ACT2Lite Cryptographic Module

Certificate details

Certificate ID #3637
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 23.03.2020
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Single Chip
Caveat None
Exceptions
  • EMI/EMC: Level 3
  • Mitigation of Other Attacks: N/A
Description ACT2-Lite (Anti-Counterfeit Technology 2 Lite) is the ACT family (ACT 1T, Quack 1 and 2) next generation. It is an ancillary security device containing product identity information and assertion functionality to support product identity for various usages including anti-counterfeit functionality as well as other security functionality to be used across many different hardware platforms.
Version (Hardware) 15-14497-02
Version (Firmware) 1.5
Vendor Cisco Systems, Inc. https://www.cisco.com
Lab Acumen Security
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
Asymmetric Algorithms
RSA 2048, ECDSA
Hash functions
SHA256, SHA-512
Randomness
DRBG
Elliptic Curves
P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR

Vendor
Cisco, Cisco Systems, Cisco Systems, Inc

Security level
Level 2, level 2

Cross-references

Incoming
  • 3853 - historical - Cisco Catalyst 9300 Series Switches
  • 4519 - historical - Cisco Catalyst 9400 Series Switches
  • 3868 - historical - Cisco Catalyst 9600 Series Switches
  • 4424 - historical - Cisco Catalyst 9800 (40/80) Wireless Controllers
  • 3852 - historical - Cisco Catalyst 9200L Series Switches
  • 4494 - historical - Cisco Catalyst 9300 Series Switches
  • 4520 - historical - Cisco Catalyst 9600 Series Switches
  • 4487 - historical - Cisco Catalyst 9200L Series Switches
  • 4606 - historical - Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12
  • 3834 - historical - Cisco Catalyst 9400 Series Switches
  • 3835 - historical - Cisco Catalyst 9200 Series Switches
  • 4516 - historical - Cisco ASR 9000 Aggregated Services Routers
  • 4549 - historical - Cisco Catalyst Embedded Wireless Controller on C9100 Series Access Points
  • 4525 - historical - Cisco Catalyst 9500 Series Switches
  • 3591 - historical - Cisco Catalyst 9500 Series Switches
  • 3704 - historical - Cisco Aironet 1562e/i/d/ps, 2802e/i, 3802e/i/p, 4800 Wireless LAN Access points, Version 8.10, 16.12
  • 3883 - historical - Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12
  • 3458 - historical - Cisco Aironet 1562 e/i/d/ps, 2802 e/i and 3802 e/i/p Wireless LAN Access Points
  • 4556 - historical - Cisco Catalyst 9200 Series Switches
Title CISCO 831 Security Policy
Subject FIPS 140-2 Security Policy
Author Scott Shorter
Creation date D:20200315112309-04'00'
Modification date D:20200315112309-04'00'
Pages 11
Creator Microsoft® Word for Office 365
Producer Microsoft® Word for Office 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3637,
  "dgst": "831e6bd92db10f33",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#1576",
        "AES#2556",
        "#2156",
        "#1576",
        "ECDSA#439",
        "#384",
        "SHS#2156",
        "#1309",
        "#439",
        "DRBG#384",
        "RSA#1309",
        "#2556"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2022-20920",
        "CVE-2023-20056",
        "CVE-2024-20271",
        "CVE-2021-1382",
        "CVE-2021-1616",
        "CVE-2025-20363",
        "CVE-2023-44487",
        "CVE-2021-34729",
        "CVE-2019-12660",
        "CVE-2025-20154",
        "CVE-2023-20097",
        "CVE-2023-20076",
        "CVE-2021-1625",
        "CVE-2023-20198",
        "CVE-2020-3444"
      ]
    },
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.5"
      ]
    },
    "indirect_transitive_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2022-20920",
        "CVE-2023-20056",
        "CVE-2024-20271",
        "CVE-2021-1382",
        "CVE-2021-1616",
        "CVE-2025-20363",
        "CVE-2023-44487",
        "CVE-2021-34729",
        "CVE-2019-12660",
        "CVE-2025-20154",
        "CVE-2023-20097",
        "CVE-2023-20076",
        "CVE-2021-1625",
        "CVE-2023-20198",
        "CVE-2020-3444"
      ]
    },
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "3852",
          "4487",
          "3883",
          "3704",
          "4520",
          "4525",
          "3834",
          "4424",
          "4519",
          "3835",
          "3591",
          "4556",
          "3868",
          "4549",
          "4606",
          "4516",
          "3458",
          "4494",
          "3853"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "3852",
          "4487",
          "3883",
