This page was not yet optimized for use on mobile devices.
TW-860-F TSM Spirit
Certificate details
| Certificate ID | #5544 |
|---|---|
| Status | active |
| Validation dates | 07.10.2026 |
| Sunset date | 06-10-2031 |
| Standard | FIPS 140-3 |
| Security level | 2 |
| Type | Hardware |
| Embodiment | MultiChipStand |
| Caveat | When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident sealant installed as indicated in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The TW-860-F are small form-factor radios that employ the latest version of TrellisWare's TSM waveform and are capable of robust operation at high data rates. The TW-860-F radios support multi-channel voice, IP data, Position Location Information (PLI) tracking, sleep functions for long-term sensing applications, IP gateway features and remote operation of live streaming video sources for networked sensing missions. |
| Vendor | TrellisWare Technologies, Inc. http://www.trellisware.com |
| Lab | ADVANCED DATA SECURITY |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-256, AES-, CAST, RC4, DES, Triple-DES, IDEA, Camellia, SEEDAsymmetric Algorithms
RSA 2048, ECDH, ECDSA, DH, DSAHash functions
SHA-1, SHA-256, MD5Protocols
TLSRandomness
RBGBlock cipher modes
CTRTrusted Execution Environments
PSPSecurity level
Level 2Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5544,
"dgst": "6334610e2b0395f3",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"RSA SigVer (FIPS186-5)A5395",
"#A5395",
"AES-CTRC1431",
"SHA2-256A5395",
"#C1431",
"RSA SigGen (FIPS186-5)A5395"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"860"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CTR",
"cavpCertName": "C1431",
"properties": "Direction - Encrypt Key Length - 256",
"reference": "SP 800-38A"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A5395",
"properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048 Signature Type - pkcs1v1.5",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A5395",
"properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048 Signature Type - pkcs1v1.5 Public Exponent Mode - random",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A5395",
"properties": "Message Length - Message Length: 8- 51200 Increment 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Uses the CO Public Key Certificate to allow the CO to access the unit for",
"indicator": "Managem ent app receives a result",
"inputs": "CO Public Key Certifica te",
"name": "Crypto Officer Authenticati on",
"outputs": "Status of CO authenticati on",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E",
"secFunImpl": "Authentication of CO"
},
{
"description": "Security and Non- security configurati on.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- TWT CA Public Key Certificat e: R,E",
"secFunImpl": ""
},
{
"description": "Configure non- security settings and Wideband RF settings.",
"indicator": "Managem ent app receives a result",
"inputs": "CO Public Key Certifica te Non- security settings and Wideba nd RF settings",
"name": "Non- Security Configurati on",
"outputs": "Status of CO authenticati on Status of Non- Security Configurati on",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E",
"secFunImpl": "Authentication of CO"
},
{
"description": "Enter and select the FIPS-140 SSP\u0027s - CO Public Key Certificate and AES- 256 CTR Network Key via manual distribution electronic entry. Prior to a certificate update, the module is automatica lly zeroized.",
"indicator": "Managem ent app receives a result",
"inputs": "CO Public Key Certifica te FIPS- 140 SSP\u0027s - CO Public Key Certifica te and AES- 256 CTR Network Key",
"name": "Security Configurati on",
"outputs": "Status of Local HTTPS Key Loader Input/Outpu t Status of Security Configurati on",
"rolesSspAccess": "Crypto Officer (CO) - Network Key: R,W - CO Public Key Certificat e: R,W,E - TWT CA Public Key Certificat e: R",
"secFunImpl": "Local HTTPS"
},
{
"description": "Provides packet transfer between the RF Ciphertext",
"indicator": "Managem ent App shows # of nodes and network utilization",
"inputs": "Network packets to be forward ed",
"name": "Packet Forwarding",
"outputs": "Processed network packets to be forwarded",
"rolesSspAccess": "User - Network Key: R,E",
"secFunImpl": "Packet Creation and Forwarding"
},
{
"description": "port and Plaintext Ethernet ports. Packets are encrypted and decrypted using the AES-256 Network Key.",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Provides Ciphertext packet creation from internal Plaintext sources (GPS, Audio, Video). Packets are encrypted using the AES-256 Network Key. Encrypted packets are transmitted via RF.",
"indicator": "Managem ent app shows status and network utilization",
"inputs": "Plaintex t from internal sources",
"name": "Packet Creation",
"outputs": "Encrypted network packets",
"rolesSspAccess": "User - Network Key: R,E",
"secFunImpl": "Packet Creation and Forwarding"
},
{
"description": "Monitor network and individual radios. Remote control of radio non- security settings and stream control.",
"indicator": "Managem ent app shows status and network data",
