KAS-ECC-SSC Sp800-56Ar3A4534",
"RSA KeyGen (FIPS186-5)A4534",
"RSA SigGen (FIPS186-5)A4534",
"ECDSA SigVer (FIPS186-4)A4534",
"HMAC-SHA2-512A4534",
"AES-CCMA4527",
"KDF SSHA4534",
"ECDSA SigVer (FIPS186-5)A4534",
"SHA-1A4534",
"AES-KWA4527",
"SHA2-224A4534",
"KDA HKDF Sp800-56Cr1A4534",
"HMAC-SHA2-512/256A4534",
"HMAC-SHA2-256A4534",
"ECDSA SigGen (FIPS186-5)A4534",
"AES-CTRA4527",
"AES-GCMA4530",
"PBKDFA4534",
"AES-GMACA4530"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4534",
"#A4526",
"#A4518",
"#A4520",
"#A4515",
"#A4523",
"#A4519",
"#A4529",
"#A4524",
"#A4528",
"#A4516",
"#A4533",
"#A4509",
"#A4517",
"#A4527",
"#A4532",
"#A4510",
"#A4522",
"#A4521",
"#A4530",
"#A4513",
"#A4514",
"#A4511",
"#A4512",
"#A4531",
"#A4525"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/Comments": "",
"/Company": "",
"/CreationDate": "D:20240930081824-04\u002700\u0027",
"/Creator": "Acrobat PDFMaker 24 for Word",
"/Keywords": "",
"/ModDate": "D:20240930082100-04\u002700\u0027",
"/Producer": "Adobe PDF Library 24.3.144",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 765187,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.atsec.com/",
"https://github.com/aws/aws-lc/archive/refs/tags/AWS-LC-FIPS-2.0.0.zip./"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 60
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "cb72ad4c0fbed2e629059d9292bda197a908fcbe5f0bb09891b49a597dabdd48",
"source_hash": "ef1e501b010ba8db4fd3f09071d61f7774c52da57f03e98909af42e806152657",
"txt_hash": "e367d383a5421742e6cd0f56ac8773702ab24ed39dd3538e41f788cb138cdae9"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2024_041124_0733 (1).pdf",
"date_sunset": "2029-09-30",
"description": "AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It \u0456s based on code from the Google BoringSSL project and the OpenSSL project.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "AWS-LC Cryptographic Module (static)",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-10-01",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Amazon Web Services Inc.",
"vendor_url": "http://aws.amazon.com"
}
}