This page was not yet optimized for use on mobile devices.
Dell BSAFE™ Crypto Module for C
Certificate details
| Certificate ID | #5512 |
|---|---|
| Status | active |
| Validation dates | 03.09.2026 |
| Sunset date | 18-02-2030 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The module generates SSPs (e.g., keys) and random strings whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs |
| Exceptions |
|
| Description | Dell BSAFE™ Crypto Module for C software library is designed for developers to incorporate FIPS 140-3 approved cryptography into C-based products. Dell BSAFE™ Crypto Module for C security software helps protect sensitive data as it is stored, using strong encryption techniques that ease integration with existing data models. Using the capabilities of Dell BSAFE™ Crypto Module for C software in applications helps provide a persistent level of protection for data, lessening the risk of internal, as well as external, compromise. |
| Vendor | Dell Australia Pty Limited, BSAFE Product Team http://www.dell.com |
| Lab | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, TDES, 3DES, HMAC, CMACAsymmetric Algorithms
ECDSA, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA1, SHA-512, SHA2, SHA3-256, SHA3-384, SHA3-512, SHA3-224, MD5, PBKDF, PBKDF2Schemes
MAC, Key AgreementProtocols
SSH, TLS, TLS v1.2, TLSv1.2Randomness
DRBG, RNG, RBGElliptic Curves
P-224, P-256, P-384, P-521, P-192, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, B-163, K-163Block cipher modes
ECB, CBC, CTR, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCVendor
MicrosoftSecurity level
Level 1Side-channel analysis
timing attacks, Timing AttacksStandards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-2, FIPS 180-4, FIPS 202, FIPS18, SP 800-38A, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-135, SP 800-132, SP 800-52, SP 800-56C, SP 800-57, SP 800-56B, SP 800-131A, SP 800-107, PKCS 1, PKCS #1, RFC7627, RFC 5288, RFC76Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5512,
"dgst": "75868569c7f5ef9f",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KDF TLSA2308",
"HMAC-SHA2-512A2308",
"AES-ECBA2308",
"SHA2-256A2308",
"AES-CCMA2308",
"AES-GMACA2308",
"TLS v1.2 KDF RFC7627A2308",
"DSA PQGVer (FIPS186-4)A2308",
"SHA2-512A2308",
"SHA-1A2308",
"KDA OneStep Sp800-56Cr1A2308",
"HMAC-SHA2-256A2308",
"HMAC-SHA2-512/256A2308",
"#A2308",
"Safe Primes Key VerificationA2308",
"AES-GCMA2308",
"SHA2-224A2308",
"RSA Decryption PrimitiveA2308",
"HMAC-SHA3-224A2308",
"AES-CFB128A2308",
"ECDSA SigGen (FIPS186-4)A2308",
"AES-CBCA2308",
"AES-CBC-CS3A2308",
"AES-KWA2308",
"HMAC-SHA3-256A2308",
"ECDSA KeyVer (FIPS186-4)A2308",
"HMAC-SHA2-224A2308",
"KDA HKDF Sp800-56Cr1A2308",
"DSA SigVer (FIPS186-4)A2308",
"ECDSA KeyGen (FIPS186-4)A2308",
"RSA SigVer (FIPS186-4)A2308",
"SHA3-256A2308",
"SHA2-384A2308",
"KAS-IFC-SSCA2308",
"AES-XTS Testing Revision 2.0A2308",
"ECDSA SigVer (FIPS186-4)A2308",
"AES-CTRA2308",
"KAS-ECC-SSC Sp800-56Ar3A2308",
"HMAC-SHA2-384A2308",
"SHA3-224A2308",
"DSA KeyGen (FIPS186-4)A2308",
"HMAC DRBGA2308",
"HMAC-SHA3-384A2308",
"RSA KeyGen (FIPS186-4)A2308",
"Safe Primes Key GenerationA2308",
"SHAKE-256A2308",
"HMAC-SHA2-512/224A2308",
"KDF SSHA2308",
"RSA SigVer (FIPS186-2)A2308",
"DSA SigGen (FIPS186-4)A2308",
"SHA2-512/256A2308",
"AES-CMACA2308",
"HMAC-SHA3-512A2308",
"DSA PQGGen (FIPS186-4)A2308",
"KDF ANS 9.63A2308",
"SHA3-512A2308",
"PBKDFA2308",
"RSA SigGen (FIPS186-4)A2308",
"SHA2-512/224A2308",
"KAS-FFC-SSC Sp800-56Ar3A2308",
"SHA3-384A2308",
"AES-KWPA2308",
"AES-OFBA2308",
"HMAC-SHA-1A2308",
"SHAKE-128A2308"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC- CS3",
"cavpCertName": "A2308",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-2048 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A2308",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56-104 Increment 8 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-1024 Increment 8",
"reference": "SP 800- 38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A2308",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 8-128 Increment 8 Message Length - Message Length: 0-8192 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - No Counter Tests Performed - No",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 192, 256 Tag Length - 128 IV Length - IV Length: 96 Payload Length - Payload Length: 0-2048 Increment 8 AAD Length - AAD Length: 0-1024 Increment 8",
"reference": "SP 800- 38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256 Tag Length - 128, 32 IV Length - IV Length: 96-120 Increment 8 AAD Length - AAD Length: 0-8192 Increment 8",
"reference": "SP 800- 38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-1024 Increment 64",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-1024 Increment 8",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A2308",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-2048 Increment 8 Tweak Mode - Number Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "DSA KeyGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "L - 2048, 3072 N - 224, 256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA PQGGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "P/Q Generation Methods - Probable G Generation Methods - Canonical L - 2048, 3072 N - 224, 256 Hash Algorithm - SHA2-224, SHA2-256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA PQGVer (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "P/Q Generation Methods - Probable G Generation Methods - Canonical L - 1024, 2048, 3072 N - 160, 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA SigGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "L - 2048, 3072 N - 224, 256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA SigVer (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "L - 2048, 3072 N - 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2- 512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Component - Yes Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3- 224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Component - Yes Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3- 224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A2308",
"properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - SHA2-512 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0 Additional Input - Additional Input: 0 Returned Bits - 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-160 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-224 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-256 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-384 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-512 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-224 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-256 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-224 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-256 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-384 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A2308",
