wolfCrypt

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4718,
  "dgst": "5c9c124097bc0e8b",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigGen (FIPS186-4)A4308",
        "SHA2-384A4308",
        "RSA SigVer (FIPS186-4)A4308",
        "HMAC-SHA3-512A4308",
        "ECDSA SigVer (FIPS186-4)A4308",
        "AES-GCMA4308",
        "ECDSA SigGen (FIPS186-4)A4308",
        "Hash DRBGA4308",
        "HMAC-SHA2-224A4308",
        "KDF SSHA4308",
        "HMAC-SHA2-512A4308",
        "SHA3-384A4308",
        "AES-CTRA4308",
        "ECDSA KeyGen (FIPS186-4)A4308",
        "HMAC-SHA-1A4308",
        "TLS v1.3 KDFA4308",
        "AES-ECBA4308",
        "SHA2-256A4308",
        "KAS-ECC-SSC Sp800-56Ar3A4308",
        "AES-GMACA4308",
        "SHA3-512A4308",
        "HMAC-SHA3-256A4308",
        "KDF TLSA4308",
        "SHA2-224A4308",
        "SHA2-512A4308",
        "AES-CMACA4308",
        "AES-OFBA4308",
        "RSA KeyGen (FIPS186-4)A4308",
        "DSA KeyGen (FIPS186-4)A4308",
        "AES-CBCA4308",
        "SHA-1A4308",
        "SHA3-224A4308",
        "ECDSA KeyVer (FIPS186-4)A4308",
        "HMAC-SHA2-256A4308",
        "HMAC-SHA2-384A4308",
        "TLS v1.2 KDF RFC7627A4308",
        "#A4308",
        "HMAC-SHA3-224A4308",
        "AES-CCMA4308",
        "SHA3-256A4308",
        "HMAC-SHA3-384A4308",
        "KAS-FFC-SSC Sp800-56Ar3A4308"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 3,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A4308",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A4308",
            "properties": "Key Length - 128, 192, 256",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A4308",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A4308",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A4308",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A4308",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GMAC",
            "cavpCertName": "A4308",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-OFB",
            "cavpCertName": "A4308",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "DSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "L - 2048 N - 256",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Extra Bits",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Curve - P-192, P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA3-224, SHA3-256, SHA3- 384, SHA3-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Component - No Curve - P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A4308",
            "properties": "Prediction Resistance - No Mode - SHA2-256",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 224",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 256",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 384",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 224",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 256",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 384",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 512",
            "cavpCertName": "A4308",
            "properties": "Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A4308",
            "properties": "Domain Parameter Generation Methods - P- 256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A4308",
            "properties": "Domain Parameter Generation Methods - ffdhe2048 Scheme - dhEphem - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF SSH (CVL)",
            "cavpCertName": "A4308",
            "properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF TLS (CVL)",
            "cavpCertName": "A4308",
            "properties": "TLS Version - v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2- 512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A4308",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA3-224",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-256",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-384",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-512",
            "cavpCertName": "A4308",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A4308",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2- 512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "TLS v1.3 KDF (CVL)",
            "cavpCertName": "A4308",
            "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Generate or verify",
            "indicator": "Successf ul",
            "inputs": "Sign: Key Struct",
            "name": "Digital Signature",
            "outputs": "Sign: Status return;",
            "rolesSspAccess": "CO - DS_SGK:",
            "secFunImpl": "Digital Signature"
          },
          {
            "description": "digital signatures.",
            "indicator": "completi on of the service (status code \u003e= 0)",
            "inputs": "(DS_SGK); message; Verify: signature value; flags; sizes.",
            "name": "",
            "outputs": "Signature value. Verify: Status return;",
            "rolesSspAccess": "W,E,Z - DS_SVK: W,E,Z",
            "secFunImpl": "Generation Digital Signature Verification"
          },
          {
            "description": "Generate asymmetric key pairs.",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "FFC, ECC: curve identifier; RSA: modulus size;",
