This page was not yet optimized for use on mobile devices.
Canonical Ltd. Ubuntu 22.04 Libgcrypt Cryptographic Module
Certificate details
| Certificate ID | #4793 |
|---|---|
| Status | active |
| Validation dates | 10.09.2024 |
| Sunset date | 09-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation. When operated in approved mode. When installed, initialized and configured as specified Section 11 in the Security Policy. |
| Exceptions |
|
| Description | The Canonical Ltd. Ubuntu 22.04 libgcrypt is a software library implementing general purpose cryptographic algorithms |
| Tested configurations |
|
| Vendor | Canonical Ltd. http://www.canonical.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, HMAC-SHA-256, CMACAsymmetric Algorithms
ECDH, ECDSAHash functions
SHA-1, SHA-256, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD5, PBKDF, PBKDF2Schemes
MAC, Key AgreementRandomness
DRBG, RNG, RBGLibraries
libgcryptElliptic Curves
P-224, P-256, P-384, P-521Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSPSide-channel analysis
Timing Attacks, timing attacks, Fault InductionStandards
FIPS 140-3, FIPS 198-1, FIPS 180-4, FIPS186-4, FIPS 186-4, FIPS 202, FIPS 186-5, FIPS140-3, FIPS PUB 140-3, FIPS180-4, FIPS197, FIPS198-1, FIPS202, SP 800-140B, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-132, PKCS 1, PKCS#1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4793,
"dgst": "4db66d3d418cb69d",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES-OFBA3704",
"RSA Signature PrimitiveA3705",
"AES-XTS Testing Revision 2.0A3704",
"HMAC-SHA3-224A3705",
"HMAC-SHA2-512/224A3705",
"HMAC-SHA2-224A3705",
"HMAC-SHA2-512A3705",
"SHA-1A3705",
"HMAC-SHA3-256A3705",
"Counter DRBGA3704",
"SHA2-512/224A3705",
"AES-CCMA3704",
"#A3705",
"AES-CBCA3704",
"#A3702",
"SHA3-256A3705",
"SHA2-256A3705",
"ECDSA KeyGen (FIPS186-4)A3705",
"HMAC DRBGA3705",
"PBKDFA3705",
"SHA3-512A3705",
"#A3699",
"ECDSA SigGen (FIPS186-4)A3705",
"ECDSA SigVer (FIPS186-4)A3705",
"HMAC-SHA3-384A3705",
"RSA KeyGen (FIPS186-4)A3705",
"#A3701",
"#A3700",
"SHA2-384A3705",
"AES-CFB8A3704",
"ECDSA KeyVer (FIPS186-4)A3705",
"SHA3-384A3705",
"HMAC-SHA-1A3705",
"SHA2-512/256A3705",
"Hash DRBGA3705",
"HMAC-SHA2-256A3705",
"SHA2-224A3705",
"RSA SigVer (FIPS186-4)A3705",
"SHAKE-256A3705",
"AES-CFB128A3704",
"AES-KWA3704",
"RSA SigGen (FIPS186-4)A3705",
"SHA2-512A3705",
"#A3703",
"AES-CMACA3704",
"SHAKE-128A3705",
"#A3704",
"HMAC-SHA2-384A3705",
"AES-CTRA3704",
"HMAC-SHA2-512/256A3705",
"AES-ECBA3704",
"SHA3-224A3705",
"HMAC-SHA3-512A3705"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"22.04"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3699",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3699",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3700",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3700",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3700",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3700",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Secret Generation Mode: Testing Candidate Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3700",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3700",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A3700",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3700",
"properties": "Password; derived key with 112-512 bits key size and 112-256 bits key strength",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Key Generation Mode: B.3.3 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A3700",
"properties": "Private Key Format: standard Public Exponent Mode: random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3700",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3700",
"properties": "- Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 16- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3700",
"properties": "Message Length - Message Length: 16- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3701",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3701",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3701",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3701",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Secret Generation Mode: Testing Candidate Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3701",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3701",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A3701",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3701",
"properties": "Password; derived key with 112-512 bits key size and 112-256 bits key strength",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Key Generation Mode: B.3.3 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A3701",
"properties": "Private Key Format: standard Public Exponent Mode: random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3701",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3701",
