This page was not yet optimized for use on mobile devices.
HiPKI SafGuard 2000 HSM
Certificate details
| Certificate ID | #5511 |
|---|---|
| Status | active |
| Validation dates | 02.09.2026 |
| Sunset date | 01-09-2031 |
| Standard | FIPS 140-3 |
| Security level | 3 |
| Type | Hardware |
| Embodiment | MultiChipStand |
| Caveat | The tamper evident seals and external entropy source installed as indicated in the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). |
| Exceptions |
|
| Description | The Chunghwa Telecom Laboratories HiPKI SafGuard 2000 HSM is a hardware cryptographic module provides FIPS 140-3 approved cryptographic services used in PKI system. |
| Vendor | Chunghwa Telecom laboratories https://www.chttl.com.tw/en/index.html |
| Lab | Asia Pacific IT Laboratory, TUV NORD |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, CAST, HMACAsymmetric Algorithms
RSA 2048, RSA-2048, RSA-OAEP, ECDSASchemes
MACRandomness
DRBG, RBGElliptic Curves
P-224, P-256, P-384, P-521Block cipher modes
ECB, CBCJavaCard packages
com.twTrusted Execution Environments
PSPSecurity level
Level 3, level 3Standards
FIPS 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 1403, SP 800-38A, SP 800-38F, SP 800-90A, SP 800-56B, SP 800-38D, NIST SP 800-131A, SP 800-131A, PKCS 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5511,
"dgst": "8798b848ede7e47c",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"RSA KeyGen (FIPS186-4)A2894",
"AES-KWA2894",
"KTS-IFCA2894",
"RSA SigVer (FIPS186-4)A2894",
"HMAC DRBGA2894",
"HMAC-SHA2-256A2892",
"#A2892",
"AES-CBCA2892",
"SHA2-256A2892",
"AES-KWPA2894",
"RSA SigGen (FIPS186-4)A2894",
"ECDSA SigGen (FIPS186-4)A2894",
"ECDSA KeyVer (FIPS186-4)A2894",
"AES-ECBA2892",
"ECDSA KeyGen (FIPS186-4)A2894",
"ECDSA SigVer (FIPS186-4)A2894",
"#A2894"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2000"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC, AES-ECB",
"cavpCertName": "A2892",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW, AES-KWP",
"cavpCertName": "A2894",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4), ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A2894",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4), ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A2894",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256",
"reference": "FIPS 186-4"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A2894",
"properties": "Mode - SHA2-256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A2892",
"properties": "Key Length - Key Length: 256-448 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KTS-IFC",
"cavpCertName": "A2894",
"properties": "Modulo - 2048, 3072, 4096 Scheme - KTS-OAEP-basic -",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A2894",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4), RSA SigVer (FIPS186-4)",
"cavpCertName": "A2894",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A2892",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Verify audit log",
"indicator": "API returns 0",
"inputs": "Audit log",
"name": "Verify audit log",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Audit log key: E",
"secFunImpl": "MsgAuth"
},
{
"description": "Integrity test on demand",
"indicator": "API returns 0",
"inputs": "N/A",
"name": "Integrity test on demand",
"outputs": "Success / Error",
"rolesSspAccess": "CO",
"secFunImpl": "RSASignVer"
},
{
"description": "Self-test on demand",
"indicator": "API returns 0",
"inputs": "N/A",
"name": "Self-test on demand",
"outputs": "Success / Error",
"rolesSspAccess": "CO",
"secFunImpl": "None"
},
{
"description": "Delete all object on slot",
"indicator": "API returns 0",
"inputs": "Slot ID",
"name": "Zeroize slot",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Client OAEP key: Z - Clone key: Z - Session key: Z - Application key RSA: Z - Application key ECDSA: Z - Application key AES: Z - Security officer\u0027s public key: Z - User\u0027s public key: Z - P11 slot SO password salt hash: Z - P11 slot User password salt hash: Z - Entropy Input String: Z - DRBG Seed, internal state: V value and Key: Z",
