{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "6334610e2b0395f3", "cert_id": 5544, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "TW-860-F TSM Spirit", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-07", "validation_type": "Initial", "lab": "ADVANCED DATA SECURITY"}], "vendor_url": "http://www.trellisware.com", "vendor": "TrellisWare Technologies, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The tamper evident sealant installed as indicated in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The TW-860-F are small form-factor radios that employ the latest version of TrellisWare's TSM waveform and are capable of robust operation at high data rates. The TW-860-F radios support multi-channel voice, IP data, Position Location Information (PLI) tracking, sleep functions for long-term sensing applications, IP gateway features and remote operation of live streaming video sources for networked sensing missions.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-06", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 2": 1}}, "fips_certlike": {"Certlike": {"SHA2-256": 6, "SHA-1": 2, "SHA2- 384": 1, "SHA2-384": 1, "SHA-256": 3, "SHA2- 256": 3, "RSA 2048": 4, "PKCS#1": 6, "AES-256": 5, "AES- 256": 2, "# C1431": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 4, "AES-256": 5, "AES-": 8}, "CAST": {"CAST": 6}, "RC": {"RC4": 2}}, "DES": {"DES": {"DES": 1}, "3DES": {"Triple-DES": 1}}, "miscellaneous": {"IDEA": {"IDEA": 2}, "Camellia": {"Camellia": 2}, "SEED": {"SEED": 2}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 4}, "ECC": {"ECDH": {"ECDH": 2}, "ECDSA": {"ECDSA": 2}}, "FF": {"DH": {"DH": 2}, "DSA": {"DSA": 2}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 2}, "SHA2": {"SHA-256": 3}}, "MD": {"MD5": {"MD5": 2}}}, "crypto_scheme": {}, "crypto_protocol": {"TLS": {"TLS": {"TLS": 2}}}, "randomness": {"RNG": {"RBG": 2}}, "cipher_mode": {"CTR": {"CTR": 9}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 6}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 54, "FIPS186-5": 14, "FIPS 186-5": 2, "FIPS 180-4": 1, "FIPS 140": 2}, "NIST": {"SP 800-38A": 1, "SP 800-38F": 1}, "PKCS": {"PKCS#1": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 862529, "pdf_is_encrypted": false, "pdf_number_of_pages": 37, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260922093618-04'00'", "/ModDate": "D:20260922093618-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "module_algorithms": {"_type": "Set", "elements": ["RSA SigGen (FIPS186-5)A5395", "RSA SigVer (FIPS186-5)A5395", "AES-CTRC1431", "SHA2-256A5395"]}, "policy_algorithms": {"_type": "Set", "elements": ["#C1431", "#A5395"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "2"}, {"section": "2", "title": "Cryptographic module specification", "level": "2"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "2"}, {"section": "4", "title": "Roles, services, and authentication", "level": "2"}, {"section": "5", "title": "Software/Firmware security", "level": "2"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "2"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "2"}, {"section": "10", "title": "Self-tests", "level": "2"}, {"section": "11", "title": "Life-cycle assurance", "level": "2"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "2"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "TW-860- F", "hwVersion": "ASY0750340 G", "fwVersion": "6.2.1-b74", "processors": "Mentor Graphics ModelSim PE 10.6c ARM Cortex A9", "features": "USB PD power, keypad, LCD, no LED, Civilian GPS, USB, Audio port, 2W RF output, IP68"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "Approved", "description": "Initiated by following instructions in section 11.1 of the Security", "type": "Approved", "statusIndicator": "Global / implicit indicator (i.e., successful completion of the"}, {"name": "", "description": "Policy", "type": "", "statusIndicator": "approved service)."}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CTR", "cavpCertName": "C1431", "properties": "Direction - Encrypt Key Length - 256", "reference": "SP 800-38A"}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A5395", "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048 Signature Type - pkcs1v1.5", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A5395", "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048 Signature Type - pkcs1v1.5 Public Exponent Mode - random", "reference": "FIPS 186-5"}, {"algorithm": "SHA2-256", "cavpCertName": "A5395", "properties": "Message Length - Message Length: 8- 51200 Increment 8", "reference": "FIPS 180-4"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES", "caveat": "No security claimed", "use": "Used internally and separate from AES Cert # C1431. As per FIPS 140- 3 IG 2.4.A, this is used to \"obfuscate\" data using proprietary implementations. All obfuscated data is treated as plaintext."