This page was not yet optimized for use on mobile devices.
UT-125 FIPS #41,#51 and #61
Certificate details
| Certificate ID | #5362 |
|---|---|
| Status | active |
| Validation dates | 30.06.2026 |
| Sunset date | 29-06-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Hardware |
| Embodiment | MultiChipEmbed |
| Caveat | When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys) |
| Exceptions |
|
| Description | The UT-125 FIPS #41, #51 and #61 are multi-chip embedded cryptographic modules as defined by FIPS 140-3. The cryptographic module can be incorporated into any Icom Inc. radio which requires FIPS 140-3 level 1 cryptographic security. |
| Vendor | Icom Inc. http://www.icomjapan.com |
| Lab | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-256, AES, CAST, DES, HMACHash functions
SHA-1Schemes
MACRandomness
PRNG, DRBG, RBGBlock cipher modes
ECB, OFBSecurity level
Level 1, level 1Standards
FIPS 140-3, FIPS 198-1, FIPS 180-4, SP 800-38A, SP 800-38B, SP 800-38F, SP 800-90A, SP 800-108, SP 800-90BCross-references
OutgoingAutomated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5362,
"dgst": "38bfb45a86fe3291",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KDF SP800-108A6944",
"#A5246",
"AES-CMACA6944",
"SHA-1A5246",
"AES-KWA6944",
"Counter DRBGA6944",
"HMAC-SHA-1A5246",
"AES-CBCA6944",
"SHA2-256A6944",
"#A6944",
"HMAC-SHA2-256A6944",
"AES-ECBA6944",
"AES-OFBA6944"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"41",
"61",
"51",
"125"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"41",
"61",
"51"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"41",
"61",
"51"
]
}
},
"policy_prunned_references": {
"_type": "Set",
"elements": [
"41",
"61",
"51"
]
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A6944",
"properties": "Direction - Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A6944",
"properties": "Direction - Generation, Verification Key Length - 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A6944",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A6944",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A6944",
"properties": "Direction - Decrypt, Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A6944",
"properties": "Prediction Resistance - No Mode - AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A5246",
"properties": "Key Length - Key Length: 512",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A6944",
"properties": "Key Length - Key Length: 256",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A6944",
"properties": "KDF Mode - Counter Supported Lengths - Supported Lengths: 256",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A5246",
"properties": "Message Length - Message Length: 256- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6944",
"properties": "Message Length - Message Length: 256- 65536 Increment 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Decoding from ciphertext to plaintext",
"indicator": "Port Output (GPIO 9)",
"inputs": "McBSP command:C ontrol Input or Data Input",
"name": "Decryptio n",
"outputs": "McBSP command:S tatus Output or Data Output",
"rolesSspAccess": "Crypto Officer - Reverse Warm",
"secFunImpl": "Crypto Channel"
},
{
"description": "",
"indicator": "",
"inputs": "(Request Command)",
"name": "",
"outputs": "(Response Command)",
"rolesSspAccess": "Start Key: E - TEK(Traf fic Encrypti on Key): E - Warm Start Key: E User - Reverse Warm Start Key: E - TEK(Traf fic Encrypti on Key): E - Warm Start",
"secFunImpl": ""
},
{
"description": "Encoding from plaintext to ciphertext.",
"indicator": "Port Output (GPIO 9)",
"inputs": "McBSP command:C ontrol Input or Data Input (Request Command)",
"name": "Encryptio n",
"outputs": "McBSP command:S tatus Output or Data Output (Response Command)",
"rolesSspAccess": "Key: E Crypto Officer - Reverse Warm Start Key: E - TEK(Traf fic Encrypti on Key): E - Warm Start Key: E User - Reverse Warm Start Key: E",
"secFunImpl": "Crypto Channel"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- TEK(Traf fic Encrypti on Key): E - Warm Start",
