Crypto Module for Intel® Core Ultra Series 1 (Meteor Lake) Converged Security and Manageability Engine (CSME)

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5546,
  "dgst": "81792906f17d7bc4",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-512A5442",
        "HMAC-SHA2-256A7742",
        "SHA2-256A7742",
        "ECDSA KeyVer (FIPS186-5)A5442",
        "SHA2-384A5442",
        "AES-ECBA5442",
        "#A7742",
        "ECDSA SigVer (FIPS186-5)A5442",
        "RSA Signature PrimitiveA5442",
        "AES-CBCA5442",
        "KTS-IFCA5442",
        "SHA-1A5442",
        "SHA2-224A5442",
        "ECDSA KeyGen (FIPS186-5)A5442",
        "#A5254",
        "RSA Decryption Primitive Sp800-56Br2A5442",
        "#A5442",
        "HMAC-SHA2-224A5442",
        "AES-CMACA5442",
        "KAS-ECC Sp800-56Ar3A5442",
        "HMAC-SHA-1A5442",
        "KDF SP800-108A5442",
        "RSA SigVer (FIPS186-5)A5442",
        "Conditioning Component AES-CBC-MAC SP800-90BA5254",
        "HMAC-SHA2-512A5442",
        "HMAC-SHA2-384A5442",
        "AES-GCMA5442",
        "AES-CFB128A5442",
        "AES-CTRA5442",
        "ECDSA SigGen (FIPS186-5)A5442",
        "RSA KeyGen (FIPS186-5)A5442",
        "Counter DRBGA5442",
        "AES-OFBA5442",
        "RSA SigGen (FIPS186-5)A5442"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A5442",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CFB128",
            "cavpCertName": "A5442",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A5442",
            "properties": "Direction - Generation, Verification Key Length - 128, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 0-16384 Increment 8",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A5442",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A5442",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A5442",
            "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 256 Tag Length - 128 IV Length - IV Length: 96",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Payload Length - Payload Length: 8, 112, 128, 256 AAD Length - AAD Length: 16, 64, 128, 256",
            "reference": ""
          },
          {
            "algorithm": "AES-OFB",
            "cavpCertName": "A5442",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "Conditioning Component AES-CBC-MAC SP800-90B",
            "cavpCertName": "A5254",
            "properties": "Key Length - 256 Payload Length - Payload Length: 512",
            "reference": "SP 800-90B"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A5254",
            "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0 Returned Bits - 128",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A5442",
            "properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 128 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0 Returned Bits - 128",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186- 5)",
            "cavpCertName": "A5442",
            "properties": "Curve - P-256, P-384 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A5442",
            "properties": "Curve - P-256, P-384",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A5442",
            "properties": "Curve - P-256, P-384 Hash Algorithm - SHA2-256, SHA2-384 Component - No",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A5442",
            "properties": "Component - No Curve - P-256, P-384 Hash Algorithm - SHA2-256, SHA2-384",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A5442",
            "properties": "MAC - MAC: 32, 48, 64 Key Length - Key Length: 8-4096 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A5442",
            "properties": "MAC - MAC: 32, 48, 64 Key Length - Key Length: 8-4096 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A5442",
            "properties": "MAC - MAC: 32, 48, 64 Key Length - Key Length: 8-4096 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A7742",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 256",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A5442",
            "properties": "MAC - MAC: 32, 48, 64 Key Length - Key Length: 8-4096 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A5442",
            "properties": "MAC - MAC: 32, 48, 64 Key Length - Key Length: 8-4096 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC Sp800-56Ar3",
            "cavpCertName": "A5442",
            "properties": "Domain Parameter Generation Methods - P-256, P-384 Function - Full Validation, Key Pair Generation iutId - 1234567890abcdef Scheme - ephemeralUnified - KAS Role - Initiator, Responder KDF Methods - oneStepKdf - Auxiliary Function Methods - Auxiliary Function Name - SHA2-224 Fixed Info Pattern - uPartyInfo||vPartyInfo||literal[0123456789abcdef] Fixed Info Encoding - Concatenation Key Length - 1024",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF SP800-108",
            "cavpCertName": "A5442",
            "properties": "KDF Mode - Counter MAC Mode - HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512 Supported Lengths - Supported Lengths: 8-256 Increment 8 Fixed Data Order - Before Fixed Data Counter Length - 32 Supports Empty IV - No Requires Empty IV - No Custom Key In Length - 0",
            "reference": "SP 800-108 Rev. 1"
          },
          {
            "algorithm": "KTS-IFC",
            "cavpCertName": "A5442",
