This page was not yet optimized for use on mobile
devices.
Nokia Secure Sockets Cryptographic Module
Certificate #2164
Webpage information
Security policy
Symmetric Algorithms
AES, AES-192, AES-256, AES-128, DES, Triple-DES, TDES, TDEA, HMAC, HMAC-SHA-224, HMAC-SHA-384, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DSAHash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512Schemes
MACProtocols
SSHRandomness
DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-192, P-256, P-384, P-521, K-233, B-233, B-163, K-163, K-283, K-409, K-571, B-283, B-409, B-571Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSVendor
CiscoSecurity level
Level 1, level 1Standards
FIPS 140-2, FIPS PUB 140-2, FIPS 186-2, FIPS 186-3, FIPS 197, FIPS 186-4, FIPS 198, FIPS 180-4, FIPS 198-1, SP 800-56A, SP 800-90A, SP 800-67, SP 80-90A, SP 800-56B, NIST SP 800-131A, SP 800-90, NIST SP 800-67, NIST SP 800-38B, NIST SP 800-38C, NIST SP 800-38D, NIST SP 800-38E, NIST SP 800-56A, NIST SP 800-56B, NIST SP 800-90A, PKCS #3, PKCS#1File metadata
| Title | Nokia Secure Sockets Crypto Module Security Policy |
|---|---|
| Author | Andreas Fabis |
| Creation date | D:20180619213504Z00'00' |
| Modification date | D:20180619213504Z00'00' |
| Pages | 39 |
| Creator | Word |
| Producer | Mac OS X 10.12.6 Quartz PDFContext |
Heuristics
No heuristics are available for this certificate.
References
No references are available for this certificate.
Updates Feed
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
Raw data
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 2164,
"dgst": "34df2d15ee336296",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES#2367",
"SHS#2869",
"AES#2366",
"DRBG#304",
"ECDSA#389",
"HMAC#1470",
"DRBG#313",
"ECDSA#705",
"DSA#982",
"DRBG#856",
"RSA#1790",
"Triple-DES#1959",
"DRBG#305",
"AES#3474",
"CVL#62",
"HMAC#2219",
"CVL#63",
"DSA#740",
"RSA#1223",
"RSA#1222",
"DSA#739",
"HMAC#1471",
"CVL#549",
"Triple-DES#1480",
"SHS#2039",
"Triple-DES#1479",
"SHS#2040",
"ECDSA#390",
"AES#2381"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 7
},
"ECDH": {
"ECDH": 1
},
"ECDSA": {
"ECDSA": 19
}
},
"FF": {
"DH": {
"Diffie-Hellman": 3
},
"DSA": {
"DSA": 23
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 7
},
"CCM": {
"CCM": 5
},
"CFB": {
"CFB": 5
},
"CTR": {
"CTR": 4
},
"ECB": {
"ECB": 6
},
"GCM": {
"GCM": 5
},
"OFB": {
"OFB": 5
},
"XTS": {
"XTS": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 7
}
},
"crypto_protocol": {
"SSH": {
"SSH": 1
}
},
"crypto_scheme": {
"MAC": {
"MAC": 4
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 13,
"B-233": 9,
"B-283": 1,
"B-409": 1,
"B-571": 1,
"K-163": 5,
"K-233": 9,
"K-283": 1,
"K-409": 1,
"K-571": 1,
"P-192": 26,
"P-224": 22,
"P-256": 6,
"P-384": 4,
"P-521": 4
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#3": 2,
"#304": 1,
"#305": 1
}
},
"fips_certlike": {
"Certlike": {
"#3 Diffie-Hellman": 1,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"AES-256 1176": 1,
"HMAC-SHA-1": 24,
"HMAC-SHA-256": 2,
"HMAC-SHA-512": 2,
"PKCS #3": 4,
"PKCS#1": 8,
"SHA- 1": 1,
"SHA- 224": 3,
"SHA- 256": 2,
"SHA- 384": 1,
"SHA- 512 1222": 1,
"SHA- 512 304": 1,
"SHA- 512 389": 1,
"SHA-1": 23,
"SHA-1 1222 1223": 3,
"SHA-1 389": 1,
"SHA-1 739": 3,
"SHA-224": 13,
"SHA-256": 22,
"SHA-384": 20,
"SHA-512": 10,
"SHA-512 1222": 6,
"SHA-512 389": 3
}
},
"fips_security_level": {
"Level": {
"Level 1": 2,
"level 1": 1
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 30
},
"SHA2": {
"SHA-224": 14,
"SHA-256": 21,
"SHA-384": 21,
"SHA-512": 18
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 35
},
"RNG": {
