wolfCrypt

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5548,
  "dgst": "869ab3d281360254",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigVer (FIPS186-5)A7470",
        "HMAC-SHA2-256A7470",
        "SHA2-512A7470",
        "RSA Decryption Primitive Sp800-56Br2A7470",
        "HMAC-SHA2-224A7470",
        "SHA2-384A7470",
        "ECDSA SigVer (FIPS186-5)A7470",
        "RSA KeyGen (FIPS186-5)A7470",
        "AES-CBCA7470",
        "HMAC-SHA-1A7470",
        "TLS v1.3 KDFA7470",
        "KAS-ECC-SSC Sp800-56Ar3A7470",
        "AES-CCMA7470",
        "DSA KeyGen (FIPS186-4)A7470",
        "SHA3-256A7470",
        "SHA3-224A7470",
        "AES-ECBA7470",
        "ECDSA KeyGen (FIPS186-5)A7470",
        "HMAC-SHA3-256A7470",
        "SHA2-256A7470",
        "AES-GMACA7470",
        "RSA SigGen (FIPS186-5)A7470",
        "SHA-1A7470",
        "KDF TLSA7470",
        "TLS v1.2 KDF RFC7627A7470",
        "#A7470",
        "HMAC-SHA2-384A7470",
        "KDF SSHA7470",
        "SHA2-224A7470",
        "KAS-FFC-SSC Sp800-56Ar3A7470",
        "Hash DRBGA7470",
        "HMAC-SHA3-512A7470",
        "ECDSA SigGen (FIPS186-5)A7470",
        "AES-OFBA7470",
        "HMAC-SHA3-224A7470",
        "SHA3-512A7470",
        "ECDSA KeyVer (FIPS186-5)A7470",
        "AES-CMACA7470",
        "AES-GCMA7470",
        "SHA3-384A7470",
        "HMAC-SHA3-384A7470",
        "HMAC-SHA2-512A7470",
        "AES-CTRA7470"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 3,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC, AES-ECB, AES-OFB",
            "cavpCertName": "A7470",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A7470",
            "properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "IV Length - IV Length: 56, 64, 72, 80, 88, 96 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-8192 Increment 8",
            "reference": ""
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A7470",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 32-128 Increment 32 Message Length - Message Length: 0- 16384 Increment 128",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A7470",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A7470",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 96 IV Length - IV Length: 64-128 Increment 32 Payload Length - Payload Length: 128-512 Increment 128 AAD Length - AAD Length: 128-512 Increment 128",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GMAC",
            "cavpCertName": "A7470",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 96 IV Length - IV Length: 64-128 Increment 32 AAD Length - AAD Length: 128-512 Increment 128",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "DSA KeyGen (FIPS186-4)",
            "cavpCertName": "A7470",
            "properties": "L - 2048 N - 256",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - extra bits",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Curve - P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256,",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "SHA2-384, SHA2-512, SHA3-224, SHA3- 256, SHA3-384, SHA3-512 Component - No",
            "reference": ""
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA3-224, SHA3- 256, SHA3-384, SHA3-512",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A7470",
            "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - SHA2-256 Entropy Input - Entropy Input: 256 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0, 0 Additional Input - Additional Input: 0, 0 Returned Bits - 1024",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A7470",
            "properties": "MAC - MAC: 160 Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224, HMAC-SHA3-224",
            "cavpCertName": "A7470",
            "properties": "MAC - MAC: 224 Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256, HMAC-SHA3-256",
            "cavpCertName": "A7470",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384, HMAC-SHA3-384",
            "cavpCertName": "A7470",
            "properties": "MAC - MAC: 384 Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512, HMAC-SHA3-512",
            "cavpCertName": "A7470",
            "properties": "MAC - MAC: 512 Key Length - Key Length: 112-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A7470",
            "properties": "Domain Parameter Generation Methods - P-256, P-384, P-521 Hash Function Z - SHA2-512 Scheme - ephemeralUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A7470",
            "properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192 Hash Function Z - SHA2-512 Scheme - dhEphem - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF SSH (CVL)",
            "cavpCertName": "A7470",
            "properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF TLS (CVL)",
            "cavpCertName": "A7470",
            "properties": "TLS Version - v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "RSA Decryption Primitive Sp800-56Br2 (CVL)",
            "cavpCertName": "A7470",
            "properties": "Modulo - 2048, 3072, 4096 Key Format - Standard Public Exponent Mode - random",
            "reference": "SP 800-56B Rev. 2"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 p mod 8 - 0 Primality Tests - 2powSecStr q mod 8 - 0 Info Generated By Server - Yes Private Key Format - standard Public Exponent Mode - random",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - MGF1",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A7470",
            "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - MGF1 Public Exponent Mode - random",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512",
            "cavpCertName": "A7470",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA3-224, SHA3- 256, SHA3-384, SHA3-512",
            "cavpCertName": "A7470",