"secFunImpl": ""
},
{
"description": "Updating the firmware in the crypto module.",
"indicator": "Port Output (GPIO 9)",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "Firmware Update",
"outputs": "McBSP command:S tatus Output (Response Command, Indicate Command)",
"rolesSspAccess": "Key: E Crypto Officer - CTR_DR BG Key : Z - CTR_DR BG Seed : Z - CTR_DR BG V counter : Z - HMAC Key: E - SP 800-90B ENT (P) Entropy String : Z",
"secFunImpl": "Firmware Data Integrity"
},
{
"description": "Loading crypto key using Key Fill Device Interface Protocol.",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input or Data Input (Request Command)",
"name": "Key Load",
"outputs": "McBSP command:S tatus Output (Response Command, Indicate Command)",
"rolesSspAccess": "Crypto Officer - KEK (Key Encrypti on Key): W - TEK(Traf fic Encrypti on Key): W",
"secFunImpl": "None"
},
{
"description": "Changing/ Adding/ Generating/",
"indicator": "Port Output",
"inputs": "McBSP command:C ontrol Input",
"name": "Key Managem",
"outputs": "McBSP command:S tatus Output",
"rolesSspAccess": "Crypto Officer - KEK",
"secFunImpl": "Crypto Channel Key"
},
{
"description": "Zeroising crypto key and module parameter.",
"indicator": "(GPIO 9)",
"inputs": "or Data Input (Request Command)",
"name": "ent (OTAR)",
"outputs": "or Data Output (Response Command)",
"rolesSspAccess": "(Key Encrypti on Key): W,E,Z - Reverse Warm Start Key: G,E,Z - TEK(Traf fic Encrypti on Key): W,E,Z - Warm Start Key: W,E,Z User - KEK (Key Encrypti on Key): W,E,Z - Reverse Warm Start Key: G,E,Z - TEK(Traf fic Encrypti on Key): W,E,Z - Warm Start Key: W,E,Z",
"secFunImpl": "Derivation Key Generatio n Crypto Channel KTS"
},
{
"description": "Zeroising crypto key using Key Fill Device Interface Protocol.",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "Key Zeroisatio n",
"outputs": "McBSP command:S tatus Output (Response Command)",
"rolesSspAccess": "Crypto Officer - KEK (Key Encrypti on Key):",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Z - TEK(Traf fic Encrypti on Key): Z User - KEK (Key Encrypti on Key): Z - TEK(Traf fic Encrypti on Key): Z",
"secFunImpl": ""
},
{
"description": "Generating/Verifi cation of Message Authentication Code",
"indicator": "N/A",
"inputs": "McBSP command: Control Input or Data Input (Request Command)",
"name": "Message Authentic ation",
"outputs": "McBSP command: Status Output or Data Output (Response Command)",
"rolesSspAccess": "Crypto Officer - Reverse Warm Start Key: E - TEK(Traf fic Encrypti on Key): E - Warm Start Key: E User - Reverse Warm Start Key: E - TEK(Traf fic Encrypti on Key): E - Warm",
"secFunImpl": "Message Authentic ation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Start Key: E",
"secFunImpl": ""
},
{
"description": "Turning the power off on the module.",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "Power-Off",
"outputs": "McBSP command:S tatus Output (Response Command, Indicate Command)",
"rolesSspAccess": "Crypto Officer - CTR_DR BG Key : Z - CTR_DR BG V counter : Z - Reverse Warm Start Key: Z User - CTR_DR BG Key : Z - CTR_DR BG V counter : Z - Reverse Warm Start",
"secFunImpl": "None"
},
{
"description": "Self-testing the operation of the crypto functions.",
"indicator": "N/A",
"inputs": "Reset signal (Physical port): Control Input",
"name": "Self-Tests",
"outputs": "McBSP command: Status Output",
"rolesSspAccess": "Crypto Officer User",
"secFunImpl": "None"
},
{
"description": "Providing the crypto parameter.",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "Show Key Status",
"outputs": "McBSP command:S tatus Output (Response Command)",
"rolesSspAccess": "Crypto Officer User",
"secFunImpl": "None"
},
{
"description": "Showing current status.",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "Show Status",
"outputs": "McBSP command:S tatus Output (Response Command)",
"rolesSspAccess": "Crypto Officer User",
"secFunImpl": "None"
},
{