            "properties": "Function - keyPairGen IUT ID - 0123456789abcdef Modulo - 2048, 3072, 4096 Key Generation Methods - rsakpg1-basic Fixed Public Exponent - 010001 Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Hash Algorithms - SHA2-224, SHA2-256, SHA2-384, SHA2-512 Supports Null Associated Data - No Associated Data Pattern - uPartyInfo||vPartyInfo Associated Data Encoding - concatenation Key Length - 256",
            "reference": "SP 800-56B Rev. 2"
          },
          {
            "algorithm": "RSA Decryption Primitive Sp800-56Br2 (CVL)",
            "cavpCertName": "A5442",
            "properties": "Modulo - 2048, 3072, 4096 Key Format - Standard Public Exponent Mode - fixed Fixed Public Exponent - 010001",
            "reference": "SP 800-56B Rev. 2"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-5)",
            "cavpCertName": "A5442",
            "properties": "Key Generation Mode - probable Modulo - 2048, 3072 p mod 8 - 0 Primality Tests - 2powSecStr q mod 8 - 0 Fixed Public Exponent - 010001 Info Generated By Server - No",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Private Key Format - standard Public Exponent Mode - fixed",
            "reference": ""
          },
          {
            "algorithm": "RSA SigGen (FIPS186-5)",
            "cavpCertName": "A5442",
            "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA Signature Primitive (CVL)",
            "cavpCertName": "A5442",
            "properties": "Private Key Format - standard Public Exponent Mode - fixed Fixed Public Exponent - 010001",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A5442",
            "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Fixed Public Exponent - 010001 Public Exponent Mode - fixed",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A5442",
            "properties": "Message Length - Message Length: 8-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A5442",
            "properties": "Message Length - Message Length: 8-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A5442",
            "properties": "Message Length - Message Length: 8-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A7742",
            "properties": "Message Length - Message Length: 128-4096 Increment 128",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A5442",
            "properties": "Message Length - Message Length: 8-65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A5442",
            "properties": "Message Length - Message Length: 8-65536 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Data Encryption using Advanced Encryption Standard algorithm",
            "indicator": "1",
            "inputs": "Key and Plaintext Data",
            "name": "AES data encryption",
            "outputs": "Ciphertext Data",
            "rolesSspAccess": "User Role - AES keys: W,E,Z",
            "secFunImpl": "Unauthenticated AES Authenticated AES"
          },
          {
            "description": "Data Decryption using Advanced Encryption Standard algorithm",
            "indicator": "1",
            "inputs": "Key and Ciphertext Data",
            "name": "AES data decryption",
            "outputs": "Plaintext Data",
            "rolesSspAccess": "User Role - AES keys: W,E,Z",
            "secFunImpl": "Unauthenticated AES Authenticated AES"
          },
          {
            "description": "Message Authentication Code Generation using Advanced Encryption Standard algorithm",
            "indicator": "1",
            "inputs": "Key and Message",
            "name": "AES message authentication code generation",
            "outputs": "Message Authentication Code",
            "rolesSspAccess": "User Role - AES keys: W,E,Z",
            "secFunImpl": "AES Message Authentication Code"
          },
          {
            "description": "Message Authentication Code Verification using Advanced Encryption Standard algorithm",
            "indicator": "1",
            "inputs": "Key and Message Authentication Code",
            "name": "AES message authentication code verification",
            "outputs": "True or False",
            "rolesSspAccess": "User Role - AES keys: W,E,Z",
            "secFunImpl": "AES Message Authentication Code"
          },
          {
            "description": "Message Authentication Code Generation using Hashed Message Authentication Code algorithm",
            "indicator": "1",
            "inputs": "Key and Message",
            "name": "HMAC message authentication code generation",
            "outputs": "Message Authentication Code",
            "rolesSspAccess": "User Role - HMAC keys: W,E,Z",
            "secFunImpl": "HMAC"
          },
          {
            "description": "Asymmetric Key Pair Generation",
            "indicator": "1",
            "inputs": "Key Size",
            "name": "RSA key-pair generation",
            "outputs": "RSA Key Pair",
            "rolesSspAccess": "User Role - Module generated RSA public key: G,R - Module generated RSA private key (Including intermediate keygen values): G",
            "secFunImpl": "Counter DRBG RSA KeyGen"
          },
          {
            "description": "Public Key Validation of RSA public key",
            "indicator": "1",
            "inputs": "RSA Public Key",
            "name": "RSA public key validation",
            "outputs": "True or False",
            "rolesSspAccess": "User Role - RSA public key: W,E,Z",
            "secFunImpl": "None"
          },
          {
            "description": "Digital Signature Generation using RSA",
            "indicator": "1",
            "inputs": "RSA Private Key and Message",