            "properties": "Message Length - Message Length: 0- 65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A7470",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "TLS v1.3 KDF (CVL)",
            "cavpCertName": "A7470",
            "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK- DHE",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Generate or verify digital signature s.",
            "indicator": "Successful completion of the service (status code \u003e= 0). For ECDSA, Non- approved and not- allowed when the hashlen (Verify) and inlen (Sign) are less than WC_MIN_DIGEST _SIZE or the ECC public key imported to the module exceeds",
            "inputs": "Sign: Key Struct (DS_SGK ); message; Verify: signature value; flags; sizes.",
            "name": "Digital Signatu re",
            "outputs": "Sign: Status return; Signature value. Verify: Status return;",
            "rolesSspAccess": "CO - DS_SGK: W,E,Z - DS_SVK: W,E,Z",
            "secFunImpl": "RSA Digital Signature Generatio n RSA Digital Signature Verificatio n ECDSA Digital Signature"
          },
          {
            "description": "Generate asymmetr ic key pairs.",
            "indicator": "P-521. Successful completion of the service (status code \u003e= 0). For DH, Non-approved and not-allowed when the private key length is less than 2048-bits or if it exceeds 8192- bits. For RSA, Non-approved and not-allowed when the public exponent \"e\" is less than 65537.",
            "inputs": "FFC, ECC: curve identifier; RSA: modulous size;",
            "name": "Generat e Key Pair",
            "outputs": "Status return; Key structure (GKP_Priv ate)",
            "rolesSspAccess": "CO - GKP_Priv ate: G,R,Z - GKP_Pub lic: G,R,Z",
            "secFunImpl": "RSA Asymmetri c Key-Pair Generatio n ECDSA Key-Pair Generatio n"
          },
          {
            "description": "DH key agreemen t primitives.",
            "indicator": "Successful completion of the service (status code \u003e= 0). For ECDH, Non- approved and not- allowed when the ECC public key imported to the module exceeds P-521.",
            "inputs": "Key structures (KAS_Pri vate and KAS_Publ ic); flags;",
            "name": "Key Agreem ent",
            "outputs": "Status return; KAS_SSC;",
            "rolesSspAccess": "CO - KAS_Priv ate: W,E,Z - KAS_Publ ic: W,E,Z - KAS_SS C: G,R,Z",
            "secFunImpl": "KAS-SSC with KDF"
          },
          {
            "description": "Derive keying material from a",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "KAS_SS C; flags;",
            "name": "Key Derivati on",
            "outputs": "Status return; KD_DKM;",
            "rolesSspAccess": "CO - KAS_SS C: R,E,Z",
            "secFunImpl": "KAS-SSC with KDF Key-based Derivation Functions"
          },
          {
            "description": "shared secret",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Generate or verify message integrity",
            "indicator": "Successful completion of the service (status code \u003e= 0). For AES-CMAC, Non- approved and not- allowed when the cumulative input size exceeds 2^(32) -1, the CMAC tag length is less than 64- bits, or the CMAC tag length is greater than 128- bits.",
            "inputs": "KH_Key",
            "name": "Keyed Hash",
            "outputs": "Status return; Tag value;",
            "rolesSspAccess": "CO - KH_Key: W,E - AES GCM IV: W,E",
            "secFunImpl": "Message Authentica tion Auth Block Cipher"
          },
          {
            "description": "Generate a message digest",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "Message; flags;",
            "name": "Messag e Digest",
            "outputs": "Status return; Hash value;",
            "rolesSspAccess": "CO",
            "secFunImpl": "Secure Hash"
          },
          {
            "description": "Generate random bits using the DRBG",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "DRBG structure (Internal State containing secret(s) C and V); Seed",
            "name": "Rando m",
            "outputs": "Status return; Random Value;",
            "rolesSspAccess": "CO - Seed: W,E,Z - Internal State: G,E - Secret C: G,E - Secret V: G,E - Entropy Input String: W,E,Z",
            "secFunImpl": "DRBG"
          },
          {
            "description": "Perform the designate d self- test.",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "Flags",
            "name": "Self-test",
            "outputs": "Status return",
            "rolesSspAccess": "CO - MOD_INT : G,Z - coreKey: E",
            "secFunImpl": "Message Authentica tion"
          },
          {
            "description": "Provide Module status",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "None",
            "name": "Show Status",
            "outputs": "Status return",
            "rolesSspAccess": "CO",
            "secFunImpl": "None"
          },
          {
            "description": "Encrypt or Decrypt data, including AEAD modes (CCM, GCM)",
            "indicator": "Successful completion of the service (status code \u003e= 0). For AES-GCM, Non- approved and not- allowed when the IV length is less than 96 bits. For AES-CCM, Non- approved and not- allowed when the payload meets or exceeds 2^(8q) bytes.",
            "inputs": "SC_EDK; flags;",
            "name": "Symmet ric cipher",
            "outputs": "Status return. Plaintext or ciphertext data;",
            "rolesSspAccess": "CO - SC_EDK: E,W - AES GCM IV: W,E",
            "secFunImpl": "Symmetric Key Generatio n Auth Block Cipher UnAuth Block Cipher"
          },
          {
            "description": "FreeRng_ fips destroys RNG CSPs. All functions zeroise CSPs using function ForceZer o (overwriti ng with zeros) within the function scope after use. Caller stack cleanup is the duty of the applicatio n. Restarting the general- purpose computer clears all CSPs in RAM.",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "DRBG struct (RBG State) or other structures containing SSPs",
