NSS Cryptographic Module

Certificate #1837

Webpage information

Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 08.11.2012
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode and when obtained, installed, and initialized as specified in Section 5 of the provided Security Policy. Section 5 also specifies the precise RPM file containing this module. The integrity of the RPM is automatically verified during the installation and the Crypto officer shall not install the RPM file if the RPM tool indicates an integrity error. Any deviation from the specified verification, installation and initialization procedures will result in a non FIPS 140-2 compliant module. The module generates cryptographic keys whose strengths are modified by available entropy.
Exceptions
  • Design Assurance: Level 2
Description Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/ .
Tested configurations
  • Red Hat Enterprise Linux v6.2 32-bit running on an Intel Core i7 system
  • Red Hat Enterprise Linux v6.2 64-bit running on an Intel Core i7 system
  • Red Hat Enterprise Linux v6.2 64-bit running on an Intel Core i7 system with PAA (single-user mode)
Vendor Red Hat®, Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, RC2, RC4, DES, Triple-DES, SEED, HMAC
Asymmetric Algorithms
ECC, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-256, SHA-384, SHA-512, MD5
Schemes
MAC
Protocols
TLS
Randomness
DRBG
Libraries
NSS
Block cipher modes
ECB, CBC

Security level
Level 1
Side-channel analysis
Timing attacks, Timing attack, timing attacks, Timing Attacks

Standards
FIPS 140-2, FIPS PUB 140-2, FIPS 46-3, FIPS 197, FIPS 180-2, FIPS 198, FIPS 186-2, SP 800-90, NIST SP 800-90, PKCS #11, PKCS #1

File metadata

Title Security Policy - MozillaWiki
Keywords Security,Policy
Author kocharn
Creation date D:20121019124511
Modification date D:20121019124511
Pages 36
Creator Microsoft® Office Word 2007
Producer Microsoft® Office Word 2007

References

Incoming
  • 1901 - historical - Red Hat Enterprise Linux 6.2 Kernel Crypto API Cryptographic Module
  • 2394 - historical - HP TippingPoint Crypto Core NSS
  • 1859 - historical - Red Hat Enterprise Linux 6.2 Openswan Cryptographic Module
  • 1933 - historical - Red Hat Enterprise Linux 6.2 dm-crypt Cryptographic Module

Heuristics

No heuristics are available for this certificate.