"description": "Show module\u0027s versioning information.",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "Show Version",
"outputs": "McBSP command:S tatus Output (Response Command)",
"rolesSspAccess": "Crypto Officer User",
"secFunImpl": "None"
},
{
"description": "Zeroising and Initializing the various setting values",
"indicator": "N/A",
"inputs": "McBSP command:C ontrol Input (Request Command)",
"name": "System Managem ent",
"outputs": "McBSP command:S tatus Output (Response Command)",
"rolesSspAccess": "Crypto Officer - KEK (Key Encrypti on Key): Z - Reverse Warm Start Key: Z - TEK(Traf fic Encrypti on Key): Z - Warm Start Key: Z User - KEK (Key Encrypti on Key): Z - Reverse Warm Start Key: Z - TEK(Traf fic Encrypti on Key): Z - Warm Start Key: Z",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC Decryption (A6944)",
"condition": "Start-up",
"details": "Decryption",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256-bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC Encryption (A6944)",
"condition": "Start-up",
"details": "Encryption",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256-bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC Generation (A6944)",
"condition": "Start-up",
"details": "MAC Generation",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256 bit key with 64-bit MAC length",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB Decryption (A6944)",
"condition": "Start-up",
"details": "Encryption",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256-bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB Encryption (A6944)",
"condition": "Start-up",
"details": "Decryption",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256-bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB Decryption (A6944)",
"condition": "Start-up",
"details": "Decryption",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256-bits",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB Encryption (A6944)",
"condition": "Start-up",
"details": "Encryption",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "256-bits",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A6944)",
"condition": "Start-up",
"details": "SP 800- 90Ar1 Instantiate, Generate health tests",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "AES-256 with DF",
"type": "CAST"
},
{
"algorithmOrTest": "CRC-16",
"condition": "Key load",
"details": "Verify",
"indicator": "Status Output",
"testMethod": "Manual Entry Test",
"testProps": "16-bit CRC",
"type": "Manual Entry"
},
{
"algorithmOrTest": "Firmware Load Test",
"condition": "Firmware update",
"details": "Verify",
"indicator": "Status Output",
"testMethod": "Firmware Load Test",
"testProps": "HMAC-SHA- 1",
"type": "SW/FW Load"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A5246)",
"condition": "Start-up",
"details": "Verify",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "512 bit key with 160 bit MAC length",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800- 108 (A6944)",
"condition": "Start-up",
"details": "Key Derivation",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "Counter Mode with HMAC- SHA2-256",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Application Self-Test Error",
"description": "Power-Up Self-Test failure state in Application Program",
"indicator": "McBSP command:Status Output : $05",
"name": "Application Self-Test Error",
"recoveryMethod": "McBSP command:Control Input"
},
{
"conditions": "Boot Self- Test Error",
"description": "Power-Up Self-Test failure state in Boot Program",
"indicator": "McBSP command:Status Output : $04",
"name": "Boot Self- Test Error",
"recoveryMethod": "McBSP command:Control Input"
},
{
"conditions": "Boot EEPROM Error Application EEPROM Error",
"description": "EEPROM\u0027s communication error state",
"indicator": "McBSP command:Status Output : $03",
"name": "EEPROM Error",
"recoveryMethod": "McBSP command:Control Input"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "N/A",
"inspectGuidance": "N/A",
