This page was not yet optimized for use on mobile devices.
CipherTrust Transparent Encryption Cryptographic Module
Certificate details
| Certificate ID | #4740 |
|---|---|
| Status | active |
| Validation dates | 26.07.2024 |
| Sunset date | 25-07-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software-Hybrid |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in approved mode |
| Exceptions |
|
| Description | The CipherTrust Transparent Encryption Cryptographic Module is a loadable kernel module for Windows, Linux and IBM AIX. It is also loadable in the user space for Linux. The module communicates with the SecFS, a secure layer that sits over the filesystem to secure files and directories and to enforce the access and encryption policy. |
| Vendor | Thales https://www.thales.com |
| Lab | Lightship Security, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, CAST, ARIA, HMACAsymmetric Algorithms
Diffie-Hellman, DHHash functions
PBKDFSchemes
MAC, Key AgreementRandomness
RBGVendor
ThalesSecurity level
Level 1, level 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4740,
"dgst": "34ed0cec6ebf3e84",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES-CBC-CS1A3609",
"HMAC-SHA2-256A3609",
"SHA2-384A3609",
"PBKDFA3609",
"AES-XTS Testing Revision 2.0A3609",
"HMAC-SHA2-384A3609",
"SHA2-256A3609",
"AES-CBCA3609",
"#A3609"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A3609",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3609",
"properties": "Direction - decrypt, encrypt Key Length - 128, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3609",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38E"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3609",
"properties": "Key Length - Key Length: 256-448 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3609",
"properties": "Key Length - Key Length: 256-448 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3609",
"properties": "Iteration Count - Iteration Count: 90000-120000 Increment 1000 Password Length - Password Length: 96-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3609",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3609",
"properties": "-",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Service to encrypt supplied data.",
"indicator": "is_fips=1",
"inputs": "\u2022 key \u2022 IV (16 bytes) \u2022 flag to indicate encrypt \u2022 data to be encrypted \u2022 data length \u2022 data segment index number \u2022 data segment size",
"name": "Encrypt Data",
"outputs": "\u2022 encrypted data \u2022 return code",
"rolesSspAccess": "Crypto Officer - Data Encryption Key: W,E",
"secFunImpl": "Encrypt/Decrypt 1 Encrypt/Decrypt 2 Encrypt/Decrypt 3 Encrypt/Decrypt 4 Encrypt/Decrypt 5"
},
{
"description": "Service to decrypt supplied data.",
"indicator": "is_fips=1",
"inputs": "\u2022 key \u2022 IV (16 bytes) \u2022 flag to indicate decrypt \u2022 data to be decrypted \u2022 data length \u2022 data segment index number \u2022 data segment size",
"name": "Decrypt Data",
"outputs": "\u2022 decrypted data \u2022 return code",
"rolesSspAccess": "Crypto Officer - Data Encryption Key: W,E",
"secFunImpl": "Encrypt/Decrypt 1 Encrypt/Decrypt 2 Encrypt/Decrypt 3 Encrypt/Decrypt 4 Encrypt/Decrypt 5"
},
{
"description": "Service to generate a MAC over supplied data.",
"indicator": "is_fips=1",
"inputs": "\u2022 data \u2022 HMAC Key \u2022 key length \u2022 message buffer \u2022 message length \u2022 SHA type (length)",
"name": "MAC Generate",
"outputs": "\u2022 message digest \u2022 message digest length",
"rolesSspAccess": "Crypto Officer - HMAC Key: W,E",
"secFunImpl": "Create MAC 1 Create MAC 2"
},
{
"description": "Service to verify the integrity of",
"indicator": "is_fips=1",
"inputs": "\u2022 software",
"name": "Verify Software Integrity",
"outputs": "\u2022 message digest \u2022 message digest length",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Verify Software Integrity"
},
{
"description": "the module software",
"indicator": "",
"inputs": "\u2022 Software Integrity HMAC Key \u2022 key length \u2022 message buffer \u2022 message length \u2022 SHA type (length) \u2022 known MAC",
"name": "",
"outputs": "\u2022 Success or Failure",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Service to create a hash over supplied data.",
"indicator": "is_fips=1",
"inputs": "\u2022 supplied data \u2022 data length \u2022 hash type (256, 384)",
"name": "Calculate Hash",
"outputs": "\u2022 hash result",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Create Hash 1 Create Hash 2"
},
{
"description": "Password- based key derivation function (PBKDF)",
"indicator": "is_fips=1",
"inputs": "\u2022 password \u2022 password length \u2022 salt \u2022 salt length \u2022 iteration number \u2022 derived key length",
"name": "Key Derivation",
"outputs": "\u2022 Derived Key",
"rolesSspAccess": "Crypto Officer - Derived Key: R",
"secFunImpl": "PBKDF"
},
{
"description": "Service to zeroize keys.",
"indicator": "is_fips=1",
"inputs": "Command",
"name": "Key Destroy",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer - HMAC Key: Z - Data Encryption Key: Z - Derived Key: Z",
"secFunImpl": "None"
},
{
"description": "Shows the module version.",
"indicator": "N/A",
"inputs": "const char *vds_crypto_versi on(void)",
"name": "Show Module Version",
"outputs": "Module version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Shows the module status.",
