{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "6cf69ce9e7aca4e0", "cert_id": 5200, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Rocky Linux 8 OpenSSL Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-03-18", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "https://ciq.com/", "vendor": "Ctrl IQ, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2026_020426_1121-signed.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-03-17", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 2}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 22, "HMAC SHA-256": 2, "SHA2-224": 12, "SHA2-256": 45, "SHA2-384": 11, "SHA2-512": 24, "SHA3-224": 7, "SHA3-256": 10, "SHA3-384": 10, "SHA3-512": 8, "SHA-1": 19, "SHA3- 512": 4, "SHA2- 384": 5, "SHA3- 256": 3, "SHA2- 256": 10, "SHA3- 224": 3, "SHA-2": 1, "SHA-256": 14, "SHA- 256": 12, "SHA-3": 1, "PKCS#1": 36, "AES-128": 3, "AES-192": 4, "AES-256": 5}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 2}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 53, "AES-128": 3, "AES-192": 4, "AES-256": 5, "AES-": 2}, "CAST": {"CAST": 283}}, "constructions": {"MAC": {"HMAC": 22, "CMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 4}, "ECDSA": {"ECDSA": 57}, "EdDSA": {"EdDSA": 2}, "ECC": {"ECC": 3}}, "FF": {"DH": {"DHE": 2, "Diffie-Hellman": 11, "DH": 38}, "DSA": {"DSA": 2}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 19}, "SHA2": {"SHA-256": 14, "SHA-2": 1}, "SHA3": {"SHA3-224": 7, "SHA3-256": 10, "SHA3-384": 10, "SHA3-512": 8, "SHA-3": 1}}, "MD": {"MD5": {"MD5": 1}}, "PBKDF": {"PBKDF2": 5, "PBKDF": 26}}, "crypto_scheme": {"MAC": {"MAC": 20}, "KEX": {"Key Exchange": 2}, "KA": {"Key Agreement": 1}}, "crypto_protocol": {"SSH": {"SSH": 33, "SSHv2": 1}, "TLS": {"TLS": {"TLS": 76, "TLS v1.2": 14, "TLS v1.3": 8, "TLSv1.0": 2, "TLS v1.0": 1, "TLS 1.2": 2, "TLS 1.3": 3, "TLSv1.1": 1, "TLSv1.2": 1, "TLSv1.3": 1}}, "IKE": {"IKE": 2}}, "randomness": {"PRNG": {"DRBG": 40}, "RNG": {"RNG": 1, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 1}, "CTR": {"CTR": 1}, "CFB": {"CFB": 1}, "OFB": {"OFB": 1}, "GCM": {"GCM": 17}, "CCM": {"CCM": 6}, "XTS": {"XTS": 13}}, "ecc_curve": {"NIST": {"P-224": 24, "P-256": 56, "P-384": 24, "P-521": 22, "P-192": 12}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_DH_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_DH_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_DH_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DH_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_PSK_WITH_AES_128_CBC_SHA": 1, "TLS_PSK_WITH_AES_256_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_DH_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_DH_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_DHE_RSA_WITH_AES_128_CCM": 1, "TLS_DHE_RSA_WITH_AES_256_CCM": 1, "TLS_DHE_RSA_WITH_AES_128_CCM_8": 1, "TLS_DHE_RSA_WITH_AES_256_CCM_8": 1}}, "crypto_library": {"OpenSSL": {"OpenSSL": 