Nuvoton Cryptographic Library 3.3

Certificate details

Certificate ID #5340
Status active
Validation dates 18.06.2026
Sunset date 17-06-2031
Standard FIPS 140-3
Security level 1
Type Hardware
Embodiment SingleChip
Caveat No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Software/Firmware security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description Nuvoton Cryptographic Library implementation providing cryptographic services.
Vendor Nuvoton Technology Corporation http://www.nuvoton.com
Lab atsec information security corporation
Algorithms
  • AES-CBCA7343
  • AES-CCMA7343
  • AES-CFB128A7343
  • AES-CMACA7343
  • AES-CTRA7343
  • AES-ECBA7343
  • AES-GCMA7343
  • AES-GMACA7343
  • AES-OFBA7343
  • ECDSA KeyGen (FIPS186-5)A7343
  • ECDSA KeyVer (FIPS186-5)A7343
  • ECDSA SigGen (FIPS186-5)A7343
  • ECDSA SigVer (FIPS186-5)A7343
  • Hash DRBGA7343
  • HMAC-SHA2-256A7343
  • HMAC-SHA2-384A7343
  • HMAC-SHA2-512A7343
  • KAS-ECC-SSC Sp800-56Ar3A7343
  • KDF SP800-108A7343
  • KTS-IFCA7343
  • LMS SigVerA7343
  • RSA SigGen (FIPS186-5)A7343
  • RSA SigVer (FIPS186-5)A7343
  • SHA2-256A7343
  • SHA2-384A7343
  • SHA2-512A7343
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, CAST, HMAC, CMAC
Asymmetric Algorithms
RSA-PSS, ECDH, ECDSA, ECC, Diffie-Hellman
Post-quantum Algorithms
LMS, HSS
Hash functions
SHA-512
Schemes
MAC, Key Agreement
Randomness
DRBG, RBG
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM

Trusted Execution Environments
PSP, SSC

Security level
Level 1, level 1

Author Hawes, David J. (Fed)
Creation date D:20260615072801-04'00'
Modification date D:20260615072801-04'00'
Pages 45
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5340,
  "dgst": "4ae939e7402c8061",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-512A7343",
        "KDF SP800-108A7343",
        "SHA2-384A7343",
        "KTS-IFCA7343",
        "AES-OFBA7343",
        "ECDSA SigVer (FIPS186-5)A7343",
        "HMAC-SHA2-256A7343",
        "ECDSA SigGen (FIPS186-5)A7343",
        "HMAC-SHA2-512A7343",
        "LMS SigVerA7343",
        "RSA SigVer (FIPS186-5)A7343",
        "AES-GMACA7343",
        "RSA SigGen (FIPS186-5)A7343",
        "HMAC-SHA2-384A7343",
        "Hash DRBGA7343",
        "ECDSA KeyGen (FIPS186-5)A7343",
        "AES-GCMA7343",
        "SHA2-256A7343",
        "AES-CTRA7343",
        "AES-CFB128A7343",
        "AES-ECBA7343",
        "ECDSA KeyVer (FIPS186-5)A7343",
        "#A7343",
        "AES-CMACA7343",
        "AES-CCMA7343",
        "AES-CBCA7343",
        "KAS-ECC-SSC Sp800-56Ar3A7343"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.3"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 4,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A7343",
            "properties": "Key Length - 128, 192, 256",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CFB128",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A7343",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 192, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GMAC",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 192, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-OFB",
            "cavpCertName": "A7343",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A7343",
            "properties": "Curve - P-256, P-384, P-521 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A7343",
            "properties": "Curve - P-256, P-384, P-521",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A7343",
            "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Component - No, Yes",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A7343",
            "properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A7343",
            "properties": "Prediction Resistance - No, Yes Mode - SHA2-512",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA2- 256",
            "cavpCertName": "A7343",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 384",
            "cavpCertName": "A7343",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512",
            "cavpCertName": "A7343",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A7343",
            "properties": "Domain Parameter Generation Methods - P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF SP800-108",
            "cavpCertName": "A7343",
            "properties": "KDF Mode - Counter, Double Pipeline Iteration, Feedback Supported Lengths - Supported Lengths: 8-4096 Increment 8",
            "reference": "SP 800-108 Rev. 1"
          },
          {
            "algorithm": "KTS-IFC",
            "cavpCertName": "A7343",
            "properties": "Modulo - 2048, 3072 Key Generation Methods - rsakpg1-basic, rsakpg2-basic Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Key Length - 1024",
            "reference": "SP 800-56B Rev. 2"
          },
          {
            "algorithm": "LMS SigVer",
            "cavpCertName": "A7343",
            "properties": "LMS Modes - LMS_SHA256_M32_H10, LMS_SHA256_M32_H15, LMS_SHA256_M32_H20, LMS_SHA256_M32_H25, LMS_SHA256_M32_H5",
            "reference": "SP 800-208"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-5)",
            "cavpCertName": "A7343",
            "properties": "Modulo - 2048, 3072 Signature Type - pkcs1v1.5, pss",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A7343",
            "properties": "Modulo - 2048, 3072 Signature Type - pkcs1v1.5, pss",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A7343",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A7343",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A7343",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Data Encryption",