            "name": "RSA digital signature generation",
            "outputs": "Digital Signature",
            "rolesSspAccess": "User Role - RSA private key: W,E,Z",
            "secFunImpl": "RSA SigGen"
          },
          {
            "description": "Digital Signature Generation on a pre- hashed message using RSA",
            "indicator": "1",
            "inputs": "RSA Private Key, Message and Digest",
            "name": "RSA digital signature generation primitive",
            "outputs": "Digital Signature",
            "rolesSspAccess": "User Role - RSA private key: W,E,Z",
            "secFunImpl": "RSA Signature Primitive (CVL)"
          },
          {
            "description": "Digital Signature Verification using RSA",
            "indicator": "1",
            "inputs": "RSA Public Key and Digital Signature",
            "name": "RSA digital signature verification",
            "outputs": "True or False",
            "rolesSspAccess": "User Role - RSA public key: W,E,Z",
            "secFunImpl": "RSA SigVer"
          },
          {
            "description": "Digital Signature Verification using RSA for legacy use",
            "indicator": "1",
            "inputs": "RSA Public Key and Digital Signature",
            "name": "RSA digital signature verification (Legacy)",
            "outputs": "True or False",
            "rolesSspAccess": "User Role - RSA public key: W,E,Z",
            "secFunImpl": "RSA SigVer (Legacy)"
          },
          {
            "description": "Encapsulation using KTS-IFC",
            "indicator": "1",
            "inputs": "RSA Public Key and Plaintext Data",
            "name": "RSA encapsulation",
            "outputs": "Ciphertext Data",
            "rolesSspAccess": "User Role - Module generated RSA private key (Including intermediate keygen values): E,Z",
            "secFunImpl": "RSA encapsulation"
          },
          {
            "description": "Decapsulation using KTS-IFC",
            "indicator": "1",
            "inputs": "RSA Private Key and Ciphertext Data",
            "name": "RSA decapsulation",
            "outputs": "Plaintext Data",
            "rolesSspAccess": "User Role - RSA public key: W,E,Z",
            "secFunImpl": "RSA decapsulation"
          },
          {
            "description": "RSA decryption primitive as defined in SP800-56BRev2 Section 7.1.2.1",
            "indicator": "1",
            "inputs": "RSA Private Key and Encrypted Key",
            "name": "RSA Decryption Primitive (CVL)",
            "outputs": "Plaintext Key",
            "rolesSspAccess": "User Role - RSA private key: W,E,Z",
            "secFunImpl": "RSA Decryption Primitive (CVL)"
          },
          {
            "description": "Asymmetric Key Pair Generation",
            "indicator": "1",
            "inputs": "EC curve",
            "name": "ECDSA key-pair generation",
            "outputs": "ECDSA Key Pair",
            "rolesSspAccess": "User Role - ECDSA/ECDH (ECC) public key (including intermediate",
            "secFunImpl": "Counter DRBG ECDSA KeyGen"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "keygen values): G,R - ECDSA/ECDH (ECC) private key (including intermediate keygen values): G,R",
            "secFunImpl": ""
          },
          {
            "description": "Public Key Validation of ECDSA public key",
            "indicator": "1",
            "inputs": "ECDSA Public Key",
            "name": "ECDSA public key validation",
            "outputs": "True or False",
            "rolesSspAccess": "User Role - ECDSA/ECDH (ECC) public key (including intermediate keygen values): W,E,Z",
            "secFunImpl": "ECDSA KeyVer"
          },
          {
            "description": "Digital Signature Generation using ECDSA",
            "indicator": "1",
            "inputs": "ECDSA Private Key and Message",
            "name": "ECDSA digital signature generation",
            "outputs": "Digital Signature",
            "rolesSspAccess": "User Role - ECDSA/ECDH (ECC) private key (including intermediate keygen values): W,E,Z",
            "secFunImpl": "ECDSA SigGen"
          },
          {
            "description": "Digital Signature Verification using ECDSA",
            "indicator": "1",
            "inputs": "ECDSA Public Key and Digital Signature",
            "name": "ECDSA digital signature verification",
            "outputs": "True or False",
            "rolesSspAccess": "User Role - ECDSA/ECDH (ECC) public key (including intermediate keygen values): W,E,Z",
            "secFunImpl": "ECDSA SigVer"
          },
          {
            "description": "Diffie-Hellman Key Agreement using Elliptic Curve Cryptography",
            "indicator": "1",
            "inputs": "EC Curve, Party U\u0027s ephemeral private key, and Party V\u0027s ephemeral public key",
            "name": "ECDH key agreement",
            "outputs": "Derived Key",
            "rolesSspAccess": "User Role - ECDSA/ECDH (ECC) public key (including intermediate keygen values): W,E - ECDSA/ECDH (ECC) private key (including intermediate keygen values): W,E - Shared Secret: G - SP 800-56C KDF derived key: G,R,Z",
            "secFunImpl": "KAS-ECC"
          },
          {
            "description": "Message Digest Generation using Secure Hash Standard algorithm",
            "indicator": "1",
            "inputs": "Message",
            "name": "SHS message digest generation",
            "outputs": "Message Digest",
