This page was not yet optimized for use on mobile devices.
Apple corecrypto Module v13.0 [Intel, User, Software, SL1]
Certificate details
| Certificate ID | #5348 |
|---|---|
| Status | active |
| Validation dates | 19.06.2026 |
| Sunset date | 22-01-2030 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Apple corecrypto User Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest. |
| Vendor | Apple Inc. http://www.apple.com |
| Lab | Lightship Security, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-256, AES, AES-, CAST5, CAST, RC4, RC2, DES, Triple-DES, TDES, Blowfish, HMAC, CMAC, CBC-MACAsymmetric Algorithms
ECDH, ECDSA, EdDSA, ECIES, ECC, Diffie-Hellman, DHHash functions
SHA-1, SHA-256, MD4, MD5, RIPEMD, PBKDF, PBKDF2Schemes
MAC, Key AgreementProtocols
TLS v1.0, TLS, TLS 1.2, IPsecRandomness
DRBG, RBGElliptic Curves
P-224, P-256, P-384, P-521, Curve P-192, P-192, curve P-192, Curve25519, Ed25519Block cipher modes
ECB, CBC, GCM, XTSJavaCard API constants
X25519Trusted Execution Environments
PSP, SSCSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-108, SP 800-132, SP 800-67, SP 800-56C, NIST SP 800-140F, PKCS 1, PKCS#1, RFC6637, RFC 5288, RFC 4106, ISO/IEC 19790:2012Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5348,
"dgst": "678638339e672593",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"PBKDFA3509",
"KDF SP800-108A3509",
"#A3510",
"#A3505",
"Safe Primes Key GenerationA3509",
"#A3502",
"KAS-FFC ComponentA3509",
"SHA-1A3512",
"HMAC-SHA2-224A3512",
"#A3512",
"SHA2-256A3512",
"#A3504",
"KAS-ECC-SSC Sp800-56Ar3A3509",
"RSA KeyGen (FIPS186-4)A3509",
"#A3509",
"#A3503",
"TDES-ECBA3509",
"AES-CFB128A3509",
"AES-KWA3509",
"#A3506",
"AES-GCMA3511",
"AES-XTS Testing Revision 2.0A3509",
"#A3507",
"AES-CBCA3509",
"AES-CFB8A3509",
"KAS-FFC-SSC Sp800-56Ar3A3509",
"#A3508",
"Counter DRBGA3511",
"AES-OFBA3509",
"SHA2-512/256A3509",
"ECDSA KeyGen (FIPS186-4)A3509",
"ECDSA SigGen (FIPS186-4)A3509",
"HMAC-SHA2-384A3512",
"SHA2-384A3512",
"AES-CTRA3511",
"AES-CMACA3509",
"ECDSA KeyVer (FIPS186-4)A3509",
"HMAC-SHA-1A3512",
"RSA SigGen (FIPS186-4)A3509",
"SHA2-512A3512",
"#A3501",
"HMAC-SHA2-512A3512",
"AES-ECBA3511",
"HMAC-SHA2-256A3512",
"HMAC-SHA2-512/256A3509",
"RSA SigVer (FIPS186-4)A3509",
"AES-CCMA3511",
"HMAC DRBGA3509",
"#A3511",
"SHA2-224A3512",
"ECDSA SigVer (FIPS186-4)A3509"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"13.0"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A3501",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3502",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3508",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3503",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3504",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3509",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3510",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3511",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3509",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-245760 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3511",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3501",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3502",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3510",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3511",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 8, 96, 1024",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 248",
"reference": ""
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 8, 96, 1024 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 248",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 8, 96, 1024 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 248",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3510",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 8, 96, 1024 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 248",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3511",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 8, 96, 1024 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 248",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Payload Length - Payload Length: 128-4096 Increment 128",
"reference": ""
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3501",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 65536 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3502",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 65536 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3503",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 65536 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3504",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 65536 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 65536 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3503",
"properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 128, Additional Input: 0, 256 Entropy Input - Entropy Input: 128, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64, 128 Personalization String Length - Personalization",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "String Length: 0, 128, Personalization String Length: 0, 256 Returned Bits - 128",
"reference": ""
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3504",
"properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 128, Additional Input: 0, 256 Entropy Input - Entropy Input: 128, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64, 128 Personalization String Length - Personalization String Length: 0, 128, Personalization String Length: 0, 256 Returned Bits - 128",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3509",
"properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 128, Additional Input: 0, 256 Entropy Input - Entropy Input: 128, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64, 128 Personalization String Length - Personalization String Length: 0, 128, Personalization String Length: 0, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3510",
"properties": "Returned Bits - 128 Prediction Resistance - No Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 128, Additional Input: 0, 256 Entropy Input - Entropy Input: 128, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64, 128 Personalization String Length - Personalization String Length: 0, 128, Personalization String Length: 0, 256 Returned Bits - 128",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3511",
"properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-128, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0, 128, Additional Input: 0, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Entropy Input - Entropy Input: 128, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64, 128 Personalization String Length - Personalization String Length: 0, 128, Personalization String Length: 0, 256 Returned Bits - 128",