116}}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"timing attacks": 2}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 9}, "IBM": {"SSC": 1}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 121, "FIPS PUB 140-3": 3, "FIPS186-5": 84, "FIPS 186-5": 20, "FIPS 198-1": 12, "FIPS 180-4": 8, "FIPS 202": 7, "FIPS 140": 1, "FIPS 25": 1, "FIPS 197": 1}, "NIST": {"SP 800-132": 7, "SP 800-56A": 11, "SP 800-38A": 8, "SP 800-38C": 2, "SP 800-38B": 2, "SP 800-38D": 3, "SP 800-38F": 5, "SP 800-38E": 3, "SP 800-90A": 6, "SP 800-56C": 2, "SP 800-135": 7, "SP 800-52": 2, "SP 800-133": 8, "SP 800-140B": 1, "SP 800-90B": 1, "SP 800-131A": 1}, "PKCS": {"PKCS#1": 18}, "RFC": {"RFC7627": 11, "RFC 5288": 3, "RFC8446": 6, "RFC 8446": 2, "RFC 4253": 1, "RFC 6668": 1, "RFC3268": 4, "RFC5246": 4, "RFC4279": 2, "RFC5288": 4, "RFC4492": 8, "RFC5289": 16, "RFC6655": 4, "RFC 3268": 1, "RFC 3526": 1, "RFC 4279": 1, "RFC 4492": 1, "RFC 5246": 1, "RFC 5289": 1, "RFC 6655": 1, "RFC 7919": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1789798, "pdf_is_encrypted": false, "pdf_number_of_pages": 109, "/Author": "Natnael Fantu", "/CreationDate": "D:20260310094942-04'00'", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "f549e5fc-2c5e-431e-9d96-89cdaedc398f", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-03-10T13:43:57Z", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1", "/ModDate": "D:20260310094942-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf", "https://www.rfc-editor.org/rfc/rfc3268.txt", "https://www.rfc-editor.org/rfc/rfc6655.txt", "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "https://www.ietf.org/rfc/rfc5289.txt", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://www.ietf.org/rfc/rfc3526.txt", "https://www.ietf.org/rfc/rfc7919.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://www.rfc-editor.org/rfc/rfc4492.txt", "https://www.rfc-editor.org/rfc/rfc5246.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://www.rfc-editor.org/rfc/rfc4279.txt", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38b.pdf", "https://csrc.nist.gov/projects/cmvp/sp800-140b", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf", "https://www.ietf.org/rfc/rfc8446.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf"]}}, "module_algorithms": {"_type": "Set", "elements": ["PBKDFA6760", "KDF SSHA6759", "ECDSA KeyGen (FIPS186-5)A6758", "KDA HKDF SP800-56Cr2A6761", "ECDSA SigVer (FIPS186-5)A6760", "HMAC-SHA2-224A6758", "SHA2-224A6758", "AES-GCMA6749", "AES-CCMA6740", "HMAC-SHA2-512A6758", "EDDSA SigVerA6763", "SHA3-256A6760", "EDDSA SigGenA6763", "SHA-1A6758", "SHA2-256A6758", "SHAKE-256A6760", "SHAKE-128A6760", "AES-CTRA6740", "AES-CBCA6740", "AES-OFBA6740", "Safe Primes Key VerificationA6762", "Counter DRBGA6740", "AES-CFB1A6740", "HMAC-SHA3-256A6760", "HMAC-SHA3-512A6760", "SHA2-512/256A6758", "AES-CMACA6740", "AES-ECBA6740", "HMAC-SHA3-384A6760", "KAS-ECC-SSC Sp800-56Ar3A6758", "TLS