RX65N-2MB Security Management Module

Certificate details

Certificate ID #3849
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 15.03.2021
Standard FIPS 140-2
Security level 3
Type Hardware
Embodiment Single Chip
Caveat None
Exceptions
  • Mitigation of Other Attacks: N/A
Description "RX65N-2MB Security Management Module" is provided as a reference for developers creating FIPS 140-2-compliant products using the RX65N-2MB. The module has security hardware called "TSIP", which has encryption engine and random number generator. TSIP and firmware implement various cryptographic algorithms, key management, secure boot, and secure firmware update. In this module, the plaintext keys exists only inside TSIP which restricts external access.
Version (Hardware) R5F565NEHDFC
Version (Firmware) Secure Boot: Ver.1.00, Crypto Firmware: Ver.1.00
Vendor Renesas Electronics Corporation https://www.renesas.com/us/en/
Lab ECSEC Laboratory Inc.
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, AES-128, CMAC, CBC-MAC
Hash functions
SHA-1, SHA-256
Schemes
MAC
Randomness
DRBG, RNG
Block cipher modes
ECB, CBC, GCM, CCM

Trusted Execution Environments
PSP

Security level
level 3

Title RX65N-2MB Security Management Module
Author Renesas Electronics Corporation
Creation date D:20201210215907+09'00'
Modification date D:20201210215907+09'00'
Pages 27
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3849,
  "dgst": "2e3ed35f801fbf17",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#C953",
        "AES#C953",
        "RSA#C953",
        "KBKDF#C953",
        "SHS#C953",
        "DRBG#C953"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:h:renesas:rx65:-:*:*:*:*:*:*:*",
        "cpe:2.3:h:renesas:rx65n:-:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.00"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 41,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CCM": {
          "CCM": 4
        },
        "ECB": {
          "ECB": 3
        },
        "GCM": {
          "GCM": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 14
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES, 1024": 1,
          "AES-128": 8,
          "SHA- 256": 1,
          "SHA-1": 5,
          "SHA-256": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "level 3": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-256": 6
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 10
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 6,
          "FIPS 186-4": 2,
          "FIPS140-2": 1
        },
        "NIST": {
          "NIST SP 800-38D": 2,
          "SP 800-90A": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13,
            "AES-": 1,
            "AES-128": 8
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1,
            "CMAC": 10
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 9
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES#C953",
        "RSA#C953",
        "KBKDF#C953",
        "SHS#C953",
        "DRBG#C953"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#C953"
      ]
    },
    "policy_metadata": {
      "/Author": "Renesas Electronics Corporation",
      "/CreationDate": "D:20201210215907+09\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20201210215907+09\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Title": "RX65N-2MB Security Management Module",
      "pdf_file_size_bytes": 802494,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 27
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "f44598984e67b7f32dc8475fb9ccd0ae869f53824ee105d0cacfe40bc171db57",
      "source_hash": "f6c03f5f6fdce4e546fd7515f36d0f232ad88705065e511166ba205a37eec2de",
      "txt_hash": "e7395881040e11aa00fbac70061a1082668c76eb7954b0446276702712349ec6"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2021_010421_0724_signed.pdf",
    "date_sunset": null,
    "description": "\"RX65N-2MB Security Management Module\" is provided as a reference for developers creating FIPS 140-2-compliant products using the RX65N-2MB. The module has security hardware called \"TSIP\", which has encryption engine and random number generator. TSIP and firmware implement various cryptographic algorithms, key management, secure boot, and secure firmware update. In this module, the plaintext keys exists only inside TSIP which restricts external access.",
    "embodiment": "Single Chip",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "Secure Boot: Ver.1.00, Crypto Firmware: Ver.1.00",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": "R5F565NEHDFC",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "RX65N-2MB Security Management Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-03-15",
        "lab": "ECSEC Laboratory Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Renesas Electronics Corporation",
    "vendor_url": "https://www.renesas.com/us/en/"
  }
}