            "indicator": "NCL STATUS OK",
            "inputs": "AES key, plain text",
            "name": "AES Encryption",
            "outputs": "cipher text",
            "rolesSspAccess": "User - AES key: W,E",
            "secFunImpl": "AES-CBC AES-CCM AES-CFB128 AES-CTR"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- AES-GCM IV: G,R,E",
            "secFunImpl": "AES-ECB AES-GCM AES-OFB"
          },
          {
            "description": "AES Decryption",
            "indicator": "NCL STATUS OK",
            "inputs": "AES key, cipher text",
            "name": "AES Decryption",
            "outputs": "plain text",
            "rolesSspAccess": "User - AES key: W,E - AES-GCM IV: W,E",
            "secFunImpl": "AES-CBC AES-CCM AES-CFB128 AES-CTR AES-ECB AES-GCM AES-OFB"
          },
          {
            "description": "Message Authentication Code Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "AES key, message",
            "name": "CMAC Message Authentication Code Generation",
            "outputs": "MAC",
            "rolesSspAccess": "User - AES key: W,E",
            "secFunImpl": "AES-CMAC"
          },
          {
            "description": "Message Authentication Code Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "MAC, Message",
            "name": "CMAC Message Authentication Code Verification",
            "outputs": "\"VALID\" or \"INVALID\"",
            "rolesSspAccess": "User - AES key: W,E",
            "secFunImpl": "AES-CMAC"
          },
          {
            "description": "Message Authentication Code Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "AES key, AAD",
            "name": "GMAC Message Authentication Code Generation",
            "outputs": "authentication tag",
            "rolesSspAccess": "User - AES key: W,E - AES-GCM IV: G,R,E",
            "secFunImpl": "AES-GMAC"
          },
          {
            "description": "Message Authentication Code Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "AES key, AAD, IV, tag",
            "name": "GMAC Message Authentication Code Verification",
            "outputs": "\"PASS\" or \"FAIL\"",
            "rolesSspAccess": "User - AES key: W,E - AES-GCM IV: W,E",
            "secFunImpl": "AES-GMAC"
          },
          {
            "description": "Message Authentication Code Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "HMAC key, message",
            "name": "HMAC Message Authentication Code Generation",
            "outputs": "MAC",
            "rolesSspAccess": "User - HMAC Key: W,E",
            "secFunImpl": "HMAC"
          },
          {
            "description": "SHS Message Digest Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "message",
            "name": "Message Digest Generation",
            "outputs": "digest (hash value)",
            "rolesSspAccess": "User",
            "secFunImpl": "SHS"
          },
          {
            "description": "RSA Decapsulation",
            "indicator": "NCL STATUS OK",
            "inputs": "RSA private key,",
            "name": "RSA Decapsulation",
            "outputs": "decapsulated data",
            "rolesSspAccess": "User - RSA",
            "secFunImpl": "RSA decapsulation"
          },
          {
            "description": "using KTS- OAEP-basic",
            "indicator": "",
            "inputs": "encapsulated data",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Decapsulation Key: W,E",
            "secFunImpl": ""
          },
          {
            "description": "RSA Encapsulation using KTS- OAEP-basic",
            "indicator": "NCL STATUS OK",
            "inputs": "RSA public key, data to be encapsulated",
            "name": "RSA Encapsulation",
            "outputs": "encapsulated data",
            "rolesSspAccess": "User - RSA Encapsulation Key: W,E",
            "secFunImpl": "RSA encapsulation"
          },
          {
            "description": "Digital Signature Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "RSA public key, message, hash algorithm",
            "name": "RSA Digital Signature Generation",
            "outputs": "signature",
            "rolesSspAccess": "User - RSA Sig private key: W,E",
            "secFunImpl": "RSA SigGen Hash_DRBG"
          },
          {
            "description": "Digital Signature Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "RSA public key, signature, message, hash algorithm",
            "name": "RSA Digital Signature Verification",
            "outputs": "True or False",
            "rolesSspAccess": "User - RSA Sig public key: W,E",
            "secFunImpl": "RSA SigVer"
          },
          {
            "description": "Digital Signature Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "ECDSA private key, message, hash algorithm",
            "name": "ECDSA Digital Signature Generation",
            "outputs": "signature",
            "rolesSspAccess": "User - ECDSA private key: W,E - DRBG internal state (i.e., Hash_DRBG V and C values): W",
            "secFunImpl": "ECDSA SigGen Hash_DRBG"
          },
          {
            "description": "Digital Signature Generation Component",
            "indicator": "NCL STATUS OK",
            "inputs": "ECDSA private key, message, message digest",
            "name": "ECDSA Digital Signature Generation Component",
            "outputs": "signature",
