This page was not yet optimized for use on mobile devices.
Junos® OS Evolved OpenSSL Cryptographic Module
Certificate details
| Certificate ID | #5400 |
|---|---|
| Status | active |
| Validation dates | 20.07.2026 |
| Sunset date | 02-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode with module Junos® OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #5399 operating in the Approved mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Junos® OS Evolved OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality. |
| Vendor | Juniper Networks, Inc. http://www.juniper.net |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 1 certificates, transitively this expands into 2 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES256, AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, KMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DHE, DHHash functions
SHA-1, SHA-224, SHA-256, SHA-2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2, PBKDFSchemes
MAC, Key Exchange, Key AgreementProtocols
SSH, TLS v1.2, TLS v1.3, TLS 1.3, TLS 1.2, TLS, IKERandomness
DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571Block cipher modes
ECB, CBC, CTR, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 1864, FIPS 140, SP 800-135, SP 800-108, SP 800-185, SP 800-132, SP 800-90A, SP 800-133, SP 800-38E, SP 800-56A, SP 800-90B, SP 800-56C, SP 800-38A, SP 800-38B, SP 800-38C, SP 800-38D, SP 800-38F, PKCS 1, PKCS#1, RFC7627, RFC 3526, RFC 7919, RFC 4253, RFC 6668Cross-references
Outgoing- 5399 - active - Junos® OS Evolved Kernel Cryptographic Module
Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5400,
"dgst": "525cfd02ce6f836c",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KDF SSHA4235",
"#A4237",
"KDF SP800-108A4250",
"#A4238",
"SHA2-512/224A4249",
"#A4234",
"SHA3-384A4236",
"#A4236",
"SHA3-256A4236",
"ECDSA KeyGen (FIPS186-4)A4249",
"PBKDFA4249",
"HMAC-SHA2-512A4249",
"KDF ANS 9.63A4249",
"AES-CBCA4231",
"ECDSA SigGen (FIPS186-4)A4249",
"KMAC-128A4236",
"#A4225",
"#A4250",
"AES-CBC-CS1A4231",
"HMAC-SHA3-224A4236",
"Safe Primes Key VerificationA4251",
"RSA SigGen (FIPS186-4)A4249",
"#A4243",
"#A4229",
"HMAC-SHA2-384A4249",
"KDF ANS 9.42A4249",
"RSA KeyGen (FIPS186-4)A4249",
"SHA2-224A4249",
"#A4224",
"AES-GMACA4245",
"#A4246",
"#A4251",
"#A4233",
"AES-CMACA4231",
"AES-CFB8A4231",
"SHAKE-256A4236",
"AES-XTS Testing Revision 2.0A4231",
"AES-CCMA4231",
"#A4248",
"ECDSA KeyVer (FIPS186-4)A4249",
"SHA3-512A4236",
"TLS v1.3 KDFA4228",
"AES-KWA4231",
"AES-ECBA4235",
"AES-OFBA4231",
"Safe Primes Key GenerationA4251",
"TLS v1.2 KDF RFC7627A4249",
"#A4249",
"SHA2-384A4249",
"KDA OneStep SP800-56Cr2A4224",
"#A3599",
"KMAC-256A4236",
"SHA3-224A4236",
"HMAC-SHA3-256A4236",
"HMAC-SHA-1A4249",
"SHA2-512A4249",
"HMAC-SHA3-384A4236",
"SHA-1A4249",
"SHAKE-128A4236",
"#A4245",
"HMAC-SHA3-512A4236",
"SHA2-256A4249",
"#A4247",
"AES-GCMA4245",
"RSA SigVer (FIPS186-4)A4249",
"HMAC DRBGA3605",
"SHA2-512/256A4249",
"#A4244",
"AES-KWPA4231",
"KAS-FFC-SSC Sp800-56Ar3A4251",
"#A4232",
"#A3601",
"ECDSA SigVer (FIPS186-4)A4249",
"#A4226",
"#A4230",
"HMAC-SHA2-256A4249",
"HMAC-SHA2-512/256A4249",
"#A3605",
"#A4231",
"KAS-ECC-SSC Sp800-56Ar3A4249",
"#A4239",
"HMAC-SHA2-512/224A4249",
"#A3604",
"AES-CFB128A4231",
"#A4241",
"HMAC-SHA2-224A4249",
"#A3603",
"#A4228",
"AES-CBC-CS2A4231",
"AES-CTRA4231",
"#A4240",
"AES-CBC-CS3A4231",
"KDA HKDF Sp800-56Cr1A4228",
"#A4227",
"#A4242",
"#A4235",
"#A3600",
"AES-CFB1A4231"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"5399",
"5490",
"5489"
]
},
"directly_referencing": {
"_type": "Set",
"elements": [
"5399"
]
},
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"5399",
"5490",
"5400",
"5489"
]
},
"indirectly_referencing": {
"_type": "Set",
"elements": [
"5399",
"5400"
]
}
},
"module_prunned_references": {
"_type": "Set",
"elements": [
"5399"
]
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"5399",
"5490",
"5489"
]
},
"directly_referencing": {
"_type": "Set",
"elements": [
"5399"
]
},
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"5399",
"5490",
"5400",
"5489"
]
},
"indirectly_referencing": {
"_type": "Set",
"elements": [
"5399",
"5400"
]
}
},
"policy_prunned_references": {
"_type": "Set",
"elements": [
"5399"
]
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 1,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 256 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800- 38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800- 38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4229, A4230, A4231, A4232,",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "",
"cavpCertName": "A4233, A4234, A4235",
"properties": "",
"reference": ""
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4237, A4238, A4239, A4240, A4241, A4242, A4243, A4244, A4245",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96, IV Length: 96, 128 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 0, AAD Length: 64, 96",
"reference": "SP 800- 38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4237, A4238, A4239, A4240, A4241, A4242, A4243, A4244, A4245",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 128, 256, 120, 0",
"reference": "SP 800- 38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800- 38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