"properties": "MAC - MAC: 80-512 Increment 8 Key Length - Key Length: 8-2048 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC- SSC Sp800- 56Ar3",
"cavpCertName": "A2308",
"properties": "Domain Parameter Generation Methods - B-233, B- 283, B-409, B-571, K-233, K-283, K-409, K-571, P- 224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder onePassDh - KAS Role - initiator, responder staticUnified -",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC- SSC Sp800- 56Ar3",
"cavpCertName": "A2308",
"properties": "KAS Role - initiator, responder Domain Parameter Generation Methods - FB, FC, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder dhOneFlow - KAS Role - initiator, responder dhStatic -",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-IFC-SSC",
"cavpCertName": "A2308",
"properties": "KAS Role - initiator, responder Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg2-basic Scheme - KAS1 - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800-56Cr1",
"cavpCertName": "A2308",
"properties": "Fixed Info Pattern - context||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224- 8192 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3- 512",
"reference": "SP 800- 56C Rev. 2"
},
{
"algorithm": "KDA OneStep Sp800-56Cr1",
"cavpCertName": "A2308",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - SHA-1 MAC Salting Methods - default Fixed Info Pattern - context||uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224- 8192 Increment 8",
"reference": "SP 800- 56C Rev. 2"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A2308",
"properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512 Field Size - 224, 571 Shared Info Length - Shared Info Length: 0, 1024 Key Data Length - Key Data Length: 128, 4096",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A2308",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A2308",
"properties": "TLS Version - v1.2 Hash Algorithm - SHA2-256, SHA2-384",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A2308",
"properties": "Iteration Count - Iteration Count: 1-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3- 512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-1024 Increment 8 Key Data Length - Key Data Length: 112-2048 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA Decryption Primitive (CVL)",
"cavpCertName": "A2308",
"properties": "Modulus Length - 2048",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Key Generation Mode - B.3.6 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - Yes Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A2308",
"properties": "Public Exponent Mode - Random Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A2308",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A2308",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP- 8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A2308",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP- 8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA1",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2- 512/224",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2- 512/256",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8 Function - SHA2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A2308",
"properties": "Message Length - Message Length: 0-8192 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A2308",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-1024 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A2308",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-1024 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A2308",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Perform authenticate d decryption",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Cipherte xt, MAC, key",
"name": "Authenticat ed decryption",
"outputs": "Plaintext , Status",
"rolesSspAccess": "Crypto Officer - AES keys: E - AES- GCM IV: G,E",
"secFunImpl": "Authenticat ed Decryption"
},
{
"description": "Perform authenticate d encryption",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Plaintext, key",
"name": "Authenticat ed encryption",
"outputs": "Cipherte xt, Status",
"rolesSspAccess": "Crypto Officer - AES keys: E - AES- GCM IV: G,E",
"secFunImpl": "Authenticat ed Encryption"
},
{
"description": "Perform unauthentica ted decryption",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Cipherte xt, key",
"name": "Decryption",
"outputs": "Plaintext , Status",
"rolesSspAccess": "Crypto Officer - AES keys: E - AES- XTS Key: E",
"secFunImpl": "AES-XTS Decryption"
},
{
"description": "Perform Digital Signature Generation",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Message Digest",
"name": "Digital Signature Generation",
"outputs": "Signatur e, Status",
"rolesSspAccess": "Crypto Officer - DSA Private Keys: E - ECC Private Keys: E - RSA Private Keys: E",
"secFunImpl": "DSA Signature Generation ECDSA Signature Generation RSA Signature Generation"
},
{
"description": "Perform Digital Signature Verification",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Message Digest, Signatur e",
"name": "Digital Signature Verification",
"outputs": "Verificati on Status, Status",
"rolesSspAccess": "Crypto Officer - DSA Public Keys: E - ECC Public Keys: E - RSA Public Keys: E",
"secFunImpl": "DSA Signature Verification ECDSA Signature Verification RSA Signature Verification Legacy RSA Signature Verification"
},
{
"description": "Establish a shared secret",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Keys",
"name": "ECC Key Agreement",
"outputs": "Validatio n Status, Status",
"rolesSspAccess": "Crypto Officer - ECC Private Keys: R - ECC Public Keys: R",
"secFunImpl": "KAS-ECC- SSC"
},
{
"description": "Perform Key Verification",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Key Paramet ers",
"name": "ECDSA Key Verification",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer - ECC Private Keys: W - ECC Public Keys: W",
"secFunImpl": "ECDSA Key Verification"
},
{
"description": "Perform unauthentica ted encryption",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Plaintext, key",
"name": "Encryption",
"outputs": "Cipherte xt, Status",
"rolesSspAccess": "Crypto Officer - AES keys: E - AES- XTS Key: E",
"secFunImpl": "AES-XTS Encryption"
},
{
"description": "Establish a shared secret",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Keys",
"name": "FFC Key Agreement",
"outputs": "Validatio n Status, Status",
"rolesSspAccess": "Crypto Officer - DH Private Keys: R - DH Public Keys: R",
"secFunImpl": "KAS-FFC- SSC"
},
{