            "rolesSspAccess": "User - ECDSA private key: W,E - DRBG internal state (i.e., Hash_DRBG V and C values): W",
            "secFunImpl": "ECDSA SigGen Component Hash_DRBG"
          },
          {
            "description": "Digital Signature Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "ECDSA public key, signature, message, hash algorithm",
            "name": "ECDSA Digital Signature Verification",
            "outputs": "True or False",
            "rolesSspAccess": "User - ECDSA public key: W,E",
            "secFunImpl": "ECDSA SigVer"
          },
          {
            "description": "Asymmetric Key Pair Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "Curve size",
            "name": "ECDSA Key Generation",
            "outputs": "generated private and public key pair",
            "rolesSspAccess": "User - ECDSA private key: G,R - ECDSA public key: G,R - ECDH private",
            "secFunImpl": "ECDSA KeyGen Hash_DRBG"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "key: G,R - ECDH public key: G,R - DRBG internal state (i.e., Hash_DRBG V and C values): W - ECDSA intermediate key generation values: G,Z - ECDH intermediate key generation values: G,Z",
            "secFunImpl": ""
          },
          {
            "description": "Asymmetric Public Key Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "Public Key",
            "name": "ECDSA Key Verification",
            "outputs": "True or False",
            "rolesSspAccess": "User - ECDSA public key: W,E - ECDH public key: W,E",
            "secFunImpl": "ECDSA KeyVer"
          },
          {
            "description": "Shared Secret Computation using Elliptic Curve Cryptography",
            "indicator": "NCL STATUS OK",
            "inputs": "received public key, possessed private key",
            "name": "EC Diffie- Hellman Shared Secret Computation",
            "outputs": "shared secret",
            "rolesSspAccess": "User - ECDH public key: W,E - ECDH private key: W,E - ECC Shared Secret: G,R",
            "secFunImpl": "KAS-ECC- SSC"
          },
          {
            "description": "Deterministic Random Number Generation",
            "indicator": "NCL STATUS OK",
            "inputs": "Seed",
            "name": "Random Number Generation",
            "outputs": "random numbers",
            "rolesSspAccess": "User - Entropy Input String: G,E - DRBG Seed: G,E - DRBG internal state (i.e., Hash_DRBG V and C values): W,G,E",
            "secFunImpl": "Hash_DRBG"
          },
          {
            "description": "Outputs Module Name + Version Number",
            "indicator": "N/A",
            "inputs": "None",
            "name": "Show Module Version Info",
            "outputs": "Module Name + Module Version Number",
            "rolesSspAccess": "User",
            "secFunImpl": "None"
          },
          {
            "description": "zeroizes crypto function context and releases memory space",
            "indicator": "N/A",
            "inputs": "handle of crypto function context",
            "name": "SSP Zeroisation",
            "outputs": "zeroized and released memory space",
            "rolesSspAccess": "User - AES key: Z - AES-GCM IV: Z - RSA Encapsulation Key: Z - RSA Decapsulation Key: Z - RSA Sig private key: Z - RSA Sig public key: Z - ECDSA private key: Z - ECDSA public key: Z - HMAC Key: Z - ECDH private key: Z - ECDH public key: Z - ECC Shared Secret: Z - Entropy Input String: Z - DRBG Seed: Z - DRBG internal state (i.e., Hash_DRBG V and C values): Z - HSS public key: Z - LMS public key: Z - Derived key: Z - Key Derivation Key: Z",
            "secFunImpl": "None"
          },
          {
            "description": "Outputs Operational/ Error status of the module",
            "indicator": "N/A",
            "inputs": "None",
            "name": "Show-Status",
            "outputs": "Operational/Error status",
            "rolesSspAccess": "User",
            "secFunImpl": "None"
          },
          {
            "description": "Executes on- demand self- test and outputs Pass/Fail status",
            "indicator": "NCL STATUS OK",
            "inputs": "None",
            "name": "Self-test",
            "outputs": "Pass/Fail status",
            "rolesSspAccess": "User",
            "secFunImpl": "AES-CBC AES-CCM HMAC RSA SigGen RSA SigVer RSA encapsulation RSA decapsulation ECDSA SigGen ECDSA SigVer SHS KAS-ECC- SSC Hash_DRBG HSS SigVer KBKDF"
          },
          {
            "description": "Digital Signature Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "HSS Public Key, Digital Signature, message",
            "name": "HSS Signature Verification",
            "outputs": "True or False",
            "rolesSspAccess": "User - HSS public key: W,E",
            "secFunImpl": "HSS SigVer"
          },
          {
            "description": "Digital Signature Verification",
            "indicator": "NCL STATUS OK",
            "inputs": "LMS Public Key, Digital Signature, message",
            "name": "LMS Signature Verification",
            "outputs": "True or False",
            "rolesSspAccess": "User - LMS public key: W,E",
            "secFunImpl": "LMS SigVer"
          },
          {
            "description": "Perform key derivation",
            "indicator": "NCL STATUS OK",
            "inputs": "Key Derivation Key",
            "name": "Key derivation",
            "outputs": "Derived key",
            "rolesSspAccess": "User - Derived key: G,R - Key Derivation Key: W,E",
