SAP CommonCryptoLib Crypto Kernel

Certificate details

Certificate ID #3449
Status historical
Historical reason SP 800-56Arev3 transition
Validation dates 02.05.2019
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description SAP CommonCryptoLib Crypto Kernel v8.4.47.0 is a shared library, i.e. it consists of software only. SAP CommonCryptoLib Crypto Kernel provides an API in terms of C++ methods for key management and operation of cryptographic functions.
Tested configurations
  • AIX 5.2 64-bit running on a IBM eServer p5 505 without PAA [2]
  • AIX 6.1 64-bit on IBM PowerVM 2.2 running on a IBM Power 750 Express without PAA [1][2]
  • HP-UX 11.11 64-bit running on a HP Server rp3440 [2]
  • HP-UX 11.23 64-bit running on a HP Server rx5670 [2]
  • HP-UX 11.31 64-bit running on a HP Integrity rx6600 [1][2]
  • SunOS 5.10 64-bit running on a Fujitsu PrimePower 650 [1][2]
  • SunOS 5.10 64-bit running on a Sun Fire X4150 without PAA [1][2]
  • SunOS 5.9 64-bit running on a Sun Fire V440 [2]
  • SUSE Linux Enterprise Server 11 SP1 (Linux Kernel 2.6.32) 32-bit running on a HP ProLiant DL385-G2 DC [1]
  • SUSE Linux Enterprise Server 11 SP1 (Linux Kernel 2.6.32) 64-bit on IBM PowerVM 2.2 running on a IBM Power 750 Express without PAA [1][2]
  • SUSE Linux Enterprise Server 11 SP1 (Linux Kernel 2.6.32) 64-bit running on a HP Integrity rx2660 [2]
  • SUSE Linux Enterprise Server 11 SP3 (Linux Kernel 3.0.101) 64-bit on IBM PowerVM 2.2 running on a IBM Power System S824 with PAA [2]
  • SUSE Linux Enterprise Server 11 SP3 (Linux Kernel 3.0.101) 64-bit on Vmware ESXi 5.1.0 running on a HP ProLiant DL580 G7 with PAA [1][2]
  • SUSE Linux Enterprise Server 11 SP4 (Linux Kernel 3.0.101) 64-bit on IBM z/VM 6.2.0 running on a IBM zEnterprise 196 (2817 series) [2]
  • SUSE Linux Enterprise Server 12 SP1 (Linux Kernel 3.12.51) 64-bit on IBM PowerVM 2.2 running on a IBM Power System E870 [2]
  • SUSE Linux Enterprise Server 9 SP2 (Linux Kernel 2.6.5) 64-bit running on a HP ProLiant DL585 without PAA [1][2]
  • Windows Server 2008 R2 SP1 64-bit on Vmware ESXi 5.1.0 running on a HP ProLiant DL580 G7 with PAA [1][2] (single-user mode)
  • Windows Server 2008 SP2 64-bit running on a HP ProLiant DL380 G6 without PAA [1][2]
Vendor SAP SE http://www.sap.com
Lab TUVIT Evaluation Body for IT Security
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, AES-128, AES-192, RC2, RC4, DES, Triple-DES, TripleDES, TDEA, IDEA, HMAC, HMAC-SHA-256
Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, MD4, MD5, RIPEMD-128, RIPEMD-160
Schemes
Key agreement
Protocols
SSL, TLS
Elliptic Curves
P-521, P-384, P-256, P-224, P-192, Curve P-192
Block cipher modes
ECB, CBC, CTR, OFB, GCM