"description": "Perform Key Derivation",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Secret",
"name": "Key Derivation",
"outputs": "Key text, Status",
"rolesSspAccess": "Crypto Officer - Derived key:",
"secFunImpl": "Key derivation with ANS 9.63 KDF"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "G,R,Z - KDF secret: W,E,Z - Key Derivatio n Key: G,E - DH Shared Secret: W,E - ECC Shared Secret: W,E",
"secFunImpl": "Key derivation with HKDF Key derivation with OneStep KDA Key derivation with SSH KDF Key derivation with TLS KDF Key derivation with TLS v1.2 KDF RFC7627 Password Based Key Derivation"
},
{
"description": "RSA key encapsulatio n",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Keys",
"name": "Key Encapsulat ion",
"outputs": "Validatio n Status, Status",
"rolesSspAccess": "Crypto Officer - RSA Private Keys: R - RSA Public Keys: R",
"secFunImpl": "KAS-IFC- SSC"
},
{
"description": "Perform Key Export",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Key",
"name": "Key Export",
"outputs": "Key text, Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Generate a symmetric or asymmetric key",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Key Paramet ers",
"name": "Key Generation",
"outputs": "Key text, Status",
"rolesSspAccess": "Crypto Officer - DH Private Keys: G - DH Public Keys: G - DSA Private Keys: G - DSA Public",
"secFunImpl": "HMAC DRBG KAS-ECC- SSC KAS-FFC- SSC FFC Key Generation ECDSA Key Generation RSA Key Generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Keys: G - ECC Private Keys: G - ECC Public Keys: G - Entropy input: W - HMAC DRBG Key: G,E - HMAC DRBG Seed: G,E - HMAC DRBG V: G,E - RSA Private Keys: G - RSA Public Keys: G",
"secFunImpl": "Entropy Source Entropy Conditionin g"
},
{
"description": "Perform Key Import",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Key text",
"name": "Key Import",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer - AES keys: W - DH Private Keys: W - DH Public Keys: W - DSA Private Keys: W - DSA Public Keys: W - ECC Private Keys: W - ECC Public Keys: W - RSA Private",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Keys: W - RSA Public Keys: W",
"secFunImpl": ""
},
{
"description": "DSA domain parameter generation",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Key Paramet ers",
"name": "Key Parameter Generation",
"outputs": "Domain Paramet er, Status",
"rolesSspAccess": "Crypto Officer - DSA paramete rs: G",
"secFunImpl": "DSA Domain Parameter Generation"
},
{
"description": "DSA domain parameter validation",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Domain Paramet er",
"name": "Key Parameter Validation",
"outputs": "Domain Paramet er",
"rolesSspAccess": "Crypto Officer - DSA paramete rs: W,E",
"secFunImpl": "DSA Domain Parameter Verification"
},
{
"description": "Perform Key Unwrap",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Wrapped key text",
"name": "Key Unwrap",
"outputs": "Key text, Status",
"rolesSspAccess": "Crypto Officer - AES Key Wrap Key: W,E",
"secFunImpl": "Key Unwrap"
},
{
"description": "Perform Key Wrap",
"indicator": "BCM_key_is_fi ps() return value",
"inputs": "Key",
"name": "Key Wrap",
"outputs": "Wrapped key text, Status",
"rolesSspAccess": "Crypto Officer - AES Key Wrap Key: R,E",
"secFunImpl": "Key Wrap"
},
{
"description": "Perform Key Zeroization",
"indicator": "N/A",
"inputs": "",
"name": "Key Zeroization",
"outputs": "",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Perform MAC Generation",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Secret, Message , key",
"name": "MAC Generation",
"outputs": "Verify Status, Status",
"rolesSspAccess": "Crypto Officer - HMAC Keys: W,E,Z",
"secFunImpl": "MAC Generation"
},
{
"description": "Perform MAC Verification",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Secret, Message , MAC",
"name": "MAC Verification",
"outputs": "Verify Status, Status",
"rolesSspAccess": "Crypto Officer - HMAC Keys: W,E,Z",
"secFunImpl": "MAC Verification"
},
{
"description": "Perform Message Digest Operation",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message Digest, Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Perform Random Number generation",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Entropy",
"name": "Random Number Generation",
"outputs": "Random Bytes, Status",
"rolesSspAccess": "Crypto Officer - Entropy input: G,E - HMAC",
"secFunImpl": "HMAC DRBG Entropy Source Entropy"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "DRBG Key: G,E - HMAC DRBG Seed: G,E - HMAC DRBG V: G,E",
"secFunImpl": "Conditionin g"
},
{
"description": "Perform Self-test",
"indicator": "BCM_ctx_is_fi ps() return value",
"inputs": "Comman d",
"name": "Self-test",
"outputs": "Comman d",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module status",
"indicator": "",
"inputs": "API Call",
"name": "Show Status",
"outputs": "Module Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module name and version",
"indicator": "",
"inputs": "API Call",
"name": "Show Version",
"outputs": "Module version, Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES KW Unwrap",
"condition": "Module startup",
"details": "Unwrap",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES KW Wrap",
"condition": "Module startup",
"details": "Wrap",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES KWP Unwrap",
"condition": "Module startup",
"details": "Unwrap",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES KWP Wrap",
"condition": "Module startup",
"details": "Wrap",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CBC Decrypt",
"condition": "Module startup",
"details": "Decrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CBC Encrypt",
"condition": "Module startup",
"details": "Encrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CCM Decrypt",
"condition": "Module startup",
"details": "Decrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CCM Encrypt",
"condition": "Module startup",
"details": "Encrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CMAC Generat ion (A2308)",
"condition": "Module startup",
"details": "Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CMAC Verificat ion (A2308)",
"condition": "Module startup",
"details": "Verificati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CTR Decrypt",
"condition": "Module startup",
"details": "Decrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CTR Encrypt",
"condition": "Module startup",
"details": "Encrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- ECB Decrypt",
"condition": "Module startup",
"details": "Decrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- ECB Encrypt",
"condition": "Module startup",
"details": "Encrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- GCM Decrypt",
"condition": "Module startup",
