This page was not yet optimized for use on mobile devices.

VMware Cryptographic Module

Certificate details

Certificate ID	#2122
Status	historical
Historical reason	RNG SP800-131A Revision 1 Transition
Validation dates	04.04.2014
Standard	FIPS 140-2
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When installed, initialized and configured as specified in the Security Policy Section 3 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys.
Exceptions	Physical Security: N/A Mitigation of Other Attacks: N/A
Description	The VMware Cryptographic Module is a software library providing FIPS 140-2 -approved cryptographic algorithms and services for protecting data-in-transit and data-at-rest on VMware products and platforms.
Tested configurations	VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server VMware vCloud Networking and Security 5.5.0a vShield Manager OS (VMware vCloud Networking and Security 5.5.0a App Firewall OS) on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server (single-user mode)
Vendor	VMware, Inc. http://www.vmware.com
Lab	CGI Information Systems & Management Consultants Inc
Algorithms	AES#2701 DSA#822 HMAC#1682 RNG#1255 RSA#1399 SHS#2268 Triple-DES#1620
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, DES, Triple-DES, TDEA, HMAC, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-512

Asymmetric Algorithms

ECDSA, DH, Diffie-Hellman, DSA

Hash functions

SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-2

Schemes

Key exchange

Protocols

SSH

Randomness

PRNG, RNG

Block cipher modes

ECB, CBC, CFB, OFB

Security level

Level 1

Standards

FIPS 140-2, FIPS 1402, PKCS 21, PKCS 23

Title	1B - vShield SSH Crypto Module FIPS 140-2 Security Policy
Author	jschultz
Creation date	D:20140324153222-04'00'
Modification date	D:20140324153222-04'00'
Pages	21
Creator	PDFCreator Version 1.7.2
Producer	GPL Ghostscript 9.10

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

06.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC-SHA-512 1682': 2, 'SHA-512 2268': 1}, '__update__': {'SHA-512': 1}, '__delete__': ['HMAC-SHA-512']}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 6}}}}}}} data.
05.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC-SHA-512': 2}, '__update__': {'SHA-512': 2}, '__delete__': ['HMAC-SHA-512 1682', 'SHA-512 2268']}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 7}}}}}}} data.
24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC-SHA-512 1682': 2, 'SHA-512 2268': 1}, '__update__': {'SHA-512': 1}, '__delete__': ['HMAC-SHA-512']}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 6}}}}}}} data.

The br1_deviations property was set to 45.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 3}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC-SHA-512': 2, 'SHA-2 1': 1}, '__update__': {'SHA-512': 2}, '__delete__': ['HMAC-SHA-512 1682', 'SHA-21', 'SHA-512 2268']}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 7}}}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 22}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['HMAC#1682', 'SHS#2268', 'RNG#1255', 'DSA#822', 'Triple-DES#1620', 'AES#2701', 'RSA#1399']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#2268', '#2701', '#1399', '#1255', '#822', '#1620', '#1682']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 1}, '__delete__': ['Level 7']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC 5': 2, 'SHA 4': 1, 'SHA-21': 1, 'SHS 14': 1, 'RSA 7': 1, 'PKCS 21': 2, 'PKCS 23': 2, 'AES 2': 1, 'DES 3': 1, 'DSA 6': 1}, '__delete__': ['HMAC5', 'SHA4', 'SHA-2', 'SHS14', 'RSA7', 'PKCS21', 'PKCS23', 'AES2', 'DES3', 'DSA6']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 11}}}}, 'DES': {'__update__': {'DES': {'__update__': {'DES': 3}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 9}}}}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'DH': 8}}}}}}, 'randomness': {'__update__': {'RNG': {'__update__': {'RNG': 7}}}}, 'standard_id': {'__update__': {'FIPS': {'__insert__': {'FIPS 1402': 1}, '__update__': {'FIPS 140-2': 16}}, 'PKCS': {'__insert__': {'PKCS 21': 1, 'PKCS 23': 1}, '__delete__': ['PKCS21', 'PKCS23']}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#2268', '#2701', '#1399', '#1255', '#822', '#1620', '#1682']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '434c5c6fdf12c29830389a38b9b9dde2e69a178f9accee828e77563f0b8de544', 'json_hash': 'ec4121825d12d97e286672df70c0d6a7c144246f13816a12a06bf7c42be3a529'} data.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
09.02.2023

The certificate data changed.
Certificate changed

The cert_id was updated.

The new value is 2122.

The web extraction data was updated.

The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2014-04-04', 'validation_type': 'Initial', 'lab': 'CGI Information Systems & Management Consultants Inc'}], 'vendor_url': 'http://www.vmware.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0040.pdf', 'hw_versions': None, 'fw_versions': None}.

The standard property was set to FIPS 140-2.

