This page was not yet optimized for use on mobile devices.
Supermicro FIPS Provider for OpenSSL
Certificate details
| Certificate ID | #5510 |
|---|---|
| Status | active |
| Validation dates | 01.09.2026 , 20.10.2026 , 22.10.2026 |
| Sunset date | 10-07-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | No assurance of the minimum strength of generated SSPs (e.g., keys). |
| Exceptions |
|
| Description | FIPS cryptographic module for Supermicro-branded products. |
| Vendor | Super Micro Computer, Inc. http://www.supermicro.com |
| Lab | Acumen Security |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, CAST, HMAC, KMAC, CMACAsymmetric Algorithms
ECDSA, EdDSA, ECC, DHE, DSAHash functions
SHA-1, SHA2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, SHA3, SHAKE128, SHAKE256, PBKDFSchemes
MAC, Key agreement, Key Agreement, AEADProtocols
SSH, SSHv2, TLS v1.2, TLS v1.3, TLS 1.3, TLS, TLS 1.2Randomness
DRBG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, P-192, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, B-163, K-163Block cipher modes
CTR, GCM, CCM, XTSJavaCard API constants
ED25519, ED448Trusted Execution Environments
PSPSecurity level
Level 1Side-channel analysis
timing attacksStandards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 186-5, FIPS 198-1, FIPS186-5, FIPS 180-4, FIPS 202, SP 800-140D, SP 800-90B, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-135, SP 800-108, SP 800-185, SP 800-56B, SP 800-132, SP 800-133, SP 800-52, SP 800-57, SP 800-186, SP 800-107, PKCS 1, RFC7627, RFC 5288, RFC 5647, RFC 8446, RFC8446, ISO/IEC 19790:2012Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5510,
"dgst": "4b177cf57484bae0",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"SHAKE-256A8927",
"DSA KeyGen (FIPS186-4)A8927",
"RSA SigVer (FIPS186-5)A8927",
"Safe Primes Key VerificationA8927",
"Counter DRBGA8927",
"AES-CFB1A8927",
"KDA HKDF SP800-56Cr2A8927",
"KTS-IFCA8927",
"Safe Primes Key GenerationA8927",
"AES-OFBA8927",
"EDDSA SigVerA8927",
"HMAC DRBGA8927",
"HMAC-SHA3-384A8927",
"HMAC-SHA3-224A8927",
"KMAC-256A8927",
"HMAC-SHA2-512/224A8927",
"HMAC-SHA-1A8927",
"HMAC-SHA3-256A8927",
"AES-CTRA8927",
"TLS v1.2 KDF RFC7627A8927",
"AES-CFB128A8927",
"EDDSA KeyGenA8927",
"HMAC-SHA2-512A8927",
"AES-CBC-CS2A8927",
"ECDSA KeyVer (FIPS186-4)A8927",
"HMAC-SHA2-256A8927",
"RSA SigVer (FIPS186-4)A8927",
"AES-CFB8A8927",
"DSA SigVer (FIPS186-4)A8927",
"KMAC-128A8927",
"ECDSA SigVer (FIPS186-4)A8927",
"SHA2-512/224A8927",
"KAS-ECC-SSC Sp800-56Ar3A8927",
"HMAC-SHA2-512/256A8927",
"AES-XTS Testing Revision 2.0A8927",
"AES-CCMA8927",
"RSA Signature PrimitiveA8927",
"KDF ANS 9.42A8927",
"AES-CBC-CS1A8927",
"DSA PQGVer (FIPS186-4)A8927",
"AES-GCMA8927",
"SHAKE-128A8927",
"KDA TwoStep SP800-56Cr2A8927",
"SHA-1A8927",
"SHA2-512/256A8927",
"ECDSA SigGen (FIPS186-4)A8927",
"RSA SigGen (FIPS186-5)A8927",
"SHA2-512A8927",
"KDF SP800-108A8927",
"AES-CBCA8927",
"SHA2-224A8927",
"AES-KWA8927",
"RSA SigGen (FIPS186-4)A8927",
"KAS-ECC CDH-Component SP800-56Ar3A8927",
"KDA OneStep SP800-56Cr2A8927",
"KAS-FFC-SSC Sp800-56Ar3A8927",
"EDDSA KeyVerA8927",
"DSA PQGGen (FIPS186-4)A8927",
"KDF ANS 9.63A8927",
"AES-GMACA8927",
"AES-KWPA8927",
"HMAC-SHA3-512A8927",
"HMAC-SHA2-224A8927",
"PBKDFA8927",
"HMAC-SHA2-384A8927",
"RSA KeyGen (FIPS186-4)A8927",
"TLS v1.3 KDFA8927",
"SHA2-384A8927",
"#A8927",
"EDDSA SigGenA8927",
"AES-CMACA8927",
"KDF SSHA8927",
"Hash DRBGA8927",
"ECDSA KeyGen (FIPS186-4)A8927",
"DSA SigGen (FIPS186-4)A8927",
"SHA3-224A8927",
"KAS-IFC-SSCA8927",
"SHA2-256A8927",
"SHA3-512A8927",
"AES-ECBA8927",
"SHA3-256A8927",
"AES-CBC-CS3A8927",
"SHA3-384A8927"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC-CS1, AES-CBC-CS2",
"cavpCertName": "A8927",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-512 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A8927",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 136-512 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC, AES-CFB1, AES-CFB128, AES-CFB8, AES-ECB, AES-OFB",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A8927",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56-104 Increment 8 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-524288 Increment 8",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A8927",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 0-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96-1024 Increment 8 Payload Length - Payload Length: 8-65536 Increment 8 AAD Length - AAD Length: 0-65536 Increment 8",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 0-65536 Increment 8",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher, Inverse Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher, Inverse Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A8927",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A8927",