            "name": "Generate Key Pair",
            "outputs": "Status return; Key structure (GKP_Privat e)",
            "rolesSspAccess": "CO - GKP_Privat e: G,R,Z - GKP_Publi c: G,R,Z",
            "secFunImpl": "ECC Asymmetric Key-Pair Generation DSA Asymmetric Key-Pair Generation RSA Asymmetric Key-Pair Generation 133r2 5.2 Asymmetric Key Generation 133r2 5.1 Asymmetric Key Generation"
          },
          {
            "description": "DH key agreement primitives.",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "Key structures (KAS_Priva te and KAS_Publi c); flags;",
            "name": "Key Agreeme nt",
            "outputs": "Status return; KAS_SSC;",
            "rolesSspAccess": "CO - KAS_Privat e: W,E,Z - KAS_Public : W,E,Z - KAS_SSC: G,R,Z",
            "secFunImpl": "Primitive Key Agreement"
          },
          {
            "description": "Derive keying material from a shared secret",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "KAS_SSC; flags;",
            "name": "Key Derivatio n",
            "outputs": "Status return; KD_DKM;",
            "rolesSspAccess": "CO - KAS_SSC: R,E,Z",
            "secFunImpl": "TLS 1.3 Key Agreement KDF Derived Key Agreement KAS SSC Derived Key Agreement"
          },
          {
            "description": "Generate or verify message integrity",
            "indicator": "Successf ul completi on of the",
            "inputs": "KH_Key",
            "name": "Keyed Hash",
            "outputs": "Status return; Tag value;",
            "rolesSspAccess": "CO - KH_Key: W,E",
            "secFunImpl": "Message Authenticati on"
          },
          {
            "description": "",
            "indicator": "service (status code \u003e= 0)",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": "Auth Block Cipher"
          },
          {
            "description": "Generate a message digest",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "Message; flags;",
            "name": "Message Digest",
            "outputs": "Status return; Hash value;",
            "rolesSspAccess": "CO",
            "secFunImpl": "Secure Hash"
          },
          {
            "description": "Generate random bits using the DRBG",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "DRBG structure (Internal State containing secret(s) C and V); Seed",
            "name": "Random",
            "outputs": "Status return; Random Value;",
            "rolesSspAccess": "CO - Seed: W,E,Z - Internal State: G,E - Secret C: G,E - Secret V: G,E - Entropy Input String:",
            "secFunImpl": "DRBG"
          },
          {
            "description": "Perform the designated self-test.",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "Flags",
            "name": "Self-test",
            "outputs": "Status return",
            "rolesSspAccess": "CO - MOD_INT: G,Z - coreKey: E",
            "secFunImpl": "Message Authenticati on"
          },
          {
            "description": "Provide Module status",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "None",
            "name": "Show Status",
            "outputs": "Status return",
            "rolesSspAccess": "CO",
            "secFunImpl": ""
          },
          {
            "description": "Encrypt or Decrypt data, including AEAD modes",
            "indicator": "Successf ul completi on of the service (status",
            "inputs": "SC_EDK; flags;",
            "name": "Symmetri c cipher",
            "outputs": "Status return. Plaintext or ciphertext data;",
            "rolesSspAccess": "CO - SC_EDK: E,W",
            "secFunImpl": "Auth Block Cipher UnAuth Block Cipher Symmetric"
          },
          {
            "description": "(CCM, GCM)",
            "indicator": "code \u003e= 0)",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": "Key Generation"
          },
          {
            "description": "FreeRng_fi ps destroys RNG CSPs. All functions zeroise CSPs using function ForceZero (overwriting with zeros) within the function scope after use. Caller stack cleanup is the duty of the application. Restarting the general- purpose computer clears all CSPs in RAM.",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "DRBG struct (RBG State) or other structures containing SSPs",
            "name": "Zeroise",
            "outputs": "Status return",
            "rolesSspAccess": "CO - DS_SGK: Z - GKP_Privat e: Z - KAS_Privat e: Z - KAS_SSC: Z - KD_DKM: Z - KH_Key: Z - Seed: Z - Internal State: Z - Secret C: Z - Secret V: Z - SC_EDK: Z - Entropy Input String: Z",
            "secFunImpl": ""
          },
          {
            "description": "Provide Module Version",
            "indicator": "Successf ul completi on of the service (status code \u003e= 0)",
            "inputs": "None",
            "name": "Show Version",
            "outputs": "Plaintext containing the module version",
            "rolesSspAccess": "CO",
            "secFunImpl": ""
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES- CBC",
            "condition": "Before first use of algorithm( s) AES- ECB, AES- CBC, AES- CTR, AES- OFB, AES- GCM, AES- GMAC, AES- CCM or AES- CMAC",
