{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "6b25866c1f7dc45d", "cert_id": 5223, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "u.trust Anchor", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-04-01", "validation_type": "Initial", "lab": "Penumbra Security, Inc."}, {"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-04-22", "validation_type": "Update", "lab": "Penumbra Security, Inc."}], "vendor_url": "http://www.utimaco.com", "vendor": "Utimaco IS GmbH", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2026_010526_0732.pdf", "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 3, "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipEmbed", "description": "u.trust Anchor is a new generation of HSM, comprising all traditional hardware security features and introducing containerized HSMs (cHSMs). Each cHSM provides secure cryptographic services such as signing and verification of data, encryption or decryption, hashing, on-board random number generation and secure key generation, key storage and key management functions in a tamper-protected multi-tenant environment. The HSM delivers a highly elastic HSM architecture that scales rapidly on demand and enables service providers to deliver HSM as a Service (HSMaaS) in multiple use cases.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-03-31", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 3": 4, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 2, "HMAC- SHA256": 1, "SHA-1": 14, "SHA2-224": 23, "SHA2-256": 44, "SHA2- 384": 4, "SHA2-512": 40, "SHA2-384": 21, "SHA3-224": 23, "SHA3-256": 23, "SHA3-384": 24, "SHA3-512": 19, "SHA3- 512": 3, "SHA- 3": 1, "SHA-3": 1, "SHA-224": 2, "SHA-256": 1, "SHA-384": 1, "SHA-512": 1, "SHA1": 1, "SHA2- 256": 5, "SHA256": 1, "RSA 3072": 2, "RSA 2048": 1, "PKCS 1": 30, "PKCS#1": 2, "PKCS#11": 2, "PKCS1": 2, "DRBG 512": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 27, "AES-": 1}, "CAST": {"CAST": 53}}, "DES": {"DES": {"DES": 16}, "3DES": {"TDES": 15, "Triple-DES": 1}}, "miscellaneous": {"SM4": {"SM4": 2}}, "constructions": {"MAC": {"HMAC": 9, "CMAC": 1}}}, "asymmetric_crypto": {"RSA": {"RSA 3072": 2, "RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 9}, "ECDSA": {"ECDSA": 81}, "ECIES": {"ECIES": 3}, "ECC": {"ECC": 3}}, "FF": {"DH": {"Diffie-Hellman": 3, "DH": 1}, "DSA": {"DSA": 17}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 14, "SHA1": 1}, "SHA2": {"SHA-224": 2, "SHA-256": 1, "SHA-384": 1, "SHA-512": 1, "SHA256": 1}, "SHA3": {"SHA3-224": 23, "SHA3-256": 23, "SHA3-384": 24, "SHA3-512": 19, "SHA-3": 1}}, "SHAKE": {"SHAKE256": 4}, "MD": {"MD5": {"MD5": 6}}, "RIPEMD": {"RIPEMD-160": 1}, "PBKDF": {"PBKDF": 1}}, "crypto_scheme": {"MAC": {"MAC": 39}, "KA": {"Key Agreement": 4}}, "crypto_protocol": {"TLS": {"TLS": {"TLS": 6, "TLS 1.2": 2}}}, "randomness": {"TRNG": {"TRNG": 1}, "PRNG": {"DRBG": 38}, "RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 9}, "CBC": {"CBC": 22}, "CTR": {"CTR": 7}, "GCM": {"GCM": 5}}, "ecc_curve": {"NIST": {"P-224": 68, "P-256": 90, "P-384": 72, "P-521": 116, "P-192": 22, "B-233": 13, "B-283": 12, "B-409": 17, "B-571": 13, "K-233": 17, "K-283": 13, "K-409": 16, "K-571": 13, "B-163": 5, "K-163": 5, "secp256k1": 13, "secp224k1": 