            "name": "Zeroise",
            "outputs": "Status return",
            "rolesSspAccess": "CO - DS_SGK: Z - GKP_Priv ate: Z - KAS_Priv ate: Z - KAS_SS C: Z - KD_DKM: Z - KH_Key: Z - Seed: Z - Internal State: Z - Secret C: Z - Secret V: Z - SC_EDK: Z - Entropy Input String: Z - AES GCM IV: Z",
            "secFunImpl": "None"
          },
          {
            "description": "Provide Module Version",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "None",
            "name": "Show Version",
            "outputs": "Plaintext containing the module version",
            "rolesSspAccess": "CO",
            "secFunImpl": "None"
          },
          {
            "description": "Perform RSA Decryptio n Primitive",
            "indicator": "Successful completion of the service (status code \u003e= 0)",
            "inputs": "Key, DRBG, buffers with data and sizes",
            "name": "RSA Primitiv e Service",
            "outputs": "buffers with data and size",
            "rolesSspAccess": "CO - DS_SGK: W,E,Z",
            "secFunImpl": "RSA Primitive"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES- CBC Encrypt (A7470)",
            "condition": "Before first use of algorithm( s) AES- ECB, AES- CBC, AES- CTR, AES- OFB, AES- GCM, AES- GMAC, AES- CCM or AES- CMAC",
            "details": "Encrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- CBC Decrypt (A7470)",
            "condition": "Before first use of algorithm( s) AES- ECB,",
            "details": "Decrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "Algorit hm or Test",
            "condition": "Conditio ns AES- CBC, AES- CTR, AES- OFB, AES- GCM,",
            "details": "Details",
            "indicator": "Indicator",
            "testMethod": "Test Meth od",
            "testProps": "Test Properties",
            "type": "Test Typ e"
          },
          {
            "algorithmOrTest": "AES- GCM Encrypt (A7470)",
            "condition": "AES- GMAC, AES- CCM or AES- CMAC Before first use of algorithm( s) AES- GCM or AES- GMAC",
            "details": "Encrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- GCM Decrypt (A7470)",
            "condition": "Before first use of algorithm( s) AES- GCM or AES- GMAC",
            "details": "Decrypt",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "key length: 32-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA-1 (A7470)",
            "condition": "Before first use of algorithm( s) SHA1 or HMAC- SHA1",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA1; key length: 20- bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA2- 256 (A7470)",
            "condition": "Before first use of algorithm( s) SHA224, SHA256, HMAC- SHA224",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA256; key length: 20-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "",
            "condition": "or HMAC- SHA256",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC- SHA2- 512 (A7470)",
            "condition": "Before first use of algorithm( s) SHA384, SHA512, HMAC- SHA384 or HMAC- SHA512",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA2-512, key length: 20-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA3- 256 (A7470)",
            "condition": "Before first use of algorithm( s) SHA3- 224, SHA3- 256, SHA3- 384 or SHA3- 512, HMAC- SHA3- 224, HMAC- SHA3- 256, HMAC- SHA3- 384 or HMAC- SHA3- 512",
            "details": "MAC",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hash type: SHA3-256, key length: 64-bytes",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS18 6-5) (A7470)",
            "condition": "Before first use of algorithm( s) RSA (PKCSv1. 5) or RSA",
            "details": "Sign",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "RSA- PKCSv1.5, hash type: SHA256; key length: 2048-bits",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA SigVer",
            "condition": "(PSS) Before first use",
            "details": "Verify",
            "indicator": "FIPS_CAST_STATE_SU CCESS or",
            "testMethod": "KAT",
            "testProps": "RSA- PKCSv1.5,",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "(FIPS18 6-5) (A7470)",
            "condition": "of algorithm( s) RSA (PKCSv1. 5) or RSA (PSS)",
            "details": "",
            "indicator": "FIPS_CAST_STATE_FAI LURE",
            "testMethod": "",
            "testProps": "hash type: SHA256, key length: 2048-bits",
            "type": ""
          },
          {
            "algorithmOrTest": "KAS- ECC- SSC Sp800- 56Ar3 (A7470)",
            "condition": "Before first use of algorithm( s) ECC for shared secret generatio n",
            "details": "Computatio n Shared Secret Z",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hashType: SHA2-256; curve: P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS- FFC- SSC Sp800- 56Ar3 (A7470)",
            "condition": "Before first use of algorithm( s) FFC for shared secret generatio n",
            "details": "Computatio n Shared Secret Z",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hashType: SHA2-256; keySize: 2048-bit;",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS18 6-5) (A7470)",
            "condition": "Before first use of algorithm( s) ECDSA",
            "details": "Sign",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "curve: P256; hashType: SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS18 6-5) (A7470)",
            "condition": "Before first use of algorithm( s) ECDSA",
            "details": "Verify",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "curve: P256; hashType: SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC76 27 (A7470)",
            "condition": "Before first use of TLSv1.2 KDF",