"secFunImpl": "None"
},
{
"description": "Export whole HSM",
"indicator": "API returns 0",
"inputs": "None",
"name": "Export CloneWhole HSM",
"outputs": "Encryption file",
"rolesSspAccess": "CO - Clone key: R",
"secFunImpl": "KeyWrap"
},
{
"description": "Import whole HSM",
"indicator": "API returns 0",
"inputs": "Encryption file",
"name": "Import CloneWhole HSM",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Clone key: W",
"secFunImpl": "KeyWrap"
},
{
"description": "Clone and export a slot",
"indicator": "API returns 0",
"inputs": "Slot ID",
"name": "Export CloneSlot",
"outputs": "Encryption file",
"rolesSspAccess": "CO - Clone key: R",
"secFunImpl": "KeyWrap"
},
{
"description": "Import a clone slot",
"indicator": "API returns 0",
"inputs": "Encryption file",
"name": "Import CloneSlot",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Clone key: W",
"secFunImpl": "KeyWrap"
},
{
"description": "Set module to uninitialized state",
"indicator": "API returns 0",
"inputs": "N/A",
"name": "Switch to Initialization state \u0026 Erase ALL keys",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Master key: Z",
"secFunImpl": "None"
},
{
"description": "Generate CO authentication quorum token",
"indicator": "API returns 0",
"inputs": "CO ID",
"name": "Generate CO Quorum Token",
"outputs": "CO Quorum Token",
"rolesSspAccess": "CO",
"secFunImpl": "GenRand"
},
{
"description": "CO send the signature for the CO Quorum Token to the module",
"indicator": "API returns 0",
"inputs": "CO ID, signature",
"name": "Sign CO Token (with Smartcard)",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Application key RSA: R - Application key ECDSA: R",
"secFunImpl": "ECDSASignVer RSASignVer"
},
{
"description": "Generate a cryptographic key (AES, RSA, ECDSA)",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID",
"name": "Generate key",
"outputs": "OK / Fail",
"rolesSspAccess": "User - Client OAEP key: W - Session key: W",
"secFunImpl": "GenAES GenRSA GenECDSA"
},
{
"description": "Export an Assigned key using a cryptographic key (AES)",
"indicator": "API returns 0",
"inputs": "Slot ID, key type ,key ID, KEK key type , KEK key ID, encryption key data",
"name": "Wrap key",
"outputs": "Wrapped key data",
"rolesSspAccess": "User - Session key: R",
"secFunImpl": "KeyWrap"
},
{
"description": "Import an Assigned key from a cryptographic key (AES)",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID, KEK key type, KEK key ID, encryption key data",
"name": "Unwrap key",
"outputs": "OK / Fail",
"rolesSspAccess": "User - Session key: R",
"secFunImpl": "KeyWrap"
},
{
"description": "Perform encrypt operation on user supplied data object",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID, plain data",
"name": "Encrypt",
"outputs": "Encrypted data",
"rolesSspAccess": "User - Application key AES: E",
"secFunImpl": "None"
},
{
"description": "Perform decrypt operation on user supplied data object",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID, encrypted data",
"name": "Decrypt",
"outputs": "Plain data",
"rolesSspAccess": "User - Application key AES: E",
"secFunImpl": "None"
},
{
"description": "Generate signature over user supplied data",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID, data",
"name": "Sign",
"outputs": "Signature",
"rolesSspAccess": "User - Application key RSA: R - Application key ECDSA: R",
"secFunImpl": "ECDSASignVer RSASignVer"
},
{
"description": "Validate signature over user supplied data",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID, signature",
"name": "Verify",
"outputs": "OK / Fail",
"rolesSspAccess": "User - Application key RSA: R - Application key ECDSA: R",
"secFunImpl": "ECDSASignVer RSASignVer"
},
{
"description": "Generate a quorum token if cryptographic key need quorum- controlled operation",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID",