1, "sect239k1": 1}, "Brainpool": {"brainpoolP256r1": 4, "brainpoolP320r1": 4, "brainpoolP384r1": 4, "brainpoolP512r1": 4, "brainpoolP224t1": 4, "brainpoolP256t1": 4, "brainpoolP320t1": 5, "brainpoolP384t1": 4, "brainpoolP512t1": 4}, "ANSSI": {"FRP256v1": 7}, "Curve": {"Curve25519": 3}, "Edwards": {"Ed25519": 2, "Ed448": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 1}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 17}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 18, "FIPS186-4": 20, "FIPS 186-4": 21, "FIPS186-5": 52, "FIPS 186-5": 49, "FIPS 198-1": 12, "FIPS186-2": 4, "FIPS 180-4": 10, "FIPS 202": 6, "FIPS 186-2": 3}, "NIST": {"SP 800-38A": 6, "SP 800-38C": 1, "SP 800-38B": 2, "SP 800-38D": 3, "SP 800-38F": 2, "SP 800-90A": 3, "SP 800-56A": 4, "SP 800-56C": 2, "SP 800-135": 3, "SP 800-108": 4, "SP 800-56B": 4, "NIST SP 800-186": 3, "SP 800-38E": 1, "NIST SP 800-38C": 1, "NIST SP 800-90A": 2, "NIST SP 800-56A": 1, "SP 800-133": 1, "NIST SP 800-38A": 2, "NIST SP 800-38D": 1, "NIST SP 800-38B": 1, "NIST SP 800-133": 1, "NIST SP 800-108": 1, "NIST SP 800-90B": 2, "SP 800-63B": 1, "NIST SP 800-56C": 1}, "PKCS": {"PKCS 1": 15, "PKCS#1": 1, "PKCS#11": 1, "PKCS1": 1}}, "javacard_version": {}, "javacard_api_const": {"curves": {"SM2": 2}}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1835705, "pdf_is_encrypted": false, "pdf_number_of_pages": 102, "/Author": "Josh Klein Valente", "/CreationDate": "D:20260330105546-04'00'", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "dd040b49-83fc-40da-83e2-beaee13c9371", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-03-30T14:51:05Z", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1", "/ModDate": "D:20260330105546-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/108", "https://support.hsm.utimaco.com/", "mailto:support@utimaco.com"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-GCMA6714", "SHA3-384A6713", "KAS-ECC-SSC Sp800-56Ar3A6717", "EDDSA KeyVerA6716", "RSA KeyGen (FIPS186-5)A6717", "AES-KWPA6713", "KDF SP800-108A6714", "HMAC-SHA2-256A6714", "SHA-1A6713", "RSA SigVer (FIPS186-5)A6717", "KDF ANS 9.63A6713", "ECDSA SigVer (FIPS186-5)A6717", "AES-CCMA6713", "EDDSA SigGenA6716", "AES-OFBA6713", "HMAC-SHA-1A6713", "SHA2-512A6715", "DSA SigVer (FIPS186-4)A6713", "HMAC-SHA2-512A6713", "AES-GMACA6713", "AES-CBCA6714", "ECDSA KeyVer (FIPS186-5)A6717", "ECDSA KeyGen (FIPS186-5)A6717", "ECDSA SigGen (FIPS186-5)A6717", "SHA2-224A6713", "EDDSA KeyGenA6716", "RSA SigVer (FIPS186-4)A6717", "SHA3-224A6713", "AES-ECBA6713", "KDA OneStep SP800-56Cr2A6714", "EDDSA SigVerA6716", "HMAC-SHA3-512A6713", "HMAC-SHA3-384A6713", "SHA3-512A6713", "ECDSA KeyVer (FIPS186-4)A6717", "AES-CMACA6714", "SHAKE-256A6713", "Hash DRBGA6715", "SHA2-256A6714", "RSA SigGen (FIPS186-5)A6717", "SHA2-384A6713", "AES-KWA6713", "HMAC-SHA2-384A6713", "KDF TLSA6713", "RSA SigVer (FIPS186-2)A6717", "HMAC-SHA2-224A6713", "HMAC-SHA3-224A6713", "ECDSA SigVer (FIPS186-4)A6717", "KTS-IFCA6717", "HMAC-SHA3-256A6713", "SHA3-256A6713"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "5f8919f735cb60ca0c3e8e44d82b7bd32cae69ec7fd8d1e57a7c453239b1865e", "txt_hash": "9a0d4a260d3b5ff065a641670f2b7007ce3756444fa976daed38c3016b559ad3", "json_hash": null}}}