This page was not yet optimized for use on mobile devices.
Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module
Certificate details
| Certificate ID | #4794 |
|---|---|
| Status | active |
| Validation dates | 11.09.2024 |
| Sunset date | 10-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11 of the Security Policy |
| Exceptions |
|
| Description | The Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality. |
| Tested configurations |
|
| Vendor | Canonical Ltd. http://www.canonical.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, HMAC, KMAC, CMACAsymmetric Algorithms
RSA-OAEP, ECDH, ECDSA, ECC, DHE, DH, Diffie-Hellman, DSAHash functions
SHA-1, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2, PBKDFSchemes
MAC, Key Exchange, Key AgreementProtocols
SSH, TLS v1.2, TLS v1.3, TLS 1.2, TLS, TLS 1.3, IKERandomness
DRBG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, P-192, curve P-192, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, B-163, K-163Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Side-channel analysis
Fault InductionStandards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 1864, FIPS 186-5, FIPS 197, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-38D, SP 800-56A, SP 800-135, SP 800-185, SP 800-56C, SP 800-90A, SP 800-108, SP 800-90B, SP 800-140B, PKCS 1, PKCS#1, RFC7627, RFC 5288, RFC8446, RFC 8446, RFC 4253, RFC 6668, RFC 3526, RFC 7919Cross-references
Incoming- 4911 - historical - Canonical Ltd. Ubuntu 22.04 Strongswan Cryptographic Module
Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4794,
"dgst": "4f41b6fdedda792a",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"Safe Primes Key VerificationA3992",
"#A3995",
"#A3975",
"SHA2-512A4005",
"#A3965",
"#A3980",
"HMAC-SHA2-512A4005",
"AES-GCMA4002",
"SHA2-384A4005",
"KDF SSHA3987",
"HMAC-SHA-1A4005",
"KAS-FFC-SSC Sp800-56Ar3A3992",
"#A3997",
"#A3987",
"AES-CMACA3982",
"AES-CFB1A3982",
"#A3960",
"#A3963",
"AES-CFB128A3982",
"#A3969",
"ECDSA KeyVer (FIPS186-4)A4005",
"KAS-ECC-SSC Sp800-56Ar3A4005",
"HMAC-SHA2-512/224A4005",
"#A3979",
"SHA3-256A3979",
"HMAC-SHA2-512/256A4005",
"#A3983",
"SHA3-224A3979",
"KMAC-128A3979",
"AES-GMACA4002",
"ECDSA SigGen (FIPS186-4)A4005",
"AES-CTRA3982",
"SHAKE-128A3979",
"KDF ANS 9.63A4005",
"HMAC DRBGA3970",
"#A3958",
"#A3978",
"KDA OneStep SP800-56Cr2A3965",
"#A3967",
"KDF ANS 9.42A4005",
"SHA2-512/256A4005",
"ECDSA SigVer (FIPS186-4)A4005",
"#A3999",
"#A4000",
"#A3974",
"#A3990",
"TLS v1.3 KDFA3969",
"SHA-1A4005",
"#A3959",
"#A4004",
"HMAC-SHA3-512A3979",
"#A3984",
"KDA HKDF Sp800-56Cr1A3969",
"#A3996",
"AES-CBCA3982",
"AES-OFBA3982",
"#A3972",
"#A3989",
"AES-XTS Testing Revision 2.0A3982",
"PBKDFA4005",
"RSA SigGen (FIPS186-4)A4005",
"HMAC-SHA2-384A4005",
"#A4005",
"#A3994",
"SHAKE-256A3979",
"HMAC-SHA3-224A3979",
"HMAC-SHA2-224A4005",
"#A3968",
"#A3988",
"Hash DRBGA3970",
"SHA2-256A4005",
"#A3971",
"#A3985",
"#A3986",
"#A3991",
"RSA SigVer (FIPS186-4)A4005",
"TLS v1.2 KDF RFC7627A4005",
"#A3981",
"SHA2-224A4005",
"#A4003",
"#A3966",
"#A3998",
"#A3982",
"AES-CFB8A3982",
"HMAC-SHA3-256A3979",
"Counter DRBGA3970",
"HMAC-SHA3-384A3979",
"#A3964",
"#A3970",
"SHA2-512/224A4005",
"KDF SP800-108A3991",
"#A4001",
"KMAC-256A3979",
"AES-ECBA3987",
"Safe Primes Key GenerationA3992",
"#A3961",
"#A3962",
"#A3976",
"RSA KeyGen (FIPS186-4)A4005",
"AES-CBC-CS1A3982",
"AES-CBC-CS3A3982",
"#A3977",
"ECDSA KeyGen (FIPS186-4)A4005",
"HMAC-SHA2-256A4005",
"SHA3-384A3979",
"#A3992",
"SHA3-512A3979",
"#A3973",
"#A3993",
"AES-KWPA3982",
"#A4002",
"AES-KWA3982",
"AES-CBC-CS2A3982",
"AES-CCMA3982"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"22.04"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"4911"
]
},
"directly_referencing": null,
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"4911"
]
},
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"4911"
]
},
"directly_referencing": null,
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"4911"
]
},
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3958",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3958",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3958",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3958",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3958",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3958",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3959",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3959",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3959",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3959",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3959",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3959",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3960",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3960",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3960",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3960",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3960",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3960",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3961",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3961",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3962",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A3962",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3962",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A3962",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3962",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3962",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3962",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A3962",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3963",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3963",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3964",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3964",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A3964",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A3964",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A3964",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A3964",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3964",