Trusted Execution Environments
SE

Security level
Level 1, level 1

Title Security Policy_tuvit_20190211
Subject
Keywords
Author
Creation date D:20190211081852+01'00'
Pages 16
Creator pdfFactory Pro pdffactory.com
Producer pdfFactory Pro 6.35 (Windows 7 Professional x64 German)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3449,
  "dgst": "599fa5a8dc521d3f",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#2415",
        "CVL#673",
        "CVL#674",
        "Triple-DES#2048",
        "Triple-DES#2047",
        "CVL#672",
        "RSA#1898",
        "DRBG#986",
        "ECDSA#772",
        "CVL#671",
        "HMAC#2416",
        "CVL#670",
        "AES#3666",
        "RSA#1899",
        "SHS#3084",
        "DSA#1035",
        "ECDSA#773",
        "CVL#675",
        "SHS#3083",
        "AES#3665",
        "DRBG#987",
        "DSA#1036"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 43,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 6
          },
          "ECDH": {
            "ECDH": 4
          },
          "ECDSA": {
            "ECDSA": 9
          }
        },
        "FF": {
          "DH": {
            "DH": 5,
            "Diffie-Hellman": 4
          },
          "DSA": {
            "DSA": 8
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 2
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 3
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "Curve P-192": 3,
          "P-192": 5,
          "P-224": 6,
          "P-256": 8,
          "P-384": 8,
          "P-521": 8
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#1035": 1,
          "#1036": 1,
          "#1898": 1,
          "#1899": 1,
          "#2047": 1,
          "#2048": 1,
          "#2415": 1,
          "#2416": 1,
          "#3083": 1,
          "#3084": 1,
          "#3665": 1,
          "#3666": 1,
          "#670": 1,
          "#671": 1,
          "#672": 1,
          "#673": 1,
          "#674": 1,
          "#675": 1,
          "#772": 1,
          "#773": 1,
          "#986": 1,
          "#987": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-128": 2,
          "AES-128/192/256": 1,
          "AES-192": 1,
          "AES-256": 3,
          "HMAC-SHA-256": 6,
          "PKCS #1": 2,
          "PKCS#1": 4,
          "RSASSA-PKCS1-V1_5": 1,
          "SHA-1": 4,
          "SHA-224": 2,
          "SHA-256": 2,
          "SHA-384": 2,
          "SHA-512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 12,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 1
          },
          "MD5": {
            "MD5": 2
          }
        },
        "RIPEMD": {
          "RIPEMD-128": 1,
          "RIPEMD-160": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA-224": 2,
            "SHA-256": 2,
            "SHA-384": 2,
            "SHA-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 18,
          "FIPS 180-4": 2,
          "FIPS 186-4": 7,
          "FIPS 197": 2,
          "FIPS 198-1": 2,
          "FIPS PUB 140-2": 10,
          "FIPS186-4": 1
        },
        "NIST": {
          "NIST SP 800-57": 3,
          "SP 800-38A": 4,
          "SP 800-38D": 2,
          "SP 800-56A": 1,
          "SP 800-67": 1,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS#1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 3,
            "AES-128": 2,
            "AES-192": 1,
            "AES-256": 3
          },
          "RC": {
            "RC2": 1,
            "RC4": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1,
            "Triple-DES": 10,
            "TripleDES": 1
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 9,
            "HMAC-SHA-256": 3
          }
        },
        "miscellaneous": {
          "IDEA": {
            "IDEA": 1
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SE": 7
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#2415",
        "CVL#673",
        "CVL#674",
        "Triple-DES#2048",
        "Triple-DES#2047",
        "CVL#672",
