Cryptographic Module for Intel® Platforms' Security Engine Chipset

Certificate #4599

Webpage information ?

Status active
Validation dates 13.09.2023
Sunset date 03-03-2026
Standard FIPS 140-2
Security level 1
Type Firmware-Hybrid
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode and installed, initialized and configured as specified in Sections 2.3 and 9.1 of the Security Policy. When entropy is externally loaded, no assurance of the minimum strength of generated keys.
Description The Cryptographic Module for Intel® CSME is a hardware-firmware hybrid module present on Intel® PCH platforms. The module performs crypto functions for CSME applications, including but are not limited to: PTT (Platform Trust Technology), AMT (Active Management Technology), and DAL (Dynamic Application Loader).
Version (Hardware) 3.1
Version (Firmware) 3.0
Tested configurations
  • Intel Ice Point PCH chipset with CSME device firmware version 13.0.0.1084
Vendor Intel Corporation
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy ?

Symmetric Algorithms
AES, AES-256, RC4, DES, TDEA, HMAC, HMAC-SHA-256, HMAC-SHA-512, CMAC
Asymmetric Algorithms
RSAOAEP, ECDSA, ECC, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA1, SHA-224, SHA-384, SHA-512, SHA-256, MD5, PBKDF
Schemes
MAC, Key Agreement
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-384, NIST P-256
Block cipher modes
ECB, CBC, CTR, OFB, GCM

Security level
Level 1, level 1
Side-channel analysis
timing attack, timing attacks

Standards
FIPS 140-2, FIPS PUB 140-2, FIPS 197, FIPS 186-4, FIPS 198-1, FIPS 186-2, FIPS 180-4, FIPS140-2, FIPS180-4, FIPS186-4, FIPS197, FIPS198-1, SP 800-38A, SP 800-38D, SP 800-133, SP 800-56B, SP 800-90A, SP 800-108, SP 800-38F, SP 800-56A, PKCS#1

File metadata

Title Microsoft Word - SecurityPolicy_v1_0
Keywords CTPClassification=CTP_NT
Author Hedy
Creation date D:20230907094540-07'00'
Modification date D:20230907094555-07'00'
Pages 27
Creator Acrobat PDFMaker 23 for Word
Producer Adobe PDF Library 23.3.60

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

  • 01.11.2023 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2023_101023_1100 signed (2).pdf.
  • 18.09.2023 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4599,
  "dgst": "5779cc39462de115",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "DRBG#C849",
        "CVL#C849",
        "AES#C849",
        "ECDSA#C849",
        "KBKDF#C849",
        "HMAC#C849",
        "RSA#C849",
        "SHS#C849"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.0",
        "3.1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 5
          },
          "ECDSA": {
            "ECDSA": 23
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 6
          },
          "DSA": {
            "DSA": 1
          }
        },
        "RSA": {
          "RSAOAEP": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 5
        },
        "OFB": {
          "OFB": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 4
        },
        "MAC": {
          "MAC": 4
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "NIST P-256": 2,
          "P-256": 6,
          "P-384": 4
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#10": 1,
          "#2": 1,
          "#3": 5,
          "#4": 2,
          "#6": 1,
          "#7": 1,
          "#8": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128": 1,
          "AES-256": 1,
          "HMAC SHA-1": 1,
          "HMAC SHA-224": 1,
          "HMAC SHA-256": 1,
          "HMAC SHA-384": 1,
          "HMAC SHA-512": 1,
          "HMAC- SHA-256": 1,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-512": 4,
          "PKCS#1": 14,
          "SHA-1": 9,
          "SHA-224": 11,
          "SHA-256": 15,
          "SHA-384": 11,
          "SHA-512": 11,
          "SHA1": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 5,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 4
          }
        },
        "PBKDF": {
          "PBKDF": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 9,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-224": 11,
            "SHA-256": 15,
            "SHA-384": 11,
            "SHA-512": 11
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 28
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "timing attack": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 36,
          "FIPS 180-4": 1,
          "FIPS 186-2": 1,
          "FIPS 186-4": 9,
          "FIPS 197": 1,
          "FIPS 198-1": 1,
          "FIPS PUB 140-2": 2,
          "FIPS140-2": 1,
          "FIPS180-4": 1,
          "FIPS186-4": 1,
          "FIPS197": 1,
          "FIPS198-1": 1
        },
        "NIST": {
          "SP 800-108": 3,
          "SP 800-133": 1,
          "SP 800-38A": 1,
          "SP 800-38D": 1,
          "SP 800-38F": 1,
          "SP 800-56A": 2,
          "SP 800-56B": 4,
          "SP 800-90A": 3
        },
        "PKCS": {
          "PKCS#1": 7
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 21,
            "AES-256": 1
          },
          "RC": {
            "RC4": 3
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 35,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-512": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Hedy",
      "/CTPClassification": "CTP_NT",
      "/CTP_BU": "NA",
      "/CTP_IDSID": "NA",
      "/CTP_TimeStamp": "2019-07-31 22:49:56Z",
      "/CTP_WWID": "NA",
      "/Comments": "",
      "/Company": "Intel Corporation",
      "/CreationDate": "D:20230907094540-07\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 23 for Word",
      "/Keywords": "CTPClassification=CTP_NT",
      "/ModDate": "D:20230907094555-07\u002700\u0027",
      "/Producer": "Adobe PDF Library 23.3.60",
      "/SourceModified": "D:20230907164520",
      "/Subject": "",
      "/Title": "Microsoft Word - SecurityPolicy_v1_0",
      "/TitusGUID": "c97f3e51-567e-4959-898b-d31f4068d4f5",
      "pdf_file_size_bytes": 531333,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 27
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "55550222fa8cf373fe792db6930c0f98653acdb7ce12741903a6f9ac05f5aad0",
    "policy_txt_hash": "ab3553474a2f68f45c5bef8614c713e1f659875bbfcec0f31acc88b19275cab8"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode and installed, initialized and configured as specified in Sections 2.3 and 9.1 of the Security Policy. When entropy is externally loaded, no assurance of the minimum strength of generated keys.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2023_101023_1100 signed (2).pdf",
    "date_sunset": "2026-03-03",
    "description": "The Cryptographic Module for Intel\u00ae CSME is a hardware-firmware hybrid module present on Intel\u00ae PCH platforms. The module performs crypto functions for CSME applications, including but are not limited to: PTT (Platform Trust Technology), AMT (Active Management Technology), and DAL (Dynamic Application Loader).",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": null,
    "fw_versions": "3.0",
    "historical_reason": null,
    "hw_versions": "3.1",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Cryptographic Module for Intel\u00ae Platforms\u0027 Security Engine Chipset",
    "module_type": "Firmware-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "active",
    "sw_versions": null,
    "tested_conf": [
      "Intel Ice Point PCH chipset with CSME device firmware version 13.0.0.1084"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-09-13",
        "lab": "UL VERIFICATION SERVICES INC",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Intel Corporation",
    "vendor_url": "http://www.intel.com"
  }
}