"reference": "SP 800- 38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4229, A4230, A4231",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800- 38E"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4225",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4225",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4225",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4226",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4236",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4225",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4226",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4236",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC-SHA- 1",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-224",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-256",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-384",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2-512",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2- 512/224",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA2- 512/256",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA3-224",
"cavpCertName": "A4236",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA3-256",
"cavpCertName": "A4236",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA3-384",
"cavpCertName": "A4236",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC- SHA3-512",
"cavpCertName": "A4236",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A4227",
"properties": "Domain Parameter Generation Methods - B-233, B-283, B- 409, B-571, K-233, K-283, K-409, K-571 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P- 384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A4251",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800-56Cr1",
"cavpCertName": "A4228",
"properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "SP 800- 56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A4224",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA-1 Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8",
"reference": "SP 800- 56C Rev. 2"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A4236",
"properties": "KDF Type - DER Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512 zz Length - zz Length: 112-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256 zz Length - zz Length: 112-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8 Supplemental Information Length - Supplemental Information Length: 0-256 Increment 8 OID - AES-128-KW, AES-192-KW, AES-256-KW",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0-1024 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A4250",
"properties": "KDF Mode - Counter, Feedback MAC Mode - CMAC-AES128, CMAC-AES192, CMAC- AES256, HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2- 256, HMAC-SHA2-384, HMAC-SHA2-512, HMAC-SHA2- 512/224, HMAC-SHA2-512/256, HMAC-SHA3-224, HMAC-SHA3-256, HMAC-SHA3-384, HMAC-SHA3-512 Supported Lengths - Supported Lengths: 112-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - Yes Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4232, A4233, A4234, A4235",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KMAC-128",
"cavpCertName": "A4236",
"properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - Yes Supports eXtendable-Output Functions - No, Yes",
"reference": "SP 800-185"
},
{
"algorithm": "KMAC-256",
"cavpCertName": "A4236",
"properties": "Message Length - Message Length: 0-65536 Increment 8 MAC Length - MAC Length: 32-65536 Increment 8 Key Data Length - Key Data Length: 128-1024 Increment 8 Hex Customization - Yes Supports eXtendable-Output Functions - No, Yes",
"reference": "SP 800-185"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4236",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A4251",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A4251",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2- 512/224",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2- 512/256",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4236",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4236",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4236",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4236",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4236",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4236",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A4246, A4247, A4248, A4249",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A4228",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3599, A3600, A3601, A3603, A3604, A3605",
"properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256",
"reference": "SP 800-90A Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Compute a message digest",
"indicator": "EVP_Digest*() functions will return 0",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message Digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Compute the output of an XOF",
"indicator": "EVP_Digest*() functions will return 0",
"inputs": "Message, output length",
"name": "XOF",
"outputs": "XOF output of desired length",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Encrypt a plaintext",
"indicator": "EVP_Encrypt*() functions will return 0",
"inputs": "Plaintext, AES key, IV",
"name": "Symmetric Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetric Encryption"
},
{
"description": "Encrypt \u0026 authenticat e a plaintext",
"indicator": "AES-CCM: EVP_Encrypt*() functions will return 0; AES- GCM: ERR_peek_last_ error() function returns something different from 0x1C80012C",
"inputs": "Plaintext, AES key, IV",
"name": "Authenticate d Symmetric Encryption",
"outputs": "Ciphertext , MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authenticate d Symmetric Encryption"
},
{
"description": "Decrypt a ciphertext",
"indicator": "EVP_Decrypt*() functions will return 0",
"inputs": "Ciphertext , AES key, IV",
"name": "Symmetric Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetric Decryption Authenticate d Symmetric Decryption"
},
{
"description": "Authenticat e \u0026 decrypt a plaintext",
"indicator": "EVP_Decrypt*() functions will return 0",
"inputs": "Ciphertext , MAC tag, AES key, IV",
"name": "Authenticate d Symmetric Decryption",