}, {"name": "SRP", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "DH", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "ECDH", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "DSA", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "ECDSA", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "Triple- DES", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "Camellia", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "SEED", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "RC4", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this"}, {"name": "", "caveat": "", "use": "purpose."}, {"name": "MD5", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "IDEA", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "SHA-1", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "SHA2- 384", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}, {"name": "KDF", "caveat": "No security claimed", "use": "As per FIPS 140-3 IG 2.4.A, this is used between applications/web browser and the module; however, the module's purpose is to provide end-to-end secure communications over an insecure communications channel. Module does not rely on the security of this algorithm for this purpose."}]}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "RF Antenna Connector", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "All data is Ciphertext. User Mode data input/output. CO Mode authenticated control input/output. Non-security status output. Module identification output."}, {"physicalPort": "GPS Antenna Connector", "logicalInterface": "Data Input", "data": "Civilian GPS, plaintext data."}, {"physicalPort": "USB 2.0 OTG", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "All data is Plaintext. User Mode data input/output. CO mode authenticated control input/output. Non-security status output. Module identification output."}, {"physicalPort": "USB 2.0 Host", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "All data is Plaintext. User Mode data input/output. CO mode authenticated control input/output. Non-security status output. Module identification output."}, {"physicalPort": "Audio Port", "logicalInterface": "Data Input Data Output Control Input", "data": "Analog voice data input/output, Push-to-talk control input."}, {"physicalPort": "LCD", "logicalInterface": "Status Output", "data": "Non-security status output only."}, {"physicalPort": "Pushbuttons", "logicalInterface": "Control Input", "data": "Power on/off and non-security control input only."}, {"physicalPort": "Power Connector", "logicalInterface": "Power", "data": "None."}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "CO Public Key Certificate", "description": "The RSA certificate contains a 2048- bit key signed with a SHA-256 hash function. An RSA 2048-bit key provides an equivalent security strength of 112-bits.", "mechanism": "RSA SigVer (FIPS186-5) (A5395)", "strength": "The probability that a random attempt will succeed is 1/2^112, which is orders of magnitude less than the required 1/1,000,000 (ca. 1/2^20).", "perMinute": "Each HTTPS attempt was observed to be 5,024 bytes (40,192 bits). At the module's maximum rate of 100 mbps, the maximum number of HTTPS attempts per second is 100e6/40192 bits, or 2,488 per second, ignoring packet overhead, equivalent to 149,280 (2,488x60) attempts per minute. Rounding up to the nearest power of 2, assume 2^18 attempts per minute is possible via a script or automated attack. The probability of a success with multiple attempts is 2^18/2^112 = 1/2^94, which is ca. 5.5 times better than the required 1/100,000 (ca. 1/2^17)."}, {"name": "Network Key", "description": "AES-256 key provides an equivalent security strength of 256-bits.", "mechanism": "AES-CTR (C1431)", "strength": "The probability that a random attempt will succeed or a false acceptance will occur is 1/2^256, which is orders of magnitude less than the required 1/1,000,000 (ca. 1/2^20).", "perMinute": "AES-256 output blocks are 128-bits in length. The Ciphertext output port is capable of 16Mbps maximum, or 16M/128 = 125K blocks/sec that an attacker could analyze. Rounding up to a power of 2, results in 2^17 blocks per second. Thus, the probability of a success is 2^17/2^256=1/2^239, which is ca. 14 times better than the required 1/100,000 (ca. 1/2^17)."