"name": "Generate Key Quorum Token",
"outputs": "Key Quorum Token",
"rolesSspAccess": "User",
"secFunImpl": "GenRand"
},
{
"description": "User sends the signature for the key Quorum Token to the module",
"indicator": "API returns 0",
"inputs": "Slot ID, key type, key ID, signature",
"name": "Sign Key Token (with Smartcard)",
"outputs": "OK / Fail",
"rolesSspAccess": "User - Application key RSA: R - Application key ECDSA: R",
"secFunImpl": "ECDSASignVer RSASignVer"
},
{
"description": "Show hardware/firmware version and status of the module",
"indicator": "API returns 0",
"inputs": "None",
"name": "View Hardware and firmware version",
"outputs": "Hardware / firmware version and status of the module",
"rolesSspAccess": "Unauthenticated",
"secFunImpl": "None"
},
{
"description": "Zeroize all unprotected SSPs",
"indicator": "OLED displays",
"inputs": "None",
"name": "Zeroization",
"outputs": "None",
"rolesSspAccess": "CO - Master key: Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "\"Zeroization + time()\"",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Load module firmware",
"indicator": "OLED displays \"Delete all keys + Initial Mode\"",
"inputs": "Update image",
"name": "Software update",
"outputs": "OK / Fail",
"rolesSspAccess": "CO",
"secFunImpl": "RSASignVer"
},
{
"description": "Generate trusted channel",
"indicator": "API returns 0",
"inputs": "Server IP, N, D, E value of the OAEP Client key, Name and ID",
"name": "Get handle",
"outputs": "Handle",
"rolesSspAccess": "Host",
"secFunImpl": "KeyTransport"
},
{
"description": "Delete trusted channel",
"indicator": "API returns 0",
"inputs": "Handle",
"name": "Release handle",
"outputs": "OK / Fail",
"rolesSspAccess": "Host",
"secFunImpl": "None"
},
{
"description": "CO login into the system",
"indicator": "API returns 0",
"inputs": "CO ID, signature, and password",
"name": "CO login",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - P11 slot SO password salt hash: R",
"secFunImpl": "RSASignVer"
},
{
"description": "User login into the system",
"indicator": "API returns 0",
"inputs": "User ID, signature, and password",
"name": "User login",
"outputs": "OK / Fail",
"rolesSspAccess": "User - P11 slot User password salt hash: R",
"secFunImpl": "RSASignVer"
},
{
"description": "Generate Clone key to encrypt the whole HSM or a slot information",
"indicator": "API returns 0",
"inputs": "N/A",
"name": "Generate Clone key",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - Clone key: W",
"secFunImpl": "GenRand"
},
{
"description": "Add a user account",
"indicator": "API returns 0",
"inputs": "User ID, User password, User\u0027s public key",
"name": "Create user",
"outputs": "OK / Fail",
"rolesSspAccess": "CO - P11 slot User password salt hash: W",
"secFunImpl": "RSASignVer"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "Signature and 8 digits PIN and 12 printable characters.",
"mechanism": "RSA SigVer (FIPS186-4) (A2894)",
"name": "Two-factor identity-based authentication (Smart Card)",
"perMinute": "Probability of 3/(2^112 X 10^8) in multiple random attempts in a minute since the account is locked after 3 failed login attempts",
"strength": "Probability of 1/(2^112 X 10^8) in a single random attempt that the PIN must be 8 digits long."
},
{
"description": "Signature and 12 printable characters.",
"mechanism": "RSA SigVer (FIPS186-4) (A2894)",
"name": "Two-factor identity-based authentication (Software)",
"perMinute": "Probability of 3/(2^112 X 95^12) in multiple random attempts in a minute since the account is locked after 3 failed login attempts",
"strength": "Probability of 1/(2^112 X 95^12) in a single random attempt that the password policy requires 12 printable characters"
},
{
"description": "",
"mechanism": "RSA-OAEP Encryption Decryption",
"name": "Key transport authentication",
"perMinute": "Probability of 60,000,000/2^112 in multiple random attempts in a minute.",
"strength": "Probability of 1/2^112 in a single random attempt."