        "RSA#1898",
        "DRBG#986",
        "ECDSA#772",
        "CVL#671",
        "HMAC#2416",
        "CVL#670",
        "AES#3666",
        "RSA#1899",
        "SHS#3084",
        "DSA#1035",
        "ECDSA#773",
        "CVL#675",
        "SHS#3083",
        "AES#3665",
        "DRBG#987",
        "DSA#1036"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": []
    },
    "policy_metadata": {
      "/Author": " ",
      "/CreationDate": "D:20190211081852+01\u002700\u0027",
      "/Creator": "pdfFactory Pro pdffactory.com",
      "/Keywords": " ",
      "/Producer": "pdfFactory Pro 6.35 (Windows 7 Professional x64 German)",
      "/Subject": " ",
      "/Title": "Security Policy_tuvit_20190211",
      "pdf_file_size_bytes": 2184967,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.sap.com",
          "http://www.sap.com/corporate-en/legal/copyright/index.epx",
          "http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 16
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "308769ec920f5debc4978f1ba0e4f7cd319eb51c501a9183873d462cc2aa1b15",
      "source_hash": "7bdf3d9ac7c8dde5253097c2ebe657db040f43056a4becf71e20005b8aea1740",
      "txt_hash": "e7da087ad9561dafc88d9a3c6a40c51547653a617a06cfc067a57aaf94a4046d"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/MayConsolidatedCert.pdf",
    "date_sunset": null,
    "description": "SAP CommonCryptoLib Crypto Kernel v8.4.47.0 is a shared library, i.e. it consists of software only. SAP CommonCryptoLib Crypto Kernel provides an API in terms of C++ methods for key management and operation of cryptographic functions.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "SP 800-56Arev3 transition",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "SAP CommonCryptoLib Crypto Kernel",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "8.4.47.0 32-bit [1] and 64-bit [2]",
    "tested_conf": [
      "AIX 5.2 64-bit running on a IBM eServer p5 505 without PAA [2]",
      "AIX 6.1 64-bit on IBM PowerVM 2.2 running on a IBM Power 750 Express without PAA [1][2]",
      "HP-UX 11.11 64-bit running on a HP Server rp3440 [2]",
      "HP-UX 11.23 64-bit running on a HP Server rx5670 [2]",
      "HP-UX 11.31 64-bit running on a HP Integrity rx6600 [1][2]",
      "SunOS 5.10 64-bit running on a Fujitsu PrimePower 650 [1][2]",
      "SunOS 5.10 64-bit running on a Sun Fire X4150 without PAA [1][2]",
      "SunOS 5.9 64-bit running on a Sun Fire V440 [2]",
      "SUSE Linux Enterprise Server 11 SP1 (Linux Kernel 2.6.32) 32-bit running on a HP ProLiant DL385-G2 DC [1]",
      "SUSE Linux Enterprise Server 11 SP1 (Linux Kernel 2.6.32) 64-bit on IBM PowerVM 2.2 running on a IBM Power 750 Express without PAA [1][2]",
      "SUSE Linux Enterprise Server 11 SP1 (Linux Kernel 2.6.32) 64-bit running on a HP Integrity rx2660 [2]",
      "SUSE Linux Enterprise Server 11 SP3 (Linux Kernel 3.0.101) 64-bit on IBM PowerVM 2.2 running on a IBM Power System S824 with PAA [2]",
      "SUSE Linux Enterprise Server 11 SP3 (Linux Kernel 3.0.101) 64-bit on Vmware ESXi 5.1.0 running on a HP ProLiant DL580 G7 with PAA [1][2]",
      "SUSE Linux Enterprise Server 11 SP4 (Linux Kernel 3.0.101) 64-bit on IBM z/VM 6.2.0 running on a IBM zEnterprise 196 (2817 series) [2]",
      "SUSE Linux Enterprise Server 12 SP1 (Linux Kernel 3.12.51) 64-bit on IBM PowerVM 2.2 running on a IBM Power System E870 [2]",
      "SUSE Linux Enterprise Server 9 SP2 (Linux Kernel 2.6.5) 64-bit running on a HP ProLiant DL585 without PAA [1][2]",
      "Windows Server 2008 R2 SP1 64-bit on Vmware ESXi 5.1.0 running on a HP ProLiant DL580 G7 with PAA [1][2] (single-user mode)",
      "Windows Server 2008 SP2 64-bit running on a HP ProLiant DL380 G6 without PAA [1][2]"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2019-05-02",
        "lab": "TUVIT Evaluation Body for IT Security",
        "validation_type": "Initial"
      }
    ],
    "vendor": "SAP SE",
    "vendor_url": "http://www.sap.com"
  }
}