"properties": "Prediction Resistance - Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes Additional Input - Additional Input: 0-256 Increment 256, Additional Input: 256, Additional Input: 320, Additional Input: 384 Entropy Input - Entropy Input: 128-256 Increment 128, Entropy Input: 256, Entropy Input: 256-512 Increment 128, Entropy Input: 320, Entropy Input: 384 Nonce - Nonce: 0, Nonce: 128 Personalization String Length - Personalization String Length: 0-256 Increment 256, Personalization String Length: 256, Personalization String Length: 320, Personalization String Length: 384 Returned Bits - 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "DSA KeyGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "L - 2048, 3072 N - 224, 256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA PQGGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "P/Q Generation Methods - Probable G Generation Methods - Canonical, Unverifiable L - 2048, 3072 N - 224, 256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA PQGVer (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "P/Q Generation Methods - Probable G Generation Methods - Canonical, Unverifiable L - 1024, 2048, 3072 N - 160, 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA SigGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "L - 2048, 3072 N - 224, 256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA SigVer (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "L - 1024, 2048, 3072 N - 160, 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Curve - B-163, B-233, B-283, B-409, B-571, K-163, K-233, K-283, K-409, K-571, P-192, P-224, P-256, P- 384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Curve - B-163, B-233, B-283, B-409, B-571, K-163, K-233, K-283, K-409, K-571, P-192, P-224, P-256, P- 384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "EDDSA KeyGen, EDDSA KeyVer",
"cavpCertName": "A8927",
"properties": "Curve - ED-25519, ED-448",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A8927",
"properties": "Curve - ED-25519, ED-448 Context Length - Context Length: 0-255 Increment 1 PreHash - No Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A8927",
"properties": "Curve - ED-25519, ED-448 PreHash - No Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A8927",
"properties": "Prediction Resistance - Yes Supports Reseed - Yes Mode - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Entropy Input - Entropy Input: 128-256 Increment 64, Entropy Input: 192-256 Increment 64, Entropy Input: 256-320 Increment 64 Nonce - Nonce: 128-160 Increment 32, Nonce: 96-128 Increment 32 Personalization String Length - Personalization String Length: 0-256 Increment 128 Additional Input - Additional Input: 0-256 Increment 128 Returned Bits - 160, 224, 256, 384, 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A8927",
"properties": "Prediction Resistance - Yes Supports Reseed - Yes Mode - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Entropy Input - Entropy Input: 160-256 Increment 32, Entropy Input: 192-256 Increment 64, Entropy Input: 256-512 Increment 64, Entropy Input: 384-512 Increment 64, Entropy Input: 512-1024 Increment 64 Nonce - Nonce: 128, Nonce: 64, Nonce: 96 Personalization String Length - Personalization String Length: 0-192 Increment 64, Personalization String Length: 0-256 Increment 128 Additional Input - Additional Input: 0-256 Increment 128, Additional Input: 192 Returned Bits - 160, 224, 256, 384, 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A8927",
"properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 112-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224, HMAC-SHA2- 512/224, HMAC-SHA3-224",
"cavpCertName": "A8927",
"properties": "MAC - MAC: 32-224 Increment 8 Key Length - Key Length: 112-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256, HMAC-SHA2- 512/256, HMAC-SHA3-256",
"cavpCertName": "A8927",
"properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 112-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384, HMAC-SHA3-384",
"cavpCertName": "A8927",
"properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 112-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512, HMAC-SHA3-512",
"cavpCertName": "A8927",
"properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 112-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC CDH-Component SP800- 56Ar3 (CVL)",
"cavpCertName": "A8927",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A8927",
"properties": "Domain Parameter Generation Methods - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A8927",
"properties": "Domain Parameter Generation Methods - FB, FC, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, modp-2048, modp-3072, modp-4096, modp-6144, modp-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-IFC-SSC",
"cavpCertName": "A8927",
"properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2-prime-factor Scheme - KAS1 - KAS Role - initiator, responder KAS2 - KAS Role - initiator, responder Fixed Public Exponent - 010001",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF SP800-56Cr2",
"cavpCertName": "A8927",