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB (A2892)- Encrypt",
"condition": "First use",
"details": "Encrypt",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A2892)- Decrypt",
"condition": "First use",
"details": "Decrypt",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A2894)",
"condition": "First use",
"details": "Sign",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A2894)",
"condition": "First use",
"details": "Verify",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A2894)",
"condition": "Key pair generation",
"details": "Sign and verify",
"indicator": "Return code",
"testMethod": "PCT",
"testProps": "P-224, P-256, P-384, P-521",
"type": "PCT"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A2892)",
"condition": "First use",
"details": "Message Authentication",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A2894)",
"condition": "First use",
"details": "Instantiate, reseed and generate",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A2894)",
"condition": "First use",
"details": "Sign",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "RSA-2048",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A2894)",
"condition": "First use",
"details": "Verify",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "RSA-2048",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A2894)",
"condition": "Key pair generation",
"details": "Sign and verify",
"indicator": "Return code",
"testMethod": "PCT",
"testProps": "2048, 3072, 4096",
"type": "PCT"
},
{
"algorithmOrTest": "SHA2-256 (A2892)",
"condition": "First use",
"details": "Hash",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "Data length=1",
"type": "CAST"
},
{
"algorithmOrTest": "AES-KW (A2894)",
"condition": "First use",
"details": "Key Wrap",
"indicator": "Return code",
"testMethod": "KAT",
"testProps": "AES-128",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Pre-Operational tests failure",
"description": "N/A",
"indicator": "OLED displays error message",
"name": "Pre-Operational Self- Tests Error",
"recoveryMethod": "Restart the module"
},
{
"conditions": "Conditional tests failure",
"description": "N/A",
"indicator": "OLED displays error message and API returns error code",
"name": "Conditional Self-Tests Error",
"recoveryMethod": "Restart the module"
},
{
"conditions": "Periodic tests failure",
"description": "N/A",
"indicator": "OLED displays error message",
"name": "Periodic Self-Tests Error",
"recoveryMethod": "Restart the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "Weekly",
"inspectGuidance": "The tamper-evident seals are installed only by the module manufacturer. After delivering to the customer, a system administrator is required to check serial number of each tamper-evident seal and inspect the tamper-evident seals if the module has been interfered with. Upon viewing any signs of tampering, the administrator is required to zeroize Master key and return the module to the factory.",
"mechanism": "Tamper evident seals"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [],
"found": false,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "plaintext data, ciphertext data, SSPs, smart card PIN",
"logicalInterface": "Data Input",
"physicalPort": "Ethernet, Smart Card Interface, and Front Panel Keypad"
},
{
"data": "plaintext data, ciphertext data, SSPs, status",
"logicalInterface": "Data Output",
"physicalPort": "Ethernet and Smart Card Interface"
},
{
"data": "Command",
"logicalInterface": "Control Input",
"physicalPort": "Ethernet"
},
{
"data": "Status",
"logicalInterface": "Status Output",
"physicalPort": "Ethernet and OLED display"
},
{
"data": "N/A",
"logicalInterface": "Power",
"physicalPort": "AC power source interfaces"
},
{
"data": "N/A",
"logicalInterface": "Control Input",
"physicalPort": "Power switch"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Two-factor identity-based authentication (Smart Card) Two-factor identity-based authentication (Software)",
"name": "CO",
"operatorType": "Crypto Officer",
"type": "MultiFactorIdentity"
},
{
"authMethodList": "Two-factor identity-based authentication (Smart Card) Two-factor identity-based authentication (Software)",
"name": "User",
"operatorType": "User",
"type": "MultiFactorIdentity"
},
{
"authMethodList": "Key transport authentication",
"name": "Host",
"operatorType": "Host application",
"type": "Identity"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "3",
"section": "1",
"title": "General"
},
{
"level": "3",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "3",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "3",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "3",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "N/A",
"section": "6",
"title": "Operational environment"
},
{
"level": "3",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "3",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "3",
"section": "10",
"title": "Self-tests"
},
{
"level": "3",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "3",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A2894)",
"details": "Signature Verification",
"indicator": "Return code",
"testMethod": "Verification",
"testProps": "RSA 2048",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic boundary",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "Master key split Knowledge (Import)",
"sfiAlgo": "AES-ECB (A2892)",
"source": "Smart card"
},
{
"dest": "Smart card",
"distribution": "Automated",
"entry": "Direct",
"format": "Plaintext",
"name": "Master key split Knowledge (Export)",
"sfiAlgo": "AES-ECB (A2892)",
"source": "Cryptographic boundary"
},
{
"dest": "Cryptographic boundary",
"distribution": "Automated",
"entry": "Direct",
"format": "Encrypted",
"name": "Split Knowledge (Import)",
"sfiAlgo": "AES-ECB (A2892)",
"source": "Smart card"
},
{
"dest": "Smart card",
"distribution": "Automated",
"entry": "Direct",
"format": "Encrypted",
"name": "Split Knowledge (Export)",
"sfiAlgo": "AES-ECB (A2892)",
"source": "Cryptographic boundary"
},
{
"dest": "Outside of the boundary",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "Wrapping key service",
"sfiAlgo": "KeyWrap",
"source": "Cryptographic boundary"
},
{
"dest": "Cryptographic boundary",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "Unwrapping key service",
"sfiAlgo": "KeyWrap",
"source": "Outside of the boundary"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "SSPs are encrypted with Master key and stored in eMMC.Zeroization of Mater key protects all other SSPs.",
"method": "MK_free",
"operatorId": "Triggered by tamper detection and response circuit",
"rationale": "The Master key stored internally to the module in eMMC will overwrite with zeros within 1ms."