"properties": "KDF Type - DER Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KMAC-128",
"cavpCertName": "A3964",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8",
"reference": "SP 800-185"
},
{
"algorithm": "KMAC-256",
"cavpCertName": "A3964",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8",
"reference": "SP 800-185"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3964",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3964",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3964",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3964",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3964",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3964",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3964",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A3965",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3966",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3966",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3966",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3966",
"properties": "Component - No Curve - B-163, B-233, B-283, B-409, B-571, K-163, K-233, K- 283, K-409, K-571 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3967",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3967",
"properties": "Component - No Curve - B-163, B-233, B-283, B-409, B-571, K-163, K-233, K- 283, K-409, K-571 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A3968",
"properties": "Domain Parameter Generation Methods - B-233, B-283, B- 409, B-571, K-233, K-283, K-409, K-571 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800-56Cr1",
"cavpCertName": "A3969",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3- 256, SHA3-384",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A3969",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3970",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3970",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3970",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3971",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A3971",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3972",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3972",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A3972",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A3972",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A3972",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A3972",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3972",
"properties": "KDF Type - DER Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KMAC-128",
"cavpCertName": "A3972",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8",
"reference": "SP 800-185"
},
{
"algorithm": "KMAC-256",
"cavpCertName": "A3972",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8",
"reference": "SP 800-185"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3972",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3972",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3972",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3972",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3972",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3972",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3972",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3973",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3973",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3973",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3973",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3973",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3973",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3974",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3974",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3975",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": ""
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3975",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3976",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3976",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3977",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A3977",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3977",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384,",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length:",
"properties": "SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length:",
"reference": "SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length:"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A3977",
"properties": "112-4096 Increment 8 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3977",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3977",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3977",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A3977",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3978",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A3978",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3979",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3979",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A3979",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A3979",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A3979",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A3979",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3979",
"properties": "KDF Type - DER Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KMAC-128",
"cavpCertName": "A3979",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8",
"reference": "SP 800-185"
},
{
"algorithm": "KMAC-256",
"cavpCertName": "A3979",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8",
