This page was not yet optimized for use on mobile devices.
CryptoServer Se-Series Gen2
Certificate details
| Certificate ID | #2814 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 11.01.2017 , 25.01.2017 , 01.02.2018 |
| Standard | FIPS 140-2 |
| Security level | 3 |
| Type | Hardware |
| Embodiment | Multi-Chip Embedded |
| Caveat | When operated in FIPS mode |
| Description | The CryptoServer Se-Series Gen2 Version 5.01.2.0 and 5.01.4.0 is an encapsulated protected security module which is realized as a multi-chip embedded cryptographic module as defined in FIPS 140-2. It's realization meets the overall FIPS 140-2 Level 3 requirements. The primary purpose of this module is to provide secure cryptographic services such as encryption or decryption, hashing, signing and verification of data, random number generation, on-board secure key generation, key storage and further key management functions in a tamper-protected environment. |
| Version (Hardware) | 5.01.2.0 and 5.01.4.0 |
| Version (Firmware) | 5.0.10.1 |
| Vendor | Utimaco IS GmbH http://hsm.utimaco.com |
| Lab | Penumbra Security, Inc. |
| Algorithms | |
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, DES, Triple-DES, HMAC, CMACAsymmetric Algorithms
RSA 2048, RSA 4096, RSA 1024, ECDH, ECDSA, ECIES, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA1, SHA-224, SHA-256, SHA-384, SHA-512, SHA224, SHA256, SHA384, SHA512, MD5, RIPEMD-160Schemes
MAC, Key AgreementRandomness
TRNG, DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, P-192, K-233, K-283, K-409, K-571, B-233, B-283, B-409, B-571, K-163, B-163Block cipher modes
ECB, CBC, OFB, GCMSecurity level
Level 3Side-channel analysis
DPA, SPAAutomated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 2814,
"dgst": "35d5aa731b1e6a3a",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC#2628",
"SHS#3321",
"AES#4028",
"ECDSA#898",
"DSA#1091",
"KTS#4028",
"RSA#2066",
"DRBG#1202",
"KBKDF#97",
"#3321",
"#2066",
"#898",
"#97",
"#2205",
"SHS#3323",
"#2628",
"RSA#2067",
"#4028",
"Triple-DES#2205",
"#1091",
"#1202",
"#2067",
"#855",
"ECDSA#897",
"#3323",
"#897",
"SHS#3322",
"Triple-DES MAC#2205",
"#3322",
"CVL#855",
"#856",
"CVL#856"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"5.01.2.0",
"5.0.10.1",
"5.01.4.0"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 42,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 5
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 10
},
"ECIES": {
"ECIES": 1
}
},
"FF": {
"DH": {
"DH": 14,
"Diffie-Hellman": 5
},
"DSA": {
"DSA": 39
}
},
"RSA": {
"RSA 1024": 1,
"RSA 2048": 1,
"RSA 4096": 1
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 14
},
"ECB": {
"ECB": 4
},
"GCM": {
"GCM": 1
},
"OFB": {
"OFB": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 1
}
},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 5
},
"MAC": {
"MAC": 17
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 1,
"B-233": 5,
"B-283": 5,
"B-409": 4,
"B-571": 5,
"K-163": 1,
"K-233": 5,
"K-283": 5,
"K-409": 4,
"K-571": 5,
"P-192": 2,
"P-224": 10,
"P-256": 10,
"P-384": 8,
"P-521": 10
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"# 2066": 1,
"# 2205": 1,
"#1091": 1,
"#1202": 1,
"#2066": 1,
"#2628": 1,
"#3321": 1,
"#3322": 1,
"#3323": 1,
"#4028": 2,
"#855": 2,
"#856": 1,
"#897": 1,
"#97": 1
}
},
"fips_certlike": {
"Certlike": {
"AES 16": 1,
"AES 32": 1,
"DSA 2048": 3,
"PKCS#1": 2,
"PKCS#11": 16,
"PKCS#3": 6,
"RSA 1024": 1,
"RSA 2048": 1,
"RSA 4096": 1,
"SHA -1": 2,
"SHA- 256": 2,
"SHA-1": 8,
"SHA-224": 13,
"SHA-256": 13,
"SHA-384": 13,
"SHA-512": 16,