"properties": "Fixed Info Pattern - algorithmId||l||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A8927",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA2-512 MAC Salting Methods - default, random Fixed Info Pattern - algorithmId||l||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA TwoStep SP800-56Cr2",
"cavpCertName": "A8927",
"properties": "MAC Salting Methods - default, random Fixed Info Pattern - algorithmId||l||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation KDF Mode - feedback MAC Modes - HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2-512/224, HMAC-SHA2-512/256, HMAC-SHA3-224, HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512 Fixed Data Order - after fixed data Counter Lengths - 8 The KDF supports an empty IV - Yes The KDF requires an empty IV - Yes Supported Lengths - Supported Lengths: 2048 Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8 Perform Multiple Expansion Tests - No Uses Hybrid Shared Secret - No",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A8927",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Other Info Length - Other Info Length: 0-4096 Increment 8 zz Length - zz Length: 8-4096 Increment 8 Key Data Length - Key Data Length: 8-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-120 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A8927",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0, 1024 Key Data Length - Key Data Length: 128, 4096",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A8927",
"properties": "KDF Mode - Counter, Feedback MAC Mode - CMAC-AES128, CMAC-AES192, CMAC-AES256, HMAC-SHA-1, HMAC-SHA2-224, HMAC- SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Supported Lengths - Supported Lengths: 8, 72, 128, 776, 3456, 4096 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No, Yes Custom Key In Length - 0 Requires Empty IV - Yes",
"reference": ""
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A8927",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KMAC-128, KMAC-256",
"cavpCertName": "A8927",
"properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - No Supports eXtendable-Output Functions - No, Yes",
"reference": "SP 800-185"
},
{
"algorithm": "KTS-IFC",
"cavpCertName": "A8927",
"properties": "Function - keyPairGen, partialVal IUT ID - CAFEFACE Modulo - 2048, 3072, 4096, 6144 Key Generation Methods - rsakpg1-basic, rsakpg1-crt, rsakpg1-prime-factor, rsakpg2-basic, rsakpg2-crt, rsakpg2-prime-factor Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Hash Algorithms - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Supports Null Associated Data - Yes Associated Data Encoding - concatenation Key Length - 1024",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A8927",
"properties": "Iteration Count - Iteration Count: 1-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Password Length - Password Length: 8-128 Increment 8 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - Yes Public Exponent Mode - Fixed, Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Private Key Format - Standard Fixed Public Exponent - 010001",
"reference": ""
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-256",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A8927",
"properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - MGF1",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A8927",
"properties": "Private Key Format - crt Public Exponent Mode - fixed Fixed Public Exponent - 010001",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A8927",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A8927",
"properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - MGF1 Public Exponent Mode - random",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation, Safe Primes Key Verification",
"cavpCertName": "A8927",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, modp-2048, modp-3072, modp-4096, modp-6144, modp-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256",
"cavpCertName": "A8927",
"properties": "Message Length - Message Length: 0-65528 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"cavpCertName": "A8927",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128, SHAKE-256",
"cavpCertName": "A8927",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A8927",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A8927",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Encrypt or decrypt data, including AEAD modes (CCM, GCM).",
"indicator": "FIPS_OK",
"inputs": "Encryption or decryption key; plaintext or ciphertext data; flags.",
"name": "Cipher",
"outputs": "Status return. Plaintext or ciphertext data.",
"rolesSspAccess": "CO - SC_EDK_AES: W,E - SC_EDK_XTS: W,E",
"secFunImpl": "Cipher (Unauth) Cipher (Auth)"
},
{
"description": "Reports information on the requested capabilities.",
"indicator": "FIPS_OK",
"inputs": "Provider context, capability, callback pointer and arguments.",
"name": "Get capabilities",