"reference": "SP 800-185"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3979",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3979",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3979",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3979",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3979",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3979",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3979",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3980",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3980",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3980",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3980",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3980",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3980",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3981",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3981",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3981",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3981",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3981",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3981",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A3982",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A3982",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3982",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3982",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3982",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3982",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3983",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A3983",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3983",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A3983",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3983",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3983",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3983",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A3983",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3984",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A3984",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3985",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A3985",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3986",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A3986",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3987",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A3987",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3988",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3988",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3989",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3989",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3990",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3990",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A3991",
"properties": "KDF Mode - Counter, Feedback Supported Lengths - Supported Lengths: 112-4096 Increment 8",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A3992",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A3992",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A3992",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3993",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A3993",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A3993",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A3993",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3993",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3993",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3993",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A3993",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3994",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3994",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3995",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3995",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3996",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3996",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3997",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": ""
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3997",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3998",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3998",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3999",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3999",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4000",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4000",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4001",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4001",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4002",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4002",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4003",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A4003",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A4003",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A4003",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4003",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4003",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4003",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A4003",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4004",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A4004",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified -",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A4004",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384,",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "SHA2-512, SHA2-512/224, Key Data Length - Key Data Length:",
"properties": "SHA2-512, SHA2-512/224, Key Data Length - Key Data Length:",
"reference": "SHA2-512, SHA2-512/224, Key Data Length - Key Data Length:"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A4004",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4004",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4004",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4004",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A4004",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4005",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A4005",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A4005",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A4005",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4005",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4005",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4005",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A4005",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Comput e a message digest",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Messag e",