            "details": "Encrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- CBC",
            "condition": "Before first use of",
            "details": "Decrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "",
            "condition": "algorithm( s) AES- ECB, AES- CBC, AES- CTR, AES- OFB, AES- GCM, AES- GMAC, AES- CCM or AES- CMAC",
            "details": "",
            "indicator": "FIPS_CAST_STATE_FAI LURE",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "AES- GCM",
            "condition": "Before first use of algorithm( s) AES- GCM or AES- GMAC",
            "details": "Decrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- GCM",
            "condition": "Before first use of algorithm( s) AES- GCM or AES- GMAC",
            "details": "Encrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA1",
            "condition": "Before first use of algorithm( s) SHA1 or HMAC- SHA1",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA1; key length: 20- bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA2- 256",
            "condition": "Before first use of algorithm( s) SHA224, SHA256,",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA256; key length: 20-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA2- 512",
            "condition": "SHA256 Before first use of algorithm( s) SHA384, SHA512, HMAC- SHA384 or HMAC-",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA2-512, key length: 20-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA3- 256",
            "condition": "SHA512 Before first use of algorithm( s) SHA3- 224, SHA3- 256, SHA3- 384 or SHA3- 512, HMAC- SHA3- 224, HMAC- SHA3- 256, HMAC- SHA3- 384 or HMAC- SHA3- 512",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA3-256, key length: 64-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA- PKCSv 1.5",
            "condition": "Before first use of algorithm( s) RSA (PKCSv1. 5) or RSA (PSS)",
            "details": "Sign",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA256; key length: 2048-bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA- PKCSv 1.5",
            "condition": "Before first use of algorithm( s) RSA (PKCSv1. 5) or RSA (PSS)",
            "details": "Verify",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA256, key length: 2048-bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECC Diffie- Hellman",
            "condition": "Before first use of algorithm( s) ECC for shared secret generatio n",
            "details": "Computatio n Shared Secret Z",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hashType: SHA2-256; curve: P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "FFC Diffie- Hellman",
            "condition": "Before first use of algorithm( s) FFC for shared secret generatio n",
            "details": "Computatio n Shared Secret Z",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hashType: SHA2-256; keySize: 2048-bit;",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA",
            "condition": "Before first use of algorithm( s) ECDSA",
            "details": "Sign",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "curve: P256; hashType: SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA",
            "condition": "Before first use of algorithm( s) ECDSA",
            "details": "Verify",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "curve: P256; hashType: SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLSv1. 2 KDF",
            "condition": "Before first use of TLSv1.2 KDF",
            "details": "Derive Keying Material",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "HMAC- SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLSv1. 3 KDF",
            "condition": "Before first use of TLSv1.3 KDF",
            "details": "Derive Keying Material",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "HMAC- SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KDF SSH",
            "condition": "Before first use of KDF SSH",
            "details": "Derive Keying Material",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hashType: SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA- PCT",
            "condition": "Invoked automatic ally during generate key pair service",
            "details": "Sign/Verify",
            "indicator": "Service is successful or an error code RSA_KEY_PAIR_E",
            "testMethod": "PCT",
            "testProps": "key size: 2048,3072,4 096",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECC- PCT",
            "condition": "Invoked automatic ally during generate key pair service",
            "details": "Sign/Verify",
            "indicator": "Service is successful or an error code ECC_PCT_E",
            "testMethod": "PCT",
            "testProps": "curve size: 224, 256, 384, 521",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "DH- PCT",
            "condition": "Invoked automatic ally during generate key pair service",
            "details": "Modulus Exponentia tion",
            "indicator": "Service is successful or an error code MP_CMP_E",
            "testMethod": "PCT",