"mechanism": "Production grade components"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Approved Algorithm running",
"name": "Approved Mode",
"statusIndicator": "High-Level Status Indicator via GPIO9 Port",
"type": "Approved"
},
{
"description": "When Approved Algorithm is not running",
"name": "Non-approved Mode",
"statusIndicator": "Low-Level Status Indicator via GPIO9 Port",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES-CBC-MAC",
"use": "MAC for OTAR"
},
{
"name": "DES ECB",
"use": "Crypto Key Encryption / Decryption"
},
{
"name": "DES OFB",
"use": "Voice Encryption / Decryption"
},
{
"name": "PRNG",
"use": "Pseudo-Random Number Generator"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "DES OFB",
"description": "Decoding from ciphertext to plaintext",
"name": "Decryption",
"role": "Crypto Officer, User"
},
{
"alg_accessed": "DES OFB",
"description": "Encoding from plaintext to ciphertext",
"name": "Encryption",
"role": "Crypto Officer, User"
},
{
"alg_accessed": "AES-CBC- MAC DES ECB PRNG",
"description": "Changing/Adding/Generating/Zeroising crypto key and module parameter.",
"name": "Key Management",
"role": "Crypto Officer, User"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Ground",
"logicalInterface": "Power",
"physicalPort": "GND"
},
{
"data": "McBSP clock output",
"logicalInterface": "Data Output",
"physicalPort": "CSCKO"
},
{
"data": "McBSP frame sync output",
"logicalInterface": "Data Output",
"physicalPort": "CFSO"
},
{
"data": "McBSP frame sync input",
"logicalInterface": "Data Input Control Input",
"physicalPort": "CFSI"
},
{
"data": "McBSP data output",
"logicalInterface": "Data Output Status Output",
"physicalPort": "CSDO"
},
{
"data": "McBSP clock input",
"logicalInterface": "Data Input Control Input",
"physicalPort": "CSCKI"
},
{
"data": "Reset signal",
"logicalInterface": "Control Input",
"physicalPort": "OPRST"
},
{
"data": "McBSP data input",
"logicalInterface": "Data Input Control Input",
"physicalPort": "CSDI"
},
{
"data": "Wake up signal",
"logicalInterface": "Control Input",
"physicalPort": "OPACT"
},
{
"data": "External electrical power (+3.3V power line)",
"logicalInterface": "Power",
"physicalPort": "DVDD_3.3V"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
},
{
"authMethodList": "None",
"name": "User",
"operatorType": "User",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "1",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "CRC-32",
"details": "32 bit CRC Check of firmware integrity.",
"indicator": "Status Output",
"testMethod": "KAT",
"testProps": "32-bit CRC",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "DSP RAM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "KFD Protocol to DSP RAM",
"sfiAlgo": "",
"source": "External KFD"
},
{
"dest": "EEPROM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "KFD Protocol to EEPROM",
"sfiAlgo": "",
"source": "External KFD"
},
{
"dest": "DSP RAM",
"distribution": "Wireless",
"entry": "Electronic",
"format": "Encrypted",
"name": "OTAR Input to DSP RAM",
"sfiAlgo": "Crypto Channel KTS",
"source": "External KMF"
},
{
"dest": "EEPROM",
"distribution": "Wireless",
"entry": "Electronic",
"format": "Encrypted",
"name": "OTAR Input to EEPROM",
"sfiAlgo": "Crypto Channel KTS",
"source": "External KMF"
},
{
"dest": "External KMF",
"distribution": "Wireless",
"entry": "Electronic",
"format": "Encrypted",
"name": "OTAR Output",
"sfiAlgo": "Crypto Channel KTS",
"source": "DSP RAM"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "The firmware update process overwrites the factory pre-loaded DRBG SSPs.",
"method": "Firmware Update",
"operatorId": "Invoking firmware update service",
"rationale": "Overwritten SSPs are not recoverable"
},
{
"description": "Module power loss causes all SSPs stored in volatile memory to be effectively overwritten with zeroes.",
"method": "Power lost",
"operatorId": "Disconnecting power from module host radio.",
"rationale": "Zeroised SSPs in volatile memory are not recoverable after being effectively overwritten with zeroes."
