This page was not yet optimized for use on mobile devices.
Amazon Linux 2023 Libgcrypt Cryptographic Module
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate details
| Certificate ID | #4971 |
|---|---|
| Status | active |
| Validation dates | 24.02.2025 |
| Sunset date | 23-02-2030 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. |
| Exceptions |
|
| Description | The Amazon Linux 2023 Libgcrypt Cryptographic Module is a software library implementing general purpose cryptographic algorithms. |
| Vendor | Amazon Web Services, Inc. http://www.amazon.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, HMAC, HMAC-SHA-256, HMAC-SHA-224, HMAC-SHA-384, HMAC-SHA-512, CMACAsymmetric Algorithms
ECDH, ECDSAHash functions
SHA-1, SHA-256, SHA-384, SHA-512, SHA-224, SHA3-224, SHA3-256, SHA3-512, SHA3-384, SHA-3, MD5, PBKDF, PBKDF2Schemes
MACRandomness
DRBG, RNG, RBGLibraries
libgcryptElliptic Curves
P-224, P-256, P-384, P-521Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSPSecurity level
Level 1Side-channel analysis
timing attacks, Timing AttacksStandards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-2, FIPS 180-4, FIPS 202, FIPS 186-5, FIPS140-3, FIPS PUB 140-3, FIPS180-4, FIPS186-5, FIPS197, FIPS198-1, FIPS202, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, PKCS 1, PKCS#1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
- cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*
CVE matches
| ID | Links | Severity | CVSS Score | Published on |
|---|---|---|---|---|
| Base score | ||||
| CVE-2024-6387 | HIGH | 8.1 | 01.07.2024 |
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4971,
"dgst": "21b727dd2bb3899c",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A4597",
"AES-CCMA4601",
"AES-XTS Testing Revision 2.0A4601",
"ECDSA SigVer (FIPS186-4)A4602",
"HMAC-SHA2-384A4602",
"#A4600",
"Counter DRBGA4601",
"RSA SigVer (FIPS186-2)A4602",
"ECDSA KeyVer (FIPS186-4)A4602",
"SHA3-256A4602",
"#A4602",
"HMAC-SHA-1A4602",
"AES-CFB128A4601",
"SHA2-512A4602",
"SHA2-384A4602",
"SHAKE-128A4602",
"#A4598",
"AES-CFB8A4601",
"RSA SigVer (FIPS186-4)A4602",
"PBKDFA4602",
"Hash DRBGA4602",
"AES-ECBA4601",
"HMAC-SHA3-512A4602",
"SHA2-256A4602",
"HMAC-SHA3-256A4602",
"HMAC-SHA2-512A4602",
"HMAC DRBGA4602",
"RSA SigGen (FIPS186-4)A4602",
"ECDSA SigGen (FIPS186-4)A4602",
"SHA-1A4602",
"ECDSA KeyGen (FIPS186-4)A4602",
"AES-CTRA4601",
"HMAC-SHA2-512/224A4602",
"SHA2-224A4602",
"AES-KWA4601",
"RSA KeyGen (FIPS186-4)A4602",
"#A4596",
"HMAC-SHA3-224A4602",
"HMAC-SHA2-256A4602",
"SHA3-512A4602",
"SHAKE-256A4602",
"HMAC-SHA3-384A4602",
"AES-CBCA4601",
"SHA2-512/256A4602",
"SHA3-224A4602",
"AES-CMACA4601",
"SHA3-384A4602",
"#A4601",
"HMAC-SHA2-224A4602",
"#A4599",
"HMAC-SHA2-512/256A4602",
"AES-OFBA4601",
"SHA2-512/224A4602"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2023"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2024-6387"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4597",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4598",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4600",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4601",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4597",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4598",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4600",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4601",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4597",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4598",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4600",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4601",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4597",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4598",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4600",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4601",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": ""
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4597",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4598",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4600",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4601",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4602",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4597",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4598",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4600",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4601",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4602",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4596",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4599",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4600",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4601",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4597",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4598",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4602",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4597",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4598",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4600",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4601",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4602",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Primality Tests - Table C.2 Private Key Format - Standard",