            "secFunImpl": "KBKDF"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A7343)",
            "condition": "Performed when the module is powered on",
            "details": "MAC Generation",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA2-512 MAC Generation KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A7343)",
            "condition": "Performed when the module is powered on",
            "details": "Message Digest",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "SHA2-256 Message Digest KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "AES Encryption",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "AES-CCM Encryption KAT using 128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "AES Decryption",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "AES-CBC Decryption KAT using 128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KTS-IFC (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "KTS-OAEP-basic Encryption and Decryption",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "KTS-OAEP-basic Encryption/Decryption KAT with 2048 -bit key and SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "RSA Signature Generation",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "RSA Signature Generation KAT with 2048-bit key and SHA2- 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "RSA Signature Verification",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "RSA Signature Verification KAT with 2048-bit key and SHA2- 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "ECDSA Signature Generation",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "ECDSA Signature Generation KAT with P- 256 curve and SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "ECDSA Signature Verification",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "ECDSA Signature Verification KAT with P- 256 curve and SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "ECDH shared secret computation",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "ECDH shared secret computation KAT with P- 256 curve",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "Hash_DRBG random number generation; Performs a combination of Instantiate(), Reseed() and Generate() in accordance with IG 10.3.A Resolution 6",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "Hash_DRBG random number generation KAT using predefined seed.",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SP800- 108 (A7343)",
            "condition": "Performed when the module is powered on",
            "details": "KBKDF",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "Counter mode using HMAC-SHA2-256 using 160-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7343)",
            "condition": "Performed upon generation of a new ECDSA key pair",
            "details": "Pairwise consistency test",
            "indicator": "NCL STATUS OK",
            "testMethod": "PCT",
            "testProps": "Pairwise consistency test",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ESV - Repetition Count Test (Startup)",
            "condition": "Performed before seeding the DRBG",
            "details": "Entropy Health Test",
            "indicator": "NCL STATUS OK",
            "testMethod": "RCT",
            "testProps": "Startup test with 1024 samples; Cutoff value = 35",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ESV - Repetition Count Test (Continuous)",
            "condition": "Performed before seeding the DRBG",
            "details": "Entropy Health Test",
            "indicator": "NCL STATUS OK",
            "testMethod": "RCT",
            "testProps": "Cutoff value = 35",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ESV - Adaptive Proportional Test (Startup)",
            "condition": "Performed before seeding the DRBG",
            "details": "Entropy Health Test",
            "indicator": "NCL STATUS OK",
            "testMethod": "APT",
            "testProps": "Startup test with 1024 samples; Cutoff value = 748",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ESV - Adaptive Proportional Test (Continuous)",
            "condition": "Performed before seeding the DRBG",
            "details": "Entropy Health Test",
            "indicator": "NCL STATUS OK",
            "testMethod": "APT",
            "testProps": "Cutoff value = 748",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HSS SigVer",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "HSS Digital Signature Verification",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "HSS KAT SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "LMS SigVer (A7343)",
            "condition": "Prior to the first operational use of the algorithm",
            "details": "LMS Digital Signature Verification",
            "indicator": "NCL STATUS OK",
            "testMethod": "KAT",
            "testProps": "LMS KAT SHA2-256",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Failure in conditional self- test (conditional CAST or conditional PCT) Failure of the ENT health test",
            "description": "When in this error state, no cryptographic services are provided, control and data output is prohibited.",
            "indicator": "Failure in conditional self-test: NCL_STATUS_FAIL; Failure of the ENT health test: ENTROPY_SRC_ERROR",
            "name": "Error State",
            "recoveryMethod": "The only method to clear this error state is to power cycle the device and then successfully pass the conditional self-tests."