}, {"name": "None", "description": "Access to non- security relevant functionalities", "mechanism": "None", "strength": "NA", "perMinute": "NA"}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Crypto Officer (CO)", "type": "Role", "operatorType": "This role accesses the module via authenticated API services for initialization and configuration of the module. This role also has access to all other services offered by the module.", "authMethodList": "CO Public Key Certificate"}, {"name": "User", "type": "Role", "operatorType": "This role allows the module to perform Cryptographic data encryption/ decryption using Approved algorithms.", "authMethodList": "Network Key"}, {"name": "Human Operator (HO, Non-security)", "type": "Role", "operatorType": "An unauthenticated operator can control switches, dials, and other unauthenticated services of the module.", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Crypto Officer Authenticati on", "description": "Uses the CO Public Key Certificate to allow the CO to access the unit for", "indicator": "Managem ent app receives a result", "inputs": "CO Public Key Certifica te", "outputs": "Status of CO authenticati on", "secFunImpl": "Authentication of CO", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E"}, {"name": "", "description": "Security and Non- security configurati on.", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- TWT CA Public Key Certificat e: R,E"}, {"name": "Non- Security Configurati on", "description": "Configure non- security settings and Wideband RF settings.", "indicator": "Managem ent app receives a result", "inputs": "CO Public Key Certifica te Non- security settings and Wideba nd RF settings", "outputs": "Status of CO authenticati on Status of Non- Security Configurati on", "secFunImpl": "Authentication of CO", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E"}, {"name": "Security Configurati on", "description": "Enter and select the FIPS-140 SSP's - CO Public Key Certificate and AES- 256 CTR Network Key via manual distribution electronic entry. Prior to a certificate update, the module is automatica lly zeroized.", "indicator": "Managem ent app receives a result", "inputs": "CO Public Key Certifica te FIPS- 140 SSP's - CO Public Key Certifica te and AES- 256 CTR Network Key", "outputs": "Status of Local HTTPS Key Loader Input/Outpu t Status of Security Configurati on", "secFunImpl": "Local HTTPS", "rolesSspAccess": "Crypto Officer (CO) - Network Key: R,W - CO Public Key Certificat e: R,W,E - TWT CA Public Key Certificat e: R"}, {"name": "Packet Forwarding", "description": "Provides packet transfer between the RF Ciphertext", "indicator": "Managem ent App shows # of nodes and network utilization", "inputs": "Network packets to be forward ed", "outputs": "Processed network packets to be forwarded", "secFunImpl": "Packet Creation and Forwarding", "rolesSspAccess": "User - Network Key: R,E"}, {"name": "", "description": "port and Plaintext Ethernet ports. Packets are encrypted and decrypted using the AES-256 Network Key.", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "Packet Creation", "description": "Provides Ciphertext packet creation from internal Plaintext sources (GPS, Audio, Video). Packets are encrypted using the AES-256 Network Key. Encrypted packets are transmitted via RF.", "indicator": "Managem ent app shows status and network utilization", "inputs": "Plaintex t from internal sources", "outputs": "Encrypted network packets", "secFunImpl": "Packet Creation and Forwarding", "rolesSspAccess": "User - Network Key: R,E"}, {"name": "Network Monitoring & Remote Control", "description": "Monitor network and individual radios. Remote control of radio non- security settings and stream control.", "indicator": "Managem ent app shows status and network data", "inputs": "CO Public Key Certifica te Radio non- security settings and stream control", "outputs": "Status of CO authenticati on Network monitoring data Status of radio non- security settings and stream configuratio", "secFunImpl": "Packet Creation and Forwarding Authentication of CO", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat"}, {"name": "Firmware Upgrade", "description": "Upgrade firmware release. Note: If non-FIPS validated firmware is loaded, the module is no longer a FIPS validated module.", "indicator": "TSM Software Download PC app shows status", "inputs": "CO Public Key Certifica te Firmwar e", "outputs": "n Status of CO authenticati on Status of the upgrade", "secFunImpl": "Firmware load test", "rolesSspAccess": "e: R,E Crypto Officer (CO) - CO Public Key Certificat e: R,W,E - TWT CA Public Key Certificat e: R,W,E - FW Load Public Key: R,E - CO Private Key: W"}, {"name": "Power-on Module Self-Tests", "description": "Performs module's power-up self-tests. If failing, enters Error state.", "indicator": "Managem ent app shows the status of the module", "inputs": "None", "outputs": "Status of the module's power-up self-tests", "secFunImpl": "Packet Creation and Forwarding Authentication of CO FW Integrity Test KTS - Key Wrapping/Unwrap ping with AES- CTR and RSA", "rolesSspAccess": "Human Operator (HO, Non- security)"}, {"name": "Module Status API", "description": "Provides CO Non- security Status API service for PC, Android and Web apps.", "indicator": "Managem ent app shows status of the module", "inputs": "CO Public Key