"reference": ""
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4597",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4598",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4600",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4601",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4602",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4597",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4598",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4600",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4601",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4602",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4596",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4599",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4600",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4601",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4597",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4598",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4602",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4597",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4598",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4602",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4597",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4598",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4602",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Perform AES encryptio n",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_CIPHER, ...) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Plaintext",
"name": "Symmetri c encryptio n",
"outputs": "Ciphert ext",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Encryptio n with AES"
},
{
"description": "Perform AES decryptio n",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_CIPHER, ...) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Ciphertext",
"name": "Symmetri c decryptio n",
"outputs": "Plainte xt",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Decryptio n with AES"
},
{
"description": "Perform AES encryptio n and",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_CIPHER, ...) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Plaintext, IV",
"name": "Authenti cated symmetri c",
"outputs": "Ciphert ext, MAC tag",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Authentic ated encryptio n with AES"
},
{
"description": "authentic ation",
"indicator": "",
"inputs": "",
"name": "encryptio n",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Perform AES decryptio n and authentic ation",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_CIPHER, ...) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Ciphertext, MAC tag",
"name": "Authenti cated symmetri c decryptio n",
"outputs": "Plainte xt or fail",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Authentic ated decryptio n with AES"
},
{
"description": "Generate RSA key pairs",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_PK_FLAGS, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Key size",
"name": "RSA Key generatio n",
"outputs": "RSA public key, RSA private key",
"rolesSspAccess": "Crypto Officer - RSA public keys: G,R - RSA private keys: G,R",
"secFunImpl": "Key Pair Generatio n with RSA"
},
{
"description": "Generate ECDSA key pairs",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_PK_FLAGS, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Key size",
"name": "ECDSA Key generatio n",
"outputs": "ECDSA public key, ECDSA private key",
"rolesSspAccess": "Crypto Officer - ECDSA public keys: G,R - ECDSA private keys: G,R",
"secFunImpl": "Key Pair Generatio n with ECDSA"
},
{
"description": "ECDSA signature generatio n",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_PK_FLAGS, ...) and gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_MD, ...) return GPG_ERR_NO_ERROR",
"inputs": "ECDSA private key, message, hash algorithm",
"name": "ECDSA Digital signature generatio n",
"outputs": "Signatu re",
"rolesSspAccess": "Crypto Officer - ECDSA private keys: W,E",
"secFunImpl": "Signature Generatio n with ECDSA"
},
{
"description": "RSA signature generatio n",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_PK_FLAGS, ...) and gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_MD, ...) return GPG_ERR_NO_ERROR",
"inputs": "RSA private key, message, hash algorithm",
"name": "RSA Digital signature generatio n",
"outputs": "Signatu re",
"rolesSspAccess": "Crypto Officer - RSA private keys: W,E",
"secFunImpl": "Signature Generatio n with RSA"
},
{
"description": "ECDSA signature verificati on",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_PK_FLAGS, ...) and gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_MD, ...) return GPG_ERR_NO_ERROR",