"properties": "- Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 16- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3701",
"properties": "Message Length - Message Length: 16- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3702",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3702",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3703",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3703",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3703",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3703",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Secret Generation Mode: Testing Candidate Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3703",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3703",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3703",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3703",
"properties": "Password; derived key with 112-512 bits key size and 112-256 bits key strength",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Key Generation Mode: B.3.3 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A3703",
"properties": "Private Key Format: standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Public Exponent Mode: random",
"reference": ""
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3703",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3703",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3704",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3704",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3704",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3704",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Secret Generation Mode: Testing Candidate Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3704",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3704",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3704",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3704",
"properties": "Password; derived key with 112-512 bits key size and 112-256 bits key strength",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Key Generation Mode: B.3.3 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A3704",
"properties": "Private Key Format: standard Public Exponent Mode: random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3704",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Large Message Sizes - 1, 2, 4, 8",
"reference": ""
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3704",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Secret Generation Mode: Testing Candidate Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Curves: P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3705",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3705",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A3705",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3705",
"properties": "Password; derived key with 112-512 bits key size and 112-256 bits key strength",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Key Generation Mode: B.3.3 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A3705",
"properties": "Private Key Format: standard Public Exponent Mode: random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3705",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Signature Type - PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 0- 65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 16- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3705",
"properties": "Message Length - Message Length: 16- 65536 Increment 8",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Perfor m AES encryp tion",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_CIPHER) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Plain text",
"name": "Symme tric encryp tion",
"outputs": "Cipher text",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Symme tric encryp tion Symme tric encryp tion (for data storag e)"
},
{
"description": "Perfor m AES",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_CIPHER) returns GPG_ERR_NO_ERROR",
"inputs": "AES key,",
"name": "Symme tric",
"outputs": "Plaint ext",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "Symme tric decryp tion"
},
{
"description": "decryp tion",
"indicator": "",
"inputs": "Ciphe rtext",
"name": "decryp tion",
"outputs": "",
"rolesSspAccess": "- AES key: W,E",
"secFunImpl": "Symme tric decryp tion (for data storag e)"
},
{
"description": "Perfor m authen ticated AES encryp tion",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_CIPHER) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, IV, Plain text",
"name": "Authen ticated symme tric encryp tion",
"outputs": "Cipher text, MAC tag",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Authen ticated symme tric encryp tion"
},
{
"description": "Perfor m authen ticated AES decryp tion",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_CIPHER) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Ciphe rtext, MAC tag",