v1.3 KDFA6761", "RSA SigVer (FIPS186-5)A6760", "AES-GMACA6749", "AES-CFB8A6740", "HMAC-SHA2-512/224A6758", "AES-CFB128A6740", "ECDSA KeyVer (FIPS186-5)A6758", "HMAC-SHA2-256A6758", "HMAC-SHA2-384A6758", "SHA3-224A6760", "SHA2-512A6758", "TLS v1.2 KDF RFC7627A6758", "RSA KeyGen (FIPS186-5)A6758", "KAS-FFC-SSC Sp800-56Ar3A6762", "ECDSA SigGen (FIPS186-5)A6760", "Safe Primes Key GenerationA6762", "SHA2-512/224A6758", "SHA3-384A6760", "AES-KWA6740", "EDDSA KeyGenA6763", "HMAC-SHA-1A6758", "AES-KWPA6740", "SHA2-384A6758", "HMAC-SHA3-224A6760", "SHA3-512A6760", "KDF TLSA6758", "HMAC-SHA2-512/256A6758", "AES-XTS Testing Revision 2.0A6740", "RSA SigGen (FIPS186-5)A6760"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A6742", "#A6762", "#A6752", "#A6738", "#A6739", "#A6746", "#A6747", "#A6750", "#A6757", "#A6758", "#A6756", "#A6754", "#A6760", "#A6763", "#A6744", "#A6749", "#A6751", "#A6740", "#A6745", "#A6753", "#A6761", "#A6748", "#A6743", "#A6741", "#A6755", "#A6759"]}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["#A6762", "ECDSA KeyGen (FIPS186-5)A6758", "HMAC-SHA2-224A6758", "HMAC-SHA2-512A6758", "#A6757", "#A6758", "SHA3-256A6760", "SHAKE-256A6760", "SHA2-256A6758", "#A6760", "SHA2-512/256A6758", "#A6751", "HMAC-SHA2-256A6758", "#A6745", "#A6761", "SHA3-384A6760", "AES-KWA6740", "AES-KWPA6740", "SHA2-384A6758", "#A6743", "HMAC-SHA2-512/256A6758", "#A6755", "AES-XTS Testing Revision 2.0A6740", "RSA SigGen (FIPS186-5)A6760", "PBKDFA6760", "KDF SSHA6759", "ECDSA SigVer (FIPS186-5)A6760", "#A6739", "EDDSA SigGenA6763", "AES-CTRA6740", "TLS v1.3 KDFA6761", "RSA SigVer (FIPS186-5)A6760", "AES-GMACA6749", "TLS v1.2 KDF RFC7627A6758", "RSA KeyGen (FIPS186-5)A6758", "#A6740", "KAS-FFC-SSC Sp800-56Ar3A6762", "Safe Primes Key GenerationA6762", "HMAC-SHA3-224A6760", "#A6741", "#A6738", "KDA HKDF SP800-56Cr2A6761", "#A6747", "#A6750", "SHAKE-128A6760", "Safe Primes Key VerificationA6762", "AES-CBCA6740", "#A6763", "AES-CFB1A6740", "HMAC-SHA3-512A6760", "AES-CMACA6740", "AES-ECBA6740", "HMAC-SHA3-384A6760", "#A6744", "#A6749", "AES-CFB128A6740", "SHA3-224A6760", "SHA2-512/224A6758", "#A6748", "SHA3-512A6760", "#A6742", "#A6752", "SHA2-224A6758", "#A6746", "AES-GCMA6749", "AES-CCMA6740", "EDDSA SigVerA6763", "#A6756", "SHA-1A6758", "AES-OFBA6740", "Counter DRBGA6740", "#A6754", "HMAC-SHA3-256A6760", "KAS-ECC-SSC Sp800-56Ar3A6758", "AES-CFB8A6740", "HMAC-SHA2-512/224A6758", "ECDSA KeyVer (FIPS186-5)A6758", "HMAC-SHA2-384A6758", "SHA2-512A6758", "#A6753", "ECDSA SigGen (FIPS186-5)A6760", "EDDSA KeyGenA6763", "HMAC-SHA-1A6758", "KDF TLSA6758", "#A6759"]}, "extracted_versions": {"_type": "Set", "elements": ["8"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "694824855502fb0b6757c9d2ebc6d2b379679431a380fe91544b5f4420517112", "txt_hash": "4206ade70e54836c10f6efcf8dfd4adc8c4df7e4d07bb1d25d711cebb7a9ea8a", "json_hash": "1961530451ff2261ad6cb08198ea5bc5b2199024c408661125b7ceb045a5a58e"}}}