"reference": ""
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3505",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Entropy Input - Entropy Input: 128, 160, Entropy Input: 192, 256, Entropy Input: 256 Nonce - Nonce: 128, 256, Nonce: 64, 160, Nonce: 96, 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3506",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Entropy Input - Entropy Input: 128, 160, Entropy Input: 192, 256, Entropy Input: 256 Nonce - Nonce: 128, 256, Nonce: 64, 160, Nonce: 96, 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 1024, 2048, 384, 448, 640",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3507",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Entropy Input - Entropy Input: 128, 160, Entropy Input: 192, 256, Entropy Input: 256 Nonce - Nonce: 128, 256, Nonce: 64, 160, Nonce: 96, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 1024, 2048, 384, 448, 640",
"reference": ""
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3509",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512 Entropy Input - Entropy Input: 128, 160, Entropy Input: 192, 256, Entropy Input: 256 Nonce - Nonce: 128, 256, Nonce: 64, 160, Nonce: 96, 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 1024, 2048, 384, 448, 640",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3505",
"properties": "MAC - MAC: 160 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3506",
"properties": "MAC - MAC: 160 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3507",
"properties": "MAC - MAC: 160 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3509",
"properties": "MAC - MAC: 160 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3512",
"properties": "MAC - MAC: 160 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3505",
"properties": "MAC - MAC: 224 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3506",
"properties": "MAC - MAC: 224 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3507",
"properties": "MAC - MAC: 224 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3509",
"properties": "MAC - MAC: 224 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3512",
"properties": "MAC - MAC: 224 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3505",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3506",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3507",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3509",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3512",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3505",
"properties": "MAC - MAC: 384 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3506",
"properties": "MAC - MAC: 384 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3507",
"properties": "MAC - MAC: 384 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3509",
"properties": "MAC - MAC: 384 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3512",
"properties": "MAC - MAC: 384 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3505",
"properties": "MAC - MAC: 512 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3506",
"properties": "MAC - MAC: 512 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3507",
"properties": "MAC - MAC: 512 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3509",
"properties": "MAC - MAC: 512 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3512",
"properties": "MAC - MAC: 512 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3505",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3506",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3507",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3509",
"properties": "MAC - MAC: 256 Key Length - Key Length: 8-262144 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A3509",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Hash Function Z - SHA2-512 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC Component",
"cavpCertName": "A3509",
"properties": "Function - Full Public Key Validation Scheme - dhEphem - KAS Role - Initiator, Responder Shared Secret Computation - Parameter Set - FC - Hash Algorithm - SHA2-256",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A3509",
"properties": "Domain Parameter Generation Methods - MODP- 2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Hash Function Z - SHA2-512",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Scheme - dhEphem - KAS Role - initiator, responder",
"reference": ""
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A3505",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC- SHA2-512 Supported Lengths - Supported Lengths: 8-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A3506",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC- SHA2-512 Supported Lengths - Supported Lengths: 8-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Requires Empty IV - No",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A3507",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC- SHA2-512 Supported Lengths - Supported Lengths: 8-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A3509",
"properties": "KDF Mode - Counter, Feedback MAC Mode - CMAC-AES128, CMAC-AES192, CMAC-AES256, HMAC-SHA-1, HMAC-SHA2- 224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512 Supported Lengths - Supported Lengths: 8-4096 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 16, 24, 32, 8 Supports Empty IV - No Requires Empty IV - No Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3505",
"properties": "Iteration Count - Iteration Count: 10-1000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3506",
"properties": "Iteration Count - Iteration Count: 10-1000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3507",
"properties": "Iteration Count - Iteration Count: 10-1000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3509",
"properties": "Iteration Count - Iteration Count: 10-1000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3505",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3506",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3507",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3509",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A3509",
