Mocana Cryptographic Suite B Hybrid Module

Certificate #2157

Webpage information

Status historical
Historical reason 186-2 transition
Validation dates 20.05.2014 , 05.04.2016
Standard FIPS 140-2
Security level 1
Type Software-Hybrid
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys
Exceptions
  • Mitigation of Other Attacks: N/A
Description The Mocana Cryptographic Suite B Hybrid Module (Software Version 5.5fi) is a hybrid, multi-chip standalone cryptographic module that runs on a general purpose computer. The primary purpose of this module is to provide FIPS Approved cryptographic routines to consuming applications via an Application Programming Interface.
Version (Hardware) Freescale P2020 SEC 3.1
Tested configurations
  • VxWorks 6.8 running on a XPedite5500 with a Freescale P2020 SEC3.1 processor (Single-user mode)
Vendor Mocana Corporation
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, AES-, DES, Triple-DES, TDES, Blowfish, HMAC, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512, CMAC
Asymmetric Algorithms
ECDH, ECDSA, Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-2, MD4, MD5
Schemes
Key Exchange
Randomness
PRNG, DRBG, RNG
Elliptic Curves
P-192, P-224, P-384
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Security level
Level 1

Standards
FIPS 140-2, FIPS 186-2, NIST SP 800-131A, PKCS #1

File metadata

Title Microsoft Word - 200a - Cert. #2157 - Mocana Suite B Hybrid Security Policy v1.3.doc
Author lgarcia
Creation date D:20160330122106-07'00'
Modification date D:20160330122106-07'00'
Pages 22
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 10.1.16 (Windows)

References

Outgoing
  • 1437 - historical - KEY-UP Cryptographic Module
  • 1059 - historical - PICOfreedom
  • 298 - historical - nShield F2 PCI, nShield F2 Ultrasign PCI and nShield F2 Ultrasign 32 PCI
  • 647 - historical - ActivIdentity Digital Identity Applet Suite V2 on Gemalto SafesITe TOP IM CY2 (aka Cyberflex Access 64K V2)
  • 479 - historical - Entrust Authority™ Security Toolkit for Java™

Heuristics

No heuristics are available for this certificate.

References

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2157,
  "dgst": "3a6e2b22591ed551",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES#2290",
        "HMAC#1407",
        "RSA#1179",
        "Triple-DES#1440",
        "ECDSA#372",
        "SHS#1974",
        "DSA#717",
        "DRBG#284",
        "AES#2291"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "298",
          "1059",
          "479",
          "647",
          "1437"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "298",
          "1059",
          "279",
          "479",
          "647",
          "1437"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "298",
        "1059",
        "479",
        "647",
        "1437"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 12
          },
          "ECDSA": {
            "ECDSA": 17
          }
        },
        "FF": {
          "DH": {
            "DH": 16,
            "Diffie-Hellman": 3
          },
          "DSA": {
            "DSA": 21
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CCM": {
          "CCM": 2
        },
        "CFB": {
          "CFB": 2
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 2
        },
        "OFB": {
          "OFB": 2
        },
        "XTS": {
          "XTS": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 4
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 4,
          "P-224": 2,
          "P-384": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 7,
          "#1059": 1,
          "#1179": 1,
          "#1407": 1,
          "#1437": 1,
          "#1440": 1,
          "#1974": 1,
          "#2290": 2,
          "#2291": 1,
          "#284": 1,
          "#298": 1,
          "#372": 1,
          "#479": 1,
          "#647": 1,
          "#717": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS #1": 2,
          "Cert. #2290 AES": 1,
          "Cert. #2291 AES": 1,
          "Certificate # AES": 1,
          "DRBG Cert. #284": 1,
          "HMAC-SHA- 224/256": 2,
          "HMAC-SHA- 384/512": 2,
          "HMAC-SHA-1": 12,
          "HMAC-SHA-1, 224": 2,
          "HMAC-SHA-224": 4,
          "HMAC-SHA-224/256": 4,
          "HMAC-SHA-256": 4,
          "HMAC-SHA-384": 4,
          "HMAC-SHA-384/512": 4,
          "HMAC-SHA-512": 2,
          "HMAC-SHA-512 Cert. #1407": 2,
          "HMAC-SHA1": 2,
          "HMAC-SHA224/256": 2,
          "HMAC-SHA384/512": 2,
          "PKCS #1": 8,
          "RSA PKCS #1": 4,
          "SHA-1": 12,
          "SHA-1 Cert. #372": 1,
          "SHA-1 Cert. #717": 1,
          "SHA-2": 1,
          "SHA-2 Cert. #1179": 1,
          "SHA-224": 2,
          "SHA-256": 2,
          "SHA-2; 2048": 1,
          "SHA-384": 2,
          "SHA-512": 1,
          "SHA-512 Cert. #1974": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 3
          },
          "MD5": {
            "MD5": 3
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 14
          },
          "SHA2": {
            "SHA-2": 3,
            "SHA-224": 2,
            "SHA-256": 2,
            "SHA-384": 2,
            "SHA-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 25,
          "PRNG": 2
        },
        "RNG": {
          "RNG": 5
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 7,
          "FIPS 186-2": 10
        },
        "NIST": {
          "NIST SP 800-131A": 1
        },
        "PKCS": {
          "PKCS #1": 7
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 25,
            "AES-": 1
          }
        },
        "DES": {
          "3DES": {
            "TDES": 9,
            "Triple-DES": 3
          },
          "DES": {
            "DES": 8
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 2,
            "HMAC-SHA-224": 2,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-384": 2,
            "HMAC-SHA-512": 2
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "lgarcia",
      "/CreationDate": "D:20160330122106-07\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20160330122106-07\u002700\u0027",
      "/Producer": "Acrobat Distiller 10.1.16 (Windows)",
      "/Title": "Microsoft Word - 200a - Cert. #2157 - Mocana Suite B Hybrid Security Policy v1.3.doc",
      "pdf_file_size_bytes": 162377,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 22
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "792c7a95790006d927d837ec9ab0d9e3b51ffe9e59a5c24072699ae339859e96",
    "policy_txt_hash": "7abc19ff10c4d3d75ab56ed17df9e03aeb2fdabe47ac26d3891b1e6090184259"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0041.pdf",
    "date_sunset": null,
    "description": "The Mocana Cryptographic Suite B Hybrid Module (Software Version 5.5fi) is a hybrid, multi-chip standalone cryptographic module that runs on a general purpose computer. The primary purpose of this module is to provide FIPS Approved cryptographic routines to consuming applications via an Application Programming Interface.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "186-2 transition",
    "hw_versions": "Freescale P2020 SEC 3.1",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Mocana Cryptographic Suite B Hybrid Module",
    "module_type": "Software-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "5.5fi",
    "tested_conf": [
      "VxWorks 6.8 running on a XPedite5500 with a Freescale P2020 SEC3.1 processor (Single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-05-20",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2016-04-05",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "Mocana Corporation",
    "vendor_url": "http://www.mocana.com"
  }
}