"details": "Decrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- GCM Encrypt",
"condition": "Module startup",
"details": "Encrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- GMAC Verify (A2308)",
"condition": "Module startup",
"details": "Verify",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- GMAC Generat e (A2308)",
"condition": "Module startup",
"details": "Generat e",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128, 192 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- XTS Decrypt",
"condition": "Module startup",
"details": "Decrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- XTS Encrypt",
"condition": "Module startup",
"details": "Encrypt",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "128 and 256-bit",
"type": "CAST"
},
{
"algorithmOrTest": "AES- XTS Key Test",
"condition": "On cipher initializa tion",
"details": "Compare",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "Critical Functi on",
"testProps": "K1 != K2 Test",
"type": "Critic al Functi on"
},
{
"algorithmOrTest": "DSA KeyGen (FIPS18 6-4) (A2308)",
"condition": "Key Pair Generat ion",
"details": "Key Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "PCT",
"testProps": "2048-bit and 3072-bit keys",
"type": "PCT"
},
{
"algorithmOrTest": "DSA SigGen (FIPS18 6-4) (A2308)",
"condition": "Module startup",
"details": "Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "2048-bit",
"type": "CAST"
},
{
"algorithmOrTest": "DSA SigVer (FIPS18 6-4) (A2308)",
"condition": "Module startup",
"details": "Verificati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "2048-bit",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS18 6-4) (A2308)",
"condition": "Key Pair Generat ion",
"details": "Key Pair Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "PCT",
"testProps": "Curves B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224,",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS18 6-4)",
"condition": "Module startup",
"details": "Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "P-256, P-384, P-521 P-224",
"type": "CAST"
},
{
"algorithmOrTest": "(A2308) ECDSA SigVer (FIPS18 6-4) (A2308)",
"condition": "Module startup",
"details": "Verificati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "P-224",
"type": "CAST"
},
{
"algorithmOrTest": "ENT (APT)",
"condition": "Continu ous",
"details": "Health Test runs when a BCM_CT X object creates an entropy source",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "Fault Detect ion Test",
"testProps": "Adaptiv e Proporti on Test",
"type": "CAST"
},
{
"algorithmOrTest": "ENT (RCT)",
"condition": "Continu ous",
"details": "Health Test runs when a BCM_CT X object creates an entropy source",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "Fault Detect ion Test",
"testProps": "Repetiti on Count Test",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A2308)",
"condition": "Module startup",
"details": "Instantiat e, Reseed, Generat e",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC- SHA2- 512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2- 224 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA2- 224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2- 256 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2- 384 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA2- 384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2- 512 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA2- 512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2- 512/224 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA2- 512/224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2- 512/256 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA2- 512/224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3- 224 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA3- 224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3- 256 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA3- 256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3- 384 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA3- 384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3- 512 (A2308)",
"condition": "Module startup",
"details": "MAC",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC with SHA3- 512",
"type": "CAST"
},
{
"algorithmOrTest": "KAS- ECC- SSC Sp800- 56Ar3 (A2308)",
"condition": "Module startup",
"details": "Shared secret computat ion",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "P-224 and K- 233",
"type": "CAST"
},
{
"algorithmOrTest": "KAS- FFC- SSC Sp800-",
"condition": "Module startup",
"details": "Shared secret computat ion",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "ffdhe20 48",
"type": "CAST"
},
{
"algorithmOrTest": "56Ar3 (A2308)",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KAS- IFC- SSC (A2308)",
"condition": "Module startup",
"details": "RSA Primitive Computa tion",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "2048-bit",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800- 56Cr1 (A2308)",
"condition": "Module startup",
"details": "Key Derivatio n",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC- SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneSte p Sp800- 56Cr1 (A2308)",
"condition": "Module startup",
"details": "Key Derivatio n",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A2308)",
"condition": "Module startup",
"details": "Key Derivatio n",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A2308)",
"condition": "Module startup",
"details": "Key Derivatio n",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A2308)",
"condition": "Module startup",
"details": "Key Derivatio n",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "HMAC- SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS18 6-4) (A2308)",
"condition": "Key Pair Generat ion",
"details": "Key Pair Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "PCT",
"testProps": "2048 to 4096-bit",
"type": "PCT"
},
{
"algorithmOrTest": "RSA SigGen (FIPS18 6-4) (A2308)",
"condition": "Module startup",
"details": "Sign",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "2048-bit RSA X9.31 padding SHA2- 256 hash",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS18 6-2) (A2308)",
"condition": "Module startup",
"details": "Verify",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "Legacy; 2048-bit RSA X9.31 padding SHA2- 256 hash",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS18 6-4) (A2308)",
"condition": "Module startup",