"inputs": "Signature, hash algorithm, ECDSA public key",
"name": "ECDSA Digital signature verificati on",
"outputs": "Signatu re verifica tion result",
"rolesSspAccess": "Crypto Officer - ECDSA public keys: W,E",
"secFunImpl": "Signature Verificati on with ECDSA"
},
{
"description": "RSA signature verificati on",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_PK_FLAGS, ...) and gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_MD, ...) return GPG_ERR_NO_ERROR",
"inputs": "Signature, hash algorithm, RSA public key",
"name": "Digital signature verificati on",
"outputs": "Signatu re verifica tion result",
"rolesSspAccess": "Crypto Officer - RSA public keys: W,E",
"secFunImpl": "Signature Verificati on with RSA"
},
{
"description": "Verify ECDSA public key",
"indicator": "gcry_mpi_ec_curve_point() returns GPG_ERR_NO_ERROR",
"inputs": "ECDSA public key, ECDSA private key",
"name": "Public key verificati on",
"outputs": "Return codes/l og messag es",
"rolesSspAccess": "Crypto Officer - ECDSA public keys: W,E",
"secFunImpl": "Public Key Verificati on with ECDSA"
},
{
"description": "Generate random bitstrings",
"indicator": "gcry_randomize(), gcry_random_bytes(), gcry_random_bytes_secure() return GPG_ERR_NO_ERROR",
"inputs": "Size",
"name": "Random number generatio n",
"outputs": "Rando m number",
"rolesSspAccess": "Crypto Officer - Entrop y input: W,E - DRBG seed: G,E",
"secFunImpl": "Random Number Generatio n with DRBG"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- DRBG interna l state (V value, key): W,E - DRBG interna l state (V value, C value): W,E",
"secFunImpl": ""
},
{
"description": "Compute SHA hashes",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_MD, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Message",
"name": "Message digest",
"outputs": "Messag e digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Hashes Extendabl e Output Functions"
},
{
"description": "Compute HMAC or AES- based CMAC",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_MAC, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Message, key",
"name": "Message authentic ation code (MAC)",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC keys: W,E - AES keys: W,E",
"secFunImpl": "Message Authentic ation Code"
},
{
"description": "Perform AES- based key wrapping",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_CIPHER, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Key wrapping key, key to be wrapped",
"name": "Key wrapping",
"outputs": "Wrapp ed key",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Key wrapping using AES CCM Key wrapping using AES KW"
},
{
"description": "Perform AES- based unwrappi ng",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_CIPHER, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Wrapped key, key unwrapping key",
"name": "Key unwrappi ng",
"outputs": "Unwra pped key",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Key unwrappi ng using AES CCM Key unwrappi ng using AES KW"
},
{
"description": "Perform key derivatio n",
"indicator": "gcry_control(GCRYCTL_FIPS_SERVICE_IND ICATOR_KDF, ...) returns GPG_ERR_NO_ERROR",
"inputs": "Password/pass phrase; Derived key",
"name": "Key derivatio n",
"outputs": "Derive d key",
"rolesSspAccess": "Crypto Officer - Derive d key: G,R - Passwo rd or passphr ase: W,E",
"secFunImpl": "Key Derivatio n with PBKDF"
},
{
"description": "Show module status",
"indicator": "N/A",
"inputs": "None",
"name": "Show status",
"outputs": "Current status of the module",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize SSPs",
"indicator": "N/A",
"inputs": "N/A",
"name": "Zeroizati on",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES keys: Z - HMAC keys: Z - RSA public keys: Z - RSA private keys: Z -",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "ECDSA public keys: Z - ECDSA private keys: Z - Passwo rd or passphr ase: Z - Derive d key: Z - Entrop y input: Z - DRBG interna l state (V value, key): Z - DRBG interna l state (V value, C value): Z - DRBG seed: Z",
"secFunImpl": ""
},
{
"description": "Perform self-tests",
"indicator": "N/A",
"inputs": "Power on of the module",
"name": "Self-tests",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module name and version",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show module name and version",
"outputs": "Display module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for encryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4598)",
"condition": "Module initialization or on demand",
"details": "Encryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for encryption",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for encryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for encryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Decryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for decryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Decryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for decryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Decryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for decryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Decryption",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys for decryption",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4597)",