"indicator": "N/A",
"inputs": "Command",
"name": "Shows Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Performs module self- tests via module restart.",
"indicator": "N/A",
"inputs": "Command",
"name": "Perform Self-Tests",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC (A3609)",
"condition": "Power-up",
"details": "Encrypt, Decrypt",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key Length: 128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3609)",
"condition": "Power-up",
"details": "Encrypt, Decrypt",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key Length: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-CS1 (A3609)",
"condition": "Power-up",
"details": "Encrypt, Decrypt",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key Length: 128 bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3609)",
"condition": "Power-up",
"details": "Encrypt, Decrypt",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key Length: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A3609)",
"condition": "Power-up",
"details": "Keyed Hash",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key length: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-384 (A3609)",
"condition": "Power-up",
"details": "Keyed Hash",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key length: 384 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3609)",
"condition": "Power-up",
"details": "Key Derivation",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Key length: 384 bits",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3609)",
"condition": "Power-up",
"details": "Hash",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Hash length: 256 bits",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3609)",
"condition": "Power-up",
"details": "Hash",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "KAT",
"testProps": "Hash length: 384 bits",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Module enters the error state on condition that a self-test failure has occurred.",
"description": "FIPS Algorithm Known Answer Test/Integrity test failed.",
"indicator": "Error message is written to the log.",
"name": "Error",
"recoveryMethod": "Reinstallation of module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "The module is operating in the Approved mode",
"name": "Approved Mode",
"statusIndicator": "From Service (is_fips=1)",
"type": "Approved"
},
{
"description": "The module is operating in the non- Approved mode.",
"name": "Non-Approved Mode",
"statusIndicator": "From Service (is_fips=0 or no indicator)",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "Diffie-Hellman Key Agreement",
"use": "Used to create keys used to obfuscate the communications between the kernel and the user space."
},
{
"name": "RSA",
"use": "Used for key wrapping as part of the key exchange protocol between the key manager and the CipherTrust Transparent Encryption agent."
},
{
"name": "ARIA",
"use": "Used for data encryption. Encryption operations using ARIA do not provide the FIPS indicator in the return."
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "Diffie-Hellman Key Agreement",
"description": "Used to create a key, which is then provided to SecFS for use outside of the module.",
"name": "DH Key Agreement",
"role": "Crypto Officer"
},
{
"alg_accessed": "RSA",
"description": "Used to encrypt a provided key and pass the result to SecFS.",
"name": "RSA Key Wrap",
"role": "Crypto Officer"
},
{
"alg_accessed": "ARIA",
"description": "Used to encrypt supplied data.",
"name": "Non-Approved Encrypt Data",
"role": "Crypto Officer"
},
{
"alg_accessed": "ARIA",
"description": "Used to decrypt supplied data.",
"name": "Non-Approved Decrypt Data",
"role": "Crypto Officer"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Application Programming Interface (API) entry point data input stack parameters",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API entry point data output stack parameters",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API entry point and corresponding stack parameters",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API entry point return values and stack parameters",
"logicalInterface": "Control Output",
"physicalPort": "N/A"
},
{
"data": "API entry point return values and status stack parameters",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [],
"found": false,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-384 (A3609)",
"details": "Keyed Hash",
"indicator": "Logged: \"FIPS \u003ctestname\u003e Test failed\u0027 or \u0027FIPS Tests passed\u0027",
"testMethod": "Integrity Test",
"testProps": "Key length: 384 bits",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "CipherTrust Transparent Encryption Cryptographic Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Key Import",
"sfiAlgo": "",
"source": "SecFS"
},
{
"dest": "SecFS",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Key Export",
"sfiAlgo": "",
"source": "CipherTrust Transparent Encryption Cryptographic Module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Keys are overwritten with zeros.",
"method": "Key Destroy",
"operatorId": "N/A. Keys are zeroized at the end of each cryptographic operation.",
"rationale": "Keys are not stored by the module. They are zeroized at the end of each cryptographic operation."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Working memory used by the module",