"outputs": "Description of capabilities.",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Module initialization, including instantiation of the opaque (managed within the",
"indicator": "FIPS_OK",
"inputs": "Core handle, dispatch in and out, provider context.",
"name": "Initialize",
"outputs": "Initialization status (1 = pass, 0 = fail).",
"rolesSspAccess": "CO - DRBG_EI: W,E,Z - DRBG_Seed: G,E,Z",
"secFunImpl": "Random MAC HMAC"
},
{
"description": "module) Counter DRBG instance.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- DRBG_Key: G,W,E - DRBG_V: G,W,E",
"secFunImpl": ""
},
{
"description": "Perform key agreement primitives on behalf of the calling process (does not establish keys into the module).",
"indicator": "FIPS_OK",
"inputs": "Key structs (key agreement keys); flags.",
"name": "Key agreement",
"outputs": "Status return; key agreement shared secret.",
"rolesSspAccess": "CO - KAS_Private_ECC: W,E - KAS_Public_ECC: W,E - KAS_Private_FFC: W,E - KAS_Public_FFC: W,E - KAS_Private_IFC: W,E - KAS_Public_IFC: W,E - KAS_SS_ECC: G,R - KAS_SS_FFC: G,R - KAS_SS_IFC: G,R",
"secFunImpl": "CKG Section 5 Key agreement"
},
{
"description": "Derive keying material from a shared secret.",
"indicator": "FIPS_OK",
"inputs": "Key agreement shared secret; flags.",
"name": "Key derivation",
"outputs": "Status return; derived keying material.",
"rolesSspAccess": "CO - KD_DKM_KDF: G,R - KD_PW_PBKDF: W,E - KD_DKM_PBKDF: G,R - KD_SK: W,E",
"secFunImpl": "Key derivation CKG Section 6.2"
},
{
"description": "Generate asymmetric key pairs.",
"indicator": "FIPS_OK",
"inputs": "ECDSA, EdDSA: curve identifier. DSA, RSA: domain parameter targets.",
"name": "Key management",
"outputs": "Status return; general digital signature private and public keys.",
"rolesSspAccess": "CO - DRBG_C: G,W,E - DRBG_Key: W,G,E - DRBG_V: W,G,E - GKP_Private_ECC: G,R - GKP_Public_ECC: G,R - GKP_Private_Edwards: G,R - GKP_Public_Edwards: G,R - GKP_Private_FFC: G,R - GKP_Public_FFC: G,R - GKP_Private_IFC: G,R - GKP_Public_IFC: G,R",
"secFunImpl": "Key management ECC Key management Edwards Key management FFC Key management IFC CKG Section 4"
},
{
"description": "Encapsulate or decapsulate key material on behalf of the calling process.",
"indicator": "FIPS_OK",
"inputs": "Key encapsulation/decapsulation key or Key wrap/unwrap key.",
"name": "Key transport",
"outputs": "Status return; key transport shared secret.",
"rolesSspAccess": "CO - KTS_KDK_IFC: W,E - KTS_KEK_IFC: W,E - KTS_SS_IFC: G,R",
"secFunImpl": "CKG Section 5 Key transport KTS (Cipher w/ CMAC, GMAC, HMAC, KMAC)"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "KTS (AES KW, KWP)"
},
{
"description": "Generate or verify data integrity.",
"indicator": "FIPS_OK",
"inputs": "Keyed hash key.",
"name": "Message authentication",
"outputs": "Status return; MAC output value.",
"rolesSspAccess": "CO - KH_Key_AES-CMAC: W,E - KH_Key_AES-GMAC: W,E - KH_Key_HMAC: W,E - KH_Key_KMAC: W,E",
"secFunImpl": "MAC AES (CMAC, GMAC) MAC HMAC MAC KMAC (XOF)"
},
{
"description": "Generate a message digest.",
"indicator": "FIPS_OK",
"inputs": "Message; flags.",
"name": "Message digest",
"outputs": "Status return; Hash output value.",
"rolesSspAccess": "",
"secFunImpl": "Message Digest Message Digest (XOF SHAKE)"
},
{
"description": "Report available crypto operations.",
"indicator": "FIPS_OK",
"inputs": "Provider context, operation ID.",
"name": "Query",
"outputs": "Array of available operations.",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Generate random bits using the DRBG.",
"indicator": "FIPS_OK",
"inputs": "DRBG struct (RBG State); DRBG_Seed.",
"name": "Random",
"outputs": "Status return; Random value.",
"rolesSspAccess": "CO - DRBG_C: W,E - DRBG_EI: W,E,Z - DRBG_Seed: G,E,Z - DRBG_Key: W,E - DRBG_V: W,E",
"secFunImpl": "Random CKG Section 4"
},
{
"description": "Perform the self-test sequence.",
"indicator": "FIPS_OK",
"inputs": "Provider context.",
"name": "Self-test",
"outputs": "Status (1 = pass, 0 = fail).",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Return module name and versioning information.",
"indicator": "FIPS_OK",
"inputs": "Provider context, parameter types (array).",
"name": "Show module name and versioning information",
"outputs": "Parameter types (array) with: Name, Version.",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "OpenSSL core metadata (Gettable parameters; Get parameters).",
"indicator": "FIPS_OK",
"inputs": "Provider context, parameter types (array).",
"name": "Show status",
"outputs": "Parameter types with: BuildInfo, Status, SecurityChecks; Status return.",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Generate or verify digital signatures. (SSPs are passed in by the calling process.)",
"indicator": "FIPS_OK",
"inputs": "Sign: signing key; message. Verify: signature value; flags; sizes.",
"name": "Signature",
"outputs": "Status return; Signature value.",
"rolesSspAccess": "CO - DS_SGK_ECC: W,E - DS_SVK_ECC: W,E - DS_SGK_Edwards: W,E - DS_SVK_Edwards: W,E - DS_SGK_FFC: W,E",