"inputs": "CO Public Key Certifica te Radio non- security settings and stream control",
"name": "Network Monitoring \u0026 Remote Control",
"outputs": "Status of CO authenticati on Network monitoring data Status of radio non- security settings and stream configuratio",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat",
"secFunImpl": "Packet Creation and Forwarding Authentication of CO"
},
{
"description": "Upgrade firmware release. Note: If non-FIPS validated firmware is loaded, the module is no longer a FIPS validated module.",
"indicator": "TSM Software Download PC app shows status",
"inputs": "CO Public Key Certifica te Firmwar e",
"name": "Firmware Upgrade",
"outputs": "n Status of CO authenticati on Status of the upgrade",
"rolesSspAccess": "e: R,E Crypto Officer (CO) - CO Public Key Certificat e: R,W,E - TWT CA Public Key Certificat e: R,W,E - FW Load Public Key: R,E - CO Private Key: W",
"secFunImpl": "Firmware load test"
},
{
"description": "Performs module\u0027s power-up self-tests. If failing, enters Error state.",
"indicator": "Managem ent app shows the status of the module",
"inputs": "None",
"name": "Power-on Module Self-Tests",
"outputs": "Status of the module\u0027s power-up self-tests",
"rolesSspAccess": "Human Operator (HO, Non- security)",
"secFunImpl": "Packet Creation and Forwarding Authentication of CO FW Integrity Test KTS - Key Wrapping/Unwrap ping with AES- CTR and RSA"
},
{
"description": "Provides CO Non- security Status API service for PC, Android and Web apps.",
"indicator": "Managem ent app shows status of the module",
"inputs": "CO Public Key Certifica te",
"name": "Module Status API",
"outputs": "Status of CO authenticati on Non- security status",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E",
"secFunImpl": "Authentication of CO"
},
{
"description": "Remotely zeroize all CSPs in",
"indicator": "Managem ent apps do not see",
"inputs": "CO Public Key",
"name": "FIPS Zeroize (OTAC)",
"outputs": "Status of CO authenticati",
"rolesSspAccess": "Crypto Officer (CO)",
"secFunImpl": "Authentication of CO Packet Creation"
},
{
"description": "the module. Once zeroized, the module must be reinitialized as described above.",
"indicator": "the status of the module",
"inputs": "Certifica te Request to zeroize",
"name": "",
"outputs": "on Status of zeroization",
"rolesSspAccess": "- CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E - Network Key: Z",
"secFunImpl": "and Forwarding"
},
{
"description": "Remotely clone Network Key",
"indicator": "Managem ent app receives a result",
"inputs": "CO Public Key Certifica te Request to clone",
"name": "Cloning of keys",
"outputs": "Status of cloning",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - CO Private Key: R,E - Network Key: W",
"secFunImpl": "KTS - Key Wrapping/Unwrap ping with AES- CTR and RSA"
},
{
"description": "Selection of voice channel, volume and other non- security configurati on parameter s using the manual controls on",
"indicator": "LCD",
"inputs": "Keypad or buttons",
"name": "Manual Non- Security Configurati on (devices with LCD only)",
"outputs": "LCD",
"rolesSspAccess": "Human Operator (HO, Non- security)",
"secFunImpl": "None"
},
{
"description": "the unit. Uses the CO Public Key Certificate to allow the CO to",
"indicator": "Managem ent app receives the status",
"inputs": "CO Public Key Certifica te",
"name": "Show Status",
"outputs": "Status of CO authenticati on Status of the module",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key",
"secFunImpl": "Authentication of CO"
},
{
"description": "access the unit to see the status",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Certificat e: R,E - TWT CA Public Key Certificat e: R,E",
"secFunImpl": ""
},
{
"description": "Uses the CO Public Key Certificate to allow the CO to access the unit to see the version of the module",
"indicator": "Managem ent app receives the version",
"inputs": "CO Public Key Certifica te",
"name": "Show Version",
"outputs": "Status of CO authenticati on Version of the module",
"rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E",
"secFunImpl": "Authentication of CO"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "The RSA certificate contains a 2048- bit key signed with a SHA-256 hash function. An RSA 2048-bit key provides an equivalent security strength of 112-bits.",
"mechanism": "RSA SigVer (FIPS186-5) (A5395)",
"name": "CO Public Key Certificate",
"perMinute": "Each HTTPS attempt was observed to be 5,024 bytes (40,192 bits). At the module\u0027s maximum rate of 100 mbps, the maximum number of HTTPS attempts per second is 100e6/40192 bits, or 2,488 per second, ignoring packet overhead, equivalent to 149,280 (2,488x60) attempts per minute. Rounding up to the nearest power of 2, assume 2^18 attempts per minute is possible via a script or automated attack. The probability of a success with multiple attempts is 2^18/2^112 = 1/2^94, which is ca. 5.5 times better than the required 1/100,000 (ca. 1/2^17).",
"strength": "The probability that a random attempt will succeed is 1/2^112, which is orders of magnitude less than the required 1/1,000,000 (ca. 1/2^20)."