},
{
"description": "McBSP Command causes all stored SSPs to be overwritten with zeroes.",
"method": "Zeriose command",
"operatorId": "Send the McBSP command.",
"rationale": "Zeroised SSPs in EEPROM or DSP RAM are not recoverable after being overwritten with zeroes."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage of SSP\u0027s",
"name": "DSP RAM",
"persistance": "Dynamic"
},
{
"description": "Persistent storage for cryptographic keys",
"name": "EEPROM",
"persistance": "Static"
},
{
"description": "Persistent storage of firmware and pre-loaded entropy",
"name": "Flash ROM",
"persistance": "Static"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "Label, Display on the radio display.",
"fwVersion": "Rev. 1.7",
"hwVersion": "Rev2.2 and Rev2.3",
"modelPartNum": "UT-125 #41",
"processors": "TMS320VC5507ZAY"
},
{
"features": "Label, Display on the radio display.",
"fwVersion": "Rev. 1.7",
"hwVersion": "Rev2.4 and Rev2.5",
"modelPartNum": "UT-125 #51",
"processors": "TMS320VC5507ZAY"
},
{
"features": "Label, Display on the radio display.",
"fwVersion": "Rev. 1.7",
"hwVersion": "Rev2.6 and Rev2.7",
"modelPartNum": "UT-125 #61",
"processors": "TMS320VC5507ZAY"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric",
"implName": "N/A",
"name": "CKG Section 4",
"reference": "SP800-133r2, Section 4 Example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {},
"certification_process": {},
"cipher_mode": {
"ECB": {
"ECB": 2
},
"OFB": {
"OFB": 3
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 8
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#41": 6,
"#51": 4,
"#61": 6
}
},
"fips_certlike": {
"Certlike": {
"AES-256": 2,
"DRBG 128": 1,
"DRBG 256": 1,
"HMAC-SHA- 1": 4,
"HMAC-SHA-1": 4,
"SHA-1": 1,
"SHA2-256": 2
}
},
"fips_security_level": {
"Level": {
"Level 1": 3,
"level 1": 2
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 20,
"PRNG": 2
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 5,
"FIPS 180-4": 2,
"FIPS 198-1": 2
},
"NIST": {
"SP 800-108": 1,
"SP 800-38A": 3,
"SP 800-38B": 1,
"SP 800-38F": 1,
"SP 800-90A": 1,
"SP 800-90B": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 1,
"AES-256": 2
},
"CAST": {
"CAST": 20
}
},
"DES": {
"DES": {
"DES": 5
}
},
"constructions": {
"MAC": {
"HMAC": 3
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KDF SP800-108A6944",
"AES-CMACA6944",
"SHA-1A5246",
"AES-KWA6944",
"Counter DRBGA6944",
"HMAC-SHA-1A5246",
"AES-CBCA6944",
"SHA2-256A6944",
"HMAC-SHA2-256A6944",
"AES-ECBA6944",
"AES-OFBA6944"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A6944",
"#A5246"
]
},
"policy_metadata": {
"/CreationDate": "D:20260624082513-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260624082513-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 638397,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 27
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "562325f9f6d5ac8fc5887cdc6c47d7b1c2b0b3285df30f439b2055649eeba67d",
"source_hash": "1f4c2d1b025dc2b5733f622ec6f510341180d7f58cceae77ecee15e1607d3f0b",
"txt_hash": "373f65f9d45c7ffe582335ceeb6f7e3f122db9f7490aa24264718daf485fa5b2"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
"date_sunset": "2031-06-29",
"description": "The UT-125 FIPS #41, #51 and #61 are multi-chip embedded cryptographic modules as defined by FIPS 140-3. The cryptographic module can be incorporated into any Icom Inc. radio which requires FIPS 140-3 level 1 cryptographic security.",
"embodiment": "MultiChipEmbed",
"exceptions": [
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "UT-125 FIPS #41,#51 and #61",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-06-30",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
}
],
"vendor": "Icom Inc.",
"vendor_url": "http://www.icomjapan.com"
}
}