"SHA-512 1024": 1,
"SHA-512 2048": 1,
"SHA1": 1,
"SHA224": 1,
"SHA256": 1,
"SHA384": 1,
"SHA512": 1
}
},
"fips_security_level": {
"Level": {
"Level 3": 4
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"RIPEMD": {
"RIPEMD-160": 1
},
"SHA": {
"SHA1": {
"SHA-1": 8,
"SHA1": 1
},
"SHA2": {
"SHA-224": 13,
"SHA-256": 13,
"SHA-384": 13,
"SHA-512": 18,
"SHA224": 1,
"SHA256": 1,
"SHA384": 1,
"SHA512": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 38
},
"RNG": {
"RBG": 1,
"RNG": 5
},
"TRNG": {
"TRNG": 2
}
},
"side_channel_analysis": {
"SCA": {
"DPA": 1,
"SPA": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 113": 2,
"FIPS 140-2": 8,
"FIPS 180-4": 3,
"FIPS 186-2": 1,
"FIPS 186-4": 10,
"FIPS 197": 2,
"FIPS 198-1": 2,
"FIPS PUB 140-2": 1,
"FIPS140-2": 5,
"FIPS186-2": 1,
"FIPS186-4": 2
},
"NIST": {
"NIST SP 800-56A": 1,
"SP 800-108": 2,
"SP 800-20": 2,
"SP 800-38A": 4,
"SP 800-38B": 2,
"SP 800-56A": 1,
"SP 800-67": 2,
"SP 800-90A": 1
},
"PKCS": {
"PKCS#1": 1,
"PKCS#11": 8,
"PKCS#3": 3
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 50
}
},
"DES": {
"3DES": {
"Triple-DES": 15
},
"DES": {
"DES": 15
}
},
"constructions": {
"MAC": {
"CMAC": 13,
"HMAC": 14
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC#2628",
"DRBG#1202",
"ECDSA#897",
"SHS#3321",
"KBKDF#97",
"CVL#856",
"RSA#2067",
"ECDSA#898",
"DSA#1091",
"AES#4028",
"SHS#3322",
"Triple-DES MAC#2205",
"CVL#855",
"Triple-DES#2205",
"SHS#3323",
"KTS#4028",
"RSA#2066"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#1202",
"#2067",
"#855",
"#3323",
"#2628",
"#897",
"#3321",
"#2066",
"#4028",
"#898",
"#3322",
"#97",
"#2205",
"#856",
"#1091"
]
},
"policy_metadata": {
"/Author": "Wedel",
"/CreationDate": "D:20180125150330-08\u002700\u0027",
"/Creator": "Nitro Pro",
"/ModDate": "D:20180125150739-08\u002700\u0027",
"/Producer": "Nitro Pro 11 (11.0.7.411)",
"/Title": "Microsoft Word - e992-e5d3-bdeb-cf3d.docx",
"pdf_file_size_bytes": 844274,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 44
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "efd4e7054f1a2d1c5f78fbdc19a0980b3c103f1715509e1ac81f99a501c13b5c",
"source_hash": "8738f5148fee1460d0b6e267e68ecc6265c3cf4167f8b09fb80953ef8e643605",
"txt_hash": "cddb66ec6c90abada34c15b78335bfe91a27f734d8cee694177cadd3e393acc4"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertJan2017.pdf",
"date_sunset": null,
"description": "The CryptoServer Se-Series Gen2 Version 5.01.2.0 and 5.01.4.0 is an encapsulated protected security module which is realized as a multi-chip embedded cryptographic module as defined in FIPS 140-2. It\u0027s realization meets the overall FIPS 140-2 Level 3 requirements. The primary purpose of this module is to provide secure cryptographic services such as encryption or decryption, hashing, signing and verification of data, random number generation, on-board secure key generation, key storage and further key management functions in a tamper-protected environment.",
"embodiment": "Multi-Chip Embedded",
"exceptions": null,
"fw_versions": "5.0.10.1",
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": "5.01.2.0 and 5.01.4.0",
"level": 3,
"mentioned_certs": {},
"module_name": "CryptoServer Se-Series Gen2",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-01-11",
"lab": "Penumbra Security, Inc.",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-01-25",
"lab": "Penumbra Security, Inc.",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-02-01",
"lab": "Penumbra Security, Inc.",
"validation_type": "Update"
}
],
"vendor": "Utimaco IS GmbH",
"vendor_url": "http://hsm.utimaco.com"
}
}