Certifica te", "outputs": "Status of CO authenticati on Non- security status", "secFunImpl": "Authentication of CO", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E"}, {"name": "FIPS Zeroize (OTAC)", "description": "Remotely zeroize all CSPs in", "indicator": "Managem ent apps do not see", "inputs": "CO Public Key", "outputs": "Status of CO authenticati", "secFunImpl": "Authentication of CO Packet Creation", "rolesSspAccess": "Crypto Officer (CO)"}, {"name": "", "description": "the module. Once zeroized, the module must be reinitialized as described above.", "indicator": "the status of the module", "inputs": "Certifica te Request to zeroize", "outputs": "on Status of zeroization", "secFunImpl": "and Forwarding", "rolesSspAccess": "- CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E - Network Key: Z"}, {"name": "Cloning of keys", "description": "Remotely clone Network Key", "indicator": "Managem ent app receives a result", "inputs": "CO Public Key Certifica te Request to clone", "outputs": "Status of cloning", "secFunImpl": "KTS - Key Wrapping/Unwrap ping with AES- CTR and RSA", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - CO Private Key: R,E - Network Key: W"}, {"name": "Manual Non- Security Configurati on (devices with LCD only)", "description": "Selection of voice channel, volume and other non- security configurati on parameter s using the manual controls on", "indicator": "LCD", "inputs": "Keypad or buttons", "outputs": "LCD", "secFunImpl": "None", "rolesSspAccess": "Human Operator (HO, Non- security)"}, {"name": "Show Status", "description": "the unit. Uses the CO Public Key Certificate to allow the CO to", "indicator": "Managem ent app receives the status", "inputs": "CO Public Key Certifica te", "outputs": "Status of CO authenticati on Status of the module", "secFunImpl": "Authentication of CO", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key"}, {"name": "", "description": "access the unit to see the status", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Certificat e: R,E - TWT CA Public Key Certificat e: R,E"}, {"name": "Show Version", "description": "Uses the CO Public Key Certificate to allow the CO to access the unit to see the version of the module", "indicator": "Managem ent app receives the version", "inputs": "CO Public Key Certifica te", "outputs": "Status of CO authenticati on Version of the module", "secFunImpl": "Authentication of CO", "rolesSspAccess": "Crypto Officer (CO) - CO Public Key Certificat e: R,E - TWT CA Public Key Certificat e: R,E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Tamper Evident Coating", "inspectFreq": "Daily", "inspectGuidance": "Inspect all screws and connector nuts. See figure(s) in Section 2 of the Security Policy. A magnifying glass or camera can be used as an aid for inspection."}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "eMMC (Flash) File System - Executable Firmware", "description": "The eMMC Flash memory is organized as a File System. At power-on the ARM processor calls the Operating System at a fixed entry point in the Flash file system. The Firmware can be updated by authenticated CO services. No services exist to allow readback of Firmware from outside of the physical boundary.", "persistance": "Static"}, {"name": "eMMC (Flash) File System - SSP storage", "description": "SSPs are also stored in the Flash file system. The stored SSPs can only be modified by authenticated CO services. Zeroization shreds and then deletes SSPs to fully prevent later recovery.", "persistance": "Static"}, {"name": "RAM", "description": "SSPs are temporarily copied to RAM to support authentication of CO mode service requests. The temporary copy is overwritten after each service request. No services exist to allow access to the RAM from outside of the physical boundary.", "persistance": "Dynamic"}, {"name": "FPGA", "description": "The FPGA implements the approved AES-CTR algorithm and provides faster processing compared to the ARM processor. AES-CTR keys are copied to FPGA to support the creation of User mode Ciphertext. No services exist to allow access to the FPGA from outside of the physical boundary.", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Network Key Wireless", "source": "Outside the crypto", "dest": "eMMC (Flash) File", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS - Key Wrapping/Unwrapping with AES-CTR and"}, {"name": "Entry", "source": "boundary", "dest": "System - SSP storage", "format": "", "distribution": "", "entry": "", "sfiAlgo": "RSA"}, {"name": "Network Key Wireless Output", "source": "eMMC (Flash) File System - SSP storage", "dest": "Outside the crypto boundary", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "KTS - Key Wrapping/Unwrapping with AES-CTR and RSA"}, {"name": "Wired Entry via Key Loader", "source": "Outside the crypto