"condition": "Module initialization or",
"details": "Message Authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "on demand through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CMAC (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "CTR_DRBG with 129-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "CTR_DRBG with 129-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "CTR_DRBG with 129-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "CTR_DRBG with 129-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR; SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR; SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR; SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR; SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR; SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4597)",
"condition": "Module initialization or on demand",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Compliant with section 11.3 of SP 800-90Ar1",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature generation with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature generation with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen",
"condition": "Module initialization or",
"details": "Signature generation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature generation with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "(FIPS186-4) (A4600)",
"condition": "on demand through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature generation with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature generation with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature verification with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature verification with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature verification with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature verification with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "ECDSA signature verification with P-256 and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4596)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4599)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4601)",
"condition": "Module initialization or on demand",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4598)",
"condition": "Module initialization or on demand",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4598)",
"condition": "Module initialization or on demand",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4597)",
"condition": "Module initialization or on demand",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2084-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2084-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2084-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2084-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2084-bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4596)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4598)",
"condition": "Module initialization or",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "on demand through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA-1 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4602)",
"condition": "Module initialization or on demand",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA2-384 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4598)",
"condition": "Module initialization or",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "on demand through API function call",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA2-512 (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4597)",
"condition": "Module initialization or on demand through API function call",
"details": "Password-based key derivation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA- 256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4598)",
"condition": "Module initialization or on demand through API function call",
"details": "Password-based key derivation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA- 256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4600)",
"condition": "Module initialization or on demand through API function call",
"details": "Password-based key derivation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA- 256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4601)",
"condition": "Module initialization or on demand through API function call",
"details": "Password-based key derivation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA- 256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4602)",
"condition": "Module initialization or on demand through API function call",
"details": "Password-based key derivation",