"outputs": "Plaintext or Fail",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authenticate d Symmetric Decryption"
},
{
"description": "Perform AES-based key wrapping",
"indicator": "EVP_Encrypt*() functions will return 0",
"inputs": "Key to be wrapped, AES key wrapping key",
"name": "Key Wrapping",
"outputs": "Wrapped key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key Wrapping"
},
{
"description": "Perform AES-based key unwrappin g",
"indicator": "EVP_Decrypt*() functions will return 0",
"inputs": "Key to be unwrappe d, AES key wrapping key",
"name": "Key Unwrapping",
"outputs": "Unwrappe d key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key Unwrapping"
},
{
"description": "Compute a MAC tag",
"indicator": "EVP_MAC*() functions will return 0",
"inputs": "Message, MAC key (AES key, KMAC key, or HMAC key)",
"name": "Message Authenticatio n Code",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E - KMAC key: W,E",
"secFunImpl": "MAC"
},
{
"description": "Derive a key from a key- derivation key",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Key- derivation key",
"name": "KBKDF Key Derivation",
"outputs": "KBKDF derived key",
"rolesSspAccess": "Crypto Officer - Key- derivation key: W,E - KBKDF derived key: G,R",
"secFunImpl": "KBKDF Key Derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "KDA OneStep Key Derivation",
"outputs": "KDA OneStep derived key",
"rolesSspAccess": "Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - KDA",
"secFunImpl": "KDA OneStep Key Derivation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "OneStep derived key: G,R",
"secFunImpl": ""
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "HKDF Key Derivation",
"outputs": "Hkdf derived key",
"rolesSspAccess": "Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - HKDF derived key: G,R",
"secFunImpl": "HKDF Key Derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "ANS X9.42 KDF Key Derivation",
"outputs": "ANS X9.42 KDF derived key",
"rolesSspAccess": "Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - ANS X9.42 derived key:",
"secFunImpl": "ANS 9.42 KDF Key Derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "ANS X9.63 KDF Key Derivation",
"outputs": "ANS X9.63 KDF derived key",
"rolesSspAccess": "Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - ANS X9.63 derived key:",
"secFunImpl": "ANS 9.63 KDF Key Derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "SSH KDF Key Derivation",
"outputs": "SSH KDF derived key",
"rolesSspAccess": "G,R Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - SSH KDF derived key: G,R",
"secFunImpl": "SSH KDF Key Derivation None"
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "TLS 1.2 KDF Key Derivation",
"outputs": "TLS 1.2 KDF derived key",
"rolesSspAccess": "Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - TLS 1.2 KDF derived key: G,R",
"secFunImpl": "TLS 1.2 KDF Key Derivation"
},
{
"description": "Derive a key from a shared secret",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Shared secret",
"name": "TLS 1.3 KDF Key Derivation",
"outputs": "TLS 1.3 KDF derived key",
"rolesSspAccess": "Crypto Officer - DH shared secret: W,E - ECDH shared secret: W,E - TLS 1.3 KDF derived",
"secFunImpl": "TLS 1.3 KDF Key Derivation"
},
{
"description": "Derive a key from a password",
"indicator": "EVP_KDF*() functions will return 0",
"inputs": "Password",
"name": "Password- based Key Derivation",
"outputs": "PBKDF derived key",
"rolesSspAccess": "key: G,R Crypto Officer - Password: W,E - PBKDF2 derived key: G,R",
"secFunImpl": "Password- based Key Derivation"
},
{
"description": "Compute a shared secret",
"indicator": "EVP_PKEY*() functions will return 0",
"inputs": "DH private key, DH public key from peer",
"name": "DH Shared Secret Computation",
"outputs": "DH shared secret",
"rolesSspAccess": "Crypto Officer - DH private key: W,E - DH public key: W,E - DH shared secret: G,R",
"secFunImpl": "DH Shared Secret Computation"
},
{
"description": "Compute a shared secret",
"indicator": "EVP_PKEY*() functions will return 0",
"inputs": "ECDH private key, ECDH public key from peer",
"name": "ECDH Shared Secret Computation",
"outputs": "ECDH shared secret",
"rolesSspAccess": "Crypto Officer - ECDH private key: W,E - ECDH public key: W,E",
"secFunImpl": "ECDH Shared Secret Computation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- ECDH shared secret: G,R",
"secFunImpl": ""
},
{
"description": "Generate a signature",
"indicator": "EVP_DigestSign*() functions will return 0",
"inputs": "Message, Private key (RSA private key or ECDSA private key)",
"name": "Signature Generation",
"outputs": "Signature",
"rolesSspAccess": "Crypto Officer - RSA private key: W,E - ECDSA private key: W,E",
"secFunImpl": "Signature Generation"
},
{
"description": "Verify a signature",
"indicator": "EVP_DigestVerify *() functions will return 0",
"inputs": "Message, Public key (RSA public key or ECDSA public key), Signature",
"name": "Signature Verification",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - RSA public key: W,E - ECDSA public key: W,E",
"secFunImpl": "Signature Verification"
},
{
"description": "Generate a key pair",
"indicator": "EVP_PKEY*() will return 0",
"inputs": "Domain (group, curve, or bitlength)",
"name": "Key Pair Generation",
"outputs": "Key pair (DH, EC, or RSA)",
"rolesSspAccess": "Crypto Officer - DH private key: G,R - DH public key: G,R - ECDH private key: G,R - ECDH public key: G,R - ECDSA private key: G,R - ECDSA public key: G,R - RSA private key: G,R - RSA public key: G,R - Intermediate",
"secFunImpl": "Key Pair Generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Key Generation Value: G,E,Z",
"secFunImpl": ""
},
{
"description": "Verify a key pair",