            "testProps": "key size: 2048, 3072, 4096",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "DRBG",
            "condition": "Before first use of algorithm( s) DBRG or Immediat ely upon registerin g an external entropy source with the module",
            "details": "Health-Test with sub- elements: Instantiate, Generate, Reseed",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "DRBG mode: SHA2-256",
            "type": "CAS T"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "HMAC- SHA2- 256 CAST Failure Module Integrity Check Failure",
            "description": "Module has failed its software integrity check",
            "indicator": "fipsModeId set to FIPS_MODE_FAILED (3)",
            "name": "FIPS_MODE_FAILED",
            "recoveryMethod": "Power Cycle"
          },
          {
            "conditions": "AES- CBC AES- GCM HMAC- SHA1 HMAC- SHA2- 256 HMAC- SHA2- 512 HMAC- SHA3- 256 RSA- PKCSv1 .5 DRBG ECC Diffie- Hellman",
            "description": "One or more algorithm(s) are no longer usable and the module mode is set to FIPS_MODE_DEG RADED (2)",
            "indicator": "One or more algorithms CAST status values set to FIPS_CAST_STATE_F AILURE (3)",
            "name": "FIPS_CAST_STATE_F AILURE",
            "recoveryMethod": "Power Cycle"
          },
          {
            "conditions": "FFC Diffie- Hellman ECDSA TLSv1.2 KDF TLSv1.3 KDF KDF SSH",
            "description": "",
            "indicator": "",
            "name": "",
            "recoveryMethod": ""
          },
          {
            "conditions": "Any CAST Failure",
            "description": "One or more of the CASTS have failed anytime following a successful power on and integrity check. Upon entering this mode the module will automatically run all CASTS prior to the operational use of any cryptographic algorithm.",
            "indicator": "fipsModeId set to FIPS_MODE_DEGRA DED (2)",
            "name": "FIPS_MODE_DEGRA DED",
            "recoveryMethod": "Power Cycle"
          },
          {
            "conditions": "RSA- PCT",
            "description": "RSA Pairwise Consistency Test Failure",
            "indicator": "RSA_KEY_PAIR_E (- 262)",
            "name": "RSA_KEY_PAIR_E",
            "recoveryMethod": "Manual self- test service call or power cycle"
          },
          {
            "conditions": "ECC- PCT",
            "description": "ECC Pairwise Consistency Test Failure",
            "indicator": "ECC_PCT_E (-286)",
            "name": "ECC_PCT_E",
            "recoveryMethod": "Manual self- test service call or power cycle"
          },
          {
            "conditions": "DH-PCT",
            "description": "DH Pairwise Consistency Test Failure",
            "indicator": "MP_CMP_E (-120)",
            "name": "MP_CMP_E",
            "recoveryMethod": "Manual self- test service call or power cycle"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "The Module supports an Approved mode of operation. In this mode all services are available.",
            "name": "Approved mode of operation",
            "statusIndicator": "FIPS_MODE_NORMAL (1)",
            "type": "Approved"
          },
          {
            "description": "The Module implements a Degraded Mode of operation: when a CAST fails, that CAST is marked as failed and the module will inhibit use of algorithms governed by that CAST",
            "name": "Degraded mode of operation",
            "statusIndicator": "FIPS_MODE_DEGRADED (2)",
            "type": "Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API entry point: stack frame including non-sensitive parameters",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A: Internal (call stack)"
          },
          {
            "data": "API call parameters passed by reference for structures allocated by wolfCrypt",
            "logicalInterface": "Control Output",
            "physicalPort": "N/A: Internal (call stack)"
          },
          {
            "data": "API call parameters passed by reference or value for cryptographic service input",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A: Internal (call stack)"
          },
          {
            "data": "API call parameters passed by reference for cryptographic service output",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A: Internal (call stack)"
          },
          {
            "data": "API return value: enumerated status resulting from call execution",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A: Internal (call stack)"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "",
            "name": "CO",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC- SHA2-256",
            "details": "MAC",
            "indicator": "FIPS_MODE_NORMAL or FIPS_MODE_FAILED",
            "testMethod": "KAT",
            "testProps": "hash type: SHA256, key length: 32-bytes. Please note this is the module integrity test",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "INT",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "IE1",
            "sfiAlgo": "",
            "source": "EXT: Call stack (API) input parameters"
          },
          {
            "dest": "EXT",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "IE2",