"indicator": "Module is operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA- 256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4597)",
"condition": "Key generation",
"details": "EC key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4598)",
"condition": "Key generation",
"details": "EC key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen",
"condition": "Key generation",
"details": "EC key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "(FIPS186-4) (A4600)",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4601)",
"condition": "Key generation",
"details": "EC key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4602)",
"condition": "Key generation",
"details": "EC key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4597)",
"condition": "Key generation",
"details": "RSA key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4598)",
"condition": "Key generation",
"details": "RSA key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4600)",
"condition": "Key generation",
"details": "RSA key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4601)",
"condition": "Key generation",
"details": "RSA key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4602)",
"condition": "Key generation",
"details": "RSA key pair generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure CAST failure PCT failure",
"description": "The module immediately stops functioning due to a self-test failure",
"indicator": "Module will not load; Module stops functioning for PCT failure",
"name": "Error state",
"recoveryMethod": "Restart of the module"
},
{
"conditions": "Random numbers are requested in the error state Cipher operations are requested on a deallocated handle",
"description": "The module immediately halts all cryptographic operations and transits to shutdown",
"indicator": "Module is aborted and is not available for use",
"name": "Fatal Error state",
"recoveryMethod": "Restart of the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved Mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested",
"name": "Non-approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "MD5",
"use": "Message Digest"
},
{
"name": "ECDH",
"use": "Shared Secret Computation"
},
{
"name": "AES-GCM, AES-GCM-SIV, AES- OCB, AES-EAX",
"use": "Symmetric encryption; Symmetric decryption"
},
{
"name": "RSA",
"use": "Signature generation primitives; Signature verification primitives; Encryption primitives; Decryption primitives"
},
{
"name": "RSA with non-approved public key flags",
"use": "Key generation; Signature generation; Signature verification"
},
{
"name": "ECDSA",
"use": "Signature generation primitives; Signature verification primitives"
},
{
"name": "ECDSA with non-approved public key flags",
"use": "Key generation; Signature generation; Signature verification"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES-GCM, AES-GCM-SIV, AES-OCB, AES-EAX",
"description": "AES encryption using non-approved AES modes",
"name": "Symmetric encryption",
"role": "CO"
},
{
"alg_accessed": "AES-GCM, AES-GCM-SIV, AES-OCB, AES-EAX",
"description": "AES decryption using non-approved AES modes",
"name": "Symmetric decryption",
"role": "CO"
},
{
"alg_accessed": "MD5",
"description": "Message digest using non-approved algorithms",
"name": "Message digest",
"role": "CO"
},
{
"alg_accessed": "ECDH",
"description": "ECDH Shared Secret Computation",
"name": "Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "RSA ECDSA",
"description": "Generate RSA/ECDSA key pairs with non- approved public key flags",
"name": "Key generation",
"role": "CO"
},
{
"alg_accessed": "RSA with non-approved public key flags ECDSA with non-approved public key flags",
"description": "RSA/ECDSA signature generation with non- approved public key flags",
"name": "Digital signature generation",
"role": "CO"
},
{
"alg_accessed": "RSA with non-approved public key flags ECDSA with non-approved public key flags",
"description": "RSA/ECDSA signature verification with non- approved public key flags",
"name": "Digital signature verification",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "RSA encryption primitives",
"name": "Asymmetric encryption primitives",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "RSA decryption primitives",
"name": "Asymmetric decryption primitives",
"role": "CO"
},
{
"alg_accessed": "RSA ECDSA",
"description": "RSA/ECDSA signature generation primitives",
"name": "Signature generation primitives",
"role": "CO"
},
{
"alg_accessed": "RSA ECDSA",
"description": "RSA/ECDSA signature verification primitives",
"name": "Signature verification primitives",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters for data",
"logicalInterface": "Data Input",
"physicalPort": "As a software-only module, the module does not have physical ports. The operator can only interact with the module through the API provided by the module. Thus, the physical ports are interpreted to be the physical ports of the hardware platform on which the module runs."
},
{