            "details": "Derive Keying Material",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "HMAC- SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.3 KDF (A7470)",
            "condition": "Before first use of TLSv1.3 KDF",
            "details": "Derive Keying Material",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "HMAC- SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KDF SSH (A7470)",
            "condition": "Before first use of KDF SSH",
            "details": "Derive Keying Material",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "hashType: SHA2-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA PCT",
            "condition": "Invoked automatic ally during generate key pair service",
            "details": "Sign/Verify",
            "indicator": "Service is successful or an error code RSA_KEY_PAIR_E",
            "testMethod": "PCT",
            "testProps": "key size: 2048,3072,4 096",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECC- PCT",
            "condition": "Invoked automatic ally during generate key pair service",
            "details": "Sign/Verify",
            "indicator": "Service is successful or an error code ECC_PCT_E",
            "testMethod": "PCT",
            "testProps": "curve size: 224, 256, 384, 521",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "DH- PCT",
            "condition": "Invoked automatic ally during generate key pair service",
            "details": "Modulus Exponentia tion",
            "indicator": "Service is successful or an error code MP_CMP_E",
            "testMethod": "PCT",
            "testProps": "key size: 2048, 3072, 4096",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "Hash DRBG (A7470)",
            "condition": "Before first use of algorithm( s) DBRG or Immediat ely upon registerin g an external entropy source with the module",
            "details": "Health-Test with sub- elements: Instantiate, Generate, Reseed",
            "indicator": "FIPS_CAST_STATE_SU CCESS or FIPS_CAST_STATE_FAI LURE",
            "testMethod": "KAT",
            "testProps": "DRBG mode: SHA2-256",
            "type": "CAS T"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "HMAC- SHA2- 256 CAST Failure Module Integrity Check",
            "description": "Module has failed its software integrity check",
            "indicator": "fipsModeId set to FIPS_MODE_FAILED (3)",
            "name": "FIPS_MODE_FAILED",
            "recoveryMethod": "Power Cycle"
          },
          {
            "conditions": "Failure AES- CBC AES- GCM HMAC- SHA1 HMAC- SHA2- 256 HMAC- SHA2- 512 HMAC- SHA3- 256 RSA- PKCSv1 .5 DRBG ECC Diffie- Hellman FFC Diffie-",
            "description": "One or more algorithm(s) are no longer usable and the module mode is set to FIPS_MODE_DEG RADED (2)",
            "indicator": "One or more algorithms CAST status values set to FIPS_CAST_STATE_F AILURE (3)",
            "name": "FIPS_CAST_STATE_F AILURE",
            "recoveryMethod": "Power Cycle"
          },
          {
            "conditions": "Hellman ECDSA TLSv1.2 KDF TLSv1.3 KDF KDF SSH",
            "description": "",
            "indicator": "",
            "name": "",
            "recoveryMethod": ""
          },
          {
            "conditions": "Any CAST Failure",
            "description": "One or more of the CASTS have failed anytime following a successful power on and integrity check. Upon entering this mode the module will automatically run all CASTS prior to the operational use of any cryptographic algorithm.",
            "indicator": "fipsModeId set to FIPS_MODE_DEGRA DED (2)",
            "name": "FIPS_MODE_DEGRA DED",
            "recoveryMethod": "Power Cycle"
          },
          {
            "conditions": "RSA- PCT",
            "description": "RSA Pairwise Consistency Test Failure",
            "indicator": "RSA_KEY_PAIR_E (- 262)",
            "name": "RSA_KEY_PAIR_E",
            "recoveryMethod": "Manual self- test service call or power cycle"
          },
          {
            "conditions": "ECC- PCT",
            "description": "ECC Pairwise Consistency Test Failure",
            "indicator": "ECC_PCT_E (-286)",
            "name": "ECC_PCT_E",
            "recoveryMethod": "Manual self- test service call or power cycle"
          },
          {
            "conditions": "DH-PCT",
            "description": "DH Pairwise Consistency Test Failure",
            "indicator": "MP_CMP_E (-120)",
            "name": "MP_CMP_E",
            "recoveryMethod": "Manual self- test service call or power cycle"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES- GCM",
            "use": "Non-approved and not-allowed when the IV length is less than 96 bits."
          },
          {
            "name": "ECDSA",
            "use": "Non-approved and not-allowed when the hashlen (Verify) and inlen (Sign) are less than WC_MIN_DIGEST_SIZE or the ECC public key imported to the module exceeds P-521."
          },
          {
            "name": "AES- CMAC",
            "use": "Non-approved and not-allowed when the cumulative input size exceeds 2^(32) -1, the CMAC tag length is less than 64-bits, or the CMAC tag length is greater than 128-bits."
          },
          {
            "name": "AES- CCM",
            "use": "Non-approved and not-allowed when the payload meets or exceeds 2^(8q) bytes."
          },
          {
            "name": "DH",
            "use": "Non-approved and not-allowed when the private key length is less than 2048-bits or if it exceeds 8192-bits."
          },
          {
            "name": "RSA",
            "use": "Non-approved and not-allowed when the public exponent \"e\" is less than 65537."
          },
          {
            "name": "ECDH",
            "use": "Non-approved and not-allowed when the ECC public key imported to the module exceeds P-521."