},
{
"description": "AES-256 key provides an equivalent security strength of 256-bits.",
"mechanism": "AES-CTR (C1431)",
"name": "Network Key",
"perMinute": "AES-256 output blocks are 128-bits in length. The Ciphertext output port is capable of 16Mbps maximum, or 16M/128 = 125K blocks/sec that an attacker could analyze. Rounding up to a power of 2, results in 2^17 blocks per second. Thus, the probability of a success is 2^17/2^256=1/2^239, which is ca. 14 times better than the required 1/100,000 (ca. 1/2^17).",
"strength": "The probability that a random attempt will succeed or a false acceptance will occur is 1/2^256, which is orders of magnitude less than the required 1/1,000,000 (ca. 1/2^20)."
},
{
"description": "Access to non- security relevant functionalities",
"mechanism": "None",
"name": "None",
"perMinute": "NA",
"strength": "NA"
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CTR (C1431)",
"condition": "Power up",
"details": "Encryption, Decryption (Separately)",
"indicator": "Module is operational",
"testMethod": "Separate Encrypt and Decrypt KAT",
"testProps": "256-bit AES key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 5) (A5395)",
"condition": "Power up",
"details": "Sign",
"indicator": "Module is operational",
"testMethod": "Sign KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 5) (A5395)",
"condition": "Power up",
"details": "Verify",
"indicator": "Module is operational",
"testMethod": "Verify KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 5) (A5395)",
"condition": "FW Load",
"details": "Verify",
"indicator": "TSM Software Download PC app shows status",
"testMethod": "Verify KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256",
"type": "SW/FW Load"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "At power-on reset, wait 2 minutes for tests to complete",
"description": "All pre-operational and conditional self-tests run at power-on are not completed within 2- minutes.",
"indicator": "Implicit: No I/O with User and CO modes",
"name": "1st failure",
"recoveryMethod": "Manually power cycle and subsequent start up without errors"
},
{
"conditions": "At power-on reset, wait 2 minutes for tests to complete",
"description": "All pre-operational and conditional self-tests run at power-on are not completed within 2- minutes.",
"indicator": "Implicit: No I/O with User and CO modes",
"name": "2nd failure",
"recoveryMethod": "No recovery"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "Daily",
"inspectGuidance": "Inspect all screws and connector nuts. See figure(s) in Section 2 of the Security Policy. A magnifying glass or camera can be used as an aid for inspection.",
"mechanism": "Tamper Evident Coating"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Initiated by following instructions in section 11.1 of the Security",
"name": "Approved",
"statusIndicator": "Global / implicit indicator (i.e., successful completion of the",
"type": "Approved"
},
{
"description": "Policy",
"name": "",
"statusIndicator": "approved service).",
"type": ""
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [
{
"caveat": "No security claimed",
"name": "AES",
"use": "Used internally and separate from AES Cert # C1431. As per FIPS 140- 3 IG 2.4.A, this is used to \"obfuscate\" data using proprietary implementations. All obfuscated data is treated as plaintext."
},
{
"caveat": "No security claimed",
"name": "SRP",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "DH",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "ECDH",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "DSA",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "ECDSA",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "Triple- DES",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "Camellia",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "SEED",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "RC4",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this"
},
{
"caveat": "",
"name": "",
"use": "purpose."