"details": "Verify",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "2048-bit RSA X9.31 padding SHA2- 256 hash",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2- 224 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2- 256 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2- 384 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2- 512 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2- 512/224 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 512/224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2- 512/256 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 512/256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3- 224 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA3- 224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3- 256 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA3- 256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3- 384 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA3- 384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3- 512 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA3- 512",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE -128 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHAKE -128",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE -256 (A2308)",
"condition": "Module startup",
"details": "Hash",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHAKE -256",
"type": "CAST"
},
{
"algorithmOrTest": "SP 800- 56A Rev. 3 (Safe primes key generati on)",
"condition": "Key Pair Generat ion",
"details": "Safe Prime Key Generati on",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "PCT",
"testProps": "2048-bit to 8192-bit keys",
"type": "PCT"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC76 27 (A2308)",
"condition": "Module startup",
"details": "Key Derivatio n",
"indicator": "Pass: API return code Fail: BCM_ERROR_FIPS_SELFTES T_FAILURE",
"testMethod": "KAT",
"testProps": "SHA2- 256",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "CAST failure",
"description": "Failure while doing Cryptograph ic Algorithm Self-tests",
"indicator": "Cryptographic services return BCM_ERROR_FIPS_SELFTEST_FAILUR E error code. The BCM_module_state() control interface returns a state of BCM_MODULE_STATE_SELFTEST_FAIL ED.",
"name": "CAST",
"recoveryMethod": "Reloadin g the module"
},
{
"conditions": "CAST failure",
"description": "Failure when doing on demand Cryptograph ic Algorithm Self-tests",
"indicator": "Cryptographic services return BCM_ERROR_FIPS_SELFTEST_FAILUR E error code. The BCM_module_state() control interface returns a state of BCM_MODULE_STATE_SELFTEST_FAIL ED.",
"name": "ODCAS T",
"recoveryMethod": "Reloadin g the module"
},
{
"conditions": "On- demand integrity test failure",
"description": "On-demand integrity test failure",
"indicator": "Cryptographic services return BCM_ERROR_FIPS_INTEGRITY_FAILUR E error code. The BCM_module_state() control interface returns a state of BCM_MODULE_STATE_INTEGRITY_FAI LED.",
"name": "ODPOS T",
"recoveryMethod": "Reloadin g the module"
},
{
"conditions": "Module pre- operationa l integrity test failure",
"description": "Module pre- operational integrity test failure",
"indicator": "Cryptographic services return BCM_ERROR_FIPS_INTEGRITY_FAILUR E error code. The BCM_module_state() control interface returns a state of BCM_MODULE_STATE_INTEGRITY_FAI LED.",
"name": "POST",
"recoveryMethod": "Reloadin g the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "In the Approved mode (BCM_MODE_FIPS), the module only allows for Approved cryptographic algorithms. Non-Approved algorithms not allowed in the approved mode of operation are not available.",
"name": "Approved",
"statusIndicator": "BCM_ctx_is_fips(NULL) returns 1",
"type": "Approved"
},
{
"description": "In Non-Approved mode (BCM_MODE_NON_FIPS), the module allows all available cryptographic algorithms.",
"name": "Non- Approved",
"statusIndicator": "BCM_ctx_is_fips(NULL) returns 0",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES-CFB (64-bit)",
"use": "Symmetric encryption"
},
{
"name": "MD5",
"use": "Message Digesting"
},
{
"name": "RSA-PKCS #1",
"use": "Key Encapsulation"
},
{
"name": "TDES-CBC",
"use": "Symmetric encryption"
},
{
"name": "TDES-CFB",
"use": "Symmetric encryption"
},
{
"name": "TDES-ECB",
"use": "Symmetric encryption"
},
{
"name": "TDES-OFB",
"use": "Symmetric encryption"
},
{
"name": "TLS v1.0/1.1 PRF",
"use": "Key Derivation"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "TLS v1.0/1.1 PRF",
"description": "Derive key text given input secret",
"name": "Key Derivation",
"role": "CO"
},
{
"alg_accessed": "RSA-PKCS #1",
"description": "Encrypt or decrypt a key with an RSA key encryption key",
"name": "Key Encapsulation",
"role": "CO"
},
{
"alg_accessed": "MD5",
"description": "Digest a message",
"name": "Message Digest",
"role": "CO"
},
{
"alg_accessed": "AES-CFB (64- bit) TDES-CBC TDES-CFB TDES-ECB TDES-OFB",
"description": "Decrypt with symmetric cipher",
"name": "Symmetric Decryption",
"role": "CO"
},
{
"alg_accessed": "AES-CFB (64- bit) TDES-CBC TDES-CFB TDES-ECB TDES-OFB",
"description": "Encrypt with symmetric cipher",
"name": "Symmetric Encryption",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Service inputs",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "Service outputs",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "Configuration parameters for the API BCM_module_configure() which sets the mode of operation",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "Mode of operation indicator, from either the BCM_ctx_is_fips(), BCM_param_is_fips(), or BCM_key_is_fips() APIs. The state of the module, from the API BCM_module_state().",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A2308)",
"details": "Pre-operational software integrity test executes automatically when the module is loaded into memory.",
"indicator": "API return code",
"testMethod": "Integrity Test",
"testProps": "HMAC-SHA2-256 signature:32 bytes HMAC secret:18 bytes",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Operator Application in TOEPP",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "App Read",
"sfiAlgo": "",
"source": "VM"
},
{
"dest": "VM",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "App Write",
"sfiAlgo": "",
"source": "Operator Application in TOEPP"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "SSPs are zeroized when the cryptographic object is deleted by the module. Zeroization is performed by overwriting the data with zero valued bytes SSPs are zeroized when the associated key or cryptographic object is deleted by the module. Zeroization is performed by overwriting the data with zero valued bytes",
"method": "Explict",
"operatorId": "API call to delete object",
"rationale": "BCM provides BCM_KEY objects as opaque handles for cryptographic keys held in memory by the module. Any SSPs associated with a BCM_KEY persist in memory for as long as the key object exists. BCM_KEY objects are created explicitly by the operator, used by the operator, and then deleted explicitly by the operator. When a BCM_KEY is deleted, any SSPs associated with it are immediately zeroized."