"properties": "Safe Prime Groups - MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3505",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3506",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3507",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3509",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3512",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3505",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3506",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3507",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3509",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3512",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3505",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3506",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3507",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3509",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3512",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3505",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3506",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3507",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3509",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3512",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3505",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3506",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3507",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3509",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3512",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3505",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3506",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3507",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3509",
"properties": "Message Length - Message Length: 0-32768 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "TDES-ECB",
"cavpCertName": "A3509",
"properties": "Direction - Decrypt, Encrypt Keying Option - 1",
"reference": "SP 800-67 Rev. 2"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Encrypt plaintext data",
"indicator": "1",
"inputs": "Plaintext data and key",
"name": "Symmetric encryption",
"outputs": "Ciphertext data",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "AES Cipher AES Authenticate d Cipher"
},
{
"description": "Decrypt ciphertext data",
"indicator": "1",
"inputs": "Ciphertext data and key",
"name": "Symmetric decryption",
"outputs": "Plaintext data",
"rolesSspAccess": "Crypto Officer - AES key: W,E - TDES Key: W,E",
"secFunImpl": "AES Cipher AES Authenticate d Cipher TDES Decryption"
},
{
"description": "Perform key wrapping",
"indicator": "1",
"inputs": "AES key wrapping key, key to be wrapped",
"name": "Key wrapping",
"outputs": "Wrapped key",
"rolesSspAccess": "Crypto Officer - AES Key Wrapping key: W,E",
"secFunImpl": "AES Authenticate d Cipher"
},
{
"description": "Perform key unwrapping",
"indicator": "1",
"inputs": "Wrapped key, AES key wrapping key",
"name": "Key unwrapping",
"outputs": "Unwrappe d key",
"rolesSspAccess": "Crypto Officer - AES Key Wrapping key: W,E",
"secFunImpl": "AES Authenticate d Cipher"
},
{
"description": "Compute a message digest",
"indicator": "1",
"inputs": "Message",
"name": "Hashing",
"outputs": "Digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Compute a message authenticatio n code",
"indicator": "1",
"inputs": "Message, MAC key, MAC algorithm",
"name": "MAC Generation",
"outputs": "MAC",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E - AES key: W,E",
"secFunImpl": "MAC (CMAC) MAC (HMAC)"
},
{
"description": "Verify a message authenticatio n code",
"indicator": "1",
"inputs": "MAC, message, MAC key, MAC algorithm",
"name": "MAC Verification",
"outputs": "Pass/Fail",
"rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E",
"secFunImpl": "MAC (CMAC) MAC (HMAC)"
},
{
"description": "Derive key from key derivation key",
"indicator": "1",
"inputs": "KDF key derivation key",
"name": "Derive key via KBKDF",
"outputs": "KDF derived key",
"rolesSspAccess": "Crypto Officer - KBKDF Key derivation key: W,E - KBKDF Derived key: G,R",
"secFunImpl": "Key Derivation"
},
{
"description": "Derive key from password",
"indicator": "1",
"inputs": "Password",
"name": "Derive Key via PBKDF",
"outputs": "PBKDF derived key",
"rolesSspAccess": "Crypto Officer - PBKDF Password : W,E - PBKDF derived key: G,R",
"secFunImpl": "Key Derivation"
},
{
"description": "Generate a public/private key pair",
"indicator": "1",
"inputs": "Curve size",
"name": "ECDSA key pair generation",
"outputs": "ECDSA key pair",
"rolesSspAccess": "Crypto Officer - ECDSA private key: G,R - ECDSA public key: G,R",
"secFunImpl": "ECC Key Generation"
},
{
"description": "Sign a message with a specified ECDSA private key",
"indicator": "1",
"inputs": "Private key, message, hash function",
"name": "ECDSA signature generation",
"outputs": "Compute signature",
"rolesSspAccess": "Crypto Officer - ECDSA private key: E",
"secFunImpl": "ECDSA Digital Signature"
},
{
"description": "Verify the signature of a message with a specified ECDSA public key",
"indicator": "1",
"inputs": "Public key, digital signature, message, hash function",
"name": "ECDSA signature verification",
"outputs": "Pass/Fail result of digital signature verification",
"rolesSspAccess": "Crypto Officer - ECDSA public key: W,E",
"secFunImpl": "ECDSA Digital Signature"
},
{
"description": "Generate a public/private key pair",
"indicator": "1",
"inputs": "Key size",
"name": "RSA key pair generation",
"outputs": "RSA Key pair",
"rolesSspAccess": "Crypto Officer - RSA public key: G,R - RSA private key: G,R",
"secFunImpl": "IFC Key Generation"
},
{
"description": "Generate a digital signature",
"indicator": "1",
"inputs": "Private key, message, hash function",
"name": "RSA signature generation",
"outputs": "Computed signature",
"rolesSspAccess": "Crypto Officer - RSA private key: E",
"secFunImpl": "RSA Digital Signature"
},
{
"description": "Verify a digital signature",
"indicator": "1",
"inputs": "Public key, digital signature, message, hash function",
"name": "RSA signature verification",
"outputs": "Pass/Fail result of digital signature verification",
"rolesSspAccess": "Crypto Officer - RSA public key: W,E",
"secFunImpl": "RSA Digital Signature"
},
{
"description": "Generate a keypair for a requested \u0027safe\u0027 domain parameter",
"indicator": "1",
"inputs": "Key size",
"name": "Safe primes key generation",
"outputs": "FFC Key pair",
"rolesSspAccess": "Crypto Officer - DH public key: G,R - DH private key: G,R",
"secFunImpl": "FFC Key Generation"
},
{
"description": "Generate a shared secret",
"indicator": "1",
"inputs": "Domain parameter, received public key and possessed private key",
"name": "Diffie- Hellman Shared Secret Computatio n",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - DH public key: W,E - DH private key: E",
"secFunImpl": "FFC Key Agreement"
},
{
"description": "Generate a shared secret",
"indicator": "1",
"inputs": "Domain parameter, received public key and",