            "rolesSspAccess": "User Role",
            "secFunImpl": "SHS"
          },
          {
            "description": "Deterministic Random Number Generation",
            "indicator": "1",
            "inputs": "Entropy input string and nonce",
            "name": "Random Number Generation",
            "outputs": "Random Numbers",
            "rolesSspAccess": "User Role - Entropy Input String: W,E,Z - DRBG Seed: W,E,Z - DRBG internal state: (V and Key values): W,E,Z",
            "secFunImpl": "Counter DRBG"
          },
          {
            "description": "Derive key using KBKDF in counter mode",
            "indicator": "1",
            "inputs": "Key Derivation Key",
            "name": "Key Derivation",
            "outputs": "Derived Key",
            "rolesSspAccess": "User Role - KBKDF key derivation key: W,E,Z - KBKDF derived key: R,W,E,Z",
            "secFunImpl": "KBKDF"
          },
          {
            "description": "Output Module Name and Module Hardware and Firmware Version Numbers",
            "indicator": "N/A",
            "inputs": "None",
            "name": "Show Module Version",
            "outputs": "Module Base Name + Module Version Number",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          },
          {
            "description": "Outputs Operational/Error Status of the module as well as the approved status indicator for the last command executed",
            "indicator": "N/A",
            "inputs": "None",
            "name": "Show Status",
            "outputs": "Operational status, Error status, Approved Service Indicator",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          },
          {
            "description": "Performs On Demand Self- Test",
            "indicator": "N/A",
            "inputs": "None",
            "name": "On Demand Self-Test (Pre- operational Integrity Test and Conditional Algorithm Self- Test)",
            "outputs": "Pass/Fail status",
            "rolesSspAccess": "User Role - ICV HMAC Key: E",
            "secFunImpl": "Unauthenticated AES AES Message Authentication Code Authenticated AES Counter DRBG ECDSA KeyGen ECDSA SigGen ECDSA SigVer HMAC KAS-ECC KBKDF RSA encapsulation RSA decapsulation RSA KeyGen RSA SigGen RSA SigVer SHS ICV HMAC"
          },
          {
            "description": "Zeroizes all CSPs",
            "indicator": "N/A",
            "inputs": "None",
            "name": "Zeroization",
            "outputs": "None",
            "rolesSspAccess": "User Role - AES keys: Z - HMAC keys: Z",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- Module generated RSA public key: Z - Module generated RSA private key (Including intermediate keygen values): Z - RSA public key: Z - RSA private key: Z - ECDSA/ECDH (ECC) public key (including intermediate keygen values): Z - ECDSA/ECDH (ECC) private key (including intermediate keygen values): Z - Shared Secret: Z - SP 800-56C KDF derived key: Z - KBKDF key derivation key: Z - KBKDF derived key: Z - Entropy Input String: Z - DRBG Seed: Z - DRBG internal state: (V and Key values): Z",
            "secFunImpl": ""
          },
          {
            "description": "Configure BIOS to Initialize in FIPS Validated Configuration",
            "indicator": "N/A",
            "inputs": "BIOS settings",
            "name": "Module Initialization",
            "outputs": "None",
            "rolesSspAccess": "Crypto Officer Role",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [
          {
            "description": "RSASSA-PSS signature algorithm with 3072-bit modulus",
            "mechanism": "RSA SigVer (FIPS186-5) (A5442)",
            "name": "User Authentication",
            "perMinute": "Less than or equal to 2,400 * 1/2^128",
            "strength": "1/2^128"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-ECB (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Encryption",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Decryption",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Encryption",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Signature Generation (Encryption)",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Message authentication",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Message authentication",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-512 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Message authentication",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Message Digest",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Message Digest",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Message Digest",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Digital Signature Generation",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "P-256 curve and SHA-256 message digest",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Digital Signature Verification",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "P-256 curve and SHA-256 message digest",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "SP 800-90Ar1 health test per section 11.3 (instantiate, generate, reseed)",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Digital Signature Generation",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5, 2048 modulus and SHA-256 message digest",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Digital Signature Verification",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5, 2048 modulus and SHA-256 message digest",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KTS-IFC (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Encryption/Decryption",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "2048 modulus",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SP800-108 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Key Derivation",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC Sp800- 56Ar3 (A5442)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Shared Secret Computation and Key Derivation",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "P-256 curve, One- Step KDF using HMAC-SHA-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A5442)",