},
{
"caveat": "No security claimed",
"name": "MD5",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "IDEA",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "SHA-1",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "SHA2- 384",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
},
{
"caveat": "No security claimed",
"name": "KDF",
"use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module\u0027s purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "All data is Ciphertext. User Mode data input/output. CO Mode authenticated control input/output. Non-security status output. Module identification output.",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "RF Antenna Connector"
},
{
"data": "Civilian GPS, plaintext data.",
"logicalInterface": "Data Input",
"physicalPort": "GPS Antenna Connector"
},
{
"data": "All data is Plaintext. User Mode data input/output. CO mode authenticated control input/output. Non-security status output. Module identification output.",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "USB 2.0 OTG"
},
{
"data": "All data is Plaintext. User Mode data input/output. CO mode authenticated control input/output. Non-security status output. Module identification output.",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "USB 2.0 Host"
},
{
"data": "Analog voice data input/output, Push-to-talk control input.",
"logicalInterface": "Data Input Data Output Control Input",
"physicalPort": "Audio Port"
},
{
"data": "Non-security status output only.",
"logicalInterface": "Status Output",
"physicalPort": "LCD"
},
{
"data": "Power on/off and non-security control input only.",
"logicalInterface": "Control Input",
"physicalPort": "Pushbuttons"
},
{
"data": "None.",
"logicalInterface": "Power",
"physicalPort": "Power Connector"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "CO Public Key Certificate",
"name": "Crypto Officer (CO)",
"operatorType": "This role accesses the module via authenticated API services for initialization and configuration of the module. This role also has access to all other services offered by the module.",
"type": "Role"
},
{
"authMethodList": "Network Key",
"name": "User",
"operatorType": "This role allows the module to perform Cryptographic data encryption/ decryption using Approved algorithms.",
"type": "Role"
},
{
"authMethodList": "None",
"name": "Human Operator (HO, Non-security)",
"operatorType": "An unauthenticated operator can control switches, dials, and other unauthenticated services of the module.",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "2",
"section": "1",
"title": "General"
},
{
"level": "2",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "2",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "2",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "2",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "N/A",
"section": "6",
"title": "Operational environment"
},
{
"level": "2",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "2",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "2",
"section": "10",
"title": "Self-tests"
},
{
"level": "2",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "2",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "SHA2-256 (A5395)",
"details": "File system FW Integrity test, FPGA FW Integrity test",
"indicator": "Module becomes operational",
"testMethod": "Secure Hash",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "eMMC (Flash) File",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "Network Key Wireless",
"sfiAlgo": "KTS - Key Wrapping/Unwrapping with AES-CTR and",
"source": "Outside the crypto"
},
{
"dest": "System - SSP storage",
"distribution": "",
"entry": "",
"format": "",
"name": "Entry",
"sfiAlgo": "RSA",
"source": "boundary"
},
{
"dest": "Outside the crypto boundary",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "Network Key Wireless Output",
"sfiAlgo": "KTS - Key Wrapping/Unwrapping with AES-CTR and RSA",
"source": "eMMC (Flash) File System - SSP storage"
},
{
"dest": "eMMC (Flash) File System - SSP storage",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Wired Entry via Key Loader",
"sfiAlgo": "Local HTTPS",
"source": "Outside the crypto boundary"
},
{
"dest": "Outside the crypto boundary",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Wired Output via Key Loader",
"sfiAlgo": "Local HTTPS",
"source": "eMMC (Flash) File System - SSP storage"
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "Cable P/N",
"sfiAlgo": "",
"source": "TW- 860-F"
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1230",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1255",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1650",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1665",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1670",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1710",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1712",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1750",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-1853",
"sfiAlgo": "",
"source": "X"
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "TW-2301",
"sfiAlgo": "",
"source": "X"
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "CBL0770066",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "CBL0770067",
"sfiAlgo": "",
"source": ""
},
{
"dest": "",
"distribution": "",
"entry": "",
"format": "",
"name": "CBL0770072",
"sfiAlgo": "",
"source": ""
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "External app sends an API command to the module",
"method": "Management Application \u0027Perform Clean\u0027",
"operatorId": "Initiation of the CO API command can be manual or by an application outside of the physical and cryptographic boundary",
"rationale": "SSPs are stored in an industry- standard file system and temporary storage. Files containing SSPs are first zeroized by overwriting the file contents with zeroes, followed by a standard file \u0027remove\u0027 command. Finally, a hardware reset is commanded which erases the RAM and FPGA temporary contents."