"data": "API output parameters for data",
"logicalInterface": "Data Output",
"physicalPort": "As a software-only module, the module does not have physical ports. The operator can only interact with the module through the API provided by the module. Thus, the physical ports are interpreted to be the physical ports of the hardware platform on which the module runs."
},
{
"data": "API function calls, API input parameters for control input",
"logicalInterface": "Control Input",
"physicalPort": "As a software-only module, the module does not have physical ports. The operator can only interact with the module through the API provided by the module. Thus, the physical ports are interpreted to be the physical ports of the hardware platform on which the module runs."
},
{
"data": "API return codes, API output parameters for status output",
"logicalInterface": "Status Output",
"physicalPort": "As a software-only module, the module does not have physical ports. The operator can only interact with the module through the API provided by the module. Thus, the physical ports are interpreted to be the physical ports of the hardware platform on which the module runs."
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256 (A4597)",
"details": "Integrity test for libgcrypt.so.20.4.2",
"indicator": "Module is operational",
"testMethod": "Message Authentication",
"testProps": "Key size: 376 bits",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4598)",
"details": "Integrity test for libgcrypt.so.20.4.2",
"indicator": "Module is operational",
"testMethod": "Message Authentication",
"testProps": "Key size: 376 bits",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4600)",
"details": "Integrity test for libgcrypt.so.20.4.2",
"indicator": "Module is operational",
"testMethod": "Message Authentication",
"testProps": "Key size: 376 bits",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4601)",
"details": "Integrity test for libgcrypt.so.20.4.2",
"indicator": "Module is operational",
"testMethod": "Message Authentication",
"testProps": "Key size: 376 bits",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4602)",
"details": "Integrity test for libgcrypt.so.20.4.2",
"indicator": "Module is operational",
"testMethod": "Message Authentication",
"testProps": "Key size: 376 bits",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the provided cipher handle",
"method": "Free cipher handle",
"operatorId": "By calling the appropriate zeroization functions: AES key: gcry_cipher_close HMAC key: gcry_mac_close, gcry_free Key-derivation key: gcry_free Derived key: gcry_free RSA keys: gcry_mpi_release, gcry_sexp_release, gcry_free EC keys: gcry_mpi_release, gcry_free, gcry_mpi_point_release, gcry_sexp_release, gcry_ctx_release Entropy input: gcry_ctrl(GCRYCTL_TERM_SECMEM) Internal state: gcry_ctrl(GCRYCTL_TERM_SECMEM)",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. The completion of a zeroization routine will indicate that a zeroization procedure succeeded."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Remove power from the module",
"operatorId": "By unloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed. Module power off indicates that the zeroization procedure succeeded."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.2 on Amazon Linux 2023 with AWS Graviton3",
"swFwVersion": "1.10.2-e4ddf5ed7abe8d45"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.2 on Amazon Linux 2023 with Intel Xeon Platinum 8375C",
"swFwVersion": "1.10.2-e4ddf5ed7abe8d45"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.2 on SnowOS 1.0 with AMD EPYC 7702",
"swFwVersion": "1.10.2-e4ddf5ed7abe8d45"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "EC2 c7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "AWS Graviton3",
"version": "1.10.2- e4ddf5ed7abe8d45"
},
{
"hardwarePlatform": "EC2 c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8375C",
"version": "1.10.2- e4ddf5ed7abe8d45"
},
{
"hardwarePlatform": "AWS Snowball",
"hypervisorHostOs": "N/A",
"operatingSystem": "SnowOS 1.0",
"paa_pai": "Yes",
"processors": "AMD EPYC 7702",
"version": "1.10.2- e4ddf5ed7abe8d45"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Capabilities:Key generation RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "Amazon Linux 2023 Libgcrypt Cryptographic Module (Full Acceleration)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "Capabilities:Key generation RSA:2048, 3072, 4096 (112, 128, 192 bits) ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "Amazon Linux 2023 Libgcrypt Cryptographic Module (No Acceleration)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "Capabilities:Key generation RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "Amazon Linux 2023 Libgcrypt Cryptographic Module (AESNI AVX)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "Capabilities:Key generation RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "Amazon Linux 2023 Libgcrypt Cryptographic Module (SSSE3)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "Capabilities:Key generation RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "Amazon Linux 2023 Libgcrypt Cryptographic Module (SHLD)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 135