"name": "EC Diffie- Hellman Shared Secret Computatio n",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - EC DH public key: W,E - EC DH",
"secFunImpl": "ECC Key Agreement"
},
{
"description": "",
"indicator": "",
"inputs": "possessed private key",
"name": "",
"outputs": "",
"rolesSspAccess": "private key: E",
"secFunImpl": ""
},
{
"description": "Generate a random number",
"indicator": "1",
"inputs": "Requested number of bits",
"name": "Random number generation",
"outputs": "Random bit-string",
"rolesSspAccess": "Crypto Officer - DRBG entropy input: W,E - DRBG Seed, Internal State V, and Key (IG D.L):",
"secFunImpl": "Random Bit Generation"
},
{
"description": "Zeroise all SSPs",
"indicator": "1",
"inputs": "Handler of crypto function context",
"name": "Zeroisation",
"outputs": "Released memory space",
"rolesSspAccess": "G,E Crypto Officer - AES key: Z - AES Key Wrapping key: Z - DH public key: Z - DH private key: Z - EC DH public key: Z - EC DH private key: Z - DRBG entropy input: Z - DRBG Seed, Internal State V, and Key (IG D.L): Z - ECDSA public key: Z - ECDSA",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "private key: Z - HMAC key: Z - KBKDF Key derivation key: Z - KBKDF Derived key: Z - RSA public key: Z - RSA private key: Z - PBKDF Password : Z - PBKDF derived key: Z - TDES",
"secFunImpl": ""
},
{
"description": "Perform pre- operational and algorithm self-test",
"indicator": "1",
"inputs": "Instantiatio n",
"name": "On- Demand Self-test",
"outputs": "Status",
"rolesSspAccess": "Key: Z Crypto Officer",
"secFunImpl": "AES Cipher AES Authenticate d Cipher MAC (CMAC) MAC (HMAC) Message Digest Key Derivation Random Bit Generation ECC Key Generation FFC Key Generation IFC Key Generation ECDSA Digital Signature RSA Digital"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Signature ECC Key Agreement FFC Key Agreement TDES Decryption"
},
{
"description": "Return module status",
"indicator": "N/A",
"inputs": "API invocation",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return module name and versioning information",
"indicator": "N/A",
"inputs": "API invocation",
"name": "Show Module and Version Information",
"outputs": "Module informatio n",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3512)",
"condition": "Test runs at power- on before the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CBC (A3501)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CBC (A3502)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CBC (A3503)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CBC (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CBC (A3508)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CBC (A3509)",
"condition": "Test runs at power- on after the",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CCM (A3503)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CCM (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CCM (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CCM (A3510)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-CCM (A3511)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- GCM (A3503)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- GCM (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- GCM (A3509)",
"condition": "Test runs at power- on after",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "the integrity test",
"details": "",
"indicator": "operation al",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES- GCM (A3510)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- GCM (A3511)",
"condition": "Test runs at power- on after the integrity test",
"details": "Authenticated Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3501)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3502)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3503)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3501)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3502)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3503)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3510)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-ECB (A3511)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-KW (A3503)",
"condition": "Test runs at power- on after the",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-KW (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "AES-KW (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Encryption/Decrypti on",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt/decry pt",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3503)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3504)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3510)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "Counter DRBG (A3511)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3505)",
"condition": "Test runs at power- on after",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "the integrity test",
"details": "",
"indicator": "operation al",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC DRBG (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "As specified in NIST SP 800-90Ar1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3512)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3512)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAS T"
},
{
"algorithmOrTest": "AES- CMAC (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Message Authentication",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3505)",
"condition": "Test runs at power- on after the",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "PKCS#1v1.5 with 2048 bit key and SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "2048 bit key and SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-",
"condition": "Test runs at power- on after",
"details": "Digital Signature Generation",
"indicator": "Module becomes",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "4) (A3505)",
"condition": "the integrity test",
"details": "",
"indicator": "operation al",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Generation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Digital Signature Verification",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "P-256 curve with SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "KAS-FFC- SSC Sp800- 56Ar3 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "DH Shared Secret Computation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "Diffie-Hellman \"Z\" computation",
"type": "CAS T"
},
{
"algorithmOrTest": "KAS- ECC-SSC Sp800- 56Ar3 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "ECDH Shared Secret Computation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "EC Diffie- Hellman \"Z\" computation",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3506)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512",