            "sfiAlgo": "",
            "source": "INT: Call stack (API) output parameters"
          },
          {
            "dest": "INT",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "IE3",
            "sfiAlgo": "",
            "source": "EXT: Loaded from external entropy source"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "cleared immediately after use",
            "method": "Z1",
            "operatorId": "Zeroise",
            "rationale": "Module does not store SSPs persistently"
          },
          {
            "description": "Per ISO/IEC 19790:2012 section 7.9.7, parameters used solely for self-test purposes in 7.10 need not meet zeroisation requirements",
            "method": "Z2",
            "operatorId": "",
            "rationale": "FIPS 140-3 IG 9.7.B"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "RAM (Memory)",
            "name": "S1",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "FIPS 140-3 module and SSL/TLS library",
            "integrityTest": "HMAC-SHA256",
            "packageFileName": "wolfssl-5.6.3- commercial-fips- linuxv5.2.1.7z",
            "swFwVersion": "v5.2.1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Intel Ultrabook 2 in 1",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 4.4 (Ubuntu 16.04 LTS)",
            "paa_pai": "Yes",
            "processors": "Intel Core i5-5300U CPU @2.30GHz x 4",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Intel Ultrabook 2 in 1",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 4.4 (Ubuntu 16.04 LTS)",
            "paa_pai": "No",
            "processors": "Intel Core i5-5300U CPU @2.30GHz x 4",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Samsung Galaxy XCover Pro",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 13",
            "paa_pai": "No",
            "processors": "Exynos 9611 without PAA",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "WTM 4100",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.4",
            "paa_pai": "No",
            "processors": "Broadcom BCM56260B0IFSBG - Saber2",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Precision 5820 Tower",
            "hypervisorHostOs": "",
            "operatingSystem": "RedHat Enterprise Linux Workstation 8.9",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae W- 2255 @ 3.7GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Network Interface Card for Aclara RF",
            "hypervisorHostOs": "",
            "operatingSystem": "FreeRTOS v10.4",
            "paa_pai": "No",
            "processors": "Renesas R7FA6E10F",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "iSTAR physical access controller",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.15",
            "paa_pai": "No",
            "processors": "Freescale i.MX7 Dual Arm Cortex A-7",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Ricoh IM C3010",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 4.14",
            "paa_pai": "No",
            "processors": "Intel\u00ae Atom\u00ae E3930 @1.30GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Ricoh IM C4510",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 4.14",
            "paa_pai": "No",
            "processors": "Intel\u00ae Atom\u00ae E3940 @1.60GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Spectrum Infusion System",
            "hypervisorHostOs": "",
            "operatingSystem": "NET+OS v7.6",
            "paa_pai": "No",
            "processors": "Digi International NS9210",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Novum IQ Infusion Platform",
            "hypervisorHostOs": "",
            "operatingSystem": "Yocto (kirkstone) 4.0",
            "paa_pai": "No",
            "processors": "NXP i.MX6UL",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "FEI-Zyfer Time and Frequency System",
            "hypervisorHostOs": "",
            "operatingSystem": "MQX 3.4",
            "paa_pai": "No",
            "processors": "NXP PowerQUICC II MPC8313e 32bit",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Series CR2700 Code Reader(s)",
            "hypervisorHostOs": "",
            "operatingSystem": "CodeOS v1.4",
            "paa_pai": "No",
            "processors": "CodeCorp CT8200 (ARM FA626TE)",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Teledyne Webb SOM Module",
            "hypervisorHostOs": "",
            "operatingSystem": "OpenRTOS v10.5",
            "paa_pai": "No",
            "processors": "STM32L4R5",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 2144",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4316 CPU @2.30GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 2144",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4316 CPU @2.30GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 2184",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae Gold 6338N CPU @2.20GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 2184",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Gold 6338N CPU @2.20GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 94C8",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Gold 5418N CPU @1.80GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 92C8",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Gold 6230N CPU @2.30GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Anyware Trusted Zero Client",