The status property was set to historical.

The level property was set to 1.

The embodiment property was set to Multi-Chip Stand Alone.

The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].

The PDF extraction data was updated.

The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 1078137, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 21, '/Producer': 'GPL Ghostscript 9.10', '/CreationDate': "D:20140324153222-04'00'", '/ModDate': "D:20140324153222-04'00'", '/Author': 'jschultz', '/Creator': 'PDFCreator Version 1.7.2', '/Keywords': '', '/Subject': '', '/Title': '1B - vShield SSH Crypto Module FIPS 140-2 Security Policy', 'pdf_hyperlinks': {'_type': 'Set', 'elements': []}}}.

The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].

The computed heuristics were updated.

The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': []}, 'module_prunned_references': {'_type': 'Set', 'elements': []}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}.

The algorithms property was set to {'_type': 'Set', 'elements': ['HMAC#1682', 'SHS#2268', 'RNG#1255', 'DSA#822', 'Triple-DES#1620', 'AES#2701', 'RSA#1399']}.

The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].

The state was updated.

The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '70aaf589641912942a93727c7cfe61853fe7c04ce913b66e42b8882a92ccbc78', 'policy_txt_hash': 'ddfa9d12a625c62a2405328fbf062fc1ef1282d59b467ed4ea9a51e218533ed3'}.

The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
05.11.2022

The certificate data changed.
Certificate changed

The web extraction data was updated.

The algorithms property was set to {'_type': 'Set', 'elements': []}.

The computed heuristics were updated.

The algorithms property was set to {'_type': 'Set', 'elements': []}.
25.10.2022

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-1': 6, 'SHA-224': 2, 'SHA-256': 2}, '__delete__': ['SHA-512 1682', 'RSA 1024', 'AES128', 'AES 256', 'DES 112', 'DSA 160', 'DSA 1024']}}}, 'vendor': {}, 'eval_facility': {}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 10}, '__delete__': ['AES128']}}}, 'DES': {'__update__': {'DES': {'__update__': {'DES': 2}, '__delete__': ['DEA']}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 8}}}}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'DH': 7, 'Diffie-Hellman': 6}}, 'DSA': {'__update__': {'DSA': 22}}}}}, '__delete__': ['RSA']}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 6}}, 'SHA2': {'__update__': {'SHA-224': 2, 'SHA-256': 2, 'SHA-512': 2, 'SHA-2': 1}}}, '__delete__': ['SHA3']}}}, 'crypto_scheme': {'__delete__': ['MAC', 'KA']}, 'crypto_protocol': {'__delete__': ['VPN']}, 'randomness': {'__update__': {'PRNG': {'__update__': {'PRNG': 12}}, 'RNG': {'__update__': {'RNG': 6}}}}, 'cipher_mode': {'__update__': {'ECB': {'__update__': {'ECB': 3}}, 'CBC': {'__update__': {'CBC': 3}}, 'CFB': {'__update__': {'CFB': 2}}, 'OFB': {'__update__': {'OFB': 3}}}}, 'tee_name': {}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 18}, '__delete__': ['FIPS 140']}}}} data.

The state was updated.

The tables_done property was set to True.
08.10.2022

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'crypto_protocol': {'__insert__': {'VPN': {'VPN': 1}}}} data.
17.07.2022

The certificate data changed.
Certificate changed

The web extraction data was updated.

This property was added with value {'_type': 'sec_certs.sample.fips.FIPSCertificate.WebData', 'module_name': 'VMware Cryptographic Module', 'standard': 'FIPS140-2', 'status': 'Historical', 'date_sunset': None, 'date_validation': ['2014-04-04'], 'level': '1', 'caveat': 'When installed, initialized and configured as specified in the Security Policy Section 3 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys.', 'exceptions': ['Physical Security: N/A', 'Mitigation of Other Attacks: N/A'], 'module_type': 'Software', 'embodiment': 'Multi Chip Standalone', 'algorithms': {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2268', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1255', 'algorithm_type': 'RNG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2701', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1620', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#822', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1399', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1682', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}]}, 'tested_conf': ['VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server', 'VMware vCloud Networking and Security 5.5.0a vShield Manager OS (VMware vCloud Networking and Security 5.5.0a App Firewall OS) on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server (single-user mode)'], 'description': 'The VMware Cryptographic Module is a software library providing FIPS 140-2 -approved cryptographic algorithms and services for protecting data-in-transit and data-at-rest on VMware products and platforms.', 'mentioned_certs': {}, 'vendor': 'VMware, Inc.', 'vendor_www': 'http://www.vmware.com', 'lab': None, 'lab_nvlap': None, 'historical_reason': 'RNG SP800-131A Revision 1 Transition', 'security_policy_www': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp2122.pdf', 'certificate_www': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0040.pdf', 'hw_version': None, 'fw_version': None, 'revoked_reason': None, 'revoked_link': None, 'sw_versions': '1.0', 'product_url': None}.

