{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "8041475d9d855ae0", "cert_id": 5215, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Canonical Ltd. Ubuntu 24.04 Kernel Crypto API Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-03-27", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.canonical.com", "vendor": "Canonical Ltd.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2026_020426_1121-signed.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "The Linux kernel crypto API implementation provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-03-26", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC SHA-512": 5, "HMAC-SHA-1": 22, "HMAC-SHA-512": 4, "HMAC SHA-1": 1, "HMAC SHA-256": 1, "HMAC SHA-384": 1, "SHA-3": 3, "SHA-1": 27, "SHA-512": 7, "SHA2-224": 30, "SHA2- 256": 1, "SHA2-384": 26, "SHA2-512": 28, "SHA3- 256": 1, "SHA3-384": 11, "SHA3-512": 11, "SHA2-256": 41, "SHA3-224": 10, "SHA3-256": 11, "SHA3": 1, "SHA-256": 1, "SHA-384": 1, "SHA- 512": 1, "RSA 2048": 1, "- PKCS 1": 1, "AES-128": 1, "AES-192": 1, "AES-256": 1, "PKCS 1": 1}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 80}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 46, "AES-128": 1, "AES-192": 1, "AES-256": 1, "AES-": 18}, "CAST": {"CAST": 521}}, "constructions": {"MAC": {"HMAC": 59, "HMAC-SHA-512": 2, "CMAC": 4}}}, "asymmetric_crypto": {"RSA": {"RSA 2048": 1}, "ECC": {"ECDH": {"ECDH": 2}, "ECDSA": {"ECDSA": 36}, "ECC": {"ECC": 3}}, "FF": {"DH": {"Diffie-Hellman": 8, "DH": 25}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 27}, "SHA2": {"SHA-512": 7, "SHA-256": 1, "SHA-384": 1}, "SHA3": {"SHA-3": 3, "SHA3-384": 11, "SHA3-512": 11, "SHA3-224": 10, "SHA3-256": 11, "SHA3": 1}}, "PBKDF": {"PBKDF2": 4}}, "crypto_scheme": {"MAC": {"MAC": 10}, "KEX": {"Key Exchange": 2}, "KA": {"Key Agreement": 1}}, "crypto_protocol": {"TLS": {"TLS": {"TLS": 3}}, "IKE": {"IKEv2": 2, "IKE": 1}, "IPsec": {"IPsec": 7}}, "randomness": {"PRNG": {"DRBG": 117}, "RNG": {"RNG": 1, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 3}, "CBC": {"CBC": 7}, "CTR": {"CTR": 7}, "CFB": {"CFB": 1}, "OFB": {"OFB": 3}, "GCM": {"GCM": 16}, "CCM": {"CCM": 7}, "XTS": {"XTS": 9}}, "ecc_curve": {"NIST": {"P-256": 20, "P-384": 18, "P-521": 2, "secp256r1": 1, "secp384r1": 1}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 3}, "IBM": {"SSC": 9}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 85, "FIPS PUB 140-3": 2, "FIPS186-5": 18, "FIPS 186-5": 6, "FIPS186-4": 8, "FIPS 186-4": 5, "FIPS 198-1": 13, "FIPS 180-4": 6, "FIPS 202": 5, "FIPS180-4": 1, "FIPS202": 1, "FIPS 197": 1}, "NIST": {"SP 800-38A": 6, "SP 800-38C": 2, "SP 800-38B": 2, "SP 800-38D": 4, "SP 800-38F": 3, "SP 800-38E": 3, "SP 800-90A": 3, "SP 800-56A": 3, "SP 800-90B": 1}, "PKCS": {"PKCS 1": 1, "PKCS# 1": 8}, "RFC": {"RFC 4106": 3, "RFC 7296": 2, "RFC 7919": 1, "RFC 4492": 1, "RFC 3526": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 964641, "pdf_is_encrypted": false, "pdf_number_of_pages": 78, "/Author": "Hawes, David J. (Fed)", "/Comments": "", "/Company": "", "/CreationDate": "D:20260320160138-04'00'", "/Creator": "Acrobat PDFMaker 25 for Word", "/Keywords": "", "/ModDate": "D:20260320161658-04'00'", "/Producer": "Adobe PDF Library 25.1.51", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.ietf.org/rfc/rfc3526.txt", "https://datatracker.ietf.org/doc/html/rfc4106", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "https://www.ietf.org/rfc/rfc3447.txt", "https://datatracker.ietf.org/doc/html/rfc7296", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197-upd1.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-CCMA5609", "SHA2-256A5614", "Hash DRBGA5614", "Safe Primes Key GenerationA5588", "AES-XTS Testing Revision 2.0A5609", "RSA SigVer (FIPS186-4)A5588", "HMAC-SHA3-256A5597", "SHA2-512A5614", "HMAC-SHA2-224A5614", "KAS-ECC-SSC Sp800-56Ar3A5588", "AES-KWA5609", "KAS-FFC-SSC Sp800-56Ar3A5588", "HMAC-SHA2-256A5614", "HMAC-SHA2-512A5614", "SHA-1A5614", "Counter DRBGA5611", "AES-GCMA5611", "ECDSA SigVer (FIPS186-4)A5589", "SHA2-224A5614", "HMAC-SHA3-224A5597", "HMAC-SHA3-384A5597", "SHA3-512A5597", "AES-CMACA5609", "ECDSA KeyGen (FIPS186-5)A5588", "SHA3-384A5597", "AES-CBC-CS3A5609", "HMAC-SHA-1A5614", "SHA3-256A5597", "AES-GMACA5609", "HMAC-SHA2-384A5614", "SHA2-384A5614", "HMAC-SHA3-512A5597", "HMAC DRBGA5614", "RSA SigVer (FIPS186-5)A5590", "SHA3-224A5597", "ECDSA SigVer (FIPS186-5)A5589", "AES-CBCA5609", "AES-CTRA5609", "AES-ECBA5611"]}, "extracted_versions": {"_type": "Set", "elements": ["24.04"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "db7d784c22c647e699a1ae861d9e3a412aaf1f2b8eabb850cb58a382f67e4417", "txt_hash": "26a72ee0f868d6146e3a68ffdaf52416bdf63c8fe796b84006556286435d5278", "json_hash": null}}}