            "hypervisorHostOs": "",
            "operatingSystem": "Anyware Trusted Zero Client Firmware",
            "paa_pai": "No",
            "processors": "AMD Ryzen Embedded R1305G",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Anyware Trusted Zero Client",
            "hypervisorHostOs": "",
            "operatingSystem": "Kernel 6.1 Anyware Trusted Zero Client Firmware Kernel 6.1",
            "paa_pai": "Yes",
            "processors": "AMD Ryzen Embedded R1305G",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "HP tz655 Trusted Zero Client",
            "hypervisorHostOs": "",
            "operatingSystem": "Anyware Trusted Zero Client Firmware Kernel 6.1",
            "paa_pai": "Yes",
            "processors": "AMD Ryzen Embedded R2314",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Classone \u00ae IP Radio Gateway",
            "hypervisorHostOs": "",
            "operatingSystem": "Fusion Embedded RTOS 5.0",
            "paa_pai": "No",
            "processors": "Analog Devices ADSP-BF516 (Blackfin)",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Harman MUSE MU Controller",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.4",
            "paa_pai": "No",
            "processors": "NXP i.MX8M",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Harman N2612S Video encoder/decoder",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 4.9",
            "paa_pai": "No",
            "processors": "ARM Cortex-A7",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Harman N4321D audio transcoder",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.10",
            "paa_pai": "No",
            "processors": "NXP i.MX8",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "Precision 5820 Tower",
            "hypervisorHostOs": "",
            "operatingSystem": "Red Hat Enterprise Linux Workstation 8.10",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae W- 2255 @ 3.7GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 2144",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Gold 5411N @1.90GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 2184",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Gold 6438N @2.00GHz",
            "version": "v5.2.1"
          },
          {
            "hardwarePlatform": "EndaceProbe 92C8",
            "hypervisorHostOs": "",
            "operatingSystem": "Endace Crypto Firmware 2.1",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Gold 6148 CPU @2.40GHz",
            "version": "v5.2.1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Asymmetric:RSA Asymmetric:ECDSA",
            "implName": "wolfCrypt",
            "name": "CKG- 1",
            "reference": "SP800-133r2 5.1 \"Key Pairs for Digital Signature Schemes\""
          },
          {
            "algoPropList": "Asymmetric:ECC Asymmetric:FFC",
            "implName": "wolfCrypt",
            "name": "CKG- 2",
            "reference": "SP800-133r2 5.2 \"Key Pairs for Key Establishment\""
          },
          {
            "algoPropList": "Symmetric:AES Symmetric:HMAC",
            "implName": "wolfCrypt",
            "name": "CKG- 3",
            "reference": "SP800-133r2 6.2 \"Derivation of Symmetric Keys\""
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 15
          },
          "ECDSA": {
            "ECDSA": 21
          }
        },
        "FF": {
          "DH": {
            "DH": 2,
            "DHE": 1,
            "Diffie-Hellman": 1
          },
          "DSA": {
            "DSA": 9
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 7
        },
        "CCM": {
          "CCM": 5
        },
        "CTR": {
          "CTR": 4
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 10
        },
        "OFB": {
          "OFB": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "wolfSSL": {
          "wolfSSL": 100
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 12
        },
        "TLS": {
          "TLS": {
            "TLS": 11,
            "TLS 1.2": 1,
            "TLS 1.3": 3,
            "TLS v1.2": 4,
            "TLS v1.3": 3,
            "TLSv1.2": 3,
            "TLSv1.3": 3
          }
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "KA": {
          "Key Agreement": 14,
          "Key agreement": 1
        },
        "MAC": {
          "MAC": 6
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 4,
          "P-224": 8,
          "P-256": 10,
          "P-384": 10,
          "P-521": 10
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 2,
          "AES-128": 1,
          "AES-192": 1,
          "AES-256": 1,
          "HMAC- SHA-1": 1,
          "HMAC- SHA1": 3,
          "HMAC- SHA384": 1,
          "HMAC-SHA-1": 6,
          "HMAC-SHA1": 2,
          "HMAC-SHA256": 2,
          "PKCS 1": 2,
          "SHA- 256": 1,
          "SHA-1": 7,
          "SHA-2": 1,
          "SHA-256": 2,
          "SHA-3": 2,
          "SHA-512": 2,
          "SHA1": 5,