},
{
"description": "Temporary SSPs are zeroized immediately after use. Zeroization is performed by overwriting the data with zero valued bytes",
"method": "Immediate",
"operatorId": "N/A",
"rationale": "Intermediate values are zeroized at the end of each calculation function, before the function returns. This avoids leaving SSPs in unallocated stack or heap memory and minimizes the length of time such SSPs are stored. When this occurs, the SSPs are immediately zeroized."
},
{
"description": "SSPs are zeroized when power has been removed by the module. Zeroization is performed by overwriting the data with zero valued bytes",
"method": "Implicit",
"operatorId": "N/A",
"rationale": "Implicitly zeroized SSPs correspond to the internal state of any persistent DRBG maintained by a BCM_CTX. When needed, a BCM_CTX creates a DRBG and keeps it available for reuse across multiple operations. As a result, these SSPs persist for as long as the associated BCM_CTX exists. The default/global BCM_CTX is automatically deleted when the module is unloaded, and any DRBG it contains is deleted at that time. This deletion implicitly zeroizes the SSPs associated with the DRBG\u0027s internal state. All other BCM_CTX instances are deleted when the operator explicitly calls BCM_CTX_delete(). When this occurs, the SSPs for the DRBG\u0027s internal state are immediately zeroized."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Volatile Memory",
"name": "VM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "Windows platform",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "dellbcm3.dll",
"swFwVersion": "3.0.1"
},
{
"features": "PowerMaxOS platform",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "libdellbcm3.a",
"swFwVersion": "3.0.1"
},
{
"features": "Linux platform",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "libdellbcm3.so",
"swFwVersion": "3.0.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "No",
"processors": "Intel Xeon Gold 5218",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 5218",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6240L",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6240L",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6254",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6254",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "No",
"processors": "Intel Xeon Platinum 8280L",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerMax storage array compute node",
"hypervisorHostOs": "",
"operatingSystem": "Dell PowerMaxOS 10",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8280L",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows 10 Enterprise x86_64 (64-bit) (Visual Studio 2017)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows 10 Enterprise x86_64 (64-bit) (Visual Studio 2017)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows 10 Enterprise x86_64 (64-bit) (Visual Studio 2019)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows 10 Enterprise x86_64 (64-bit) (Visual Studio 2019)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 7.0.2 on Dell PowerEdge R630",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows 11",
"paa_pai": "No",
"processors": "Intel Xeon E5-2620 v4",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 7.0.2 on Dell",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows 11",
"paa_pai": "Yes",
"processors": "Intel Xeon E5-2620 v4",
"version": "3.0.1"
},
{
"hardwarePlatform": "PowerEdge R630",
"hypervisorHostOs": "",
"operatingSystem": "",
"paa_pai": "",
"processors": "",
"version": ""
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2017)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2017)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R7425",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2017)",
"paa_pai": "No",
"processors": "AMD EPYC 7451",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R7425",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2017)",
"paa_pai": "Yes",
"processors": "AMD EPYC 7451",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2019)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2019)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R7425",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2019)",
"paa_pai": "No",
"processors": "AMD EPYC 7451",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R7425",
"hypervisorHostOs": "",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit) (Visual Studio 2019)",
"paa_pai": "Yes",