"indicator": "EVP_PKEY*() will return 0",
"inputs": "Domain (group or curve), Key pair (DH or EC)",
"name": "Key Pair Verification",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer - DH private key: W - DH public key: W - ECDH private key: W - ECDH public key: W - ECDSA private key: W - ECDSA public key: W",
"secFunImpl": "Key Pair Verification"
},
{
"description": "Generate random bytes",
"indicator": "RAND_bytes*() will return 0",
"inputs": "Output length",
"name": "[EVM] Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - [EVM] DRBG entropy input string: W,E,Z - [EVM] HMAC_DRB G seed: G,E,Z - [EVM] HMAC_DRB G internal",
"secFunImpl": "Random Number Generation"
},
{
"description": "Return the name and version information",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Version",
"outputs": "Module Version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module status",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Status",
"outputs": "Module Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and integrity test",
"indicator": "N/A",
"inputs": "N/A",
"name": "Self-test",
"outputs": "Pass or Fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Random Number Generation KDA OneStep Key Derivation Key Pair Generation Key Pair Verification Signature Generation Signature Verification ECDH Shared Secret Computation HKDF Key Derivation TLS 1.3 KDF Key Derivation Symmetric Encryption Symmetric Decryption Authenticate d Symmetric Encryption Authenticate d Symmetric Decryption MAC Key Wrapping Key Unwrapping SSH KDF Key Derivation ANS 9.42 KDF Key"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Derivation Password- based Key Derivation Message Digest ANS 9.63 KDF Key Derivation TLS 1.2 KDF Key Derivation KBKDF Key Derivation DH Shared Secret Computation"
},
{
"description": "Zeroize CPSs",
"indicator": "N/A",
"inputs": "Any SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - KMAC key: Z - Key- derivation key: Z - DH shared secret: Z - ECDH shared secret: Z - Password: Z - KBKDF derived key: Z - KDA OneStep derived key: Z - HKDF derived key: Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- ANS X9.42 derived key: Z - ANS X9.63 derived key: Z - SSH KDF derived key: Z - TLS 1.2 KDF derived key: Z - TLS 1.3 KDF derived key: Z - PBKDF2 derived key: Z - DH private key: Z - DH public key: Z - ECDH private key: Z - ECDH public key: Z - ECDSA private key: Z - ECDSA public key: Z - RSA private key: Z - RSA public key: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA-1 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A4236)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A4236)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4237) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4238) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4239) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4240) - Encryption",
"condition": "Test runs at power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-GCM (A4241) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4242) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4243) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4244) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4245) - Encryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4237) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4238) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4239) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4240) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4241) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4242) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4243) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4244) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4245) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4229) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4230) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4231) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4232) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4233) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4234) - Decryption",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4235) - Decryption",
"condition": "Test runs at power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800- 108 (A4250)",
"condition": "Test runs at power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256, counter mode",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A4224)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A4228)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4236)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1, AES- KW with 128- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1, AES- KW with 128- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1, AES- KW with 128- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1, AES- KW with 128- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1, AES- KW with 128- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4232)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4233)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4234)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4235)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF (A4228)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.3 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4236)",