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "Determined by the operator",
            "inspectGuidance": "Observe the coating surrounding the chip for any signs of damage",
            "mechanism": "Hard tamper-evident coating"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Only approved algorithms are used",
            "name": "Approved Mode",
            "statusIndicator": "NCL_STATUS_OK",
            "type": "Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "Data inputs are provided in the variables passed in the API and callable service invocations, generally through caller-supplied buffers.",
            "logicalInterface": "Data Input",
            "physicalPort": "I/O Ports"
          },
          {
            "data": "Data outputs are provided in the variables passed in the API and callable service invocations, generally through caller-supplied buffers.",
            "logicalInterface": "Data Output",
            "physicalPort": "I/O Ports"
          },
          {
            "data": "Control inputs which control the operation of the module are provided through dedicated parameters.",
            "logicalInterface": "Control Input",
            "physicalPort": "I/O Ports"
          },
          {
            "data": "Status output is provided in return codes and through messages. Documentation for each API lists possible return codes. A complete list of all return codes returned by the C language APIs within the module is provided in the header files and the API documentation. Messages are documented also in the API documentation.",
            "logicalInterface": "Status Output",
            "physicalPort": "I/O Ports"
          },
          {
            "data": "Power interface is provided internally by TEOPP in which the cryptographic module is embedded.",
            "logicalInterface": "Power",
            "physicalPort": "Power Port"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          },
          {
            "authMethodList": "None",
            "name": "User",
            "operatorType": "User",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "N/A",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "1",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "RAM",
            "distribution": "N/A",
            "entry": "N/A",
            "format": "Plaintext",
            "name": "API input",
            "sfiAlgo": "",
            "source": "Within the TOEPP"
          },
          {
            "dest": "Within the TOEPP",
            "distribution": "N/A",
            "entry": "N/A",
            "format": "Plaintext",
            "name": "API output",
            "sfiAlgo": "",
            "source": "RAM"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Power cycles the module",
            "method": "Module Reset",
            "operatorId": "Initiated by operator",
            "rationale": "All SSPs in memory are overwritten by zeros"
          },
          {
            "description": "Automatic zeroization when when no longer needed",
            "method": "Automatic zeroization",
            "operatorId": "Automatically by the module",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing SHA, HMAC, KBKDF contexts",
            "method": "NCL_SHA_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing DRBG contexts",
            "method": "NCL_DRBG_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing AES contexts",
            "method": "NCL_AES_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing RSA contexts",
            "method": "NCL_RSA_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing ECDSA and ECDH contexts",
            "method": "NCL_ECC_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing HSS contexts",
            "method": "NCL_HSS_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          },
          {
            "description": "Clears existing LMS contexts",
            "method": "NCL_LMS_Clear",
            "operatorId": "Initiated by operator",
            "rationale": "Overwrites the targeted SSP\u0027s contents in memory with zeros using memset/memset_s for any contents in RAM and REG_WRITE for any contents in hardware registers"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Stored in volatile memory",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "Arbel Baseboard Management Controller (BMC)",
            "fwVersion": "N/A",
            "hwVersion": "3.3.2",
            "modelPartNum": "Nuvoton NPCM8mnx Rev. A3",
            "processors": "ARM Cortex M4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Size:256 bits",
            "implName": "Nuvoton Cryptographic Library 3.3 for Trusted Integrated Processor (NCL)",
            "name": "HSS SigVer",
            "reference": "The LMS operations used by the HSS implementation were CAVP tested in accordance with IG C.O with Certs A7343"