The PDF extraction data was updated.

This property was added with value {'_type': 'sec_certs.sample.fips.FIPSCertificate.PdfData', 'cert_id': 2122, 'keywords': {'fips_cert_id': {'Cert': {'#1': 2}}, 'fips_security_level': {'Level': {'Level 1': 4, 'Level 7': 1}}, 'fips_certlike': {'Certlike': {'HMAC5': 2, 'HMAC-SHA-1': 2, 'HMAC-SHA-224': 2, 'HMAC-SHA-256': 2, 'HMAC- SHA-384': 1, 'HMAC-SHA-512 1682': 2, 'HMAC SHA-1': 1, 'SHA4': 1, 'SHA-2': 1, 'SHS14': 1, 'SHA-1': 7, 'SHA-224': 3, 'SHA-256': 3, 'SHA-384': 3, 'SHA-512 2268': 1, 'SHA-512 1682': 1, 'SHA-512': 1, 'RSA7': 1, 'RSA 1024': 2, 'PKCS21': 2, 'PKCS23': 2, 'AES2': 1, 'AES128': 1, 'AES 256': 1, 'DES3': 1, 'DES 112': 1, 'DSA6': 1, 'DSA 160': 1, 'DSA 1024': 1}}, 'vendor': {'STMicroelectronics': {'STM': 2}}, 'eval_facility': {'TTA': {'TTA': 1}}, 'symmetric_crypto': {'AES_competition': {'AES': {'AES': 11, 'AES128': 1}}, 'DES': {'DES': {'DES': 12, 'DEA': 1}, '3DES': {'Triple-DES': 9, 'TDEA': 1}}, 'constructions': {'MAC': {'HMAC': 14, 'HMAC-SHA-224': 1, 'HMAC-SHA-256': 1, 'HMAC-SHA-512': 1}}}, 'asymmetric_crypto': {'RSA': {'RSA 1024': 2}, 'ECC': {'ECDSA': {'ECDSA': 3}}, 'FF': {'DH': {'DH': 8, 'Diffie-Hellman': 7}, 'DSA': {'DSA': 26}}}, 'pq_crypto': {}, 'hash_function': {'SHA': {'SHA1': {'SHA-1': 7}, 'SHA2': {'SHA-224': 3, 'SHA-256': 3, 'SHA-384': 3, 'SHA-512': 3, 'SHA-2': 7}, 'SHA3': {'SHA-3': 3}}}, 'crypto_scheme': {'MAC': {'MAC': 14}, 'KEX': {'Key exchange': 2}, 'KA': {'KA': 14}}, 'crypto_protocol': {'SSH': {'SSH': 14}}, 'randomness': {'PRNG': {'PRNG': 14}, 'RNG': {'RNG': 21}}, 'cipher_mode': {'ECB': {'ECB': 4}, 'CBC': {'CBC': 4}, 'CFB': {'CFB': 8}, 'OFB': {'OFB': 4}}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'device_model': {}, 'tee_name': {'IBM': {'SE': 15}}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'FIPS': {'FIPS 140-2': 19, 'FIPS 140': 1}, 'PKCS': {'PKCS21': 1, 'PKCS23': 1}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}, 'algorithms': {'_type': 'Set', 'elements': []}, 'clean_cert_ids': {'#1': 2}, 'st_metadata': {'pdf_file_size_bytes': 1078137, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 21, '/Producer': 'GPL Ghostscript 9.10', '/CreationDate': "D:20140324153222-04'00'", '/ModDate': "D:20140324153222-04'00'", '/Author': 'jschultz', '/Creator': 'PDFCreator Version 1.7.2', '/Keywords': '', '/Subject': '', '/Title': '1B - vShield SSH Crypto Module FIPS 140-2 Security Policy', 'pdf_hyperlinks': {'_type': 'Set', 'elements': []}}}.

The _type was updated.

The new value is sec_certs.sample.fips.FIPSCertificate.

The computed heuristics were updated.

The following values were inserted: {'clean_cert_ids': {}}.

The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.

The keywords property was set to {}.

The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2268', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1255', 'algorithm_type': 'RNG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2701', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1620', 'algorithm_type': 'Triple-DES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#822', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1399', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1682', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}]}.

The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.

The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.

The state was updated.

The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.

The following properties were deleted: ['fragment_path'].

The web_scan was updated.

This property was removed.

The pdf_scan was updated.

This property was removed.
14.06.2022

The certificate data changed.
Certificate changed

The pdf_scan was updated.

