Symantec SymSSLf Cryptographic Module

Certificate #3076

Webpage information

Status historical
Historical reason SP 800-56Arev3 transition
Validation dates 07.12.2017 , 20.12.2017
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates cryptographic keys whose strengths are modified by available entropy
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description Symantec SymSSLf Cryptographic Module is a Windows software library that provides FIPS 140-2 validated cryptographic algorithm support to Symantec products.
Tested configurations
  • Windows 7 SP1 running on a Dell Precision WorkStation T5500 with Intel Xeon E5620 with PAA
  • Windows 7 SP1 running on a Dell Precision WorkStation T5500 with Intel Xeon E5620 without PAA (single-user mode)
Vendor Symantec Corporation
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, DES, Triple-DES, HMAC, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512, CMAC
Asymmetric Algorithms
RSA 1024, ECDSA, ECC, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA1, SHA-224, SHA-256, SHA-512, SHA-384
Schemes
Key agreement
Protocols
TLS
Randomness
DRBG, RNG
Elliptic Curves
P-224, P-256, P-384, P-521, P-192, K-233, K-283, K-409, K-571, B-233, B-283, B-409, B-571, B-163
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM

Security level
Level 1

Standards
FIPS 140-2, FIPS 197, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 186-2, SP 800-38B, SP 800-38C, SP 800-38D, SP 800-67, PKCS#1

File metadata

Title Symantec SymSSLf Security Policy
Author Symantec Corporation
Creation date D:20171211111522-08'00'
Modification date D:20171211111601-08'00'
Pages 28
Creator Acrobat PDFMaker 18 for Word
Producer Adobe PDF Library 15.0

References

Outgoing
  • 2460 - historical - Astro Subscriber Motorola Advanced Crypto Engine (MACE) - Security Level 2

Heuristics

No heuristics are available for this certificate.

References

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3076,
  "dgst": "72cd46089d7d81cf",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#3704",
        "Triple-DES#2410",
        "AES#4516",
        "SHS#3703",
        "CVL#1199",
        "ECDSA#1099",
        "DRBG#1477",
        "Triple-DES#2411",
        "HMAC#2982",
        "CVL#1198",
        "DSA#1202",
        "ECDSA#1098",
        "DSA#1203",
        "HMAC#2983",
        "AES#4515",
        "DRBG#1476"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "2460"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "2414",
          "2460",
          "1751",
          "1535"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "2460"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 16
          },
          "ECDSA": {
            "ECDSA": 15
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          },
          "DSA": {
            "DSA": 14
          }
        },
        "RSA": {
          "RSA 1024": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 3
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 5
        },
        "GCM": {
          "GCM": 3
        },
        "OFB": {
          "OFB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 3,
          "B-233": 7,
          "B-283": 3,
          "B-409": 7,
          "B-571": 8,
          "K-233": 9,
          "K-283": 7,
          "K-409": 8,
          "K-571": 7,
          "P-192": 6,
          "P-224": 16,
          "P-256": 16,
          "P-384": 14,
          "P-521": 16
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1098": 1,
          "#1099": 1,
          "#1198": 1,
          "#1199": 1,
          "#1202": 1,
          "#1203": 1,
          "#1476": 1,
          "#1477": 1,
          "#2410": 1,
          "#2411": 1,
          "#2460": 1,
          "#2461": 1,
          "#2982": 1,
          "#2983": 1,
          "#3703": 1,
          "#3704": 1,
          "#4515": 1,
          "#4516": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#1199 CVL": 1,
          "#1477 DRBG": 1,
          "#2461 RSA": 1,
          "#2983 HMAC": 1,
          "#3704 SHS": 1,
          "#4516 AES": 1,
          "AES 128, 192": 1,
          "AES, 256": 1,
          "AES-128": 2,
          "AES-192": 2,
          "AES-256": 2,
          "HMAC-SHA-1": 10,
          "HMAC-SHA-224": 8,
          "HMAC-SHA-256": 8,
          "HMAC-SHA-384": 8,
          "HMAC-SHA-512": 6,
          "HMAC-SHA-512 112": 2,
          "PKCS#1": 2,
          "RSA 1024": 1,
          "SHA- 1": 1,
          "SHA- 384": 1,
          "SHA-1": 16,
          "SHA-1, 224": 3,
          "SHA-224": 4,
          "SHA-256": 7,
          "SHA-384": 4,
          "SHA-512": 5,
          "SHA1": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 4
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 19,
            "SHA1": 3
          },
          "SHA2": {
            "SHA-224": 4,
            "SHA-256": 7,
            "SHA-384": 4,
            "SHA-512": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 29
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 77,
          "FIPS 180-4": 1,
          "FIPS 186-2": 3,
          "FIPS 186-4": 9,
          "FIPS 197": 4,
          "FIPS 198-1": 1
        },
        "NIST": {
          "SP 800-38B": 2,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-67": 2
        },
        "PKCS": {
          "PKCS#1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 19,
            "AES-128": 2,
            "AES-192": 2,
            "AES-256": 2
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 13
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 13,
            "HMAC": 5,
            "HMAC-SHA-224": 4,
            "HMAC-SHA-256": 4,
            "HMAC-SHA-384": 4,
            "HMAC-SHA-512": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Symantec Corporation",
      "/Comments": "",
      "/Company": "Aegisolve, Inc.",
      "/CreationDate": "D:20171211111522-08\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 18 for Word",
      "/Keywords": "",
      "/ModDate": "D:20171211111601-08\u002700\u0027",
      "/Producer": "Adobe PDF Library 15.0",
      "/SourceModified": "D:20171211185616",
      "/Subject": "",
      "/Title": "Symantec SymSSLf Security Policy",
      "pdf_file_size_bytes": 302890,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://csrc.nist.gov/groups/STM/cmvp/",
          "https://www.symantec.com/",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar1.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 28
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "333784ec86569fc207e71a6d4aaa1f5f1fa1db306939eb534e489c32ffff3472",
    "policy_txt_hash": "19e174f5ad08bb7787f7f635f84defa0cefcddf62ef4163468836f7bb86450b2"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates cryptographic keys whose strengths are modified by available entropy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertDec2017.pdf",
    "date_sunset": null,
    "description": "Symantec SymSSLf Cryptographic Module is a Windows software library that provides FIPS 140-2 validated cryptographic algorithm support to Symantec products.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "SP 800-56Arev3 transition",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Symantec SymSSLf Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "1.0.1",
    "tested_conf": [
      "Windows 7 SP1 running on a Dell Precision WorkStation T5500 with Intel Xeon E5620 with PAA",
      "Windows 7 SP1 running on a Dell Precision WorkStation T5500 with Intel Xeon E5620 without PAA (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-12-07",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-12-20",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "Symantec Corporation",
    "vendor_url": "http://www.symantec.com"
  }
}