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "ECDSA",
            "description": "For ECDSA, Non-approved and not-allowed when the hashlen (Verify) and inlen (Sign) are less than WC_MIN_DIGEST_SIZE or the ECC public key imported to the module exceeds P-521.",
            "name": "Digital Signature",
            "role": "CO"
          },
          {
            "alg_accessed": "DH RSA",
            "description": "For DH, Non-approved and not-allowed when the private key length is less than 2048-bits or if it exceeds 8192- bits. For RSA, Non-approved and not-allowed when the public exponent \"e\" is less than 65537.",
            "name": "Generate Key Pair",
            "role": "CO"
          },
          {
            "alg_accessed": "ECDH",
            "description": "For ECDH, Non-approved and not-allowed when the ECC public key imported to the module exceeds P-521.",
            "name": "Key Agreement",
            "role": "CO"
          },
          {
            "alg_accessed": "AES-CMAC",
            "description": "For AES-CMAC, Non-approved and not-allowed when the cumulative input size exceeds 2^(32) -1, the CMAC tag length is less than 64-bits, or the CMAC tag length is greater than 128-bits.",
            "name": "Keyed Hash",
            "role": "CO"
          },
          {
            "alg_accessed": "AES-GCM AES-CCM",
            "description": "For AES-GCM, Non-approved and not-allowed when the IV length is less than 96 bits. For AES-CCM, Non- approved and not-allowed when the payload meets or exceeds 2^(8q) bytes.",
            "name": "Symmetric cipher",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API entry point: stack frame including non-sensitive parameters",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API call parameters passed by reference for structures allocated by wolfCrypt",
            "logicalInterface": "Control Output",
            "physicalPort": "N/A"
          },
          {
            "data": "API call parameters passed by reference or value for cryptographic service input",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API call parameters passed by reference for cryptographic service output",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A"
          },
          {
            "data": "API return value: enumerated status resulting from call execution",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "",
            "name": "CO",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC- SHA2-256",
            "details": "MAC",
            "indicator": "FIPS_MODE_NORMAL or FIPS_MODE_FAILED",
            "testMethod": "KAT",
            "testProps": "hash type: SHA256, key length: 32-bytes.",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "Please note this is the module integrity test",
            "type": ""
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "INT",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "IE1",
            "sfiAlgo": "",
            "source": "EXT: Call stack (API) input parameters"
          },
          {
            "dest": "EXT",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "IE2",
            "sfiAlgo": "",
            "source": "INT: Call stack (API) output parameters"
          },
          {
            "dest": "INT",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "IE3",
            "sfiAlgo": "",
            "source": "EXT: Loaded from external entropy source"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "cleared immediately after use",
            "method": "Z1",
            "operatorId": "Zeroise",
            "rationale": "Module does not store SSPs persistently"
          },
          {
            "description": "Per ISO/IEC 19790:2012 section 7.9.7, parameters used solely for self-test purposes in 7.10 need not meet zeroisation requirements",
            "method": "Z2",
            "operatorId": "",
            "rationale": "FIPS 140-3 IG 9.7.B"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "RAM (Memory)",
            "name": "S1",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "FIPS 140-3 module and SSL/TLS library",
            "integrityTest": "HMAC- SHA256",
            "packageFileName": "wolfssl-x.x.x-commercial- fipsv5.2.3.7z",
            "swFwVersion": "v5.2.3"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "AviTr3",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq Zynq Linux 5.4",
            "paa_pai": "No",
            "processors": "Xilinx Zynq- 7000 SoC",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "AviTr3",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq Zynq Linux 5.4",
            "paa_pai": "Yes",
            "processors": "Xilinx Zynq- 7000 SoC",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Bronte3",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq Zynq Linux 4.19",
            "paa_pai": "No",
            "processors": "Xilinx Zynq Ultrascale+",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Bronte3",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq Zynq Linux 4.19",
            "paa_pai": "Yes",
            "processors": "Xilinx Zynq Ultrascale+",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Maximo",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq Ambarella S5L Linux 4.9",
            "paa_pai": "No",
            "processors": "Ambarella S5L SoC",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Maximo",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq Ambarella S5L Linux 4.9",
            "paa_pai": "Yes",
            "processors": "Ambarella S5L SoC",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "FLIP2",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq iMX8QM Linux 5.4",
            "paa_pai": "No",
            "processors": "i.MX8 Quad Max SoC",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "FLIP2",
            "hypervisorHostOs": "",
            "operatingSystem": "Janteq iMX8QM Linux 5.4",
            "paa_pai": "Yes",
            "processors": "i.MX8 Quad Max SoC",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Harman CE-REL8 Universal Control Extender",
            "hypervisorHostOs": "",