},
{
"description": "Human operator uses a combination of button presses",
"method": "Emergency",
"operatorId": "Fast zeroization when needed.",
"rationale": "SSPs are stored in an industry- standard file system and temporary storage. Files containing SSPs are first zeroized by overwriting the file contents with zeroes, followed by a standard file \u0027remove\u0027 command. Finally, a hardware reset is commanded which erases the RAM and FPGA temporary contents."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "The eMMC Flash memory is organized as a File System. At power-on the ARM processor calls the Operating System at a fixed entry point in the Flash file system. The Firmware can be updated by authenticated CO services. No services exist to allow readback of Firmware from outside of the physical boundary.",
"name": "eMMC (Flash) File System - Executable Firmware",
"persistance": "Static"
},
{
"description": "SSPs are also stored in the Flash file system. The stored SSPs can only be modified by authenticated CO services. Zeroization shreds and then deletes SSPs to fully prevent later recovery.",
"name": "eMMC (Flash) File System - SSP storage",
"persistance": "Static"
},
{
"description": "SSPs are temporarily copied to RAM to support authentication of CO mode service requests. The temporary copy is overwritten after each service request. No services exist to allow access to the RAM from outside of the physical boundary.",
"name": "RAM",
"persistance": "Dynamic"
},
{
"description": "The FPGA implements the approved AES-CTR algorithm and provides faster processing compared to the ARM processor. AES-CTR keys are copied to FPGA to support the creation of User mode Ciphertext. No services exist to allow access to the FPGA from outside of the physical boundary.",
"name": "FPGA",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "USB PD power, keypad, LCD, no LED, Civilian GPS, USB, Audio port, 2W RF output, IP68",
"fwVersion": "6.2.1-b74",
"hwVersion": "ASY0750340 G",
"modelPartNum": "TW-860- F",
"processors": "Mentor Graphics ModelSim PE 10.6c ARM Cortex A9"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 2
},
"ECDSA": {
"ECDSA": 2
}
},
"FF": {
"DH": {
"DH": 2
},
"DSA": {
"DSA": 2
}
},
"RSA": {
"RSA 2048": 4
}
},
"certification_process": {},
"cipher_mode": {
"CTR": {
"CTR": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"TLS": {
"TLS": {
"TLS": 2
}
}
},
"crypto_scheme": {},
"device_model": {},
"ecc_curve": {},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"# C1431": 1,
"AES- 256": 2,
"AES-256": 5,
"PKCS#1": 6,
"RSA 2048": 4,
"SHA-1": 2,
"SHA-256": 3,
"SHA2- 256": 3,
"SHA2- 384": 1,
"SHA2-256": 6,
"SHA2-384": 1
}
},
"fips_security_level": {
"Level": {
"Level 2": 1
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"SHA": {
"SHA1": {
"SHA-1": 2
},
"SHA2": {
"SHA-256": 3
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140": 2,
"FIPS 140-3": 54,
"FIPS 180-4": 1,
"FIPS 186-5": 2,
"FIPS186-5": 14
},
"NIST": {
"SP 800-38A": 1,
"SP 800-38F": 1
},
"PKCS": {
"PKCS#1": 3
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 4,
"AES-": 8,
"AES-256": 5
},
"CAST": {
"CAST": 6
},
"RC": {
"RC4": 2
}
},
"DES": {
"3DES": {
"Triple-DES": 1
},
"DES": {
"DES": 1
}
},
"miscellaneous": {
"Camellia": {
"Camellia": 2
},
"IDEA": {
"IDEA": 2
},
"SEED": {
"SEED": 2
}
}
},
"tee_name": {
"AMD": {
"PSP": 6
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"RSA SigGen (FIPS186-5)A5395",
"RSA SigVer (FIPS186-5)A5395",
"AES-CTRC1431",
"SHA2-256A5395"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#C1431",
"#A5395"
]
},
"policy_metadata": {
"/CreationDate": "D:20260922093618-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260922093618-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 862529,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 37
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "ddb07c46cea739e0fd9431085b3d514055ec7839b8b31af19fffb5d22164c33e",
"source_hash": "ca4f0a030840fc2a4e084210e8bb102c24fd4ab96679bcb5e0bfe920e089aca0",
"txt_hash": "0fdab554a5d9bb8eefbe6590f2ee00d083236bb32874096ceedebf84b21e7c63"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident sealant installed as indicated in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": null,
"date_sunset": "2031-10-06",
"description": "The TW-860-F are small form-factor radios that employ the latest version of TrellisWare\u0027s TSM waveform and are capable of robust operation at high data rates. The TW-860-F radios support multi-channel voice, IP data, Position Location Information (PLI) tracking, sleep functions for long-term sensing applications, IP gateway features and remote operation of live streaming video sources for networked sensing missions.",
"embodiment": "MultiChipStand",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 2,
"mentioned_certs": {},
"module_name": "TW-860-F TSM Spirit",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-10-07",
"lab": "ADVANCED DATA SECURITY",
"validation_type": "Initial"
}
],
"vendor": "TrellisWare Technologies, Inc.",
"vendor_url": "http://www.trellisware.com"
}
}