"type": "CAS T"
},
{
"algorithmOrTest": "PBKDF (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512",
"type": "CAS T"
},
{
"algorithmOrTest": "KDF SP800- 108 (A3505)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "Counter and Feedback modes",
"type": "CAS T"
},
{
"algorithmOrTest": "KDF SP800- 108 (A3506)",
"condition": "Test runs at power- on after the",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "Counter and Feedback modes",
"type": "CAS T"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KDF SP800- 108 (A3507)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "Counter and Feedback modes",
"type": "CAS T"
},
{
"algorithmOrTest": "KDF SP800- 108 (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Key Derivation",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "Counter and Feedback modes",
"type": "CAS T"
},
{
"algorithmOrTest": "TDES- ECB (A3509)",
"condition": "Test runs at power- on after the integrity test",
"details": "Symmetric Decryption",
"indicator": "Module becomes operation al",
"testMethod": "KAT",
"testProps": "168-bit key, decrypt",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3505)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3506)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3507)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3509)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "Safe Primes Key Generatio",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "(FIPS186- 4) (A3505)",
"condition": "",
"details": "",
"indicator": "generatio n",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3506)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3507)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3509)",
"condition": "Key pair generation",
"details": "Key Generation",
"indicator": "Successfu l key pair generatio n",
"testMethod": "PCT",
"testProps": "PCT",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "1) Preoperatio nal Software Integrity Test failure 2) Conditional CAST failure 3) Conditional PCT failure",
"description": "1) The HMAC- SHA2-256 value computed over the module did not match the precompute d value or 2) The computed value in the invoked Conditional CAST did",
"indicator": "1) Error message \"FAILED: fipspost_post_integrity\" send to caller or 2) Error message \"FAILED:\u003cevent\u003e\" sent to caller (\u003cevent\u003e refers to any of the cryptographic functions listed Table - Conditional Self-Tests, 3) Error code \"CCEC_GENERATE_KEY_CONSISTE NCY\" returned for ECDSA and EC Diffie- Hellman Error code \"CCRSA_GENERATE_KEY_CONSIST ENCY\" returned for RSA Error code \"CCDH_GENERATE_KEY_CONSISTE NCY\" returned for Diffie-Hellman",
"name": "Error State",
"recoveryMethod": "Power cycle the device which results in the module being reloaded into memory and reperformin g the preoperatio nal software integrity test and the Conditional CASTs"
},
{
"conditions": "",
"description": "not match the known value or 3) The signature failed to generate/ver ify successfully in the Conditional PCT. No cryptographi c services are provided, and data output is prohibited",
"indicator": "",
"name": "",
"recoveryMethod": ""
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Approved mode of operation is entered when the module utilizes the services that use the security functions listed in the Approved Algorithms Table and the Vendor Affirmed Algorithms Table.",
"name": "Approved mode",
"statusIndicator": "Return a \u00271\u0027 from fips_allowed_mode() for block cipher functions and fips_allowed() for all other services to indicate the executed cryptographic algorithm was approved.",
"type": "Approved"
},
{
"description": "Non-Approved mode of operation is entered when the module utilizes non-approved security functions in the Non- Approved Algorithms Not Allowed in the Approved Mode of Operation Table.",
"name": "Non- Approved mode",
"statusIndicator": "Return a \u00270\u0027 from fips_allowed_mode() for block cipher functions and fips_allowed() for all other services to indicate the executed cryptographic algorithm was non-approved.",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [
{
"caveat": "Allowed in Approved mode with no security claimed per IG 2.4.A Digest Size: 128-bit",
"name": "MD5",
"use": "Message Digest (used as part of the TLS v1.0, v1.1 key establishment scheme only)"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "RSA Key Generation",
"use": "ANSI X9.31 Key Pair Generation Key Size \u003c 2048"
},
{
"name": "RSA Digital Signature",
"use": "PKCS#1 v1.5 and PSS; Signature Generation Key Size \u003c 2048; Signature Verification Key Size \u003c 1024"
},
{
"name": "RSA Key Wrapping",
"use": "OAEP, PKCS#1 v1.5 and PSS schemes"
},
{
"name": "Diffie Hellman",
"use": "Shared Secret Computation using key size \u003c 2048"
},
{
"name": "EC Diffie Hellman",
"use": "Shared Secret Computation using curves \u003c P-224"
},
{
"name": "X25519",
"use": "Key Agreement, Key Generation"
},
{
"name": "Ed25519",
"use": "Key Generation, Signature Generation, Signature Verification"
},
{
"name": "ANSI X9.63 KDF",
"use": "Hash based Key Derivation Function"
},
{
"name": "RFC6637",
"use": "Key Derivation Function"
},
{
"name": "HKDF [SP 800-56C]",
"use": "Key Derivation Function"
},
{
"name": "DES",
"use": "Encryption/Decryption; Key Size: 56-bits"
},
{
"name": "CAST5",
"use": "Encryption/Decryption; Key Sizes: 40 to 128-bits in 8-bit increments"
},
{
"name": "RC4",
"use": "Encryption Decryption; Key Sizes: 8 to 4096-bits"
},
{
"name": "RC2",
"use": "Encryption/Decryption; Key Sizes 8 to 1024-bits"
},
{
"name": "MD2",
"use": "Message Digest; Digest size 128-bit"
},
{
"name": "MD4",
"use": "Message Digest, Digest size 128-bit"
},
{
"name": "MD5",
"use": "Message Digest size: 160-bit (except in the TLS 1.0/1.1 context)"
},
{
"name": "RIPEMD",
"use": "Message Digest; Digest size 160-bits"
},
{
"name": "ECDSA",
"use": "Key-pair generation: Curve P-192; Public key validation: Curve P- 192; Signature Generation: Curve P-192; Signature Verification: Curve P-192; Key Pair Generation for compact point representation of points"
},
{
"name": "Integrated Encryption Scheme on elliptic curves (ECIES)",
"use": "Encryption/Decryption"
},
{
"name": "Blowfish",
"use": "Encryption/Decryption"
},
{
"name": "OMAC (One-Key CBC MAC)",
"use": "MAC generation"
},
{
"name": "Triple-DES [SP 800- 67r2]",
"use": "CBC Encryption/Decryption and ECB encryption; Note: The module does not enforce the limit of 216 encryptions with the same Triple- DES key, as required by FIPS 140-3 IG C.G."