          },
          {
            "algoPropList": "Type:Asymmetric",
            "implName": "N/A",
            "name": "CKG (ECDSA/ECDH)",
            "reference": "CKG for asymmetric keys as per SP 800- 133Rev2 section 4 example 1 with no post processing on the U value"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 5
          },
          "ECDH": {
            "ECDH": 31
          },
          "ECDSA": {
            "ECDSA": 82
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 3
          }
        },
        "RSA": {
          "RSA-PSS": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 2
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 2
        },
        "OFB": {
          "OFB": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 10
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 24,
          "P-384": 22,
          "P-521": 36
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 48
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-GCM 96": 1,
          "PKCS#1": 2,
          "SHA-512": 1,
          "SHA2- 256": 2,
          "SHA2- 384": 4,
          "SHA2-256": 14,
          "SHA2-384": 3,
          "SHA2-512": 12
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {
        "LMS": {
          "HSS": 22,
          "LMS": 25
        }
      },
      "randomness": {
        "PRNG": {
          "DRBG": 45
        },
        "RNG": {
          "RBG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 51,
          "FIPS 180-4": 3,
          "FIPS 186-5": 8,
          "FIPS 198-1": 3,
          "FIPS PUB 140-3": 2,
          "FIPS140-3": 1,
          "FIPS180-4": 1,
          "FIPS186-5": 25,
          "FIPS197": 1,
          "FIPS198-1": 1
        },
        "NIST": {
          "NIST SP 800-140F": 1,
          "SP 800-108": 1,
          "SP 800-208": 1,
          "SP 800-38A": 5,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-56A": 1,
          "SP 800-56B": 1,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC3394": 1,
          "RFC5649": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 41
          },
          "CAST": {
            "CAST": 39
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 6,
            "HMAC": 16
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 6
        },
        "IBM": {
          "SSC": 6
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-512A7343",
        "KDF SP800-108A7343",
        "SHA2-384A7343",
        "KTS-IFCA7343",
        "AES-OFBA7343",
        "ECDSA SigVer (FIPS186-5)A7343",
        "HMAC-SHA2-256A7343",
        "ECDSA SigGen (FIPS186-5)A7343",
        "HMAC-SHA2-512A7343",
        "LMS SigVerA7343",
        "RSA SigVer (FIPS186-5)A7343",
        "AES-GMACA7343",
        "RSA SigGen (FIPS186-5)A7343",
        "HMAC-SHA2-384A7343",
        "Hash DRBGA7343",
        "ECDSA KeyGen (FIPS186-5)A7343",
        "AES-GCMA7343",
        "SHA2-256A7343",
        "AES-CTRA7343",
        "AES-CFB128A7343",
        "AES-ECBA7343",
        "ECDSA KeyVer (FIPS186-5)A7343",
        "AES-CMACA7343",
        "AES-CCMA7343",
        "AES-CBCA7343",
        "KAS-ECC-SSC Sp800-56Ar3A7343"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A7343"
      ]
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/CreationDate": "D:20260615072801-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260615072801-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 629648,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1-upd1.pdf",
          "http://www.ietf.org/rfc/rfc3447.txt",
          "https://csrc.nist.gov/CSRC/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Br2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "http://www.ietf.org/rfc/rfc5649.txt",
          "http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-208.pdf",
          "http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "http://www.ietf.org/rfc/rfc3394.txt",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 45
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "f802802940a5570613484bffaabf0f299994f4d3c888d70c962f7f9f1bf874fe",
      "source_hash": "5beb56111b14d1d5833b1e5443cb15a5eb9e7ca00b621c234159de0e70808892",
      "txt_hash": "1bb58ec6c11c1ba334ccc29fe5ebe2a0bda4dde1bda2a80cb84f09796b7bfc24"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2031-06-17",
    "description": "Nuvoton Cryptographic Library implementation providing cryptographic services.",
    "embodiment": "SingleChip",
    "exceptions": [
      "Software/Firmware security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Nuvoton Cryptographic Library 3.3",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-18",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Nuvoton Technology Corporation",
    "vendor_url": "http://www.nuvoton.com"
  }
}