The keywords property was updated, with the {'rules_cert_id': {}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS 140-2': {'__update__': {'count': 1}}}}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'CFB': {'__update__': {'CFB': {'__update__': {'count': 1}}}}, 'OFB': {'__update__': {'OFB': {'__update__': {'count': 1}}}}}}} data.

The computed heuristics were updated.

The keywords property was updated, with the {'rules_cert_id': {}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS 140-2': {'__update__': {'count': 1}}}}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'CFB': {'__update__': {'CFB': {'__update__': {'count': 1}}}}, 'OFB': {'__update__': {'OFB': {'__update__': {'count': 1}}}}}}} data.
08.03.2022

The certificate data changed.
Certificate changed

The web_scan was updated.

The following properties were deleted: ['connections'].

The pdf_scan was updated.

The following properties were deleted: ['connections'].

The computed heuristics were updated.

The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}}.

The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
18.02.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The extracted_versions property was set to {'_type': 'Set', 'elements': ['-']}.
02.02.2022

The certificate data changed.
Certificate changed

The web_scan was updated.

The module_type property was set to Software.
30.01.2022

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2122,
  "dgst": "589f5ed0ac1c85df",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#2268",
        "HMAC#1682",
        "RSA#1399",
        "RNG#1255",
        "#2701",
        "#1620",
        "DSA#822",
        "AES#2701",
        "SHS#2268",
        "#1255",
        "#822",
        "#1682",
        "#1399",
        "Triple-DES#1620"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 3
          }
        },
        "FF": {
          "DH": {
            "DH": 8,
            "Diffie-Hellman": 6
          },
          "DSA": {
            "DSA": 22
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CFB": {
          "CFB": 2
        },
        "ECB": {
          "ECB": 3
        },
        "OFB": {
          "OFB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 14
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key exchange": 2
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 2": 1,
          "DES 3": 1,
          "DSA 6": 1,
          "HMAC 5": 2,
          "HMAC SHA-1": 1,
          "HMAC- SHA-384": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-224": 2,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-512 1682": 2,
          "PKCS 21": 2,
          "PKCS 23": 2,
          "RSA 7": 1,
          "SHA 4": 1,
          "SHA-1": 6,
          "SHA-2 1": 1,
          "SHA-224": 2,
          "SHA-256": 2,
          "SHA-384": 3,
          "SHA-512": 1,
          "SHA-512 2268": 1,
          "SHS 14": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-224": 2,
            "SHA-256": 2,
            "SHA-384": 3,
            "SHA-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 12
        },
        "RNG": {
          "RNG": 7
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 22,
          "FIPS 1402": 1
        },
        "PKCS": {
          "PKCS 21": 1,
          "PKCS 23": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "Triple-DES": 9
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 9,
            "HMAC-SHA-224": 1,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#1682",
        "RSA#1399",
        "RNG#1255",
        "DSA#822",
        "AES#2701",
        "SHS#2268",
        "Triple-DES#1620"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#2268",
        "#2701",
        "#1620",
        "#1255",
        "#822",
        "#1682",
        "#1399"
      ]
    },
    "policy_metadata": {
      "/Author": "jschultz",
      "/CreationDate": "D:20140324153222-04\u002700\u0027",
      "/Creator": "PDFCreator Version 1.7.2",
      "/Keywords": "",
      "/ModDate": "D:20140324153222-04\u002700\u0027",
      "/Producer": "GPL Ghostscript 9.10",
      "/Subject": "",
      "/Title": "1B - vShield SSH Crypto Module FIPS 140-2 Security Policy",
      "pdf_file_size_bytes": 1078137,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 21
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "ec4121825d12d97e286672df70c0d6a7c144246f13816a12a06bf7c42be3a529",
      "source_hash": "70aaf589641912942a93727c7cfe61853fe7c04ce913b66e42b8882a92ccbc78",
      "txt_hash": "434c5c6fdf12c29830389a38b9b9dde2e69a178f9accee828e77563f0b8de544"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in the Security Policy Section 3 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0040.pdf",
    "date_sunset": null,
    "description": "The VMware Cryptographic Module is a software library providing FIPS 140-2 -approved cryptographic algorithms and services for protecting data-in-transit and data-at-rest on VMware products and platforms.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "VMware Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "1.0",
    "tested_conf": [
      "VMware vCloud Networking and Security 5.5.0a Edge OS on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server",
      "VMware vCloud Networking and Security 5.5.0a vShield Manager OS (VMware vCloud Networking and Security 5.5.0a App Firewall OS) on VMware vSphere Hypervisor (ESXi) 5.5 running on HP ProLiant DL380e Gen8 Server (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-04-04",
        "lab": "CGI Information Systems \u0026 Management Consultants Inc",
        "validation_type": "Initial"
      }
    ],
    "vendor": "VMware, Inc.",
    "vendor_url": "http://www.vmware.com"
  }
}

Sections

VMware Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

VMware Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data