"condition": "Test runs at power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, 4096",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "iterations, 288-bit salt",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, 4096 iterations, 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, 4096 iterations, 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, 4096 iterations, 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, 4096 iterations, 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4225)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4226)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4236)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224, B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4225)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4226)",
"condition": "Test runs at power-on",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4236)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-224. B-233 with SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4225)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4246)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4247)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4248)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4249)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4246)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4247)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4248)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4249)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A4251) - ffdhe",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A4251) - MODP",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "MODP-2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4227)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4246)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4247)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4248)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4249)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key",
"condition": "Key pair generation",
"details": "Key pair generation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "Generation (A4251)",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A3599)",
"condition": "Test runs at power-on before the integrity test",
"details": "[EVM] SP 800-90A Rev. 1 (Instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-512 without prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3600)",
"condition": "Test runs at power-on before the integrity test",
"details": "[EVM] SP 800-90A Rev. 1 (Instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-512 without prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3601)",
"condition": "Test runs at power-on before the integrity test",
"details": "[EVM] SP 800-90A Rev. 1 (Instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-512 without prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3603)",
"condition": "Test runs at power-on before the integrity test",
"details": "[EVM] SP 800-90A Rev. 1 (Instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-512 without prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3604)",
"condition": "Test runs at power-on before the integrity test",
"details": "[EVM] SP 800-90A Rev. 1 (Instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-512 without prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3605)",
"condition": "Test runs at power-on before the integrity test",
"details": "[EVM] SP 800-90A Rev. 1 (Instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-512 without prediction resistance",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure CAST failure PCT failure",
"description": "General purpose error",
"indicator": "Module will not load; module is aborted (for PCT failure)",
"name": "Error",
"recoveryMethod": "Restart module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Service API returns zero",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested",
"name": "Non-approved mode",
"statusIndicator": "Service API returns non-zero value",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM (external IV)",
"use": "Symmetric Encryption"
},
{
"name": "Algorithm",
"use": "CAVP Cert"
},
{
"name": "",
"use": ""
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM (external IV)",
"description": "Symmetric Encryption",
"name": "AES GCM (external IV)",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters, kernel I/O - network or files on file system, TLS protocol input messages",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters, kernel I/O - network or files on file system, TLS protocol output messages",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API input parameters for control",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, error messages",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256 (A4246)",
"details": "N/A",
"indicator": "Module becomes operational",
"testMethod": "MAC tag verification",
"testProps": "SHA2- 256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4247)",
"details": "N/A",
"indicator": "Module becomes operational",
"testMethod": "MAC tag verification",
"testProps": "SHA2- 256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4248)",
"details": "N/A",
"indicator": "Module becomes operational",
"testMethod": "MAC tag verification",
"testProps": "SHA2- 256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4249)",
"details": "N/A",
"indicator": "Module becomes operational",
"testMethod": "MAC tag verification",
"testProps": "SHA2- 256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle.",
"method": "Wipe and Free memory block allocated",
"operatorId": "By calling the cipher related zeroization API functions: EVP_CIPHER_free for AES keys not used in MACs; EVP_MAC_CTX_free for AES keys used for GMAC or CMAC, HMAC keys, and KMAC keys; EVP_KDF_CTX_free for derived keys, shared secrets, and",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine"
},
{
"description": "",
"method": "",
"operatorId": "passwords; EVP_PKEY_free for asymmetric keys",
"rationale": "indicates that the zeroization procedure succeeded."