          "SHA2- 224": 1,
          "SHA2- 256": 6,
          "SHA2- 384": 2,
          "SHA2- 512": 5,
          "SHA2-224": 6,
          "SHA2-256": 21,
          "SHA2-384": 9,
          "SHA2-512": 8,
          "SHA224": 1,
          "SHA256": 6,
          "SHA3- 224": 3,
          "SHA3- 256": 5,
          "SHA3- 384": 4,
          "SHA3- 512": 3,
          "SHA3-224": 6,
          "SHA3-256": 7,
          "SHA3-384": 5,
          "SHA3-512": 5,
          "SHA384": 2,
          "SHA512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 7,
            "SHA1": 5
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-256": 2,
            "SHA-512": 2,
            "SHA224": 1,
            "SHA256": 6,
            "SHA384": 2,
            "SHA512": 2
          },
          "SHA3": {
            "SHA-3": 2,
            "SHA3-224": 6,
            "SHA3-256": 7,
            "SHA3-384": 5,
            "SHA3-512": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 34
        },
        "RNG": {
          "RBG": 3,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 15,
          "FIPS 180-4": 5,
          "FIPS 186-4": 9,
          "FIPS 198-1": 9,
          "FIPS 202": 4,
          "FIPS18": 8,
          "FIPS186-4": 18
        },
        "ISO": {
          "ISO/IEC 19790-2012": 1,
          "ISO/IEC 19790:2012": 4,
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-131A": 1,
          "NIST SP 800-135": 1,
          "NIST SP 800-140D": 1,
          "NIST SP 800-56A": 1,
          "NIST SP 800-56B": 1,
          "NIST SP 800-56C": 1,
          "NIST SP 800-90A": 1,
          "SP 800-135": 4,
          "SP 800-38A": 4,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 3,
          "SP 800-56A": 2,
          "SP 800-90A": 1
        },
        "PKCS": {
          "PKCS 1": 2
        },
        "RFC": {
          "RFC762": 1,
          "RFC7627": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6,
            "AES-": 34,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 53
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4,
            "HMAC": 6
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        },
        "IBM": {
          "SSC": 10
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Broadcom": {
          "Broadcom": 1
        },
        "NXP": {
          "NXP": 4
        },
        "Samsung": {
          "Samsung": 1
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigGen (FIPS186-4)A4308",
        "SHA2-384A4308",
        "RSA SigVer (FIPS186-4)A4308",
        "HMAC-SHA3-512A4308",
        "ECDSA SigVer (FIPS186-4)A4308",
        "AES-GCMA4308",
        "ECDSA SigGen (FIPS186-4)A4308",
        "Hash DRBGA4308",
        "HMAC-SHA2-224A4308",
        "KDF SSHA4308",
        "HMAC-SHA2-512A4308",
        "SHA3-384A4308",
        "AES-CTRA4308",
        "ECDSA KeyGen (FIPS186-4)A4308",
        "HMAC-SHA-1A4308",
        "TLS v1.3 KDFA4308",
        "AES-ECBA4308",
        "SHA2-256A4308",
        "KAS-ECC-SSC Sp800-56Ar3A4308",
        "AES-GMACA4308",
        "SHA3-512A4308",
        "HMAC-SHA3-256A4308",
        "KDF TLSA4308",
        "SHA2-224A4308",
        "SHA2-512A4308",
        "AES-CMACA4308",
        "AES-OFBA4308",
        "RSA KeyGen (FIPS186-4)A4308",
        "DSA KeyGen (FIPS186-4)A4308",
        "AES-CBCA4308",
        "SHA-1A4308",
        "SHA3-224A4308",
        "ECDSA KeyVer (FIPS186-4)A4308",
        "HMAC-SHA2-256A4308",
        "HMAC-SHA2-384A4308",
        "TLS v1.2 KDF RFC7627A4308",
        "HMAC-SHA3-224A4308",
        "AES-CCMA4308",
        "SHA3-256A4308",
        "HMAC-SHA3-384A4308",
        "KAS-FFC-SSC Sp800-56Ar3A4308"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4308"
      ]
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20260128173215-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/ModDate": "D:20260128173417-05\u002700\u0027",
      "/Producer": "Adobe PDF Library 25.1.5",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 574265,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://www.wolfssl.com/",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-56b/rev-2/final",
          "https://csrc.nist.gov/CSRC/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-135/rev-1/final",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Dr2.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 45
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4dae24f7a81788a31a07e9711f53d12cffae60bcf7b7a8196bb5b404fbb77f24",
      "source_hash": "25faef2f904ac4ee0359e9a06b34dce4f7cb4b62d8d5953590d48f5c620dc6de",
      "txt_hash": "d47162c388c04be7be486ce738dec4cf428b26b4a8330563cb23d259aec710f7"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys)",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
    "date_sunset": "2029-07-10",
    "description": "wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "wolfCrypt",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-07-11",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-05-16",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-01-29",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "wolfSSL Inc.",
    "vendor_url": "http://www.wolfssl.com"
  }
}