"name": "Message digest",
"outputs": "Messag e digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message digest"
},
{
"description": "Encrypt a plaintext",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Plainte xt",
"name": "Symmetri c encryptio n",
"outputs": "Ciphert ext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetri c encryptio n"
},
{
"description": "Decrypt a cipherte xt",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Ciphert ext",
"name": "Symmetri c decryptio n",
"outputs": "Plaintex t",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetri c decryptio n"
},
{
"description": "Encrypt and authenti cate a plaintext",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Plainte xt, IV",
"name": "Authentic ated symmetric encryptio n",
"outputs": "Ciphert ext, MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetri c encryptio n"
},
{
"description": "Decrypt and authenti cate a cipherte xt",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Ciphert ext, MAC tag",
"name": "Authentic ated symmetric decryptio n",
"outputs": "Plaintex t or Failure",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetri c decryptio n"
},
{
"description": "Perform AES- based key wrappin g",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Key to be wrappe d",
"name": "Key wrapping",
"outputs": "Wrappe d key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key wrapping"
},
{
"description": "Perform AES- based key unwrapp ing",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Key to unwrap",
"name": "Key unwrappi ng",
"outputs": "Unwrap ped key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key unwrappi ng"
},
{
"description": "Comput e a MAC tag using AES",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Messag e",
"name": "AES- based message authentic ation generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Message authentic ation"
},
{
"description": "Verify a MAC tag using AES",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "AES key, Messag e, MAC tag",
"name": "AES- based message authentic ation verificatio n",
"outputs": "Pass/fai l",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Message authentic ation"
},
{
"description": "Comput e a MAC tag using HMAC",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "HMAC key, Messag e",
"name": "HMAC- based message authentic ation generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E",
"secFunImpl": "Message authentic ation"
},
{
"description": "Verify a MAC tag using HMAC",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "HMAC key, Messag e, MAC tag",
"name": "HMAC- based message authentic ation verificatio n",
"outputs": "Pass/fai l",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E",
"secFunImpl": "Message authentic ation"
},
{
"description": "Comput e a MAC tag using KMAC",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "KMAC key, Messag e",
"name": "KMAC- based message authentic ation generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - KMAC key: W,E",
"secFunImpl": "Message authentic ation"
},
{
"description": "Verify MAC tag using KMAC",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "KMAC key, Messag e, MAC tag",
"name": "KMAC- based message authentic ation verificatio n",
"outputs": "Pass/fai l",
"rolesSspAccess": "Crypto Officer - KMAC key: W,E",
"secFunImpl": "Message authentic ation"
},
{
"description": "TLS key derivatio n",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Shared secret",
"name": "TLS-based key derivation",
"outputs": "TLS Derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E - TLS Derived",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a key- derivatio n key",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Key- derivati on key",
"name": "Key-based key derivation",
"outputs": "KBKDF Derived key",
"rolesSspAccess": "key: G,R Crypto Officer - Key- derivatio n key: W,E - KBKDF Derived key: G,R",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Shared secret",
"name": "ANS X9.42 key derivation",
"outputs": "ANS X9.42 Derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E - ANS X9.42 Derived key: G,R",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Shared secret",
"name": "ANS X9.63 key derivation",
"outputs": "ANS X9.63 Derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E - ANS X9.63 Derived key: G,R",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Shared secret",
"name": "HKDF key derivation",
"outputs": "HKDF Derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E - HKDF Derived key: G,R",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Shared secret",
"name": "OneStep KDA key derivation",
"outputs": "OneSte p KDA Derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E - OneStep",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Shared secret",
"name": "SSH KDF key derivation",
"outputs": "SSH KDF Derived key",
"rolesSspAccess": "key: G,R Crypto Officer - Shared secret: W,E - SSH KDF Derived",
"secFunImpl": "Key derivation"
},
{
"description": "Derive a key from a passwor d",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Passwo rd",
"name": "Password- based key derivation",
"outputs": "PBKDF Derived key",
"rolesSspAccess": "Crypto Officer - Passwor d: W,E,Z - PBKDF Derived key: G,R",
"secFunImpl": "Password- based key derivation"
},
{
"description": "Generat e random number",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Numbe r of bits",
"name": "Random number generatio n",
"outputs": "Random number",
"rolesSspAccess": "Crypto Officer - Entropy input: W,E - DRBG Internal state (V, Key): G,W,E - DRBG Internal state (V, C): G,W,E - DRBG seed: G,W,E",
"secFunImpl": "Random number generatio n"
},
{
"description": "Comput e a shared secret",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "DH private key (owner) , DH public key (peer)",