            "operatingSystem": "FreeRTOS v10.4",
            "paa_pai": "No",
            "processors": "NXP i.MX RT1051",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Harman N3322D Video encoder/decoder",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.15",
            "paa_pai": "No",
            "processors": "MTK MT8395",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Samsung Galaxy S21",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 14",
            "paa_pai": "No",
            "processors": "Qualcomm SM8350 Snapdragon",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Samsung Galaxy S21",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 14",
            "paa_pai": "Yes",
            "processors": "Qualcomm SM8350 Snapdragon",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "SEL Switch",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "No",
            "processors": "Xilinx Zynq Ultrascale+",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "SEL-2740",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "No",
            "processors": "Altera SoC FPGA",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "731 Series Advanced Ventilator",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.15",
            "paa_pai": "No",
            "processors": "i.MX6UL",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Broadcom Symantec Privileged Access Manager",
            "hypervisorHostOs": "",
            "operatingSystem": "Debian 12.5",
            "paa_pai": "No",
            "processors": "Intel Xeon CPU E3-1275 v6 @ 3.80GHz",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "secureWISE Cloud Chassis",
            "hypervisorHostOs": "VMWare ESXi 7.0.3",
            "operatingSystem": "Ubuntu 22.04",
            "paa_pai": "No",
            "processors": "Intel Xeon E5-2697 v3",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "XL200P Radio",
            "hypervisorHostOs": "",
            "operatingSystem": "Nucleus 3.0 version 2013.08.1",
            "paa_pai": "No",
            "processors": "Freescale Vybrid VF500",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Claria Plus",
            "hypervisorHostOs": "",
            "operatingSystem": "Yocto 4.0-r7 (kirkstone)",
            "paa_pai": "No",
            "processors": "STM32MP15 7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "ZOLL Zenix Communications Module",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "No",
            "processors": "Freescale i.MX7 Dual ARM Cortex- A7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "ZOLL Zenix Communications Module",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "Yes",
            "processors": "Freescale i.MX7 Dual ARM Cortex- A7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP PN 3PZ95-60002",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 4.9 Kernel",
            "paa_pai": "No",
            "processors": "ARM Cortex- A72",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP PN 3PZ95-60002",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 4.9 Kernel",
            "paa_pai": "Yes",
            "processors": "ARM Cortex- A72",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP PN 6QN27- 60001A",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 4.9 Kernel",
            "paa_pai": "No",
            "processors": "ARM Cortex- A53",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP PN 6QN27- 60001A",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 4.9 Kernel",
            "paa_pai": "Yes",
            "processors": "ARM Cortex- A53",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP Color LaserJet Enterprise M553",
            "hypervisorHostOs": "",
            "operatingSystem": "Microsoft Windows CE 6.0",
            "paa_pai": "No",
            "processors": "ARM Cortex- A8",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell R660",
            "hypervisorHostOs": "qemu-kvm 6.2 on RHEL 8.10",
            "operatingSystem": "RHEL 8.10",
            "paa_pai": "No",
            "processors": "Intel Xeon Gold 6526Y @ 2.80GHz",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell R660",
            "hypervisorHostOs": "qemu-kvm 6.2 on RHEL 8.10",
            "operatingSystem": "RHEL 8.10",
            "paa_pai": "Yes",
            "processors": "Intel Xeon Gold 6526Y @ 2.80GHz",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell Precision 3570",
            "hypervisorHostOs": "",
            "operatingSystem": "Windows 11 Pro",
            "paa_pai": "No",
            "processors": "Intel Core i7- 1255U @ 1.70Ghz",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell Precision 3570",
            "hypervisorHostOs": "",
            "operatingSystem": "Windows 11 Pro",
            "paa_pai": "Yes",
            "processors": "Intel Core i7- 1255U @ 1.70Ghz",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Samsung Galaxy S23",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 13",
            "paa_pai": "No",
            "processors": "Qualcomm Snapdragon 8 Gen 2 (SoC)",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Samsung Galaxy S23",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 13",
            "paa_pai": "Yes",
            "processors": "Qualcomm Snapdragon 8 Gen 2 (SoC)",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "iPhone 14",
            "hypervisorHostOs": "",
            "operatingSystem": "iOS 17.3",
            "paa_pai": "No",
            "processors": "Apple A15 Bionic",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "iPhone 14",
            "hypervisorHostOs": "",
            "operatingSystem": "iOS 17.3",
            "paa_pai": "Yes",
            "processors": "Apple A15 Bionic",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Lenovo XClarity Controller",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.4",
            "paa_pai": "No",
            "processors": "Dual ARM Cortex A7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Lenovo XClarity Controller",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.4",
            "paa_pai": "Yes",