"secFunImpl": "CKG Section 5 Signature DSA Signature ECDSA Signature EDDSA Signature RSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- DS_SVK_FFC: W,E - DS_SGK_IFC: W,E - DS_SVK_IFC: W,E",
"secFunImpl": ""
},
{
"description": "Uninstantiate the module; zeroizes internal CTR DRBG state (DRBG_Key, DRBG_V).",
"indicator": "FIPS_OK",
"inputs": "Provider context.",
"name": "Teardown",
"outputs": "None.",
"rolesSspAccess": "CO - DRBG_Key: Z - DRBG_V: Z",
"secFunImpl": ""
},
{
"description": "Zeroization of allocated key structures using openssl_cleanse.",
"indicator": "FIPS_OK",
"inputs": "Memory pointer.",
"name": "Zeroize",
"outputs": "Void.",
"rolesSspAccess": "CO - DRBG_C: Z - DRBG_EI: Z - DRBG_Key: Z - DRBG_Seed: Z - DRBG_V: Z - DS_SGK_ECC: Z - DS_SGK_Edwards: Z - DS_SGK_FFC: Z - DS_SGK_IFC: Z - DS_SVK_ECC: Z - DS_SVK_Edwards: Z - DS_SVK_FFC: Z - DS_SVK_IFC: Z - GKP_Private_ECC: Z - GKP_Private_Edwards: Z - GKP_Private_FFC: Z - GKP_Private_IFC: Z - GKP_Public_ECC: Z - GKP_Public_Edwards: Z - GKP_Public_FFC: Z - GKP_Public_IFC: Z - KAS_Private_ECC: Z - KAS_Private_FFC: Z - GKP_Private_ECC: Z - KAS_Private_IFC: Z - KAS_Public_ECC: Z - KAS_Public_FFC: Z - KAS_Public_IFC: Z",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- KAS_SS_ECC: Z - KD_DKM_KDF: Z - KD_DKM_PBKDF: Z - KD_SK: Z - KH_Key_AES-CMAC: Z - KH_Key_AES-GMAC: Z - KH_Key_HMAC: Z - KH_Key_KMAC: Z - KTS_KDK_IFC: Z - KTS_KEK_IFC: Z - KTS_SS_IFC: Z - KAS_SS_ECC: Z - SC_EDK_AES: Z - SC_EDK_XTS: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB",
"condition": "Performed on module load.",
"details": "Encrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB",
"condition": "Performed on module load.",
"details": "Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "128-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM",
"condition": "Performed on module load.",
"details": "Encrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM",
"condition": "Performed on module load.",
"details": "Decrypt",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG",
"condition": "Performed on module load.",
"details": "Instantiate, Generate, Reseed",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "AES-128 with derivation function",
"type": "CAST"
},
{
"algorithmOrTest": "DSA SigGen (FIPS186-4)",
"condition": "Performed on module load.",
"details": "Sign",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "2048-bit with SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "DSA SigVer (FIPS186-4)",
"condition": "Performed on module load.",
"details": "Verify",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "2048-bit with SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4)",
"condition": "Performed on module load.",
"details": "Sign",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "P-224 with SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4)",
"condition": "Performed on module load.",
"details": "Verify",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "P-224 with SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA ED448 SigGen",
"condition": "Performed on module load.",
"details": "Sign",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Edwards448 SigGen with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA ED448 SigVer",
"condition": "Performed on module load.",
"details": "Verify",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Edwards448 SigVer with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA ED25519 SigGen",
"condition": "Performed on module load.",
"details": "Sign",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Edwards25519 SigGen with SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA ED25519 SigVer",
"condition": "Performed on module load.",
"details": "Verify",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Edwards25519 SigVer with SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG",
"condition": "Performed on module load.",
"details": "Instantiate, Generate, Reseed",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG",
"condition": "Performed on module load.",
"details": "Instantiate, Generate, Reseed",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 SHA2-256 with a 256-bit key",
"condition": "Performed on module load.",
"details": "Generate",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256 SHA2-256 with a 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3",
"condition": "Performed on module load.",
"details": "Ephemeral Unified Shared Secret (Z) Computation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3",
"condition": "Performed on module load.",
"details": "dhEphem Shared Secret (Z) Computation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "L=2048/N=256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-IFC-SSC",
"condition": "Performed on module load.",
"details": "SP 800-56B Rev. 2 Section 8.2.2 RSA Primitive Computation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "k=2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-KDF OneStep SP800- 56Cr2",