},
{
"description": "Zeroization of Mater key can be done by API called.",
"method": "Key_free",
"operatorId": "Call the function in application",
"rationale": "The Master key stored internally to the module in eMMC will overwrite with zeros within 1ms. The time is not enough for the attacker to compromise the Master Key."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "None",
"name": "eMMC",
"persistance": "Static"
},
{
"description": "None",
"name": "Flash",
"persistance": "Static"
},
{
"description": "None",
"name": "SDRAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "",
"fwVersion": "HSM-FW-10",
"hwVersion": "HSM-HW-10",
"modelPartNum": "HiPKI SafGuard 2000 HSM",
"processors": "Marvell"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Symmetric:AES Asymmetric:RSA, ECDSA",
"implName": "using output from DRBG",
"name": "CKG",
"reference": "SP 800-133Rev2 and IG D.I."
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 24
}
},
"RSA": {
"RSA 2048": 3,
"RSA-2048": 2,
"RSA-OAEP": 1
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"ECB": {
"ECB": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 1
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 6,
"P-256": 10,
"P-384": 6,
"P-521": 6
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"# A2892": 1,
"- PKCS 1": 1,
"AES 128": 1,
"AES-128": 3,
"DRBG 256": 1,
"PKCS 1": 1,
"RSA 2048": 3,
"SHA2-256": 10
}
},
"fips_security_level": {
"Level": {
"Level 3": 2,
"level 3": 2
}
},
"hash_function": {},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {
"com": {
"com.tw": 1
}
},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 27
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 9,
"FIPS 1403": 1,
"FIPS 180-4": 1,
"FIPS 186-4": 5,
"FIPS 198-1": 1,
"FIPS186-4": 35
},
"NIST": {
"NIST SP 800-131A": 1,
"SP 800-131A": 1,
"SP 800-38A": 1,
"SP 800-38D": 1,
"SP 800-38F": 2,
"SP 800-56B": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS 1": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 10,
"AES-128": 3
},
"CAST": {
"CAST": 20
}
},
"constructions": {
"MAC": {
"HMAC": 16
}
}
},
"tee_name": {
"AMD": {
"PSP": 7
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"RSA KeyGen (FIPS186-4)A2894",
"AES-KWA2894",
"KTS-IFCA2894",
"RSA SigVer (FIPS186-4)A2894",
"HMAC DRBGA2894",
"HMAC-SHA2-256A2892",
"AES-CBCA2892",
"SHA2-256A2892",
"AES-KWPA2894",
"RSA SigGen (FIPS186-4)A2894",
"ECDSA SigGen (FIPS186-4)A2894",
"ECDSA KeyVer (FIPS186-4)A2894",
"AES-ECBA2892",
"ECDSA KeyGen (FIPS186-4)A2894",
"ECDSA SigVer (FIPS186-4)A2894"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A2892",
"#A2894"
]
},
"policy_metadata": {
"/CreationDate": "D:20260828072151-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260828072151-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 573260,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.chttl.com.tw/",
"https://csrc.nist.gov/projects/cryptographic-module-validation-program"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 26
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "456133671cbe9af677518773116ce16bf16f813a9b87f5f22d26a8ca420d345a",
"source_hash": "f3e0c6286e32033252d1372e6ca8ffb425e953b07cdca53cae1335ebea3b0855",
"txt_hash": "66f632f35684e5e339c19b8d42ea44cfd0198da76f679abd0fca40d31b9b24f3"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "The tamper evident seals and external entropy source installed as indicated in the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys).",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2026_071026_0710.pdf",
"date_sunset": "2031-09-01",
"description": "The Chunghwa Telecom Laboratories HiPKI SafGuard 2000 HSM is a hardware cryptographic module provides FIPS 140-3 approved cryptographic services used in PKI system.",
"embodiment": "MultiChipStand",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 3,
"mentioned_certs": {},
"module_name": "HiPKI SafGuard 2000 HSM",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-09-02",
"lab": "Asia Pacific IT Laboratory, TUV NORD",
"validation_type": "Initial"
}
],
"vendor": "Chunghwa Telecom laboratories",
"vendor_url": "https://www.chttl.com.tw/en/index.html"
}
}