"processors": "AMD EPYC 7451",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 7.9 x86 (32- bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 7.9 x86 (32- bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 7.9 x86_64 (64-bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 7.9 x86_64 (64-bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 8.5 x86 (32- bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 8.5 x86 (32- bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 8.5 x86_64 (64-bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "Red Hat Enterprise Linux 8.5 x86_64 (64-bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 12 SP5 x86 (32-bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 12 SP5 x86 (32-bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 12 SP5 x86_64 (64- bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 12 SP5 x86_64 (64- bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6136",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3 x86 (32-bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3 x86 (32-bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3 x86_64 (64- bit)",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3 x86_64 (64- bit)",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6246",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R7425",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3 x86_64 (64- bit)",
"paa_pai": "No",
"processors": "AMD EPYC 7451",
"version": "3.0.1"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R7425",
"hypervisorHostOs": "",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3 x86_64 (64- bit)",
"paa_pai": "Yes",
"processors": "AMD EPYC 7451",
"version": "3.0.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric",
"implName": "N/A",
"name": "CKG- XTS",
"reference": "Section 6.3, approved method 1"
},
{
"algoPropList": "Key Type:Symmetric and Asymmetric",
"implName": "N/A",
"name": "CKG-4",
"reference": "Section 4, Example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Dell OneFS 9.7"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Dell OneFS 9.8"
},
{
"hardwarePlatform": "PowerMax storage array compute node (x86_64)",
"operatingSystem": "Dell PowerMaxOS 10"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Dell PowerProtect Data Domain OS 7"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Dell PowerProtect \u2122 Data Domain \u2122 OS 8"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Dell PowerStoreOS 4 (kernel)"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Dell PowerStoreOS 4 (user)"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Microsoft Windows 10 Enterprise"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Microsoft Windows 10 IoT Enterprise LTSC"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Microsoft Windows 11"
},
{
"hardwarePlatform": "VMware ESXi 6.7.0 on Dell PowerEdge R640 (Intel Xeon Gold 6246)",
"operatingSystem": "Microsoft Windows Server 2019 x86_64 (64-bit)"
},
{
"hardwarePlatform": "x86 (32-bit)",
"operatingSystem": "Red Hat Enterprise Linux 8.5"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Red Hat Enterprise Linux 8.5"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "Red Hat Enterprise Linux 9.4"
},
{
"hardwarePlatform": "x86 (32-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP2"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP2"
},
{
"hardwarePlatform": "x86 (32-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP3"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP4"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP5"
},
{
"hardwarePlatform": "x86 (32-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6"
},
{
"hardwarePlatform": "x86_64 (64-bit)",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 24
},
"ECDSA": {
"ECDSA": 29
}
},
"FF": {
"DH": {
"DH": 23,
"Diffie-Hellman": 4
},
"DSA": {
"DSA": 59
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CTR": {
"CTR": 2
},
"ECB": {
"ECB": 2
},
"GCM": {
"GCM": 7
},
"XTS": {
"XTS": 10
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"SSH": {
"SSH": 15
},
"TLS": {
"TLS": {
"TLS": 24,
"TLS v1.2": 12,
"TLSv1.2": 2
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 6
},
"MAC": {
"MAC": 52
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 1,
"B-233": 8,
"B-283": 7,
"B-409": 8,
"B-571": 8,
"K-163": 1,
"K-233": 8,
"K-283": 8,
"K-409": 8,
"K-571": 8,
"P-192": 2,
"P-224": 24,
"P-256": 22,
"P-384": 22,
"P-521": 22
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 5
}
},
"fips_certlike": {
"Certlike": {
"# A2308": 1,
"AES- CBC Decrypt 128": 1,
"AES- CBC Encrypt 128": 1,
"AES- CTR Decrypt 128": 1,
"AES- CTR Encrypt 128": 1,
"AES- GCM Decrypt 128": 1,
"AES- GCM Encrypt 128": 1,
"AES-128": 1,
"AES-128 3072": 1,
"AES-192": 1,
"AES-192 7680": 1,
"AES-256": 2,
"DRBG 256": 1,
"HMAC- SHA-1": 1,
"HMAC-SHA-1": 4,
"PKCS #1": 4,
"PKCS 1": 6,
"RSA PKCS #1": 2,
"RSA-PKCS #1": 2,
"SHA-1": 19,
"SHA-1 112": 1,
"SHA-1 192": 1,
"SHA-512": 1,
"SHA1": 2,
"SHA2": 6,
"SHA2- 224": 4,
"SHA2- 256": 12,
"SHA2- 384": 4,
"SHA2- 512": 5,
"SHA2-224": 16,
"SHA2-256": 18,
"SHA2-382": 1,
"SHA2-384": 14,
"SHA2-512": 15,
"SHA3- 224": 6,
"SHA3- 256": 4,
"SHA3- 384": 4,
"SHA3- 512": 6,
"SHA3-224": 6,
"SHA3-256": 8,