"condition": "Performed on module load.",
"details": "SP 800-56C Rev. 2 Section 4 OneStep KDF (AKA OpenSSL single- step or SS-KDF)",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-KDF TwoStep SP800- 56Cr2",
"condition": "Performed on module load.",
"details": "SP 800-56C Rev. 2 Section 5 TwoStep KDF (HKDF variant)",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42",
"condition": "Performed on module load.",
"details": "SP 800-135 Rev. 1 Section 5.1 ANSI X9.42-2001 KDF KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Fixed input KAT",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63",
"condition": "Performed on module load.",
"details": "SP 800-135 Rev. 1 Section 5.1 X9.63-2001 KDF KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Fixed input KAT",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108",
"condition": "Performed on module load.",
"details": "SP 800-108 Rev. 1 Section 4.1 KAT for a Counter Mode KDF",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH",
"condition": "Performed on module load.",
"details": "SP 800-135 Rev. 1 Section 5.2 SSHv2 KDF KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Fixed input KAT",
"type": "CAST"
},
{
"algorithmOrTest": "KTS-IFC",
"condition": "Performed on module load.",
"details": "SP 800-56B Rev. 2 Decrypt for CRT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "k=2048",
"type": "CAST"
},
{
"algorithmOrTest": "KTS-IFC",
"condition": "Performed on module load.",
"details": "SP 800-56B Rev. 2 Encrypt for Basic",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "k=2048",
"type": "CAST"
},
{
"algorithmOrTest": "KTS-IFC",
"condition": "Performed on module load.",
"details": "SP 800-56B Rev. 2 Decrypt for Basic",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "k=2048",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF",
"condition": "Performed on module load.",
"details": "SP 800-132 Section 5.3 KAT of Master Key derivation",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-256, 24-byte password, 36-byte salt, iteration count of 4096",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4)",
"condition": "Performed on module load.",
"details": "Sign",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "k=2048 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4)",
"condition": "Performed on module load.",
"details": "Verify",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "k=2048 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1",
"condition": "Performed on module load.",
"details": "Simple SHA KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512",
"condition": "Performed on module load.",
"details": "Simple SHA KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256",
"condition": "Performed on module load.",
"details": "Simple SHA KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627",
"condition": "Performed on module load.",
"details": "SP 800-135 Rev. 1 Section 4.2.2 TLS 1.2 KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Fixed input KAT",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF",
"condition": "Performed on module load.",
"details": "RFC8446 Section 7.1 TLS v1.3 KDF KAT",
"indicator": "FIPS_OK",
"testMethod": "KAT",
"testProps": "Fixed input KAT",
"type": "CAST"
},
{
"algorithmOrTest": "DSA KeyGen (FIPS186-4)",
"condition": "Performed on FFC (DSA, KAS-FFC-SSC) key pair generation, prior to returning the key pair on conclusion of the call.",
"details": "Sign, Verify",
"indicator": "FIPS_OK",
"testMethod": "PCT",
"testProps": "PCT performed using the generated key pair",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4)",
"condition": "Performed on ECC (ECDSA) key pair generation, prior to returning the key pair on conclusion of the call.",
"details": "Sign, Verify",
"indicator": "FIPS_OK",
"testMethod": "PCT",
"testProps": "PCT performed using the generated key pair",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen",
"condition": "Performed on Edwards (EdDSA) key pair generation, prior to returning the key pair on conclusion of the call.",
"details": "Sign, Verify",
"indicator": "FIPS_OK",
"testMethod": "PCT",
"testProps": "PCT performed using the generated key pair",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4)",
"condition": "Performed on IFC (RSA, KAS-IFC-SSC, KTS-IFC) key pair generation, prior to returning the key pair on conclusion of the call.",
"details": "Sign, Verify",
"indicator": "FIPS_OK",
"testMethod": "PCT",
"testProps": "PCT performed using the generated key pair",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "If one of the KATs fails or integrity test fails",
"description": "The self-test failure error state",
"indicator": "PROV_R_FIPS_MODULE_IN_ERROR_STATE",
"name": "Self-test failure",
"recoveryMethod": "Reload the Module into memory"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [],
"found": false,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input: stack frame including non-sensitive parameters.",