            "processors": "Dual ARM Cortex A7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Lenovo XClarity Controller",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "No",
            "processors": "Dual ARM Cortex A7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Lenovo XClarity Controller",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "Yes",
            "processors": "Dual ARM Cortex A7",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "PD470",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 11",
            "paa_pai": "No",
            "processors": "MTK MT6762",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Mesh Rider Radios",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 4.14",
            "paa_pai": "No",
            "processors": "MIPS 24Kc V7.4",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Single Board Computer (SBC), GW7101-01",
            "hypervisorHostOs": "",
            "operatingSystem": "Ubuntu 20.04.6",
            "paa_pai": "No",
            "processors": "NXP i.MX8M",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell Venue 8 Pro",
            "hypervisorHostOs": "",
            "operatingSystem": "UEFI Specification Version 2.3.1 (32-bit)",
            "paa_pai": "No",
            "processors": "Intel Atom Processor Z3745D",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell Latitude 7480",
            "hypervisorHostOs": "",
            "operatingSystem": "UEFI Specification Version 2.6.0 (64-bit)",
            "paa_pai": "No",
            "processors": "Intel Core i5- 7300U",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Dell Latitude 7480",
            "hypervisorHostOs": "",
            "operatingSystem": "UEFI Specification Version 2.6.0 (64-bit)",
            "paa_pai": "Yes",
            "processors": "Intel Core i5- 7300U",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "FXR90",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 5.15 Yocto (Kirkstone)",
            "paa_pai": "No",
            "processors": "NXP i.MX8M Mini Quad Cortex-A53",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "LIFEPAK monitor/defibrillator(s )",
            "hypervisorHostOs": "",
            "operatingSystem": "QNX 6.6",
            "paa_pai": "No",
            "processors": "NXP i.MX6",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "PowerEdge R660 Rack Server",
            "hypervisorHostOs": "",
            "operatingSystem": "Windows Server 2022",
            "paa_pai": "No",
            "processors": "Intel Xeon Gold 6414U CPU",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Claria Plus",
            "hypervisorHostOs": "",
            "operatingSystem": "Cesium 2.93",
            "paa_pai": "No",
            "processors": "STM32H753",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP Color LaserJet Enterprise 6700",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 5.10",
            "paa_pai": "No",
            "processors": "ARM Cortex- A72",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP Color LaserJet Enterprise 6700",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 5.10",
            "paa_pai": "Yes",
            "processors": "ARM Cortex- A72",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP Color LaserJet Enterprise 5700",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 5.10",
            "paa_pai": "No",
            "processors": "ARM Cortex- A53",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "HP Color LaserJet Enterprise 5700",
            "hypervisorHostOs": "",
            "operatingSystem": "HP Imaging \u0026 Printing Linux 5.10",
            "paa_pai": "Yes",
            "processors": "ARM Cortex- A53",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Forward Edge-AI Isidore Quantum",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux 6.6",
            "paa_pai": "No",
            "processors": "NXP LS1012",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Corning 1LAN- SDDP-48P-U Edgecore Cloud and Data Center Switch",
            "hypervisorHostOs": "",
            "operatingSystem": "Debian GNU/Linux 8 (jessie)",
            "paa_pai": "No",
            "processors": "Broadcom BCM56771",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Corning 1LAN- SDAN-7290 GPON ONT",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux IPHO00559B2 3 3.4",
            "paa_pai": "No",
            "processors": "Broadcom BCM6838",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Corning 1LAN- SDAN-7691 XGS- PON ONT",
            "hypervisorHostOs": "",
            "operatingSystem": "Linux IPHO00550F2 2 4.1",
            "paa_pai": "No",
            "processors": "Broadcom BCM6858",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "Corning 1LAN- SDDP-24POE",
            "hypervisorHostOs": "",
            "operatingSystem": "Debian GNU/Linux 8 (jessie)",
            "paa_pai": "No",
            "processors": "Broadcom BCM5634",
            "version": "v5.2.3"
          },
          {
            "hardwarePlatform": "ConnectCore 6UL",
            "hypervisorHostOs": "",
            "operatingSystem": "Digi Embedded Yocto 5.0",
            "paa_pai": "No",
            "processors": "NXP i.mx6UL",
            "version": "v5.2.3"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Symmetric and Asymmetric",
            "implName": "N/A",
            "name": "CKG- 1",
            "reference": "SP800-133r2 Section 4, example 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 11
          },
          "ECDH": {
            "ECDH": 5
          },
          "ECDSA": {
            "ECDSA": 34
          }
        },
        "FF": {
          "DH": {
            "DH": 8,
            "DHE": 2,
            "Diffie-Hellman": 1
          },
          "DSA": {
            "DSA": 2
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 7
        },
        "CCM": {
          "CCM": 7
        },
        "CTR": {
          "CTR": 4
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 19
        },
        "OFB": {
          "OFB": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "wolfSSL": {
          "wolfSSL": 112