"name": "Authen ticated symme tric decryp tion",
"outputs": "Plaint ext or failure",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Authen ticated symme tric decryp tion"
},
{
"description": "Gener ate RSA key pairs",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) return GPG_ERR_NO_ERROR",
"inputs": "Key size",
"name": "RSA key genera tion",
"outputs": "RSA privat e key, RSA public key",
"rolesSspAccess": "Crypt o Offic er - RSA privat e key: G,E - RSA publi c key: G,E",
"secFunImpl": "Key pair genera tion"
},
{
"description": "Gener ate ECDSA key pairs",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) return GPG_ERR_NO_ERROR",
"inputs": "Key size",
"name": "ECDSA key genera tion",
"outputs": "ECDS A privat e key, ECDS A public key",
"rolesSspAccess": "Crypt o Offic er - ECDS A privat e key: G,E - ECDS A publi c key: G,E",
"secFunImpl": "Key pair genera tion"
},
{
"description": "RSA signat ure genera tion withou t pre- compu ted hash",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) and gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MD) return GPG_ERR_NO_ERROR",
"inputs": "RSA priva te key, Mess age, Hash algori thm",
"name": "RSA Digital signatu re genera tion",
"outputs": "Signat ure",
"rolesSspAccess": "Crypt o Offic er - RSA privat e key: W,E",
"secFunImpl": "Digital signatu re genera tion"
},
{
"description": "RSA signat ure primiti ve",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) returns GPG_ERR_NO_ERROR",
"inputs": "RSA priva te key, Mess age diges t",
"name": "RSA Digital signatu re genera tion (with pre- compu",
"outputs": "Signat ure",
"rolesSspAccess": "Crypt o Offic er - RSA privat e key: W,E",
"secFunImpl": "Digital signatu re genera tion primiti ve"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "ted hash)",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "ECDSA signat ure genera tion",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) and gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MD) return GPG_ERR_NO_ERROR",
"inputs": "ECDS A priva te key, Mess age, Hash algori thm",
"name": "ECDSA Digital signatu re genera tion",
"outputs": "Signat ure",
"rolesSspAccess": "Crypt o Offic er - ECDS A privat e key: W,E",
"secFunImpl": "Digital signatu re genera tion"
},
{
"description": "RSA signat ure verific ation",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) and gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MD) return GPG_ERR_NO_ERROR",
"inputs": "RSA publi c key, Signa ture, Hash algori thm",
"name": "RSA Digital signatu re verifica tion",
"outputs": "Signat ure verific ation result (verifi ed/fail )",
"rolesSspAccess": "Crypt o Offic er - RSA publi c key: W,E",
"secFunImpl": "Digital signatu re verifica tion"
},
{
"description": "ECDSA signat ure verific ation",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_PK_FLAGS) and gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MD) return GPG_ERR_NO_ERROR",
"inputs": "ECDS A publi c key, Signa ture, Hash algori thm",
"name": "ECDSA Digital signatu re verifica tion",
"outputs": "Signat ure verific ation result (verifi ed/fail )",
"rolesSspAccess": "Crypt o Offic er - ECDS A publi c key: W,E",
"secFunImpl": "Digital signatu re verifica tion"
},
{
"description": "Verify ECDSA public key",
"indicator": "gcry_mpi_ec_curve_point() returns GPG_ERR_NO_ERROR",
"inputs": "ECDS A publi c key",
"name": "Public key verifica tion",
"outputs": "Key verific ation result (verifi",
"rolesSspAccess": "Crypt o Offic er -",
"secFunImpl": "Public key verifica tion"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "ed/fail )",
"rolesSspAccess": "ECDS A publi c key: W,E",
"secFunImpl": ""
},
{
"description": "Gener ate rando m bitstri ngs",
"indicator": "gcry_randomize(), gcry_random_bytes(), gcry_random_bytes_secure() return GPG_ERR_NO_ERROR",
"inputs": "",
"name": "Rando m numbe r genera tion",
"outputs": "",
"rolesSspAccess": "Crypt o Offic er - Entro py input: W,E - DRBG seed: G,W,E - DRBG inter nal state: (V value, C value ): G,W,E - DRBG inter nal state: (V value, key): G,W,E",
"secFunImpl": "Rando m numbe r genera tion"
},
{
"description": "Compu te SHA hashes",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MD) returns GPG_ERR_NO_ERROR",
"inputs": "Mess age",
"name": "Messa ge digest",
"outputs": "Messa ge digest",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "Messa ge digest"
},
{
"description": "Compu te HMAC",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MAC) returns GPG_ERR_NO_ERROR",
"inputs": "HMA C key, Mess age",
"name": "Hash- based Messa ge authen ticatio n code",
"outputs": "MAC tag",
"rolesSspAccess": "Crypt o Offic er - HMA C key: W,E",
"secFunImpl": "Messa ge authen ticatio n code"
},
{