"SHA3-384": 8,
"SHA3-512": 6
}
},
"fips_security_level": {
"Level": {
"Level 1": 6
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"PBKDF": {
"PBKDF": 4,
"PBKDF2": 1
},
"SHA": {
"SHA1": {
"SHA-1": 21,
"SHA1": 2
},
"SHA2": {
"SHA-512": 1,
"SHA2": 6
},
"SHA3": {
"SHA3-224": 6,
"SHA3-256": 8,
"SHA3-384": 8,
"SHA3-512": 6
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 61
},
"RNG": {
"RBG": 3,
"RNG": 1
}
},
"side_channel_analysis": {
"SCA": {
"Timing Attacks": 1,
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 13,
"FIPS 180-4": 7,
"FIPS 186-4": 16,
"FIPS 198-1": 12,
"FIPS 202": 6,
"FIPS18": 10,
"FIPS186-2": 3,
"FIPS186-4": 33
},
"NIST": {
"SP 800-107": 1,
"SP 800-131A": 1,
"SP 800-132": 2,
"SP 800-135": 7,
"SP 800-38A": 6,
"SP 800-38B": 1,
"SP 800-38E": 1,
"SP 800-38F": 3,
"SP 800-52": 1,
"SP 800-56A": 9,
"SP 800-56B": 2,
"SP 800-56C": 1,
"SP 800-57": 7,
"SP 800-90A": 1
},
"PKCS": {
"PKCS #1": 3,
"PKCS 1": 3
},
"RFC": {
"RFC 5288": 2,
"RFC76": 1,
"RFC7627": 11
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 22,
"AES-": 21,
"AES-128": 2,
"AES-192": 2,
"AES-256": 2
},
"CAST": {
"CAST": 132
}
},
"DES": {
"3DES": {
"3DES": 1,
"TDES": 3
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 61
}
}
},
"tee_name": {
"AMD": {
"PSP": 5
},
"IBM": {
"SSC": 18
}
},
"tls_cipher_suite": {},
"vendor": {
"Microsoft": {
"Microsoft": 20
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KDF TLSA2308",
"HMAC-SHA2-512A2308",
"AES-ECBA2308",
"SHA2-256A2308",
"AES-CCMA2308",
"AES-GMACA2308",
"TLS v1.2 KDF RFC7627A2308",
"DSA PQGVer (FIPS186-4)A2308",
"SHA2-512A2308",
"SHA-1A2308",
"KDA OneStep Sp800-56Cr1A2308",
"HMAC-SHA2-256A2308",
"AES-KWPA2308",
"HMAC-SHA2-512/256A2308",
"Safe Primes Key VerificationA2308",
"AES-GCMA2308",
"SHA2-224A2308",
"RSA Decryption PrimitiveA2308",
"HMAC-SHA3-224A2308",
"AES-CFB128A2308",
"ECDSA SigGen (FIPS186-4)A2308",
"AES-CBCA2308",
"AES-CBC-CS3A2308",
"AES-KWA2308",
"ECDSA KeyVer (FIPS186-4)A2308",
"HMAC-SHA3-256A2308",
"HMAC-SHA2-224A2308",
"KDA HKDF Sp800-56Cr1A2308",
"DSA SigVer (FIPS186-4)A2308",
"RSA SigVer (FIPS186-4)A2308",
"SHA3-256A2308",
"SHA2-384A2308",
"KAS-IFC-SSCA2308",
"AES-XTS Testing Revision 2.0A2308",
"ECDSA SigVer (FIPS186-4)A2308",
"AES-CTRA2308",
"KAS-ECC-SSC Sp800-56Ar3A2308",
"HMAC-SHA2-384A2308",
"SHA3-224A2308",
"DSA KeyGen (FIPS186-4)A2308",
"HMAC DRBGA2308",
"HMAC-SHA3-384A2308",
"RSA KeyGen (FIPS186-4)A2308",
"Safe Primes Key GenerationA2308",
"SHAKE-256A2308",
"HMAC-SHA2-512/224A2308",
"KDF SSHA2308",
"RSA SigVer (FIPS186-2)A2308",
"DSA SigGen (FIPS186-4)A2308",
"SHA2-512/256A2308",
"AES-CMACA2308",
"HMAC-SHA3-512A2308",
"DSA PQGGen (FIPS186-4)A2308",
"KDF ANS 9.63A2308",
"SHA3-512A2308",
"PBKDFA2308",
"RSA SigGen (FIPS186-4)A2308",
"SHA2-512/224A2308",
"KAS-FFC-SSC Sp800-56Ar3A2308",
"SHA3-384A2308",
"ECDSA KeyGen (FIPS186-4)A2308",
"AES-OFBA2308",
"HMAC-SHA-1A2308",
"SHAKE-128A2308"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A2308"
]
},
"policy_metadata": {
"/CreationDate": "D:20260817080735-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260817080735-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1335498,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf",
"https://ink.library.smu.edu.sg/sis_research/3723/",
"https://link.springer.com/content/pdf/10.1007/s001450010016.pdf",
"https://www.rambus.com/timing-attacks-on-implementations-of-diffie-hellman-rsa-dss-and-other-systems/"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 74
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "ca1ffc72064ea247ec351b43d9b65d07ca72bee7d2e53573becb8aab968fe253",
"source_hash": "a7d949d6b883408512c9159817ae5f44f0610290c5a2bddc21b852687fb0de53",
"txt_hash": "7d1b6807bc341f047f875c63ff79b362c8928d6d1fa420cfb2dd7440f8163766"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The module generates SSPs (e.g., keys) and random strings whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2026_071026_0710.pdf",
"date_sunset": "2030-02-18",
"description": "Dell BSAFE\u2122 Crypto Module for C software library is designed for developers to incorporate FIPS 140-3 approved cryptography into C-based products. Dell BSAFE\u2122 Crypto Module for C security software helps protect sensitive data as it is stored, using strong encryption techniques that ease integration with existing data models. Using the capabilities of Dell BSAFE\u2122 Crypto Module for C software in applications helps provide a persistent level of protection for data, lessening the risk of internal, as well as external, compromise.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Dell BSAFE\u2122 Crypto Module for C",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-09-03",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
}
],
"vendor": "Dell Australia Pty Limited, BSAFE Product Team",
"vendor_url": "http://www.dell.com"
}
}