"name": "Diffie- Hellman shared secret computati on",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - DH private key: W,E - DH public key: W,E - Shared secret: G,R",
"secFunImpl": "Shared secret computati on"
},
{
"description": "Comput e a",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "EC private",
"name": "EC Diffie- Hellman",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Shared secret"
},
{
"description": "shared secret",
"indicator": "",
"inputs": "key (owner) , EC public key (peer)",
"name": "shared secret computati on",
"outputs": "",
"rolesSspAccess": "- EC private key: W,E - EC public key: W,E - Shared secret: G,R",
"secFunImpl": "computati on"
},
{
"description": "Generat e a digital signatur e with RSA",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "RSA private key, Messag e, Hash algorith m",
"name": "RSA Digital signature generatio n",
"outputs": "Signatu re",
"rolesSspAccess": "Crypto Officer - RSA private key: W,E",
"secFunImpl": "Digital signature generatio n"
},
{
"description": "Generat e a digital signatur e with ECDSA",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "EC private key, Messag e, Hash algorith m",
"name": "ECDSA digital signature generatio n",
"outputs": "Signatu re",
"rolesSspAccess": "Crypto Officer - EC private key: W,E",
"secFunImpl": "Digital signature generatio n"
},
{
"description": "Verify a digital signatur e using RSA",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "RSA public key, Messag e, Signatu re, Hash algorith m",
"name": "RSA Digital signature verificatio n",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - RSA public key: W,E",
"secFunImpl": "Digital signature verificatio n"
},
{
"description": "Verify a digital signatur e using RSA",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "EC public key, Messag e, Signatu re, Hash algorith m",
"name": "ECDSA digital signature verificatio n",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - EC public key: W,E",
"secFunImpl": "Digital signature verificatio n"
},
{
"description": "Generat e an RSA key pair",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Key length",
"name": "RSA key pair generatio n",
"outputs": "RSA private key, RSA public key",
"rolesSspAccess": "Crypto Officer - RSA private key: G,R - RSA public",
"secFunImpl": "Key pair generatio n"
},
{
"description": "Generat e an EC key pair",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Key length",
"name": "ECDSA key pair generatio n",
"outputs": "EC private key, EC public key",
"rolesSspAccess": "G,E,Z Crypto Officer - EC private key: G,R - EC public key: G,R - Intermed iate key generati on value: G,E,Z",
"secFunImpl": "Key pair generatio n"
},
{
"description": "Generat e an DH key pair",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "Group",
"name": "Safe primes key pair generatio n",
"outputs": "DH private key, DH public key",
"rolesSspAccess": "Crypto Officer - DH private key: G,R - DH public key: G,R - Intermed iate key generati on value: G,E,Z",
"secFunImpl": "Key pair generatio n"
},
{
"description": "Verify an EC key pair",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "EC private key, EC public key",
"name": "ECDSA key pair verificatio n",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - EC private key: E,W - EC public key: E,W",
"secFunImpl": "Key pair verificatio n"
},
{
"description": "Verify a DH key pair",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "DH private key, DH public key",
"name": "Safe prime key pair verificatio n",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - DH private key: E,W - DH public key: E,W",
"secFunImpl": "Key pair verificatio n"
},
{
"description": "Return the name and version informat ion",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "None",
"name": "Show version",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module status",
"indicator": "UBUNTU_OSSL_PROV_FIPS_PARAM_UNA PPROVED_USAGE returns 0",
"inputs": "None",
"name": "Show status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and integrity test",
"indicator": "None",
"inputs": "None",
"name": "Self-test",
"outputs": "Pass or Fail of self- tests",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize any SSP",
"indicator": "None",
"inputs": "An SSP",
"name": "Zeroizatio n",
"outputs": "None",
"rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - KMAC key: Z - Key- derivatio n key: Z - Shared secret: Z - Passwor d: Z - PBKDF Derived key: Z - KBKDF Derived key: Z - ANS X9.42 Derived key: Z - ANS X9.63 Derived key: Z - HKDF Derived key: Z -",
"secFunImpl": "None"
},
{
"description": "Descript",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "ion",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "OneStep KDA Derived key: Z - TLS Derived key: Z - Entropy input: Z - DRBG Internal state (V, Key): Z - DRBG Internal state (V, C): Z - DRBG seed: Z - DH private key: Z - DH public key: Z - EC private key: Z - EC public key: Z - RSA private key: Z - RSA public key: Z - Intermed iate key generati on value: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA-1 (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A3964)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "32-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A3972)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "32-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A3979)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "32-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3961)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3974)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3975)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3976)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3988)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3989)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3990)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3994)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3995)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3996)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3997)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3998)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3999)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4000)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4001)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4002)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3961)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3974)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3975)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3976)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3988)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3989)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3990)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3994)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3995)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3996)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3997)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3998)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3999)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4000)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4001)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4002)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3958)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3959)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3960)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3971)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3973)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3978)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3980)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3981)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3982)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3984)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3985)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3986)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3987)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 256-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800- 108 (A3991)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256 in counter mode",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A3965)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A3969)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3964)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3972)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3979)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A3971)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A3978)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A3984)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A3985)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A3986)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A3987)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF (A3969)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.3 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3964)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3972)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3979)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288- bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3970)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 with derivation function and prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3970)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A3992)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A3968)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A3964)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A3972)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A3979)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA2-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3964)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3966)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3967)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3972)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3979)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3962)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3964)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3966)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3967)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3972)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3977)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3979)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3983)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A3993)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4003)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4004)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4005)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Curves P-224, B-233 with SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A3992)",
"condition": "Key pair generation",
"details": "Public key re- computation and comparison with the existing public key per SP800-56Arev3, section 5.6.2.1.4",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A3962)",
"condition": "Key pair generation",
"details": "Generation of an RSA key pair",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A3977)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A3983)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A3993)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4003)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4004)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4005)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A3962)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A3966)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A3977)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A3983)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A3993)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4003)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4004)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4005)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure CAST failure PCT failure",