            "condition": "Performed every time ECC key pair is generated",
            "details": "Key Generation",
            "indicator": "Key pair returned to caller",
            "testMethod": "PCT",
            "testProps": "P-256, P-384",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A5442)",
            "condition": "Performed every time RSA key pair is generated",
            "details": "Key Generation",
            "indicator": "Key pair returned to caller",
            "testMethod": "PCT",
            "testProps": "2048 modulus",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7742)",
            "condition": "Prior to using ICV HMAC",
            "details": "Message authentication",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A5254)",
            "condition": "Upon first invocation of service that uses the algorithm",
            "details": "Deterministic Random Bit Generation",
            "indicator": "Module is operational",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ESV - Repetition Count Test (Startup)",
            "condition": "Boot Up",
            "details": "Entropy Health Test",
            "indicator": "Module is operational",
            "testMethod": "fault- detection test",
            "testProps": "Startup test with 1024 samples; Cutoff value = 161",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy - Repetition Count Test (Continuous)",
            "condition": "Upon seeding or reseeding the SP 800-90A DRBG",
            "details": "Entropy Health Test",
            "indicator": "Module is operational",
            "testMethod": "fault- detection test",
            "testProps": "Cutoff value = 161",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy - Adaptive Proportion Test (Startup)",
            "condition": "Boot Up",
            "details": "Entropy Health Test",
            "indicator": "Module is operational",
            "testMethod": "fault- detection test",
            "testProps": "Startup test with 1024 samples; Cutoff value = 938",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Entropy - Adaptive Proportion Test (Continuous)",
            "condition": "Upon seeding or reseeding the SP 800-90A DRBG",
            "details": "Entropy Health Test",
            "indicator": "Module is operational",
            "testMethod": "fault- detection test",
            "testProps": "Cutoff value = 938",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Pre-operational firmware integrity test failure Conditional self-test failures other than PCT",
            "description": "No further communication is possible with the module until the module is reset.",
            "indicator": "An error code is provided",
            "name": "Error State",
            "recoveryMethod": "Device reset"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [
          {
            "inspectFreq": "Determined by the operator",
            "inspectGuidance": "Observe the coating surrounding the chip for any signs of damage",
            "mechanism": "Hard tamper-evident coating"
          }
        ],
        "found": true,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "only approved or allowed security functions with sufficient security strength can be used",
            "name": "Approved mode",
            "statusIndicator": "fips_indicator=FIPS_APPROVED_SEC_FUN",
            "type": "Approved"
          },
          {
            "description": "only non-approved security functions can be used",
            "name": "Non-approved mode",
            "statusIndicator": "fips_indicator=NULL",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "MD5",
            "use": "Message Digest generation using MD5 algorithm"
          },
          {
            "name": "SM2",
            "use": "SM2 digital signature generation/verification"
          },
          {
            "name": "SM3",
            "use": "SM3 message digest generation"
          },
          {
            "name": "SM4",
            "use": "SM4 data encryption and decryption"
          },
          {
            "name": "HMAC-MD5",
            "use": "HMAC-MD5 MAC generation"
          },
          {
            "name": "ECC Commit Computation",
            "use": "ECC commit computation used in ECSCHNORR and ECDAA Signature Generation"
          },
          {
            "name": "ECDAA",
            "use": "ECDAA digital signature generation/verification"
          },
          {
            "name": "ECSCHNORR",
            "use": "ECSCHNORR digital signature generation/verification"
          },
          {
            "name": "AES-GCM",
            "use": "AES-GCM data encryption using an externally generated IV"
          },
          {
            "name": "HMAC",
            "use": "HMAC MAC generation using with keys less than 112 bits"