"name": "Memory",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [
{
"features": "",
"fwVersion": "",
"hwVersion": "Intel\u00ae Xeon\u00ae Gold 5318N",
"modelPartNum": "-",
"processors": ""
},
{
"features": "",
"fwVersion": "",
"hwVersion": "IBM Power9",
"modelPartNum": "-",
"processors": ""
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "",
"integrityTest": "HMAC-SHA2-384",
"packageFileName": "seccrypto.ko (kernel space)",
"swFwVersion": "3.0.1"
},
{
"features": "",
"integrityTest": "HMAC-SHA2-384",
"packageFileName": "libvorcrypto.so (user space)",
"swFwVersion": "3.0.1"
},
{
"features": "",
"integrityTest": "HMAC-SHA2-384",
"packageFileName": "vmcrypto.sys",
"swFwVersion": "3.0.1"
},
{
"features": "",
"integrityTest": "HMAC-SHA2-384",
"packageFileName": "seccrypto",
"swFwVersion": "3.0.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "PowerEdge R750xs",
"hypervisorHostOs": "VMware ESXi 7.0 Update 3",
"operatingSystem": "Red Hat Enterprise Linux 8.6 (Kernel Space)",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Gold 5318N",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerEdge R750xs",
"hypervisorHostOs": "VMware ESXi 7.0 Update 3",
"operatingSystem": "Red Hat Enterprise Linux 8.6 (User Space)",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Gold 5318N",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerEdge R750xs",
"hypervisorHostOs": "VMware ESXi 7.0 Update 3",
"operatingSystem": "Windows Server 2019",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Gold 5318N",
"version": "3.0.1"
},
{
"hardwarePlatform": "IBM Power9 Server (9009- 42A)",
"hypervisorHostOs": "",
"operatingSystem": "AIX 7.3",
"paa_pai": "Yes",
"processors": "IBM Power9",
"version": "3.0.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"FF": {
"DH": {
"DH": 1,
"Diffie-Hellman": 2
}
}
},
"certification_process": {},
"cipher_mode": {},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 3
},
"MAC": {
"MAC": 11
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-CBC 256": 1,
"HMAC-SHA2384": 2,
"SHA2-256": 4,
"SHA2-384": 4
}
},
"fips_security_level": {
"Level": {
"Level 1": 1,
"level 1": 1
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 14
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 2,
"FIPS 180-4": 2,
"FIPS 198-1": 2
},
"NIST": {
"SP 800-132": 3,
"SP 800-38A": 2,
"SP 800-38E": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 1
},
"CAST": {
"CAST": 18
}
},
"constructions": {
"MAC": {
"HMAC": 14
}
},
"miscellaneous": {
"ARIA": {
"ARIA": 4
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"Thales": {
"Thales": 1
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-CBC-CS1A3609",
"HMAC-SHA2-256A3609",
"SHA2-384A3609",
"PBKDFA3609",
"AES-XTS Testing Revision 2.0A3609",
"HMAC-SHA2-384A3609",
"SHA2-256A3609",
"AES-CBCA3609"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3609"
]
},
"policy_metadata": {
"/Comments": "",
"/Company": "",
"/ContentTypeId": "0x01010044788752DEE24048B316A411A5F1F9B2",
"/CreationDate": "D:20240722160606-04\u002700\u0027",
"/Creator": "Acrobat PDFMaker 24 for Word",
"/Date": "July 18, 2024",
"/Document Number": "002-000482-001",
"/Keywords": "",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_ActionId": "52b5c46d-4ea5-4bc4-a605-0d7ba789f083",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_ContentBits": "0",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Enabled": "true",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Method": "Privileged",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_Name": "DIS OPEN",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_SetDate": "2023-12-05T17:16:44Z",
"/MSIP_Label_cf20372f-9ab3-4551-9149-9f9b12e2c27e_SiteId": "6e603289-5e46-4e26-ac7c-03a85420a9a5",
"/MediaServiceImageTags": "",
"/ModDate": "D:20240722160619-04\u002700\u0027",
"/Module": "CipherTrust Transparent Encryption Cryptographic Module",
"/Producer": "Adobe PDF Library 24.2.159",
"/Revision": "Rev M",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"/_dlc_DocIdItemGuid": "01646ddf-39a2-4dfc-bc5f-7298e61ce7fc",
"pdf_file_size_bytes": 756657,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://www.thalesdocs.com/ctp/cte/Books/Online-Files/index.html"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 26
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "26d633f03e126280c12a0049021ee07f0a5964ade53aa574b25c363f11a8e8dc",
"source_hash": "aa06f29736b5dbe219c6fe6c9187a7b100ef69844a0f1b267ecb07754ffe71aa",
"txt_hash": "8046bd3f544fab2003cbbb19b05c161b35ae1bf76bd59710fedf857ab49beec7"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
"date_sunset": "2029-07-25",
"description": "The CipherTrust Transparent Encryption Cryptographic Module is a loadable kernel module for Windows, Linux and IBM AIX. It is also loadable in the user space for Linux. The module communicates with the SecFS, a secure layer that sits over the filesystem to secure files and directories and to enforce the access and encryption policy.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "CipherTrust Transparent Encryption Cryptographic Module",
"module_type": "Software-Hybrid",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-07-26",
"lab": "Lightship Security, Inc.",
"validation_type": "Initial"
}
],
"vendor": "Thales",
"vendor_url": "https://www.thales.com"
}
}