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "Triple-DES [SP 800-67r2]",
"description": "Module does not meet FIPS 140-3 IG C.G.; Input for Encryption: key and plain text; Output for Encryption: cipher text; Input for Decryption: key and ciphertext; Output for Decryption: plaintext",
"name": "Triple-DES encryption/decryption",
"role": "CO"
},
{
"alg_accessed": "RSA Key Wrapping",
"description": "RSA encrypt/decrypt. Input (RSA encrypt): RSA public key, key to be wrapped; Output (RSA encrypt): wrapped key; Input (RSA decrypt): RSA private key, key to be unwrapped; Output (RSA encrypt): plaintext key",
"name": "RSA Key Encapsulation",
"role": "CO"
},
{
"alg_accessed": "RSA Key Generation",
"description": "ANSI X9.31 Key-pair Generation; Key Size \u003c 2048; Input: key size; Output: generated key pair",
"name": "RSA Key-pair Generation",
"role": "CO"
},
{
"alg_accessed": "RSA Digital Signature",
"description": "PKCS#1 v1.5 and PSS Signature Generation; Key Size \u003c 2048; Input: RSA private key, message; Output: signature",
"name": "RSA Signature Generation",
"role": "CO"
},
{
"alg_accessed": "RSA Digital Signature",
"description": "PKCS#1 v1.5 and PSS Signature Verification; Key Size \u003c 1024; Input: RSA public key, signature; Output: true or false",
"name": "RSA Signature Verification",
"role": "CO"
},
{
"alg_accessed": "Diffie Hellman",
"description": "For key sizes \u003c 2048; Input: peer public key and own private key; Output: shared secret",
"name": "Diffie Hellman Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "EC Diffie Hellman",
"description": "For curve sizes \u003c P-224; Input: peer public key and own private key; Output: shared secret",
"name": "EC Diffie Hellman Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "ECDSA PKG and PKV using curve P- 192; Input for PKG: curve size (P-192); Output: generated (P-192) private and public key pair; Input for PKV: public key; Output: True or False",
"name": "ECDSA Key-pair Generation (PKG) and ECDSA Key Validation (PKV)",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "ECDSA Signature Generation using curve P-192; Input: (P-192) private key and message; Output: signature",
"name": "ECDSA Signature Generation",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "ECDSA Signature Verification using curve P-192; Input: (P-192) public key and signature; Output: True or False",
"name": "ECDSA Signature Verification",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "Key Pair Generation for compact point representation of points; Input: key size; Output: generated private and public key pair",
"name": "ECDSA Key Pair Generation for compact point representation of points",
"role": "CO"
},
{
"alg_accessed": "X25519 Ed25519",
"description": "Ed25519 Key Generation; Input: none; Output: generated Ed25519/Curve25519 private and public key pair",
"name": "Ed25519/X25519 Key Generation",
"role": "CO"
},
{
"alg_accessed": "Ed25519",
"description": "Ed25519 Signature Generation over Curve25519; Input: (Ed25519) private key and message; Output: signature",
"name": "Ed25519 Signature Generation",
"role": "CO"
},
{
"alg_accessed": "Ed25519",
"description": "EdDSA Signature Verification over Ed25519; Input: (Ed25519) public key and signature; Output: True or False",
"name": "Ed25519 Signature Verification",
"role": "CO"
},
{
"alg_accessed": "X25519",
"description": "X25519 Key Agreement; Input: peer public key and own private key; Output: shared secret",
"name": "X25519 Key Agreement",
"role": "CO"
},
{
"alg_accessed": "Integrated Encryption Scheme on elliptic curves (ECIES)",
"description": "Elliptic Curve encrypt/decrypt; Input for encryption: peer public key, plaintext; Output for encryption: public key, ciphertext (with authentication tag); Input for decryption: authentication tag, ciphertext, own private key; Output for decryption: plaintext message or error",
"name": "ECIES",
"role": "CO"
},
{
"alg_accessed": "ANSI X9.63 KDF",
"description": "SHA-1 hash-based; Input: key derivation key; Output: derived key",
"name": "ANSI X9.63 Key Derivation",
"role": "CO"
},
{
"alg_accessed": "HKDF [SP 800-56C]",
"description": "SHA-256 hash-based; Input: key derivation key; Output: derived key",
"name": "SP 800-56C Key Derivation (HKDF)",
"role": "CO"
},
{
"alg_accessed": "RFC6637",
"description": "SHA hash based; Input: key derivation key; Output: derived key",
"name": "RFC6637 Key Derivation",
"role": "CO"
},
{
"alg_accessed": "OMAC (One- Key CBC MAC)",
"description": "One-Key CBC-MAC using 128-bit key; For Message Authentication Code Generation: Input: message and key; Output: message authentication code (MAC); For Message Authentication Code Verification: Input: message, key, and MAC; Output: True or False",
"name": "OMAC Message Authentication Code Generation and Verification",
"role": "CO"
},
{
"alg_accessed": "MD2 MD4 MD5 RIPEMD",
"description": "Message digest generation using non- approved algorithms; Input: message; Output: message digest",
"name": "Message digest generation",
"role": "CO"
},
{
"alg_accessed": "DES CAST5 RC4 RC2 Blowfish",
"description": "Symmetric encryption/decryption using non-approved algorithms; Input for Encryption: key and plain text; Output for Encryption: cipher text; Input for Decryption: key and cipher text; Output for Decryption: plain text",
"name": "(other) symmetric encryption/decryption",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Data inputs are provided in the variables passed in the API and callable service invocations, generally through caller-supplied buffers.",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "Data outputs are provided in the variables passed in the API and callable service invocations, generally through caller-supplied buffers.",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "Control inputs which control the mode of the module are provided through dedicated parameters.",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "Status output is provided in return codes and through messages. Documentation for each API lists possible return codes. A complete list of all return codes returned by the C language APIs within the module is provided in the header files and the API documentation. Messages are also documented in the API documentation.",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A3512)",
"details": "The HMAC-SHA2- 256 value calculated at runtime is compared with the HMAC-SHA2-256 value stored in the module, computed at compilation time",
"indicator": "Module successful execution",
"testMethod": "Message Authentication over the complete module file image",
"testProps": "112-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "RAM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "RAM"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "SSPs are zeroised when the appropriate context object is destroyed.",
"method": "Context object destruction",
"operatorId": "Invocation of zeroization function cc_clear().",
"rationale": "Zeroization when structure is deallocated."