          },
          {
            "name": "ECDSA",
            "use": "ECDSA key-pair generation using secp256k1 curve"
          },
          {
            "name": "ECDHE Shared Secret Computation",
            "use": "ECDHE shared secret computation using brainpoolp384r1 curve"
          },
          {
            "name": "RSA",
            "use": "RSA key-pair generation using 1024 bits modulus size; RSA digital signature generation using MD5, SM3 or SHA-1 hash algorithm; RSA digital signature verification using MD5 or SM3 hash algorithm; RSA key encapsulation and decapsulation using MD5 or SHA-1; RSA key encapsulation and decapsulation using 1024-bit modulus; RSA key decapsulation using 3072 or 4096-bit modulus"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES-GCM",
            "description": "Data Encryption using AES-GCM with externally generated IV",
            "name": "Data Encryption using AES-GCM with externally generated IV",
            "role": "User"
          },
          {
            "alg_accessed": "SM4",
            "description": "Data Encryption and Decryption using SM4",
            "name": "Data Encryption and Decryption using SM4",
            "role": "User"
          },
          {
            "alg_accessed": "MD5 SM3",
            "description": "Message digests using MD5 or SM3",
            "name": "Message digests using MD5 or SM3",
            "role": "User"
          },
          {
            "alg_accessed": "HMAC-MD5",
            "description": "MAC generation using HMAC- MD5",
            "name": "MAC generation using HMAC-MD5",
            "role": "User"
          },
          {
            "alg_accessed": "HMAC",
            "description": "MAC generation using less than 112 bits HMAC key",
            "name": "MAC generation using less than 112 bits HMAC key",
            "role": "User"
          },
          {
            "alg_accessed": "RSA",
            "description": "Key generation using RSA with 1024 bits modulus size",
            "name": "Key generation using RSA with 1024 bits modulus size",
            "role": "User"
          },
          {
            "alg_accessed": "ECDSA",
            "description": "Key generation using ECDSA using secp256k1 curve",
            "name": "Key generation using ECDSA using secp256k1 curve",
            "role": "User"
          },
          {
            "alg_accessed": "RSA",
            "description": "Digital signature generation using RSA with MD5, SM3 or SHA-1 for any modulus size",
            "name": "Digital signature generation using RSA with MD5, SM3 or SHA-1 for any modulus size",
            "role": "User"
          },
          {
            "alg_accessed": "RSA",
            "description": "Digital signature verification using RSA with MD5, or SM3 for any modulus size",
            "name": "Digital signature verification using RSA with MD5, or SM3 for any modulus size",
            "role": "User"
          },
          {
            "alg_accessed": "SM2 ECDAA ECSCHNORR",
            "description": "Digital signature generation using ECSCHNORR, ECDAA, or SM2 algorithm",
            "name": "Digital signature generation using ECSCHNORR, ECDAA, or SM2 algorithm",
            "role": "User"
          },
          {
            "alg_accessed": "SM2 ECDAA ECSCHNORR",
            "description": "Digital signature verification using ECSCHNORR, ECDAA, or SM2 algorithm",
            "name": "Digital signature verification using ECSCHNORR, ECDAA, or SM2 algorithm",
            "role": "User"
          },
          {
            "alg_accessed": "RSA",
            "description": "Key Transport (key encapsulation and decapsulation) using RSA-OAEP with MD5 or SHA-1",
            "name": "Key Transport (key encapsulation and decapsulation) using RSA-OAEP with MD5 or SHA-1",
            "role": "User"
          },
          {
            "alg_accessed": "RSA",
            "description": "Key Transport (key encapsulation and decapsulation) using RSA-OAEP with 1024-bit modulus",
            "name": "Key Transport (key encapsulation and decapsulation) using RSA-OAEP with 1024-bit modulus",
            "role": "User"
          },
          {
            "alg_accessed": "RSA",
            "description": "Key Transport (key decapsulation) using RSA- OAEP with 3072 or 4096-bit modulus",
            "name": "Key Transport (key decapsulation) using RSA- OAEP with 3072 or 4096-bit modulus",
            "role": "User"
          },
          {
            "alg_accessed": "ECDHE Shared Secret Computation",
            "description": "Shared secret computation using ECDHE with brainpoolp384r1 curve",
            "name": "Shared secret computation using ECDHE with brainpoolp384r1 curve",
            "role": "User"
          },
          {
            "alg_accessed": "ECC Commit Computation ECDAA ECSCHNORR",
            "description": "ECC Commit Computation using ECSCHNORR and ECDAA (used in ECSCHNORR and ECDAA Signature Generation)",
            "name": "ECC Commit Computation using ECSCHNORR and ECDAA (used in ECSCHNORR and ECDAA Signature Generation)",
            "role": "User"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "All data (except control data entered via the control input interface) that is input to and processed by a cryptographic module",
            "logicalInterface": "Data Input",
            "physicalPort": "SRAM"
          },
          {
