VMware Kernel Cryptographic Module

Certificate details

Certificate ID #2180
Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 20.06.2014
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When installed, initialized and configured as specified in the Security Policy Section 3 and operated in FIPS mode with VMware NSS Cryptographic Module validated to FIPS 140-2 under Cert. #2155 operating in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description The VMware Kernel Cryptographic Module is a flexible software library providing FIPS-140-2 approved cryptographic operations for VMware products and platforms.
Tested configurations
  • VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server with PAA
  • VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server without PAA (single-user mode)
Vendor VMware, Inc. http://www.vmware.com
Lab CGI Information Systems & Management Consultants Inc
Algorithms
References

This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, DES, Triple-DES, HMAC, CBC-MAC
Asymmetric Algorithms
DSA
Hash functions
SHA-1, SHA-512, SHA-384, SHA-224, SHA-256
Schemes
MAC
Protocols
IPsec, VPN
Randomness
PRNG, RNG
Libraries
NSS
Block cipher modes
ECB, CBC, CTR, GCM, CCM, XTS

Security level
Level 1

Standards
FIPS 140-2, SP 800-131A

Cross-references

Outgoing
  • 2155 - historical - VMware NSS Cryptographic Module
  • 821 - historical - ASA 5510, ASA 5520 and ASA 5540
Title 1B - VMware Kernel Crypto Module FIPS 140-2 Security Policy
Author jschultz
Creation date D:20140521123408-04'00'
Modification date D:20140521123408-04'00'
Pages 21
Creator PDFCreator Version 1.7.2
Producer GPL Ghostscript 9.10

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2180,
  "dgst": "25dbd7ca6d959934",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#1697",
        "#1259",
        "#2283",
        "#1635",
        "AES#2718",
        "HMAC#1697",
        "#2718",
        "RNG#1259",
        "SHS#2283",
        "Triple-DES#1635"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "2155"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "2155"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "2155"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "821",
          "2155"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "821",
          "2155"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "821",
        "2155"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DSA": {
            "DSA": 2
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CCM": {
          "CCM": 4
        },
        "CTR": {
          "CTR": 4
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 4
        },
        "XTS": {
          "XTS": 10
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "NSS": {
          "NSS": 14
        }
      },
      "crypto_protocol": {
        "IPsec": {
          "IPsec": 8
        },
        "VPN": {
          "VPN": 4
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "# 2155": 2,
          "#1681": 1,
          "#821": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 2,
          "AES 3": 1,
          "AES GCM 15": 1,
          "AES key 128, 192": 1,
          "DSA 1024": 1,
          "HMAC 6": 2,
          "HMAC SHA-1": 1,
          "HMAC SHA-384": 1,
          "HMAC SHA-512": 13,
          "SHA 5": 1,
          "SHA-1": 5,
          "SHA-224": 4,
          "SHA-256": 4,
          "SHA-384": 2,
          "SHA-512": 14,
          "SHA-512 (Cert #1681": 1,
          "SHS 22": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-224": 4,
            "SHA-256": 4,
            "SHA-384": 2,
            "SHA-512": 15
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 9
        },
        "RNG": {
          "RNG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 21
        },
        "NIST": {
          "SP 800-131A": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 27
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 12
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 2,
            "HMAC": 23
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES#2718",
        "HMAC#1697",
        "RNG#1259",
        "SHS#2283",
        "Triple-DES#1635"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#1697",
        "#2283",
        "#1635",
        "#2718",
        "#1259"
      ]
    },
    "policy_metadata": {
      "/Author": "jschultz",
      "/CreationDate": "D:20140521123408-04\u002700\u0027",
      "/Creator": "PDFCreator Version 1.7.2",
      "/Keywords": "",
      "/ModDate": "D:20140521123408-04\u002700\u0027",
      "/Producer": "GPL Ghostscript 9.10",
      "/Subject": "",
      "/Title": "1B -  VMware Kernel Crypto Module FIPS 140-2 Security Policy",
      "pdf_file_size_bytes": 1069533,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 21
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "d83742886b992c772e04ca8cd9e22112549d10b096aca346c4237b30b1984b70",
      "source_hash": "5230d52e65448d7d83fa6632dc64a55592672f18b4a1e988c9ec5df77fcc9dd2",
      "txt_hash": "e6af2da93d2fb8a2223e57c4718d37b72174f6913f87aa886bedf2e882e8e6d7"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in the Security Policy Section 3 and operated in FIPS mode with VMware NSS Cryptographic Module validated to FIPS 140-2 under Cert. #2155 operating in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0042.pdf",
    "date_sunset": null,
    "description": "The VMware Kernel Cryptographic Module is a flexible software library providing FIPS-140-2 approved cryptographic operations for VMware products and platforms.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {
      "2155": 1
    },
    "module_name": "VMware Kernel Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "1.0",
    "tested_conf": [
      "VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server with PAA",
      "VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server without PAA (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-06-20",
        "lab": "CGI Information Systems \u0026 Management Consultants Inc",
        "validation_type": "Initial"
      }
    ],
    "vendor": "VMware, Inc.",
    "vendor_url": "http://www.vmware.com"
  }
}