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 10
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 9
},
"GCM": {
"GCM": 1
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"libgcrypt": {
"libgcrypt": 12
}
},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 13
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 44,
"P-256": 82,
"P-384": 62,
"P-521": 58
}
},
"eval_facility": {
"atsec": {
"atsec": 2
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 15,
"AES-128": 4,
"AES-192": 4,
"AES-256": 4,
"HMAC SHA-256": 2,
"HMAC- SHA-1": 7,
"HMAC-SHA-1": 50,
"HMAC-SHA-224": 10,
"HMAC-SHA-256": 16,
"HMAC-SHA-384": 10,
"HMAC-SHA-512": 10,
"PKCS 1": 15,
"PKCS#1": 20,
"SHA- 256": 5,
"SHA-1": 57,
"SHA-224": 5,
"SHA-256": 52,
"SHA-3": 1,
"SHA-384": 9,
"SHA-512": 9,
"SHA2-224": 32,
"SHA2-256": 43,
"SHA2-384": 32,
"SHA2-512": 43,
"SHA3- 384": 10,
"SHA3-224": 20,
"SHA3-256": 20,
"SHA3-384": 10,
"SHA3-512": 18
}
},
"fips_security_level": {
"Level": {
"Level 1": 1
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"PBKDF": {
"PBKDF": 28,
"PBKDF2": 3
},
"SHA": {
"SHA1": {
"SHA-1": 57
},
"SHA2": {
"SHA-224": 5,
"SHA-256": 52,
"SHA-384": 9,
"SHA-512": 9
},
"SHA3": {
"SHA-3": 1,
"SHA3-224": 20,
"SHA3-256": 20,
"SHA3-384": 10,
"SHA3-512": 18
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 96
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {
"SCA": {
"Timing Attacks": 1,
"timing attacks": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 102,
"FIPS 180-4": 37,
"FIPS 186-4": 48,
"FIPS 186-5": 1,
"FIPS 198-1": 49,
"FIPS 202": 18,
"FIPS PUB 140-3": 2,
"FIPS140-3": 1,
"FIPS180-4": 1,
"FIPS186-2": 10,
"FIPS186-4": 131,
"FIPS186-5": 1,
"FIPS197": 1,
"FIPS198-1": 1,
"FIPS202": 1
},
"NIST": {
"SP 800-132": 11,
"SP 800-38A": 24,
"SP 800-38B": 4,
"SP 800-38C": 4,
"SP 800-38E": 5,
"SP 800-38F": 4,
"SP 800-90A": 14
},
"PKCS": {
"PKCS 1": 15,
"PKCS#1": 10
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 75,
"AES-": 4,
"AES-128": 4,
"AES-192": 4,
"AES-256": 4
},
"CAST": {
"CAST": 233
}
},
"constructions": {
"MAC": {
"CMAC": 8,
"HMAC": 33,
"HMAC-SHA-224": 5,
"HMAC-SHA-256": 8,
"HMAC-SHA-384": 5,
"HMAC-SHA-512": 5
}
}
},
"tee_name": {
"AMD": {
"PSP": 3
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-CCMA4601",
"AES-XTS Testing Revision 2.0A4601",
"ECDSA SigVer (FIPS186-4)A4602",
"HMAC-SHA2-384A4602",
"Counter DRBGA4601",
"RSA SigVer (FIPS186-2)A4602",
"ECDSA KeyVer (FIPS186-4)A4602",
"SHA3-256A4602",
"HMAC-SHA-1A4602",
"AES-CFB128A4601",
"SHA2-512A4602",
"SHA2-384A4602",
"SHAKE-128A4602",
"AES-CFB8A4601",
"RSA SigVer (FIPS186-4)A4602",
"PBKDFA4602",
"Hash DRBGA4602",
"AES-ECBA4601",
"HMAC-SHA3-512A4602",
"SHA2-256A4602",
"HMAC-SHA3-256A4602",
"HMAC-SHA2-512A4602",
"HMAC DRBGA4602",
"RSA SigGen (FIPS186-4)A4602",
"ECDSA SigGen (FIPS186-4)A4602",
"SHA-1A4602",
"ECDSA KeyGen (FIPS186-4)A4602",
"AES-CTRA4601",
"HMAC-SHA2-512/224A4602",
"SHA2-224A4602",
"AES-KWA4601",
"RSA KeyGen (FIPS186-4)A4602",
"HMAC-SHA3-224A4602",
"HMAC-SHA2-256A4602",
"SHA3-512A4602",
"SHAKE-256A4602",
"HMAC-SHA3-384A4602",
"AES-CBCA4601",
"SHA2-512/256A4602",
"SHA3-224A4602",
"AES-CMACA4601",
"SHA3-384A4602",
"HMAC-SHA2-224A4602",
"HMAC-SHA2-512/256A4602",
"AES-OFBA4601",
"SHA2-512/224A4602"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4597",
"#A4598",
"#A4596",
"#A4600",
"#A4601",
"#A4602",
"#A4599"
]
},
"policy_metadata": {
"/Author": "",
"/Comments": "",
"/Company": "",
"/CreationDate": "D:20250224082009-05\u002700\u0027",
"/Creator": "Acrobat PDFMaker 24 for Word",
"/Keywords": "",
"/ModDate": "D:20250224082311-05\u002700\u0027",
"/Producer": "Adobe PDF Library 24.5.96",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 752593,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://docs.aws.amazon.com/linux/al2023/ug/fips-mode.html",
"https://csrc.nist.gov/publications/detail/sp/800-38b/final",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://doi.org/10.6028/NIST.FIPS.140-3",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 98
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "fb84e746c0c9b4749e58af9ced3215d431a4c349ab55a33114d0025258c4b50f",
"source_hash": "63a9bdcac286c1ef98bbef6ac518db9410d33c5fb2b2800c50b386873fbff9d0",
"txt_hash": "d23a4a9bbd61bd14f62c2c9e4ade64c6ec58e591e112c3dc83c0c8417c52ed4c"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/February 2025_030325_1258.pdf",
"date_sunset": "2030-02-23",
"description": "The Amazon Linux 2023 Libgcrypt Cryptographic Module is a software library implementing general purpose cryptographic algorithms.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Amazon Linux 2023 Libgcrypt Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-02-24",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Amazon Web Services, Inc.",
"vendor_url": "http://www.amazon.com"
}
}