"logicalInterface": "Control Input Data Input",
"physicalPort": "N/A (API - input)"
},
{
"data": "API output: output parameters and return value resulting from call execution.",
"logicalInterface": "Data Output Status Output",
"physicalPort": "N/A (API - output)"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [],
"found": false,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "3",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "SW Integrity",
"details": "",
"indicator": "FIPS_OK or PROV_R_FIPS_MODULE_IN_ERROR_STATE",
"testMethod": "HMAC over the complete module file image",
"testProps": "HMAC-SHA2-256 #A8927",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Call stack (API) input parameters",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "I",
"sfiAlgo": "",
"source": "Calling process"
},
{
"dest": "Calling process",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "O",
"sfiAlgo": "",
"source": "Call stack (API) output parameters"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "C (Cleanse): Caller invocation of openssl_cleanse.",
"method": "C",
"operatorId": "Caller invocation of openssl_cleanse",
"rationale": "Overwrites with zeros"
},
{
"description": "T (Teardown): Module unload - invokes cleanse internally.",
"method": "T",
"operatorId": "Occurs when module is unloaded",
"rationale": "Overwrites with zeros"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [],
"found": false,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "",
"implName": "Supermicro FIPS Provider for OpenSSL",
"name": "CKG Section 4",
"reference": "NIST, SP 800-133 Rev. 2"
},
{
"algoPropList": "",
"implName": "Supermicro FIPS Provider for OpenSSL",
"name": "CKG Section 5",
"reference": "NIST, SP 800-133 Rev. 2"
},
{
"algoPropList": "",
"implName": "Supermicro FIPS Provider for OpenSSL",
"name": "CKG Section 6.2",
"reference": "NIST, SP 800-133 Rev. 2"
},
{
"algoPropList": "",
"implName": "Supermicro FIPS Provider for OpenSSL",
"name": "Hash DRBG with SHA3-256, SHA3-512",
"reference": "NIST, SP 800-90A Rev. 1"
},
{
"algoPropList": "",
"implName": "Supermicro FIPS Provider for OpenSSL",
"name": "HMAC DRBG with SHA3-256, SHA3-512",
"reference": "NIST, SP 800-90A Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "14th Generation FlexTwin 1U with ARM Cortex A7 (ARMv7-A) (1U counterpart of OE1 in Table 3)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation CloudDC 1U with ARM Cortex A7 (ARMv7-A) (Only 1U available for 14th Generation CloudDC 5.4 OE)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "13th Generation CloudDC 1U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "13th Generation CloudDC 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation Hyper 1U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation Hyper 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "13th Generation Hyper 1U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "13th Generation Hyper 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation 5U GPU Server with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation 8U GPU Server with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation SuperBlade with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.4"
},
{
"hardwarePlatform": "14th Generation CloudDC 1U with ARM Cortex A7 (ARMv7-A) (1U counterpart of OE2 in Table 3)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "13th Generation CloudDC 1U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "13th Generation CloudDC 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "14th Generation Hyper 1U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "14th Generation Hyper 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "13th Generation Hyper 1U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "13th Generation Hyper 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
},
{
"hardwarePlatform": "14th Generation GrandTwin 2U with ARM Cortex A7 (ARMv7-A)",
"operatingSystem": "Linux 5.15"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 8
},
"ECDSA": {
"ECDSA": 23
},
"EdDSA": {
"EdDSA": 4
}
},
"FF": {
"DH": {
"DHE": 1
},
"DSA": {
"DSA": 23
}
}
},
"certification_process": {},
"cipher_mode": {
"CCM": {
"CCM": 1
},
"CTR": {
"CTR": 3
},
"GCM": {
"GCM": 3
},
"XTS": {
"XTS": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 54
}
},
"crypto_protocol": {
"SSH": {
"SSH": 3,
"SSHv2": 2
},
"TLS": {
"TLS": {
"TLS": 3,
"TLS 1.2": 1,
"TLS 1.3": 1,
"TLS v1.2": 4,
"TLS v1.3": 5
}
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 1
},
"KA": {
"Key Agreement": 1,
"Key agreement": 14
},
"MAC": {
"MAC": 27
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 4,
"B-233": 14,
"B-283": 14,
"B-409": 14,
"B-571": 14,
"K-163": 4,
"K-233": 14,
"K-283": 14,
"K-409": 14,
"K-571": 14,
"P-192": 8,
"P-224": 32,
"P-256": 30,
"P-384": 24,
"P-521": 28
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-128": 7,
"AES-192": 6,
"AES-256": 6,
"HMAC-SHA-1": 6,