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Juniper Networks\u00ae Packet Transport Router Model PTX10001-36MR",
"hypervisorHostOs": "N/A",
"operatingSystem": "Junos OS Evolved version 22.4",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae D- 2163IT",
"version": "3.0.8"
},
{
"hardwarePlatform": "Juniper Networks\u00ae Packet Transport Router Model PTX10001-36MR",
"hypervisorHostOs": "N/A",
"operatingSystem": "Junos OS Evolved version 22.4",
"paa_pai": "No",
"processors": "Intel\u00ae Xeon\u00ae D- 2163IT",
"version": "3.0.8"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric RSA Key Sizes:2048-15360 bits Safe Primes Fields:MODP-2048, ffdhe2048, MODP-3072, ffdhe3072, MODP-4096, ffdhe4096, MODP-6144, ffdhe6144, MODP- 8192, ffdhe8192 ECC Curves:B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P- 521",
"implName": "N/A",
"name": "CKG",
"reference": "SP 800-133 Rev. 2 Section 4 Example 1 with V=0"
},
{
"algoPropList": "PKCS#1v1.5:SHA3-224, SHA3-256, SHA3-384, SHA3-512, 2048-16384 bits with 112-256 bits of security strength PSS:SHA3-224, SHA3-256, SHA3-384, SHA3- 512, 2048-16384 bits with 112-256 bits of security strength IG C.C Compliance:Vendor affirmation claimed under IG C.C Resolution 2c.",
"implName": "N/A",
"name": "RSA Signature Generation with SHA-3",
"reference": "FIPS 186-4"
},
{
"algoPropList": "PKCS#1v1.5:SHA3-224, SHA3-256, SHA3-384, SHA3-512, 1024-16384 bits with 80-256 bits of security strength PSS:SHA3-224, SHA3-256, SHA3-384, SHA3- 512, 1024-16384 bits with 80-256 bits of security strength IG C.C Compliance:Vendor affirmation claimed under IG C.C Resolution 2c.",
"implName": "N/A",
"name": "RSA Signature Verification with SHA-3",
"reference": "FIPS 186-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 57
},
"ECDSA": {
"ECDSA": 76
}
},
"FF": {
"DH": {
"DH": 58,
"DHE": 1,
"Diffie-Hellman": 10
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 7
},
"XTS": {
"XTS": 2
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 85
}
},
"crypto_protocol": {
"IKE": {
"IKE": 3
},
"SSH": {
"SSH": 36
},
"TLS": {
"TLS": {
"TLS": 7,
"TLS 1.2": 19,
"TLS 1.3": 19,
"TLS v1.2": 14,
"TLS v1.3": 5
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 3
},
"KEX": {
"Key Exchange": 1
},
"MAC": {
"MAC": 38
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-233": 22,
"B-283": 9,
"B-409": 8,
"B-571": 9,
"K-233": 9,
"K-283": 9,
"K-409": 9,
"K-571": 9,
"P-224": 56,
"P-256": 28,
"P-384": 26,
"P-521": 26
}
},
"eval_facility": {
"atsec": {
"atsec": 2
}
},
"fips_cert_id": {
"Cert": {
"#5399": 1
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 2,
"AES key 128, 192": 1,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"AES256": 1,
"HMAC-SHA- 1": 2,
"HMAC-SHA-1": 18,
"PKCS 1": 2,
"PKCS#1": 26,
"SHA-1": 31,
"SHA-2": 1,
"SHA-224": 14,
"SHA-256": 5,
"SHA-3": 4,
"SHA2- 256": 8,