boundary", "dest": "eMMC (Flash) File System - SSP storage", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "Local HTTPS"}, {"name": "Wired Output via Key Loader", "source": "eMMC (Flash) File System - SSP storage", "dest": "Outside the crypto boundary", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "Local HTTPS"}, {"name": "Cable P/N", "source": "TW- 860-F", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1230", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1255", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1650", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1665", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1670", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1710", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1712", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1750", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-1853", "source": "X", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "TW-2301", "source": "X", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "CBL0770066", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "CBL0770067", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}, {"name": "CBL0770072", "source": "", "dest": "", "format": "", "distribution": "", "entry": "", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Management Application 'Perform Clean'", "description": "External app sends an API command to the module", "rationale": "SSPs are stored in an industry- standard file system and temporary storage. Files containing SSPs are first zeroized by overwriting the file contents with zeroes, followed by a standard file 'remove' command. Finally, a hardware reset is commanded which erases the RAM and FPGA temporary contents.", "operatorId": "Initiation of the CO API command can be manual or by an application outside of the physical and cryptographic boundary"}, {"method": "Emergency", "description": "Human operator uses a combination of button presses", "rationale": "SSPs are stored in an industry- standard file system and temporary storage. Files containing SSPs are first zeroized by overwriting the file contents with zeroes, followed by a standard file 'remove' command. Finally, a hardware reset is commanded which erases the RAM and FPGA temporary contents.", "operatorId": "Fast zeroization when needed."}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "SHA2-256 (A5395)", "testProps": "SHA2-256", "testMethod": "Secure Hash", "type": "SW/FW Integrity", "indicator": "Module becomes operational", "details": "File system FW Integrity test, FPGA FW Integrity test"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-CTR (C1431)", "testProps": "256-bit AES key", "testMethod": "Separate Encrypt and Decrypt KAT", "type": "CAST", "indicator": "Module is operational", "details": "Encryption, Decryption (Separately)", "condition": "Power up"}, {"algorithmOrTest": "RSA SigGen (FIPS186- 5) (A5395)", "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256", "testMethod": "Sign KAT", "type": "CAST", "indicator": "Module is operational", "details": "Sign", "condition": "Power up"}, {"algorithmOrTest": "RSA SigVer (FIPS186- 5) (A5395)", "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256", "testMethod": "Verify KAT", "type": "CAST", "indicator": "Module is operational", "details": "Verify", "condition": "Power up"}, {"algorithmOrTest": "RSA SigVer (FIPS186- 5) (A5395)", "testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2- 256", "testMethod": "Verify KAT", "type": "SW/FW Load", "indicator": "TSM Software Download PC app shows status", "details": "Verify", "condition": "FW Load"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "1st failure", "description": "All pre-operational and conditional self-tests run at power-on are not completed within 2- minutes.", "conditions": "At power-on reset, wait 2 minutes for tests to complete", "recoveryMethod": "Manually power cycle and subsequent start up without errors", "indicator": "Implicit: No I/O with User and CO modes"}, {"name": "2nd failure", "description": "All pre-operational and conditional self-tests run at power-on are not completed within 2- minutes.", "conditions": "At power-on reset, wait 2 minutes for tests to complete", "recoveryMethod": "No recovery", "indicator": "Implicit: No I/O with User and CO modes"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["RSA SigVer (FIPS186-5)A5395", "#A5395", "AES-CTRC1431", "SHA2-256A5395", "#C1431", "RSA SigGen (FIPS186-5)A5395"]}, "extracted_versions": {"_type": "Set", "elements": ["860"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "ca4f0a030840fc2a4e084210e8bb102c24fd4ab96679bcb5e0bfe920e089aca0", "txt_hash": "0fdab554a5d9bb8eefbe6590f2ee00d083236bb32874096ceedebf84b21e7c63", "json_hash": "ddb07c46cea739e0fd9431085b3d514055ec7839b8b31af19fffb5d22164c33e"}}}