},
{
"description": "SSPs are zeroised when the system is powered down.",
"method": "Power down",
"operatorId": "Operator can initiate power down.",
"rationale": "SSPs are zeroised when the system is powered down."
},
{
"description": "Intermediate keygen values are zeroized before the module returns from the key generation function.",
"method": "Intermediate value zeroization",
"operatorId": "N/A",
"rationale": "Intermediate keygen values are zeroized before the module returns from the key generation function."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "The module stores ephemeral SSPs in RAM provided by the operational environment. They are received for use or generated by the module only at the command of the calling application. The operating system protects all SSPs through memory separation and protection mechanisms. No process other than the module itself can access the SSPs in its process\u0027 memory.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "MacBook Air 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Intel i5 (Amber Lake 8210Y)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Air 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Intel i5 (Amber Lake 8210Y)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Air 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Intel i7 (Ice Lake 1060NG7)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Air 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Intel i7 (Ice Lake 1060NG7)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Intel i7 (Coffee Lake 8700B)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Intel i7 (Coffee Lake 8700B)",
"version": "v13.0"
},
{
"hardwarePlatform": "iMac 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Intel i7 (Comet Lake 10700K)",
"version": "v13.0"
},
{
"hardwarePlatform": "iMac 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Intel i7 (Comet Lake 10700K)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Intel i9 (Coffee Lake 9880H)",
"version": "v13.0"
},
{
"hardwarePlatform": "MacBook Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Intel i9 (Coffee Lake 9880H)",
"version": "v13.0"
},
{
"hardwarePlatform": "iMac Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Xeon W (SkyLake W-2140B)",
"version": "v13.0"
},
{
"hardwarePlatform": "iMac Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Xeon W (SkyLake W-2140B)",
"version": "v13.0"
},
{
"hardwarePlatform": "Mac Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Xeon W (Cascade Lake W-3223)",
"version": "v13.0"
},
{
"hardwarePlatform": "Mac Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Xeon W (Cascade Lake W-3223)",
"version": "v13.0"
},
{
"hardwarePlatform": "Mac Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "Yes",
"processors": "Intel i5 (Coffee Lake 8257U)",
"version": "v13.0"
},
{
"hardwarePlatform": "Mac Pro 2022",
"hypervisorHostOs": "N/A",
"operatingSystem": "macOS Ventura v13",
"paa_pai": "No",
"processors": "Intel i5 (Coffee Lake 8257U)",
"version": "v13.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric",
"implName": "N/A",
"name": "CKG",
"reference": "NIST SP800-133r2 Section 4: Using the Output of a Random Generator, Example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "MacBook Pro - i5 (Ice Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Pro - i5 (Coffee Lake), 2021, 2020, 2019, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Pro - i7 (Amber Lake), 2021, 2019, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Pro - i7 (Coffee Lake), 2021, 2020, 2019, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Pro - i7 (Ice Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Pro - i9 (Coffee Lake), 2021, 2019, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Air - i5 (Ice Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Air - i7 (Ice Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Air - i5 (Amber Lake), 2021, 2019, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "MacBook Air - i7 (Amber Lake), 2021, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "Mac mini - i5 (Coffee Lake), 2021, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "Mac mini - i7 (Coffee Lake), 2021, 2018",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i5 (Comet Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i7 (Comet Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i9 (Comet Lake), 2021, 2020",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i5 (Coffee Lake), 2021, 2019",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i7 (Coffee Lake), 2021, 2019",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i9 (Coffee Lake), 2021, 2019",
"operatingSystem": "macOS Ventura v13"
},
{
"hardwarePlatform": "iMac - i9 (Comet Lake), 2022",