"description": "Compu te AES- based CMAC",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_MAC) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Mess age",
"name": "AES- based Messa ge authen ticatio n code",
"outputs": "MAC tag",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Messa ge authen ticatio n code"
},
{
"description": "Perfor m AES- based key wrappi ng",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_CIPHER) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Key to be wrap ped",
"name": "Key wrappi ng",
"outputs": "Wrapp ed key",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Key wrappi ng"
},
{
"description": "Perfor m AES- based key unwra pping",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_CIPHER) returns GPG_ERR_NO_ERROR",
"inputs": "AES key, Key to be unwr appe d",
"name": "Key unwra pping",
"outputs": "Unwra pped key",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Key unwra pping"
},
{
"description": "Perfor m key derivat ion",
"indicator": "gcry_control(GCRYCTL_FIPS_SE RVICE_INDICATOR_KDF) returns GPG_ERR_NO_ERROR",
"inputs": "Pass word or passp hrase",
"name": "Key derivat ion",
"outputs": "Derive d key",
"rolesSspAccess": "Crypt o Offic er - Pass word or passp hrase : W,E - Deriv ed key: G,R",
"secFunImpl": "Key derivat ion"
},
{
"description": "Show modul e status",
"indicator": "N/A",
"inputs": "None",
"name": "Show status",
"outputs": "Modul e status",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Zeroiz e SSPs",
"indicator": "N/A",
"inputs": "None",
"name": "Zeroiza tion",
"outputs": "None",
"rolesSspAccess": "Crypt o Offic er - AES key: Z - HMA C key: Z - RSA publi c key: Z - RSA privat e key:",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Z - ECDS A publi c key: Z - ECDS A privat e key: Z - Pass word or passp hrase : Z - Deriv ed key: Z - Entro py input: Z - DRBG inter nal state: (V value, C value ): Z",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "DRBG inter nal state: (V value, key): Z - DRBG seed: Z",
"secFunImpl": ""
},
{
"description": "Perfor m self- tests",
"indicator": "N/A",
"inputs": "None",
"name": "Self- tests",
"outputs": "Result of self- test (pass/",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Show modul e name and versio n",
"indicator": "N/A",
"inputs": "None",
"name": "Show modul e name and version",
"outputs": "Modul e\u0027s name and versio n",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB (A3700)",
"condition": "Test runs at power- on before the",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- CMAC (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys, MAC generation , encrypt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- CMAC (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys, MAC generation , encrypt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- CMAC (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys, MAC generation , encrypt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- CMAC (A3704)",
"condition": "Test runs at power- on before the",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys, MAC",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "generation , encrypt",
"type": ""
},
{
"algorithmOrTest": "Counter DRBG (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "AES with 128-bit key with DF, with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "AES with 128-bit key with DF, with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "AES with 128-bit key with DF, with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "AES with 128-bit key with DF, with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3701)",
"condition": "Test runs at power- on before the",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "Hash DRBG (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "Hash DRBG (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256 with and without PR",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3703)",
"condition": "Test runs at power- on before the",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "key and SHA2-256",
"type": ""
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3704)",
"condition": "Test runs at power- on before the",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "P-256 with SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3699)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3702)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3703)",
"condition": "Test runs at power- on before the",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3704)",
"condition": "Test runs at power- on before the",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3705)",
"condition": "Test runs at power- on before the",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3701)",
"condition": "Test runs at power- on before the",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message authenticatio n",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3700)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3703)",