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 11
        },
        "TLS": {
          "TLS": {
            "TLS": 10,
            "TLS 1.2": 1,
            "TLS v1.2": 6,
            "TLS v1.3": 6,
            "TLSv1.2": 3,
            "TLSv1.3": 2
          }
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "KA": {
          "Key Agreement": 3
        },
        "MAC": {
          "MAC": 13
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 8,
          "P-256": 12,
          "P-384": 10,
          "P-521": 24
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-128": 1,
          "AES-192": 1,
          "AES-256": 1,
          "HMAC- SHA-1": 2,
          "HMAC- SHA1": 2,
          "HMAC- SHA224": 1,
          "HMAC- SHA256": 2,
          "HMAC- SHA384": 1,
          "HMAC- SHA512": 1,
          "HMAC-SHA-1": 4,
          "SHA- 256": 1,
          "SHA-1": 5,
          "SHA-2": 1,
          "SHA-3": 1,
          "SHA1": 4,
          "SHA2- 224": 1,
          "SHA2- 256": 6,
          "SHA2- 384": 2,
          "SHA2- 512": 2,
          "SHA2-224": 5,
          "SHA2-256": 17,
          "SHA2-384": 6,
          "SHA2-512": 9,
          "SHA224": 2,
          "SHA256": 7,
          "SHA3": 1,
          "SHA3- 224": 3,
          "SHA3- 256": 8,
          "SHA3- 384": 3,
          "SHA3- 512": 3,
          "SHA3-224": 3,
          "SHA3-256": 1,
          "SHA3-384": 3,
          "SHA3-512": 3,
          "SHA384": 2,
          "SHA512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5,
            "SHA1": 4
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA224": 2,
            "SHA256": 7,
            "SHA384": 2,
            "SHA512": 2
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3": 1,
            "SHA3-224": 3,
            "SHA3-256": 1,
            "SHA3-384": 3,
            "SHA3-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 31
        },
        "RNG": {
          "RBG": 3,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 15,
          "FIPS 180-4": 1,
          "FIPS 186-4": 2,
          "FIPS 186-5": 7,
          "FIPS 198-1": 5,
          "FIPS 202": 1,
          "FIPS18": 12,
          "FIPS186-4": 2,
          "FIPS186-5": 18
        },
        "ISO": {
          "ISO/IEC 19790-2012": 1,
          "ISO/IEC 19790:2012": 4,
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-131A": 1,
          "NIST SP 800-135": 1,
          "NIST SP 800-140D": 1,
          "NIST SP 800-38C": 1,
          "NIST SP 800-56A": 1,
          "NIST SP 800-56B": 1,
          "NIST SP 800-56C": 1,
          "NIST SP 800-90A": 1,
          "SP 800-135": 5,
          "SP 800-38A": 2,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 3,
          "SP 800-56A": 2,
          "SP 800-56B": 1,
          "SP 800-90A": 1
        },
        "RFC": {
          "RFC76": 1,
          "RFC762": 1,
          "RFC7627": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 12,
            "AES-": 38,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 54
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 12,
            "HMAC": 6
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 4
        },
        "IBM": {
          "SSC": 10
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Broadcom": {
          "Broadcom": 5
        },
        "Microsoft": {
          "Microsoft": 1
        },
        "NXP": {
          "NXP": 6
        },
        "Qualcomm": {
          "Qualcomm": 4
        },
        "Samsung": {
          "Samsung": 4
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigVer (FIPS186-5)A7470",
        "HMAC-SHA2-256A7470",
        "SHA2-512A7470",
        "RSA Decryption Primitive Sp800-56Br2A7470",
        "HMAC-SHA2-224A7470",
        "SHA2-384A7470",
        "ECDSA SigVer (FIPS186-5)A7470",
        "RSA KeyGen (FIPS186-5)A7470",
        "AES-CBCA7470",
        "HMAC-SHA-1A7470",
        "TLS v1.3 KDFA7470",
        "KAS-ECC-SSC Sp800-56Ar3A7470",
        "AES-CCMA7470",
        "DSA KeyGen (FIPS186-4)A7470",
        "SHA3-256A7470",
        "SHA3-224A7470",
        "AES-ECBA7470",
        "ECDSA KeyGen (FIPS186-5)A7470",
        "HMAC-SHA3-256A7470",
        "SHA2-256A7470",
        "AES-GMACA7470",
        "RSA SigGen (FIPS186-5)A7470",
        "SHA-1A7470",
        "KDF TLSA7470",
        "TLS v1.2 KDF RFC7627A7470",
        "HMAC-SHA2-384A7470",
        "KDF SSHA7470",
        "SHA2-224A7470",
        "KAS-FFC-SSC Sp800-56Ar3A7470",
        "Hash DRBGA7470",
        "HMAC-SHA3-512A7470",
        "ECDSA SigGen (FIPS186-5)A7470",
        "AES-OFBA7470",
        "HMAC-SHA3-224A7470",
        "SHA3-512A7470",
        "ECDSA KeyVer (FIPS186-5)A7470",
        "AES-CMACA7470",
        "AES-GCMA7470",
        "SHA3-384A7470",
        "HMAC-SHA3-384A7470",
        "HMAC-SHA2-512A7470",
        "AES-CTRA7470"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A7470"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20261006070502-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20261006070502-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 814101,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://www.wolfssl.com/",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-56b/rev-2/final",
          "https://csrc.nist.gov/CSRC/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://csrc.nist.gov/publications/detail/sp/800-135/rev-1/final",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Dr2.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 51
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "73f76953a249d1eed0a5f33d3ee19e87465a44eda343e0fb07215122f3f5ebb5",
      "source_hash": "cba4816ca1dc0e8928dee51c5d084f946f9307dcd3112f9106f75d685e0c8ee6",
      "txt_hash": "adc1a616ef841d3a1c977ebf2cc1c7972ccc038f6f18aafa2ac6657f48abd792"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": null,
    "date_sunset": "2031-10-08",
    "description": "wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "wolfCrypt",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-09",
        "lab": "AEGISOLVE, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "wolfSSL Inc.",
    "vendor_url": "http://www.wolfssl.com"
  }
}