            "data": "All data (except status data output via the status output interface and control data output via the control output interface) that is output from a cryptographic module",
            "logicalInterface": "Data Output",
            "physicalPort": "SRAM"
          },
          {
            "data": "Control data used to control the operation of a cryptographic module",
            "logicalInterface": "Control Input",
            "physicalPort": "SRAM"
          },
          {
            "data": "All status data used to indicate the status of a cryptographic module",
            "logicalInterface": "Status Output",
            "physicalPort": "SRAM"
          },
          {
            "data": "External electrical power that is input to a cryptographic module",
            "logicalInterface": "Power",
            "physicalPort": "Provided by the underlying SoC/PCH"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "User Authentication",
            "name": "User Role",
            "operatorType": "User",
            "type": "Role"
          },
          {
            "authMethodList": "None",
            "name": "Crypto Officer Role",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "2",
            "section": "1",
            "title": "General"
          },
          {
            "level": "2",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "2",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "2",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "2",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "N/A",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "2",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "2",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "2",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "2",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "2",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "2",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7742)",
            "details": "Performed on system startup",
            "indicator": "Successful boot",
            "testMethod": "Message Authentication Code (MAC)",
            "testProps": "HMAC-SHA2-256 with 256- bit key",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A5442)",
            "details": "Performed on system startup",
            "indicator": "Successful boot",
            "testMethod": "Digital Signature Verification",
            "testProps": "PSS, 3072 modulus and SHA2-384 message digest",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "RAM",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API input parameters",
            "sfiAlgo": "",
            "source": "External Source"
          },
          {
            "dest": "External Source",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API output parameters",
            "sfiAlgo": "",
            "source": "RAM"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Powers down RAM",
            "method": "Power Cycling",
            "operatorId": "Invoked after device shut down",
            "rationale": "Power to RAM is lost causing all values stored in memory to be zeroized."
          },
          {
            "description": "Performed at the end of every service utilizing SSPs",
            "method": "Automatic Zeroization",
            "operatorId": "Automatically by the module",
            "rationale": "Overwrites memory occupied by keys with \"zeros\" before de-allocating the memory."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Stored as plaintext",
            "name": "RAM",
            "persistance": "Static"
          },
          {
            "description": "Obfuscated in ROM",
            "name": "OCS ROM",
            "persistance": "Static"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [
          {
            "features": "Offload and Cryptography Subsystem with CSME ROM",
            "fwVersion": "N/A",
            "hwVersion": "C0",
            "modelPartNum": "Meteor Lake SoC-M die",
            "processors": "N/A"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "N/A",
            "integrityTest": "See section 5.1",
            "packageFileName": "Intel\u00ae Converged Security and Manageability Engine Crypto Driver",
            "swFwVersion": "6.0.0.2"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Intel Core Ultra Series 1 H",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Intel\u00ae CSME OS 18",
            "paa_pai": "No",
            "processors": "Intel\u00ae Meteor Lake H CSME Controller",
            "version": "6.0.0.2"
          },
          {
            "hardwarePlatform": "Intel Core Ultra Series 1 U",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Intel\u00ae CSME OS 18",
            "paa_pai": "No",
            "processors": "Intel\u00ae Meteor Lake H CSME Controller",
            "version": "6.0.0.2"
          },
          {
            "hardwarePlatform": "Intel Core Ultra Series 1 U T4",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Intel\u00ae CSME OS 18",
            "paa_pai": "No",
            "processors": "Intel\u00ae Meteor Lake H CSME Controller",
            "version": "6.0.0.2"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:asymmetric",
            "implName": "N/A",
            "name": "Cryptographic Key Generation (CKG)",
            "reference": "Key Generation Compliant with SP 800-133Rev2 section 4 example 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 29
          },
          "ECDH": {
            "ECDH": 5,