          "3704",
          "4520",
          "4525",
          "3834",
          "4424",
          "4519",
          "3835",
          "3591",
          "4556",
          "3868",
          "4549",
          "4606",
          "4516",
          "3458",
          "4494",
          "3853"
        ]
      },
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "3852",
          "4487",
          "3883",
          "3704",
          "4520",
          "4525",
          "3834",
          "4424",
          "4519",
          "3835",
          "3591",
          "4556",
          "3868",
          "4549",
          "4606",
          "4516",
          "3458",
          "4494",
          "3853"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4043",
          "3852",
          "4487",
          "3883",
          "3704",
          "4520",
          "4525",
          "3834",
          "4424",
          "4519",
          "3835",
          "3591",
          "4556",
          "3868",
          "4098",
          "4549",
          "4606",
          "4516",
          "3458",
          "4494",
          "3853"
        ]
      },
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 9
          }
        },
        "RSA": {
          "RSA 2048": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 6,
          "P-384": 2,
          "P-521": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 128, 192": 1,
          "AES 256": 4,
          "AES-256": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-384": 2,
          "HMAC-SHA-512": 2,
          "RSA 2048": 2,
          "SHA-512": 1,
          "SHA256": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 2,
          "level 2": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-512": 1,
            "SHA256": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 24
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 12,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "SP 800-90A": 3
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8,
            "AES-256": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 3,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-384": 1,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 2,
          "Cisco Systems": 2,
          "Cisco Systems, Inc": 9
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#1576",
        "AES#2556",
        "ECDSA#439",
        "SHS#2156",
        "DRBG#384",
        "RSA#1309"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#2156",
        "#1576",
        "#384",
        "#1309",
        "#439",
        "#2556"
      ]
    },
    "policy_metadata": {
      "/Author": "Scott Shorter",
      "/CreationDate": "D:20200315112309-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Office 365",
      "/ModDate": "D:20200315112309-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Office 365",
      "/Subject": "FIPS 140-2 Security Policy",
      "/Title": "CISCO 831 Security Policy",
      "pdf_file_size_bytes": 299496,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://csrc.nist.gov/groups/STM/cmvp/validation.html",
          "http://www.cisco.com/",
          "http://csrc.nist.gov/groups/STM/index.html"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 11
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "8b7947f9a3a5f3d77750368c0bd4061becc9ffc7c2a653f77c54ce2a585af89e",
      "source_hash": "d79eee91daef55f29ffb8ef68972d9c0af93cde77a5e66553c3ad5086f19c811",
      "txt_hash": "551f9ae670001f9adc10fcbd6b7ceafb9bb64ff6e05e2251717a763facf20aa8"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2020_160420.pdf",
    "date_sunset": null,
    "description": "ACT2-Lite (Anti-Counterfeit Technology 2 Lite) is the ACT family (ACT 1T, Quack 1 and 2) next generation. It is an ancillary security device containing product identity information and assertion functionality to support product identity for various usages including anti-counterfeit functionality as well as other security functionality to be used across many different hardware platforms.",
    "embodiment": "Single Chip",
    "exceptions": [
      "EMI/EMC: Level 3",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "1.5",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": "15-14497-02",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "ACT2Lite Cryptographic Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2020-03-23",
        "lab": "Acumen Security",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Cisco Systems, Inc.",
    "vendor_url": "https://www.cisco.com"
  }
}