"SHA2- 384": 5,
"SHA2- 512": 3,
"SHA2-224": 16,
"SHA2-256": 44,
"SHA2-384": 12,
"SHA2-512": 28,
"SHA3- 512": 7,
"SHA3-224": 9,
"SHA3-256": 15,
"SHA3-384": 13,
"SHA3-512": 8
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 14,
"PBKDF2": 10
},
"SHA": {
"SHA1": {
"SHA-1": 31
},
"SHA2": {
"SHA-2": 1,
"SHA-224": 14,
"SHA-256": 5
},
"SHA3": {
"SHA-3": 4,
"SHA3-224": 9,
"SHA3-256": 15,
"SHA3-384": 13,
"SHA3-512": 8
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 29
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140": 1,
"FIPS 140-3": 90,
"FIPS 180-4": 8,
"FIPS 186-4": 20,
"FIPS 1864": 2,
"FIPS 198-1": 12,
"FIPS 202": 7,
"FIPS PUB 140-3": 2,
"FIPS186-4": 84
},
"NIST": {
"SP 800-108": 3,
"SP 800-132": 7,
"SP 800-133": 5,
"SP 800-135": 9,
"SP 800-185": 3,
"SP 800-38A": 1,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 1,
"SP 800-38E": 2,
"SP 800-38F": 1,
"SP 800-56A": 9,
"SP 800-56C": 2,
"SP 800-90A": 9,
"SP 800-90B": 2
},
"PKCS": {
"PKCS 1": 2,
"PKCS#1": 13
},
"RFC": {
"RFC 3526": 2,
"RFC 4253": 2,
"RFC 6668": 2,
"RFC 7919": 2,
"RFC7627": 9
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 30,
"AES-": 6,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"AES256": 1
},
"CAST": {
"CAST": 234
}
},
"constructions": {
"MAC": {
"CMAC": 3,
"HMAC": 30,
"KMAC": 8
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
},
"IBM": {
"SSC": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KDF SSHA4235",
"KDF SP800-108A4250",
"Safe Primes Key GenerationA4251",
"HMAC-SHA2-384A4249",
"KDF ANS 9.42A4249",
"RSA KeyGen (FIPS186-4)A4249",
"SHA2-224A4249",
"TLS v1.2 KDF RFC7627A4249",
"AES-GMACA4245",
"ECDSA SigVer (FIPS186-4)A4249",
"SHA2-512/224A4249",
"HMAC-SHA2-256A4249",
"HMAC-SHA2-512/256A4249",
"SHA2-384A4249",
"KDA OneStep SP800-56Cr2A4224",
"SHA3-384A4236",
"KMAC-256A4236",
"SHA3-224A4236",
"AES-CMACA4231",
"SHA3-256A4236",
"ECDSA KeyGen (FIPS186-4)A4249",
"PBKDFA4249",
"KAS-ECC-SSC Sp800-56Ar3A4249",
"HMAC-SHA3-256A4236",
"HMAC-SHA2-512A4249",
"HMAC-SHA2-512/224A4249",
"HMAC-SHA-1A4249",
"AES-CFB8A4231",
"AES-CFB128A4231",
"SHA2-512A4249",
"KDF ANS 9.63A4249",
"HMAC-SHA3-384A4236",
"AES-CBCA4231",
"SHA-1A4249",
"SHAKE-128A4236",
"HMAC-SHA3-512A4236",
"HMAC-SHA2-224A4249",
"SHAKE-256A4236",
"AES-XTS Testing Revision 2.0A4231",
"AES-CCMA4231",
"SHA2-256A4249",
"AES-GCMA4245",
"RSA SigVer (FIPS186-4)A4249",
"HMAC DRBGA3605",
"SHA2-512/256A4249",
"AES-CBC-CS2A4231",
"ECDSA KeyVer (FIPS186-4)A4249",
"ECDSA SigGen (FIPS186-4)A4249",
"AES-CTRA4231",
"KMAC-128A4236",
"SHA3-512A4236",
"AES-CBC-CS1A4231",
"TLS v1.3 KDFA4228",
"AES-KWA4231",
"AES-CBC-CS3A4231",
"AES-ECBA4235",
"AES-KWPA4231",
"HMAC-SHA3-224A4236",
"Safe Primes Key VerificationA4251",
"RSA SigGen (FIPS186-4)A4249",
"KDA HKDF Sp800-56Cr1A4228",
"KAS-FFC-SSC Sp800-56Ar3A4251",
"AES-CFB1A4231",
"AES-OFBA4231"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4237",