"PKCS 1": 4,
"SHA-1": 15,
"SHA-3": 3,
"SHA2": 1,
"SHA2- 256": 2,
"SHA2- 384": 1,
"SHA2-224": 19,
"SHA2-256": 27,
"SHA2-384": 19,
"SHA2-512": 24,
"SHA3": 1,
"SHA3-224": 5,
"SHA3-256": 10,
"SHA3-384": 5,
"SHA3-512": 8
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 9
},
"SHA": {
"SHA1": {
"SHA-1": 15
},
"SHA2": {
"SHA2": 1
},
"SHA3": {
"SHA-3": 3,
"SHA3": 1,
"SHA3-224": 5,
"SHA3-256": 10,
"SHA3-384": 5,
"SHA3-512": 8
}
},
"SHAKE": {
"SHAKE128": 1,
"SHAKE256": 1
}
},
"ic_data_group": {},
"javacard_api_const": {
"curves": {
"ED25519": 4,
"ED448": 4
}
},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 34
},
"RNG": {
"RBG": 3
}
},
"side_channel_analysis": {
"SCA": {
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 64,
"FIPS 180-4": 1,
"FIPS 186-4": 12,
"FIPS 186-5": 6,
"FIPS 198-1": 5,
"FIPS 202": 2,
"FIPS186-4": 35,
"FIPS186-5": 2
},
"ISO": {
"ISO/IEC 19790:2012": 3
},
"NIST": {
"SP 800-107": 1,
"SP 800-108": 2,
"SP 800-132": 7,
"SP 800-133": 7,
"SP 800-135": 9,
"SP 800-140D": 1,
"SP 800-185": 2,
"SP 800-186": 3,
"SP 800-38A": 4,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 4,
"SP 800-38E": 2,
"SP 800-38F": 3,
"SP 800-52": 1,
"SP 800-56A": 11,
"SP 800-56B": 8,
"SP 800-56C": 7,
"SP 800-57": 5,
"SP 800-90A": 5,
"SP 800-90B": 2
},
"PKCS": {
"PKCS 1": 2
},
"RFC": {
"RFC 5288": 1,
"RFC 5647": 1,
"RFC 8446": 1,
"RFC7627": 3,
"RFC8446": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 11,
"AES-128": 7,
"AES-192": 6,
"AES-256": 6
},
"CAST": {
"CAST": 73
}
},
"constructions": {
"MAC": {
"CMAC": 6,
"HMAC": 20,
"KMAC": 7
}
}
},
"tee_name": {
"AMD": {
"PSP": 12
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"SHAKE-256A8927",
"DSA KeyGen (FIPS186-4)A8927",
"RSA SigVer (FIPS186-5)A8927",
"Safe Primes Key VerificationA8927",
"Counter DRBGA8927",
"AES-CFB1A8927",
"KDA HKDF SP800-56Cr2A8927",
"KTS-IFCA8927",
"Safe Primes Key GenerationA8927",
"AES-OFBA8927",
"EDDSA SigVerA8927",
"HMAC DRBGA8927",
"HMAC-SHA3-384A8927",
"HMAC-SHA3-224A8927",
"KMAC-256A8927",
"HMAC-SHA2-512/224A8927",
"HMAC-SHA-1A8927",
"AES-CTRA8927",
"HMAC-SHA3-256A8927",
"TLS v1.2 KDF RFC7627A8927",
"AES-CFB128A8927",
"EDDSA KeyGenA8927",
"HMAC-SHA2-512A8927",
"AES-CBC-CS2A8927",
"ECDSA KeyVer (FIPS186-4)A8927",
"HMAC-SHA2-256A8927",
"RSA SigVer (FIPS186-4)A8927",
"AES-CFB8A8927",
"DSA SigVer (FIPS186-4)A8927",
"KMAC-128A8927",
"ECDSA SigVer (FIPS186-4)A8927",
"SHA2-512/224A8927",
"KAS-ECC-SSC Sp800-56Ar3A8927",
"HMAC-SHA2-512/256A8927",
"AES-XTS Testing Revision 2.0A8927",
"AES-CCMA8927",
"RSA Signature PrimitiveA8927",
"KDF ANS 9.42A8927",
"AES-CBC-CS1A8927",
"DSA PQGVer (FIPS186-4)A8927",
"AES-GCMA8927",
"SHAKE-128A8927",
"KDA TwoStep SP800-56Cr2A8927",
"SHA-1A8927",
"SHA2-512/256A8927",
"ECDSA SigGen (FIPS186-4)A8927",
"RSA SigGen (FIPS186-5)A8927",
"SHA2-512A8927",
"KDF SP800-108A8927",
"AES-CBCA8927",
"SHA2-224A8927",
"AES-KWA8927",
"RSA SigGen (FIPS186-4)A8927",
"KAS-ECC CDH-Component SP800-56Ar3A8927",
"KDA OneStep SP800-56Cr2A8927",
"KAS-FFC-SSC Sp800-56Ar3A8927",
"EDDSA KeyVerA8927",
"DSA PQGGen (FIPS186-4)A8927",
"KDF ANS 9.63A8927",
"AES-GMACA8927",
"AES-KWPA8927",
"HMAC-SHA3-512A8927",
"HMAC-SHA2-224A8927",
"PBKDFA8927",
"HMAC-SHA2-384A8927",
"RSA KeyGen (FIPS186-4)A8927",
"TLS v1.3 KDFA8927",
"SHA2-384A8927",
"EDDSA SigGenA8927",
"AES-CMACA8927",
"KDF SSHA8927",
"Hash DRBGA8927",
"ECDSA KeyGen (FIPS186-4)A8927",
"DSA SigGen (FIPS186-4)A8927",
"SHA3-224A8927",
"KAS-IFC-SSCA8927",
"SHA2-256A8927",
"SHA3-512A8927",
"AES-ECBA8927",
"SHA3-256A8927",
"AES-CBC-CS3A8927",
"SHA3-384A8927"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A8927"
]
},
"policy_metadata": {
"/CreationDate": "D:20261022110949-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20261022110949-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 930969,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://keypair.us/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 43
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "4d8d9d2b35420ccc34f868941034048ff2985998b75f218be57758934565b107",
"source_hash": "f9f929504a20fe10ed8c769e09252582cf49aa3974a072a56d1497497dca3900",
"txt_hash": "17e121262d13e910f02bd8a93f099c681f2ad1675356280f4be8d9488ff35aed"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys).",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2026_071026_0710.pdf",
"date_sunset": "2029-07-10",
"description": "FIPS cryptographic module for Supermicro-branded products.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Life-cycle assurance: Level 3"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Supermicro FIPS Provider for OpenSSL",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-09-01",
"lab": "Acumen Security",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-10-20",
"lab": "Acumen Security",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-10-22",
"lab": "Acumen Security",
"validation_type": "Update"
}
],
"vendor": "Super Micro Computer, Inc.",
"vendor_url": "http://www.supermicro.com"
}
}