"condition": "Test runs at power- on before the",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters,",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3700)",
"condition": "Test runs at power- on before the",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-256 password length 24 characters, master key",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A3701)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3703)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3704)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-256 password length 24 characters, master key length of",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "320 bits, iteration count of 4096, and salt length of 288 bits",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A3705)",
"condition": "Test runs at power- on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operationa l",
"testMethod": "KAT",
"testProps": "SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3700)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3701)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3703)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3704)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3705)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3700)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3701)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3703)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3704)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification",
"type": "PCT"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "with SHA2- 256",
"type": ""
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3705)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA2- 256",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure",
"description": "The module immediately stops",
"indicator": "An error message related to the",
"name": "Error state",
"recoveryMethod": "Restart of the module"
},
{
"conditions": "CAST failure PCT failure",
"description": "functioning due to a self-test failure",
"indicator": "cause of the failure",
"name": "",
"recoveryMethod": ""
},
{
"conditions": "Random numbers are requested in the Error state Cipher operations are requested on a deallocated handle",
"description": "The module immediately halts all cryptographic operations and transits to shutdown",
"indicator": "The module is aborted and is not available for use",
"name": "Fatal Error state",
"recoveryMethod": "Restart of the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non-approved service is requested",
"name": "Non- approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "MD5",
"use": "Message digest"
},
{
"name": "ECDH",
"use": "Shared secret computation"
},
{
"name": "RSA",
"use": "Encryption primitives; Decryption primitives; Signature verification primitives"
},
{
"name": "RSA with non-approved public key flags",
"use": "Key generation; Signature generation; Signature verification"
},
{
"name": "ECDSA",
"use": "Signature generation primitives"
},
{
"name": "ECDSA with non-approved public key flags",
"use": "Key generation; Signature generation; Signature verification"
},
{
"name": "AES-GCM",
"use": "Authenticated symmetric encryption; Authenticated symmetric decryption"
},
{
"name": "AES-OCB",
"use": "Authenticated symmetric encryption; Authenticated symmetric decryption"
},
{
"name": "AES-EAX",
"use": "Authenticated symmetric encryption; Authenticated symmetric decryption"
},
{
"name": "AES-SIV",
"use": "Authenticated symmetric encryption; Authenticated symmetric decryption"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "MD5",
"description": "Message digest",
"name": "MD5",
"role": "CO"
},
{
"alg_accessed": "ECDH",
"description": "Shared secret computation",
"name": "ECDH",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Encryption primitives; Decryption primitives; Signature verification primitives",
"name": "RSA",
"role": "CO"
},
{
"alg_accessed": "RSA with non- approved public key flags",
"description": "Key generation; Signature generation; Signature verification",
"name": "RSA with non- approved public key flags",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "Signature verification primitives",
"name": "ECDSA",
"role": "CO"
},
{
"alg_accessed": "ECDSA with non- approved public key flags",
"description": "Key generation; Signature generation; Signature verification",
"name": "ECDSA with non- approved public key flags",
"role": "CO"
},
{
"alg_accessed": "AES-GCM",
"description": "Authenticated symmetric encryption; Authenticated symmetric decryption",
"name": "AES-GCM",
"role": "CO"
},
{
"alg_accessed": "AES-OCB",
"description": "Authenticated symmetric encryption; Authenticated symmetric decryption",
"name": "AES-OCB",
"role": "CO"
},
{
"alg_accessed": "AES-EAX",