"description": "The module immediately stops functioning",
"indicator": "Module will not load; Module is aborted for PCT failure",
"name": "Error",
"recoveryMethod": "Re-initialization of the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested",
"name": "Non-approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM (external IV)",
"use": "Encryption"
},
{
"name": "DSA",
"use": "Signature generation"
},
{
"name": "DSA",
"use": "Signature verification"
},
{
"name": "DSA",
"use": "Key pair generation"
},
{
"name": "DSA",
"use": "Key pair verification"
},
{
"name": "ECDSA with curve P-192",
"use": "Key pair generation"
},
{
"name": "RSA and ECDSA (pre-hashed message)",
"use": "Signature generation (pre-hashed message)"
},
{
"name": "RSA and ECDSA (pre-hashed message)",
"use": "Signature verification (pre-hashed message)"
},
{
"name": "RSA X9.31",
"use": "Signature generation"
},
{
"name": "RSA X9.31",
"use": "Signature verification"
},
{
"name": "RSA primitive",
"use": "Asymmetric encryption"
},
{
"name": "RSA primitive",
"use": "Asymmetric decryption"
},
{
"name": "RSA-OAEP",
"use": "Asymmetric encryption"
},
{
"name": "RSA-OAEP",
"use": "Asymmetric decryption"
},
{
"name": "RSASVE",
"use": "Secret value encapsulation"
},
{
"name": "RSASVE",
"use": "Secret value decapsulation"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM (external IV)",
"description": "AES GCM (external IV)",
"name": "Encryption",
"role": "CO"
},
{
"alg_accessed": "DSA",
"description": "Key pair generation; Key pair verification; Signature generation; Signature verification",
"name": "DSA",
"role": "CO"
},
{
"alg_accessed": "ECDSA with curve P- 192",
"description": "Key pair generation",
"name": "ECDSA with curve P- 192",
"role": "CO"
},
{
"alg_accessed": "RSA and ECDSA (pre- hashed message)",
"description": "Signature generation (pre-hashed message); Signature verification (pre-hashed message)",
"name": "RSA and ECDSA (pre- hashed message)",
"role": "CO"
},
{
"alg_accessed": "RSA X9.31",
"description": "Signature generation; Signature verification",
"name": "RSA X9.31",
"role": "CO"
},
{
"alg_accessed": "RSA primitive",
"description": "Asymmetric encryption; Asymmetric decryption",
"name": "RSA primitive",
"role": "CO"
},
{
"alg_accessed": "RSA-OAEP",
"description": "Asymmetric encryption; Asymmetric decryption",
"name": "RSA-OAEP",
"role": "CO"
},
{
"alg_accessed": "RSASVE",
"description": "Secret value encapsulation; Secret value decapsulation",
"name": "RSASVE",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters",
"logicalInterface": "Data Input",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs."
},
{
"data": "API output parameters",
"logicalInterface": "Data Output",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs."
},
{
"data": "API function calls",
"logicalInterface": "Control Input",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs."
},
{
"data": "API return codes, error queue",
"logicalInterface": "Status Output",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs."
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [],
"found": false,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2- 256 (A3962)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A3963)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A3977)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A3983)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A3993)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4003)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4004)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4005)",
"details": "Integrity test for fips.so",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle: EVP_CIPHER_CTX_free() clears and frees symmetric cipher context, EVP_MAC_CTX_free() clears and frees MAC context, EVP_KDF_CTX_free() clears and frees KDF context, EVP_RAND_CTX_free() clears and frees DRBG context, EVP_PKEY_free() clears and frees asymetric key pair structures",
"method": "Free cipher handle",
"operatorId": "By calling the cipher related zeroization API",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded"
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Supermicro SYS-1019P- WTR",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6226",
"version": "3.0.5- 0ubuntu0.1+Fips2.1"
},
{
"hardwarePlatform": "Amazon Web Services (AWS) c6g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "Yes",
"processors": "AWS Graviton2",
"version": "3.0.5- 0ubuntu0.1+Fips2.1"
},
{
"hardwarePlatform": "IBM z15",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "Yes",
"processors": "IBM z15",
"version": "3.0.5- 0ubuntu0.1+Fips2.1"
},
{
"hardwarePlatform": "Supermicro SYS-1019P- WTR",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6226",
"version": "3.0.5- 0ubuntu0.1+Fips2.1"
},
{
"hardwarePlatform": "Amazon Web Services (AWS) c6g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "No",
"processors": "AWS Graviton2",
"version": "3.0.5- 0ubuntu0.1+Fips2.1"
},
{
"hardwarePlatform": "IBM z15",
"hypervisorHostOs": "N/A",
"operatingSystem": "Ubuntu 22.04",
"paa_pai": "No",
"processors": "IBM z15",
"version": "3.0.5- 0ubuntu0.1+Fips2.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric RSA:2048, 3072, 4096-bit keys ECDSA:P-224, P-256, P-384, P-521, B-233, B- 283, B-409, B-571, K-233, K-283, K-409, K-571 elliptic curves Safe Prime Groups:ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP- 8192",
"implName": "N/A",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP800-133rev2, Section 4, example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 6
},
"ECDSA": {
"ECDSA": 165
}
},
"FF": {
"DH": {
"DH": 31,
"DHE": 1,
"Diffie-Hellman": 7
},
"DSA": {
"DSA": 6
}
},
"RSA": {
"RSA-OAEP": 4
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 18
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 112
}
},
"crypto_protocol": {
"IKE": {
"IKE": 6
},
"SSH": {
"SSH": 42
},
"TLS": {
"TLS": {
"TLS": 23,
"TLS 1.2": 5,
"TLS 1.3": 5,
"TLS v1.2": 36,
"TLS v1.3": 6