            "ECDHE": 5
          },
          "ECDSA": {
            "ECDSA": 55
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 4
          }
        },
        "RSA": {
          "RSA-OAEP": 4
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 21
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 24,
          "P-384": 18,
          "secp256k1": 3
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 41
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 4,
          "HMAC-SHA-1": 10,
          "HMAC-SHA-256": 10,
          "HMAC-SHA-384": 2,
          "HMAC-SHA512": 2,
          "PKCS#1": 4,
          "RSA 1": 3,
          "SHA -1": 1,
          "SHA- 256": 1,
          "SHA- 512": 2,
          "SHA-1": 15,
          "SHA-224": 3,
          "SHA-256": 5,
          "SHA-384": 3,
          "SHA-512": 1,
          "SHA1": 1,
          "SHA2-224": 5,
          "SHA2-256": 10,
          "SHA2-384": 6,
          "SHA2-512": 6
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 3,
          "level 2": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 15
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 15,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-224": 3,
            "SHA-256": 5,
            "SHA-384": 3,
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "SM2": 7
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 39
        },
        "RNG": {
          "RBG": 3
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "DPA": 2,
          "timing attacks": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 54,
          "FIPS 1403": 1,
          "FIPS 180-4": 6,
          "FIPS 186-4": 1,
          "FIPS 186-5": 8,
          "FIPS 198-1": 6,
          "FIPS PUB 140-3": 1,
          "FIPS186-5": 23
        },
        "NIST": {
          "NIST SP 800-57": 1,
          "NIST SP 800-90C": 1,
          "SP 800-108": 1,
          "SP 800-38A": 5,
          "SP 800-38B": 1,
          "SP 800-38D": 3,
          "SP 800-56A": 1,
          "SP 800-56B": 2,
          "SP 800-56C": 5,
          "SP 800-90A": 6,
          "SP 800-90B": 3,
          "SP 800-90C": 5
        },
        "PKCS": {
          "PKCS#1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 36,
            "AES-256": 4
          },
          "CAST": {
            "CAST": 53
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 2,
            "HMAC": 27,
            "HMAC-SHA-256": 5,
            "HMAC-SHA-384": 1
          }
        },
        "miscellaneous": {
          "SM4": {
            "SM4": 3
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-512A5442",
        "HMAC-SHA2-256A7742",
        "SHA2-256A7742",
        "ECDSA KeyVer (FIPS186-5)A5442",
        "SHA2-384A5442",
        "AES-ECBA5442",
        "ECDSA SigVer (FIPS186-5)A5442",
        "AES-CBCA5442",
        "KTS-IFCA5442",
        "SHA-1A5442",
        "SHA2-224A5442",
        "ECDSA KeyGen (FIPS186-5)A5442",
        "RSA Decryption Primitive Sp800-56Br2A5442",
        "RSA SigGen (FIPS186-5)A5442",
        "HMAC-SHA2-224A5442",
        "AES-CMACA5442",
        "KAS-ECC Sp800-56Ar3A5442",
        "HMAC-SHA-1A5442",
        "KDF SP800-108A5442",
        "RSA SigVer (FIPS186-5)A5442",
        "Conditioning Component AES-CBC-MAC SP800-90BA5254",
        "HMAC-SHA2-512A5442",
        "HMAC-SHA2-384A5442",
        "AES-GCMA5442",
        "AES-CFB128A5442",
        "AES-CTRA5442",
        "ECDSA SigGen (FIPS186-5)A5442",
        "RSA KeyGen (FIPS186-5)A5442",
        "Counter DRBGA5442",
        "AES-OFBA5442",
        "RSA Signature PrimitiveA5442"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A5254",
        "#A5442",
        "#A7742"
      ]
    },
    "policy_metadata": {
      "/Author": "Nathan Glass",
      "/CreationDate": "D:20260928121421-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260928121421-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 711917,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://platformsw.intel.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 43
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "0c5e3a84c5896eef39b5ea4cd9897b3e2b57cc71fe7c9570866e86d943e2e3e6",
      "source_hash": "840c7efcdab4fa8b9ca9bbe4da6f40855bac7c49198c314df67dedc4f3b210dd",
      "txt_hash": "f5b46e170b1f3b3923649de2ed02b99ec1c5c1f578a9411fd55b931d7416ee4e"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.2 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": null,
    "date_sunset": "2031-10-06",
    "description": "The Crypto Module for Intel\u00ae Core Ultra Series 1 (Meteor Lake) Converged Security and Manageability Engine (CSME) is a firmware-hybrid module. The module consists of both hardware and firmware. The hardware portion is the Converged Security Engine (CSE) and the firmware portion is the crypto driver process of the Manageability Engine (ME). The two portions form the cryptographic boundary and they combine as Converged Security and Manageability Engine (CSME) to perform cryptographic functions within the Meteor Point PCH applications executing on the CSME OS.",
    "embodiment": "SingleChip",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Crypto Module for Intel\u00ae Core Ultra Series 1 (Meteor Lake) Converged Security and Manageability Engine (CSME)",
    "module_type": "Firmware-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-07",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Intel Corporation",
    "vendor_url": "http://www.intel.com"
  }
}