"description": "Authenticated symmetric encryption; Authenticated symmetric decryption",
"name": "AES-EAX",
"role": "CO"
},
{
"alg_accessed": "AES-SIV",
"description": "Authenticated symmetric encryption; Authenticated symmetric decryption",
"name": "AES-SIV",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters for data.",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters for data.",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API input parameters for control input, /proc/sys/crypto/fips_enabled control file.",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, API output parameters for status output.",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [],
"found": false,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A3700)",
"details": "Integrity test for libgcrypt.so.20.3. 4",
"indicator": "Module is operationa l",
"testMethod": "Message authenticatio n",
"testProps": "Key size: 232 bits",
"type": "SW/FW Integrit y"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3701)",
"details": "Integrity test for libgcrypt.so.20.3. 4",
"indicator": "Module is operationa l",
"testMethod": "Message authenticatio n",
"testProps": "Key size: 232 bits",
"type": "SW/FW Integrit y"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3703)",
"details": "Integrity test for libgcrypt.so.20.3. 4",
"indicator": "Module is operationa l",
"testMethod": "Message authenticatio n",
"testProps": "Key size: 232 bits",
"type": "SW/FW Integrit y"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3704)",
"details": "Integrity test for libgcrypt.so.20.3. 4",
"indicator": "Module is operationa l",
"testMethod": "Message authenticatio n",
"testProps": "Key size: 232 bits",
"type": "SW/FW Integrit y"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3705)",
"details": "Integrity test for libgcrypt.so.20.3. 4",
"indicator": "Module is operationa l",
"testMethod": "Message authenticatio n",
"testProps": "Key size: 232 bits",
"type": "SW/FW Integrit y"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptograp hic module",
"distribution": "Manual",
"entry": "Electron ic",
"format": "Plainte xt",
"name": "API input paramete rs",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electron ic",
"format": "Plainte xt",
"name": "API output paramete rs",
"sfiAlgo": "",
"source": "Cryptograp hic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle",
"method": "Wipe and free memory block allocated",
"operatorId": "By calling the cipher related zeroization API: gcry_cipher_close() and gcry_free() clears and frees symmetric ciphers context, gcry_mac_close() and gcry_free() clears and frees HMAC context, gcry_sexp_release() and gcry_mpi_release() and gcry_free() clears and frees RSA key structure, gcry_sexp_release() and gcry_mpi_release() and gcry_ctx_release() and gcry_mpi_point_release() and gcry_free() clears and frees ECDSA key structures, gcry_free() clears PBKDF context, gcry_ctrl(GCRYCTL_TERM_SECMEM) clears DRBG contexts",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "libgcrypt.so.20.3.4",
"swFwVersion": "1.9.4- 3ubuntu3+Fips1.2"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": ".libgcrypt.so.20.hmac",
"swFwVersion": "1.9.4- 3ubuntu3+Fips1.2"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Supermicro SYS-1019P- WTR",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04 LTS 64-bit",
"paa_pai": "AESNI, SSSE3, SHLD",
"processors": "Intel Xeon Gold 6226",
"version": "1.9.4- 3ubuntu3+Fips1.2"
},
{
"hardwarePlatform": "Amazon Web Services (AWS) c6g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04 LTS 64-bit",
"paa_pai": "NEON",
"processors": "AWS Graviton2",
"version": "1.9.4- 3ubuntu3+Fips1.2"
},
{
"hardwarePlatform": "IBM z15",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04 LTS 64-bit",
"paa_pai": "CPACF",
"processors": "IBM z15",
"version": "1.9.4- 3ubuntu3+Fips1.2"
},
{
"hardwarePlatform": "Supermicro SYS-1019P- WTR",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04 LTS 64-bit",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6226",
"version": "1.9.4- 3ubuntu3+Fips1.2"
},
{
"hardwarePlatform": "Amazon Web Services (AWS) c6g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04 LTS 64-bit",
"paa_pai": "No",
"processors": "AWS Graviton2",
"version": "1.9.4- 3ubuntu3+Fips1.2"
},
{
"hardwarePlatform": "IBM z15",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04 LTS 64-bit",
"paa_pai": "No",
"processors": "IBM z15",
"version": "1.9.4- 3ubuntu3+Fips1.2"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric RSA:2048, 3072, 4096 bits (112, 128, 149 bits) ECDSA:P-224, P-256, P- 384, P-521 (112, 128, 192, 256 bits)",
"implName": "N/A",
"name": "Cooperative Key Generation (CKG)",
"reference": "FIPS 186-4, SP800-133r2 Section 4 example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Supermicro SYS-1019P-WTR",
"operatingSystem": "Ubuntu Core 22"