"#A4238",
"#A4224",
"#A4226",
"#A4246",
"#A4249",
"#A4230",
"#A4234",
"#A4251",
"#A3605",
"#A3599",
"#A4236",
"#A4233",
"#A4231",
"#A4235",
"#A4239",
"#A3604",
"#A4241",
"#A4245",
"#A4248",
"#A4247",
"#A4228",
"#A3600",
"#A4240",
"#A4225",
"#A4250",
"#A4244",
"#A4227",
"#A4242",
"#A4243",
"#A3603",
"#A4232",
"#A3601",
"#A4229"
]
},
"policy_metadata": {
"/CreationDate": "D:20260720152907-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260720152907-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1065614,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://doi.org/10.6028/NIST.SP.800-38B",
"https://www.ietf.org/rfc/rfc4253.txt",
"https://doi.org/10.6028/NIST.SP.800-56Ar3",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://www.ietf.org/rfc/rfc3447.txt",
"https://www.ietf.org/rfc/rfc7919.txt",
"https://doi.org/10.6028/NIST.FIPS.202",
"https://doi.org/10.6028/NIST.SP.800-38F",
"https://doi.org/10.6028/NIST.SP.800-135r1",
"https://doi.org/10.6028/NIST.SP.800-38C",
"https://doi.org/10.6028/NIST.SP.800-38A",
"http://www.juniper.net/",
"https://doi.org/10.6028/NIST.SP.800-38D",
"https://doi.org/10.6028/NIST.SP.800-90B",
"https://doi.org/10.6028/NIST.SP.800-90Ar1",
"https://www.ietf.org/rfc/rfc3526.txt",
"https://webstore.ansi.org/Standards/ASCX9/ANSIX9632011R2017",
"https://doi.org/10.6028/NIST.FIPS.140-3",
"https://doi.org/10.6028/NIST.SP.800-38E",
"https://www.ietf.org/rfc/rfc6668.txt",
"http://www.atsec.com/",
"https://doi.org/10.6028/NIST.SP.800-132",
"https://doi.org/10.6028/NIST.SP.800-133r2",
"https://doi.org/10.6028/NIST.FIPS.186-4",
"https://doi.org/10.6028/NIST.SP.800-108r1-upd1",
"https://webstore.ansi.org/Standards/ASCX9/ANSIX9422003R2013",
"https://doi.org/10.6028/NIST.SP.800-56Cr2",
"https://doi.org/10.6028/NIST.FIPS.180-4",
"https://doi.org/10.6028/NIST.FIPS.198-1",
"https://doi.org/10.6028/NIST.SP.800-185"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 80
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "c98ab5fc7894d1f6ce05cb3c57254e97564a1ea12fac550d7f4fb1ead34c8697",
"source_hash": "31e68cdddd9be1c5ea720aa14a92a9df2a05d5459c1adadd9bddf209ce23ac94",
"txt_hash": "3ab2f0711686cc99f4fcd17eb21ff78ac43af6123104bedc6493db2f80f20597"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode with module Junos\u00ae OS Evolved Kernel Cryptographic Module version 2.0 validated to FIPS 140-3 under Cert. #5399 operating in the Approved mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
"date_sunset": "2029-09-02",
"description": "The Junos\u00ae OS Evolved OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {
"5399": 1
},
"module_name": "Junos\u00ae OS Evolved OpenSSL Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-07-20",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Juniper Networks, Inc.",
"vendor_url": "http://www.juniper.net"
}
}