"operatingSystem": "macOS Ventura v13"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 17
},
"ECDH": {
"ECDH": 2
},
"ECDSA": {
"ECDSA": 86
},
"ECIES": {
"ECIES": 3
},
"EdDSA": {
"EdDSA": 1
}
},
"FF": {
"DH": {
"DH": 25,
"Diffie-Hellman": 4
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 3
},
"ECB": {
"ECB": 2
},
"GCM": {
"GCM": 9
},
"XTS": {
"XTS": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IPsec": {
"IPsec": 3
},
"TLS": {
"TLS": {
"TLS": 6,
"TLS 1.2": 1,
"TLS v1.0": 1
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 16
},
"MAC": {
"MAC": 60
}
},
"device_model": {},
"ecc_curve": {
"Curve": {
"Curve25519": 1
},
"Edwards": {
"Ed25519": 11
},
"NIST": {
"Curve P-192": 3,
"P-192": 13,
"P-224": 46,
"P-256": 58,
"P-384": 44,
"P-521": 42,
"curve P-192": 2
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 8,
"AES key 128": 1,
"AES-128": 5,
"AES-256": 6,
"AES-CMAC (128": 1,
"HMAC- SHA-1": 5,
"HMAC-SHA- 1": 8,
"HMAC-SHA-1": 32,
"HMAC-SHA2384": 2,
"PKCS 1": 8,
"PKCS#1": 8,
"SHA-1": 32,
"SHA-256": 1,
"SHA2- 256": 15,
"SHA2- 384": 8,
"SHA2-224": 25,
"SHA2-256": 41,
"SHA2-384": 13,
"SHA2-512": 36
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"MD": {
"MD4": {
"MD4": 2
},
"MD5": {
"MD5": 4
}
},
"PBKDF": {
"PBKDF": 29,
"PBKDF2": 1
},
"RIPEMD": {
"RIPEMD": 2
},
"SHA": {
"SHA1": {
"SHA-1": 32
},
"SHA2": {
"SHA-256": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {
"curves": {
"X25519": 5
}
},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 46
},
"RNG": {
"RBG": 3
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 82,
"FIPS 180-4": 29,
"FIPS 186-4": 28,
"FIPS 198-1": 29,
"FIPS PUB 140-3": 1,
"FIPS186-4": 60
},
"ISO": {
"ISO/IEC 19790:2012": 1
},
"NIST": {
"NIST SP 800-140F": 1,
"SP 800-108": 4,
"SP 800-132": 6,
"SP 800-38A": 27,
"SP 800-38B": 1,
"SP 800-38C": 5,
"SP 800-38D": 5,
"SP 800-38E": 5,
"SP 800-38F": 3,
"SP 800-56A": 4,
"SP 800-56C": 3,
"SP 800-67": 1,
"SP 800-90A": 9
},
"PKCS": {
"PKCS 1": 8,
"PKCS#1": 4
},
"RFC": {
"RFC 4106": 1,
"RFC 5288": 1,
"RFC6637": 3
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 32,
"AES-": 6,
"AES-128": 5,
"AES-256": 6
},
"CAST": {
"CAST": 85,
"CAST5": 2
},
"RC": {
"RC2": 1,
"RC4": 2
}
},
"DES": {
"3DES": {
"TDES": 10,
"Triple-DES": 3
},
"DES": {
"DES": 3
}
},
"constructions": {
"MAC": {
"CBC-MAC": 1,
"CMAC": 7,
"HMAC": 29
}
},
"miscellaneous": {
"Blowfish": {
"Blowfish": 2
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
},
"IBM": {
"SSC": 1
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"PBKDFA3509",
"KDF SP800-108A3509",
"Safe Primes Key GenerationA3509",
"KAS-FFC ComponentA3509",
"SHA-1A3512",
"HMAC-SHA2-224A3512",
"SHA2-256A3512",
"KAS-ECC-SSC Sp800-56Ar3A3509",
"RSA KeyGen (FIPS186-4)A3509",
"TDES-ECBA3509",
"AES-CFB128A3509",
"AES-KWA3509",
"AES-GCMA3511",
"AES-XTS Testing Revision 2.0A3509",
"AES-CBCA3509",
"AES-CFB8A3509",
"KAS-FFC-SSC Sp800-56Ar3A3509",
"Counter DRBGA3511",
"AES-OFBA3509",
"SHA2-512/256A3509",
"ECDSA KeyGen (FIPS186-4)A3509",
"ECDSA SigGen (FIPS186-4)A3509",
"HMAC-SHA2-384A3512",
"SHA2-384A3512",
"AES-CTRA3511",
"AES-CMACA3509",
"ECDSA KeyVer (FIPS186-4)A3509",
"HMAC-SHA-1A3512",
"RSA SigGen (FIPS186-4)A3509",
"SHA2-512A3512",
"HMAC-SHA2-512A3512",
"AES-ECBA3511",
"HMAC-SHA2-256A3512",
"HMAC-SHA2-512/256A3509",
"RSA SigVer (FIPS186-4)A3509",
"AES-CCMA3511",
"HMAC DRBGA3509",
"SHA2-224A3512",
"ECDSA SigVer (FIPS186-4)A3509"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3510",
"#A3501",
"#A3503",
"#A3505",
"#A3502",
"#A3508",
"#A3511",
"#A3512",
"#A3506",
"#A3504",
"#A3507",
"#A3509"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/CreationDate": "D:20260616130632-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260616130632-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1115446,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.lightshipsec.com/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 70
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "01bbb7ba5fc7d00ed6f76a3dff69d675508b387363e7440cdf682d1eafc0d9c1",
"source_hash": "6d409e78279c1c08ed2b97cff78bc934224ca544176903ab3f733e72d3b15d15",
"txt_hash": "83dc5bd6fd43dd959ceed5114bc8585e72311b12e1cb9a1e33784e1227b8dab9"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
"date_sunset": "2030-01-22",
"description": "The Apple corecrypto User Space Module for Intel is a software cryptographic module running on a multi-chip standalone hardware device and provides services intended to protect data in transit and at rest.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Apple corecrypto Module v13.0 [Intel, User, Software, SL1]",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-06-19",
"lab": "Lightship Security, Inc.",
"validation_type": "Initial"
}
],
"vendor": "Apple Inc.",
"vendor_url": "http://www.apple.com"
}
}