},
{
"hardwarePlatform": "Amazon Web Services (AWS) c6g.metal",
"operatingSystem": "Ubuntu Core 22"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 100
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 1
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"libgcrypt": {
"libgcrypt": 8
}
},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"MAC": {
"MAC": 11
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 44,
"P-256": 74,
"P-384": 44,
"P-521": 54
}
},
"eval_facility": {
"atsec": {
"atsec": 120
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 10,
"AES-128": 4,
"AES-192": 4,
"AES-256": 4,
"HMAC- SHA-1": 7,
"HMAC-SHA-1": 36,
"HMAC-SHA-256": 2,
"PKCS 1": 10,
"PKCS#1": 22,
"SHA-1": 46,
"SHA-256": 11,
"SHA-3": 1,
"SHA2- 256": 10,
"SHA2-224": 18,
"SHA2-256": 58,
"SHA2-384": 18,
"SHA2-512": 28,
"SHA3-224": 11,
"SHA3-256": 11,
"SHA3-384": 11,
"SHA3-512": 11
}
},
"fips_security_level": {},
"hash_function": {
"MD": {
"MD5": {
"MD5": 3
}
},
"PBKDF": {
"PBKDF": 33,
"PBKDF2": 1
},
"SHA": {
"SHA1": {
"SHA-1": 46
},
"SHA2": {
"SHA-256": 11
},
"SHA3": {
"SHA-3": 1,
"SHA3-224": 11,
"SHA3-256": 11,
"SHA3-384": 11,
"SHA3-512": 11
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 110
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {
"FI": {
"Fault Induction": 2
},
"SCA": {
"Timing Attacks": 1,
"timing attacks": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 125,
"FIPS 180-4": 37,
"FIPS 186-4": 43,
"FIPS 186-5": 1,
"FIPS 198-1": 49,
"FIPS 202": 18,
"FIPS PUB 140-3": 2,
"FIPS140-3": 1,
"FIPS180-4": 1,
"FIPS186-4": 116,
"FIPS197": 1,
"FIPS198-1": 1,
"FIPS202": 1
},
"NIST": {
"SP 800-132": 6,
"SP 800-140B": 1,
"SP 800-38A": 24,
"SP 800-38B": 4,
"SP 800-38C": 4,
"SP 800-38E": 4,
"SP 800-38F": 4,
"SP 800-90A": 14
},
"PKCS": {
"PKCS 1": 10,
"PKCS#1": 11
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 38,
"AES-": 8,
"AES-128": 4,
"AES-192": 4,
"AES-256": 4
},
"CAST": {
"CAST": 94
}
},
"constructions": {
"MAC": {
"CMAC": 7,
"HMAC": 29,
"HMAC-SHA-256": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-OFBA3704",
"RSA Signature PrimitiveA3705",
"AES-XTS Testing Revision 2.0A3704",
"HMAC-SHA3-224A3705",
"HMAC-SHA2-512/224A3705",
"HMAC-SHA2-224A3705",
"HMAC-SHA2-512A3705",
"SHA-1A3705",
"HMAC-SHA3-256A3705",
"Counter DRBGA3704",
"SHA2-512/224A3705",
"AES-CCMA3704",
"AES-CBCA3704",
"SHA3-256A3705",
"SHA2-256A3705",
"ECDSA KeyGen (FIPS186-4)A3705",
"HMAC DRBGA3705",
"PBKDFA3705",
"SHA3-512A3705",
"ECDSA SigGen (FIPS186-4)A3705",
"ECDSA SigVer (FIPS186-4)A3705",
"HMAC-SHA3-384A3705",
"RSA KeyGen (FIPS186-4)A3705",
"SHA2-384A3705",
"AES-CFB8A3704",
"ECDSA KeyVer (FIPS186-4)A3705",
"SHA3-384A3705",
"HMAC-SHA-1A3705",
"SHA2-512/256A3705",
"Hash DRBGA3705",
"HMAC-SHA2-256A3705",
"SHA2-224A3705",
"RSA SigVer (FIPS186-4)A3705",
"SHAKE-256A3705",
"AES-CFB128A3704",
"AES-KWA3704",
"RSA SigGen (FIPS186-4)A3705",
"SHA2-512A3705",
"AES-CMACA3704",
"SHAKE-128A3705",
"HMAC-SHA2-384A3705",
"AES-CTRA3704",
"HMAC-SHA2-512/256A3705",
"AES-ECBA3704",
"SHA3-224A3705",
"HMAC-SHA3-512A3705"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3702",
"#A3703",
"#A3699",
"#A3704",
"#A3701",
"#A3700",
"#A3705"
]
},
"policy_metadata": {
"/Author": "Dick Sikkema",
"/CreationDate": "D:20240830160828Z00\u002700\u0027",
"/Creator": "Word",
"/ModDate": "D:20240830160828Z00\u002700\u0027",
"/Producer": "macOS Version 12.7.6 (Build 21H1320) Quartz PDFContext",
"/Title": "140sp-new",
"pdf_file_size_bytes": 1066609,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 119
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "ff987bd6762bc7362aabcc159664498c1cb5b7b4e1bcd5149e847035f4fc21f8",
"source_hash": "dfe87b23bfd61bdd87aa22bd14c5121ae4a67ea2379dc1094dee0927a73ff3b9",
"txt_hash": "ead4f0c867b3e36f91aa5d5aed80be489f7aa826f46bc68f4befc63b996fa7fe"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation. When operated in approved mode. When installed, initialized and configured as specified Section 11 in the Security Policy.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2024_011024_0217.pdf",
"date_sunset": "2029-09-09",
"description": "The Canonical Ltd. Ubuntu 22.04 libgcrypt is a software library implementing general purpose cryptographic algorithms",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Canonical Ltd. Ubuntu 22.04 Libgcrypt Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": "1.9.4-3ubuntu3+Fips1.2",
"tested_conf": [
"Ubuntu 22.04 LTS 64-bit on IBM z15 with IBM z15 with PAI",
"Ubuntu 22.04 LTS 64-bit on IBM z15 with IBM z15 without PAI",
"Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA",
"Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA",
"Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 with PAA",
"Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-09-10",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Canonical Ltd.",
"vendor_url": "http://www.canonical.com"
}
}