"RBG": 1,
"RNG": 20
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 48,
"FIPS 180-4": 1,
"FIPS 186-2": 30,
"FIPS 186-3": 5,
"FIPS 186-4": 20,
"FIPS 197": 2,
"FIPS 198": 1,
"FIPS 198-1": 1,
"FIPS PUB 140-2": 1
},
"NIST": {
"NIST SP 800-131A": 2,
"NIST SP 800-38B": 1,
"NIST SP 800-38C": 1,
"NIST SP 800-38D": 1,
"NIST SP 800-38E": 1,
"NIST SP 800-56A": 1,
"NIST SP 800-56B": 1,
"NIST SP 800-67": 1,
"NIST SP 800-90A": 1,
"SP 80-90A": 1,
"SP 800-56A": 4,
"SP 800-56B": 1,
"SP 800-67": 1,
"SP 800-90": 1,
"SP 800-90A": 4
},
"PKCS": {
"PKCS #3": 2,
"PKCS#1": 4
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 27,
"AES-128": 1,
"AES-192": 1,
"AES-256": 2
}
},
"DES": {
"3DES": {
"TDEA": 1,
"TDES": 1,
"Triple-DES": 7
},
"DES": {
"DES": 2
}
},
"constructions": {
"MAC": {
"CMAC": 9,
"HMAC": 11,
"HMAC-SHA-224": 1,
"HMAC-SHA-384": 1
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"Cisco": {
"Cisco": 4
}
},
"vulnerability": {}
},
"policy_metadata": {
"/AAPL:Keywords": "[]",
"/Author": "Andreas Fabis",
"/CreationDate": "D:20180619213504Z00\u002700\u0027",
"/Creator": "Word",
"/Keywords": "",
"/ModDate": "D:20180619213504Z00\u002700\u0027",
"/Producer": "Mac OS X 10.12.6 Quartz PDFContext",
"/Subject": "",
"/Title": "Nokia Secure Sockets Crypto Module Security Policy",
"pdf_file_size_bytes": 416347,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 39
}
},
"state": {
"_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
"module_download_ok": true,
"module_extract_ok": true,
"policy_convert_ok": true,
"policy_download_ok": true,
"policy_extract_ok": true,
"policy_json_hash": null,
"policy_pdf_hash": "c958afe602b3acf9a8e344943cedcf342db16eaad17d4b261af735ecb3ae6dd9",
"policy_txt_hash": "0b0945301725b8129319b3f289b60d29e30fefed3ba66125d9cd88808c8490a8"
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0042.pdf",
"date_sunset": null,
"description": "The Nokia Secure Sockets Cryptographic Module is an OpenSSL cryptographic library that provides cryptographic services to its calling applications.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical Security: N/A",
"Mitigation of Other Attacks: N/A"
],
"fw_versions": null,
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Nokia Secure Sockets Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": "2.1 and 2.2",
"tested_conf": [
"Red Hat Enterprise Linux 6 32-bit running on oMG 2000",
"Vyatta 6.4 32-bit running on Dell PowerEdge R210 with PAA",
"Vyatta 6.4 32-bit running on Dell PowerEdge R210 without PAA",
"Windows 7 x86_64 native and Java support via JNI running on HP Pro Book 640 G1 with PAA (single-user mode)"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2014-06-05",
"lab": "atsec information security corporation",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2014-12-31",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2015-05-29",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2015-09-30",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2016-02-05",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2016-12-15",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-01-18",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-07-03",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-08-22",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-06-12",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-06-27",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-12-13",
"lab": "atsec information security corporation",
"validation_type": "Update"
}
],
"vendor": "Nokia of America Corporation (NoAC)",
"vendor_url": "http://www.nokia.com"
}
}