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 2
},
"KEX": {
"Key Exchange": 2
},
"MAC": {
"MAC": 17
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 3,
"B-233": 37,
"B-283": 7,
"B-409": 12,
"B-571": 13,
"K-163": 4,
"K-233": 12,
"K-283": 12,
"K-409": 12,
"K-571": 14,
"P-192": 24,
"P-224": 140,
"P-256": 112,
"P-384": 98,
"P-521": 98,
"curve P-192": 2
}
},
"eval_facility": {
"atsec": {
"atsec": 107
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 14,
"AES-128": 8,
"AES-192": 7,
"AES-256": 9,
"DRBG 2": 1,
"HMAC-SHA-1": 24,
"PKCS 1": 14,
"PKCS#1": 44,
"SHA-1": 68,
"SHA-3": 1,
"SHA2-224": 42,
"SHA2-256": 143,
"SHA2-384": 59,
"SHA2-512": 77,
"SHA3- 256": 1,
"SHA3-224": 17,
"SHA3-256": 23,
"SHA3-384": 18,
"SHA3-512": 19
}
},
"fips_security_level": {
"Level": {
"Level 1": 1
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 41,
"PBKDF2": 5
},
"SHA": {
"SHA1": {
"SHA-1": 68
},
"SHA3": {
"SHA-3": 1,
"SHA3-224": 17,
"SHA3-256": 23,
"SHA3-384": 18,
"SHA3-512": 19
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 41
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {
"FI": {
"Fault Induction": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 117,
"FIPS 180-4": 51,
"FIPS 186-4": 68,
"FIPS 186-5": 1,
"FIPS 1864": 2,
"FIPS 197": 1,
"FIPS 198-1": 63,
"FIPS 202": 19,
"FIPS PUB 140-3": 2,
"FIPS186-4": 235
},
"NIST": {
"SP 800-108": 1,
"SP 800-132": 17,
"SP 800-135": 31,
"SP 800-140B": 1,
"SP 800-185": 6,
"SP 800-38A": 78,
"SP 800-38B": 8,
"SP 800-38C": 8,
"SP 800-38D": 33,
"SP 800-38E": 9,
"SP 800-38F": 16,
"SP 800-56A": 11,
"SP 800-56C": 2,
"SP 800-90A": 3,
"SP 800-90B": 1
},
"PKCS": {
"PKCS 1": 14,
"PKCS#1": 22
},
"RFC": {
"RFC 3526": 3,
"RFC 4253": 1,
"RFC 5288": 3,
"RFC 6668": 1,
"RFC 7919": 3,
"RFC 8446": 2,
"RFC7627": 28,
"RFC8446": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 47,
"AES-": 4,
"AES-128": 8,
"AES-192": 7,
"AES-256": 9
},
"CAST": {
"CAST": 318
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 20,
"KMAC": 10
}
}
},
"tee_name": {
"AMD": {
"PSP": 3
},
"IBM": {
"SSC": 3
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KDA HKDF Sp800-56Cr1A3969",
"HMAC-SHA3-256A3979",
"AES-CBCA3982",
"Counter DRBGA3970",
"HMAC-SHA3-384A3979",
"AES-OFBA3982",
"Safe Primes Key VerificationA3992",
"AES-CTRA3982",
"AES-XTS Testing Revision 2.0A3982",
"SHA2-512/224A4005",
"SHAKE-128A3979",
"KDF SP800-108A3991",
"PBKDFA4005",
"KDF ANS 9.63A4005",
"RSA SigGen (FIPS186-4)A4005",
"HMAC DRBGA3970",
"Safe Primes Key GenerationA3992",
"AES-ECBA3987",
"KMAC-256A3979",
"HMAC-SHA2-384A4005",
"SHA2-512A4005",
"RSA KeyGen (FIPS186-4)A4005",
"AES-CBC-CS1A3982",
"KDA OneStep SP800-56Cr2A3965",
"HMAC-SHA2-512A4005",
"AES-CBC-CS3A3982",
"KDF ANS 9.42A4005",
"AES-GCMA4002",
"KDF SSHA3987",
"SHA2-384A4005",
"ECDSA KeyGen (FIPS186-4)A4005",
"HMAC-SHA2-256A4005",
"HMAC-SHA-1A4005",
"KAS-FFC-SSC Sp800-56Ar3A3992",
"HMAC-SHA3-224A3979",
"SHAKE-256A3979",
"HMAC-SHA2-224A4005",
"AES-CMACA3982",
"AES-CFB1A3982",
"Hash DRBGA3970",
"SHA2-512/256A4005",
"SHA3-384A3979",
"SHA2-256A4005",
"AES-CFB128A3982",
"ECDSA SigVer (FIPS186-4)A4005",
"SHA3-512A3979",
"AES-KWPA3982",
"ECDSA KeyVer (FIPS186-4)A4005",
"KAS-ECC-SSC Sp800-56Ar3A4005",
"RSA SigVer (FIPS186-4)A4005",
"HMAC-SHA2-512/224A4005",
"TLS v1.2 KDF RFC7627A4005",
"SHA3-256A3979",
"SHA2-224A4005",
"AES-KWA3982",
"HMAC-SHA2-512/256A4005",
"AES-CBC-CS2A3982",
"TLS v1.3 KDFA3969",
"SHA3-224A3979",
"AES-CFB8A3982",
"SHA-1A4005",
"KMAC-128A3979",
"AES-GMACA4002",
"HMAC-SHA3-512A3979",
"ECDSA SigGen (FIPS186-4)A4005",
"AES-CCMA3982"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3996",
"#A3964",
"#A3972",
"#A3989",
"#A3970",
"#A3995",
"#A3975",
"#A4001",
"#A3961",
"#A3962",
"#A3965",
"#A3976",
"#A3958",
"#A3980",
"#A4005",
"#A3978",
"#A3967",
"#A3994",
"#A3977",
"#A3997",
"#A3987",
"#A3960",
"#A3968",
"#A3988",
"#A3963",
"#A3992",
"#A3971",
"#A3985",
"#A3973",
"#A3986",
"#A3969",
"#A3991",
"#A3993",
"#A3999",
"#A4002",
"#A4000",
"#A3974",
"#A3990",
"#A3979",
"#A3981",
"#A4003",
"#A3966",
"#A3983",
"#A3959",
"#A3998",
"#A4004",
"#A3982",
"#A3984"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/CreationDate": "D:20240905220705+00\u002700\u0027",
"/Creator": "Microsoft Word",
"/ModDate": "D:20240905220705+00\u002700\u0027",
"pdf_file_size_bytes": 1362809,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
"https://www.ietf.org/rfc/rfc7919.txt",
"http://www.ietf.org/rfc/rfc3447.txt",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://www.ietf.org/rfc/rfc5288.txt",
"https://webstore.ansi.org/standards/ascx9/ansix9422001",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"http://www.canonical.com/",
"https://www.ietf.org/rfc/rfc3526.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://webstore.ansi.org/standards/ascx9/ansix9632001",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://www.ietf.org/rfc/rfc8446.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 105
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "6b2b94c291d2aff6099cdc8e00d85654c3d8e5bad6c4c4917df5d820812a39c8",
"source_hash": "dc886b6b29fdb6f4305b569a2fb1c73430d0db47939aa10b7dcae93b08abd49d",
"txt_hash": "ea0c6f57796210b987d6db424c5e271f3647e5105577928baa38165e03ff6987"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2024_011024_0217.pdf",
"date_sunset": "2029-09-10",
"description": "The Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": "3.0.5-0ubuntu0.1+Fips2.1",
"tested_conf": [
"Ubuntu 22.04 on IBM z15 with IBM z15 processor with PAI",
"Ubuntu 22.04 on IBM z15 with IBM z15 processor without PAI",
"Ubuntu 22.04 running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 processor with PAA",
"Ubuntu 22.04 running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 processor without PAA",
"Ubuntu 22.04 running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 processor with PAA",
"Ubuntu 22.04 running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 processor without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-09-11",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Canonical Ltd.",
"vendor_url": "http://www.canonical.com"
}
}