References

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1837,
  "dgst": "3e8a9277880d70c2",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#1675",
        "AES#1908",
        "DSA#602",
        "RSA#979",
        "Triple-DES#1240",
        "HMAC#1145",
        "DRBG#165"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2001-0473",
        "CVE-2001-0309",
        "CVE-2001-0197",
        "CVE-1999-0894",
        "CVE-2000-1207",
        "CVE-2001-0690",
        "CVE-2003-0041",
        "CVE-2001-0441",
        "CVE-2000-0378",
        "CVE-2001-1028",
        "CVE-2000-0751",
        "CVE-2001-0641",
        "CVE-2000-0867",
        "CVE-1999-0037",
        "CVE-2000-0750",
        "CVE-2001-0889",
        "CVE-2000-0604",
        "CVE-2000-0607",
        "CVE-1999-0297",
        "CVE-2002-1232",
        "CVE-2002-0836",
        "CVE-2000-0606",
        "CVE-2001-0128",
        "CVE-2000-0017",
        "CVE-2000-1125",
        "CVE-2000-0170",
        "CVE-1999-0798",
        "CVE-2001-0736",
        "CVE-2002-0080",
        "CVE-2002-0044",
        "CVE-2000-0508",
        "CVE-2000-0230",
        "CVE-1999-1288",
        "CVE-2007-3103",
        "CVE-2016-7091",
        "CVE-2000-1009",
        "CVE-2001-0886",
        "CVE-2001-0977",
        "CVE-2001-1002",
        "CVE-2002-0638",
        "CVE-2001-0233",
        "CVE-2000-1134",
        "CVE-2000-0701",
        "CVE-2000-0844",
        "CVE-2017-1000253"
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2001-0473",
        "CVE-2001-0309",
        "CVE-2001-0197",
        "CVE-1999-0894",
        "CVE-2000-1207",
        "CVE-2001-0690",
        "CVE-2003-0041",
        "CVE-2001-0441",
        "CVE-2000-0378",
        "CVE-2001-1028",
        "CVE-2000-0751",
        "CVE-2001-0641",
        "CVE-2000-0867",
        "CVE-1999-0037",
        "CVE-2000-0750",
        "CVE-2001-0889",
        "CVE-2000-0604",
        "CVE-2000-0607",
        "CVE-1999-0297",
        "CVE-2002-1232",
        "CVE-2002-0836",
        "CVE-2000-0606",
        "CVE-2001-0128",
        "CVE-2000-0017",
        "CVE-2000-1125",
        "CVE-2000-0170",
        "CVE-1999-0798",
        "CVE-2001-0736",
        "CVE-2002-0080",
        "CVE-2002-0044",
        "CVE-2000-0508",
        "CVE-2000-0230",
        "CVE-1999-1288",
        "CVE-2007-3103",
        "CVE-2016-7091",
        "CVE-2000-1009",
        "CVE-2001-0886",
        "CVE-2001-0977",
        "CVE-2001-1002",
        "CVE-2002-0638",
        "CVE-2001-0233",
        "CVE-2000-1134",
        "CVE-2000-0701",
        "CVE-2000-0844",
        "CVE-2017-1000253"
      ]
    },
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "1901",
          "1859",
          "1933"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "1901",
          "1859",
          "1933"
        ]
      },
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "1901",
          "1859",
          "1933",
          "2394"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "1901",
          "1859",
          "1933",
          "2394"
        ]
      },
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 5
          },
          "DSA": {
            "DSA": 11
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "ECB": {
          "ECB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "NSS": {
          "NSS": 109
        }
      },
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 9
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 2,
          "#11": 16,
          "#12": 1,
          "#5": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 1908": 1,
          "DES 1240": 1,
          "DRBG 165": 1,
          "DSA 602": 1,
          "HMAC 1145": 2,
          "HMAC-SHA256": 2,
          "HMAC-SHA348": 2,
          "HMAC-SHA512": 2,
          "PKCS #1": 4,
          "PKCS #11": 30,
          "RSA 979": 1,
          "SHA-1": 4,
          "SHA-256": 7,
          "SHA-384": 4,
          "SHA-386": 1,
          "SHA-512": 5,
          "SHS 1675": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-256": 7,
            "SHA-384": 4,
            "SHA-512": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 8
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Timing Attacks": 2,
          "Timing attack": 1,
          "Timing attacks": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 10,
          "FIPS 180-2": 1,
          "FIPS 186-2": 1,
          "FIPS 197": 1,
          "FIPS 198": 1,
          "FIPS 46-3": 1,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "NIST SP 800-90": 1,
          "SP 800-90": 1
        },
        "PKCS": {
          "PKCS #1": 2,
          "PKCS #11": 15
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8
          },
          "RC": {
            "RC2": 1,
            "RC4": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 2
          },
          "DES": {
            "DES": 6
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 14
          }
        },
        "miscellaneous": {
          "SEED": {
            "SEED": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "kocharn",
      "/CreationDate": "D:20121019124511",
      "/Creator": "Microsoft\u00ae Office Word 2007",
      "/Keywords": "Security,Policy",
      "/ModDate": "D:20121019124511",
      "/Producer": "Microsoft\u00ae Office Word 2007",
      "/Title": "Security Policy - MozillaWiki",
      "pdf_file_size_bytes": 594555,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.rsasecurity.com/rsalabs/node.asp?id=2133",
          "http://www.daemonology.net/papers/htt.pdf",
          "http://crypto.stanford.edu/~dabo/abstracts/ssl-timing.html",
          "http://www.cryptography.com/timingattack/",
          "http://developr.mozilla.org/en/NSS_3.12.9_release_notes"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 36
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "71f3a34770d604aecd84e4d19b95fe2374556bae02d1cb15891f3a3fec9c647e",
    "policy_txt_hash": "ecbb20449d3b214d402fa6b47ac40c820b52345d1b5873d1dd1a5c31827b34af"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode and when obtained, installed, and initialized as specified in Section 5 of the provided Security Policy. Section 5 also specifies the precise RPM file containing this module. The integrity of the RPM is automatically verified during the installation and the Crypto officer shall not install the RPM file if the RPM tool indicates an integrity error. Any deviation from the specified verification, installation and initialization procedures will result in a non FIPS 140-2 compliant module. The module generates cryptographic keys whose strengths are modified by available entropy.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0023.pdf",
    "date_sunset": null,
    "description": "Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/ .",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Design Assurance: Level 2"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "NSS Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "3.12.9.1",
    "tested_conf": [
      "Red Hat Enterprise Linux v6.2 32-bit running on an Intel Core i7 system",
      "Red Hat Enterprise Linux v6.2 64-bit running on an Intel Core i7 system",
      "Red Hat Enterprise Linux v6.2 64-bit running on an Intel Core i7 system with PAA (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2012-11-08",
        "lab": "SAIC-VA",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Red Hat\u00ae, Inc.",
    "vendor_url": "http://www.redhat.com"
  }
}