Wind River FIPS Object Module

Certificate details

Certificate ID #5396
Status active
Validation dates 12.07.2026
Sunset date 11-07-2031
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat No assurance of the minimum strength of generated SSPs (e.g., keys); No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The Wind River FIPS Object Module is a general-purpose software cryptographic library offering symmetric encryption/decryption, digital signature generation/verification, hashing, cryptographic key generation, random number generation, message authentication, and key establishment functions. It is designed for ease of use with the popular OpenSSL cryptographic library and toolkit and is available for use as part of Wind River's platforms.
Vendor Wind River Systems, Inc. http://www.windriver.com
Lab Teron Labs
Algorithms
  • AES-CBCA6780
  • AES-CCMA6780
  • AES-CFB128A6780
  • AES-CFB1A6780
  • AES-CFB8A6780
  • AES-CMACA6780
  • AES-CTRA6780
  • AES-ECBA6780
  • AES-GCMA6780
  • AES-OFBA6780
  • AES-XTS Testing Revision 2.0A6780
  • Counter DRBGA6780
  • ECDSA KeyGen (FIPS186-5)A6780
  • ECDSA KeyVer (FIPS186-5)A6780
  • ECDSA SigGen (FIPS186-5)A6780
  • ECDSA SigVer (FIPS186-5)A6780
  • Hash DRBGA6780
  • HMAC DRBGA6780
  • HMAC-SHA-1A6780
  • HMAC-SHA2-224A6780
  • HMAC-SHA2-256A6780
  • HMAC-SHA2-384A6780
  • HMAC-SHA2-512A6780
  • KAS-ECC-SSC Sp800-56Ar3A6780
  • KAS-FFC-SSC Sp800-56Ar3A6780
  • KDF IKEv2A6780
  • KTS-IFCA6780
  • RSA KeyGen (FIPS186-5)A6780
  • RSA SigGen (FIPS186-5)A6780
  • RSA SigVer (FIPS186-4)A6780
  • RSA SigVer (FIPS186-5)A6780
  • Safe Primes Key GenerationA6780
  • Safe Primes Key VerificationA6780
  • SHA-1A6780
  • SHA2-224A6780
  • SHA2-256A6780
  • SHA2-384A6780
  • SHA2-512A6780
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, CMAC
Asymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH
Hash functions
SHA1, SHA-1
Schemes
MAC, Key Agreement
Protocols
IKEv2, IPsec
Randomness
DRBG, RBG
Libraries
OpenSSL
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR, GCM, CCM

Trusted Execution Environments
PSP

Security level
Level 1

Creation date D:20260709064903-04'00'
Modification date D:20260709064903-04'00'
Pages 48
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5396,
  "dgst": "88367dd16bfd18ba",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-ECBA6780",
        "HMAC DRBGA6780",
        "ECDSA SigVer (FIPS186-5)A6780",
        "Safe Primes Key VerificationA6780",
        "AES-GCMA6780",
        "AES-CCMA6780",
        "KTS-IFCA6780",
        "HMAC-SHA2-512A6780",
        "HMAC-SHA2-384A6780",
        "#A6780",
        "RSA KeyGen (FIPS186-5)A6780",
        "AES-CTRA6780",
        "Counter DRBGA6780",
        "ECDSA KeyVer (FIPS186-5)A6780",
        "KAS-FFC-SSC Sp800-56Ar3A6780",
        "RSA SigVer (FIPS186-5)A6780",
        "AES-CMACA6780",
        "KDF IKEv2A6780",
        "AES-CFB128A6780",
        "SHA-1A6780",
        "AES-OFBA6780",
        "KAS-ECC-SSC Sp800-56Ar3A6780",
        "SHA2-512A6780",
        "SHA2-384A6780",
        "Safe Primes Key GenerationA6780",
        "RSA SigVer (FIPS186-4)A6780",
        "HMAC-SHA2-256A6780",
        "RSA SigGen (FIPS186-5)A6780",
        "ECDSA SigGen (FIPS186-5)A6780",
        "AES-CFB8A6780",
        "HMAC-SHA2-224A6780",
        "Hash DRBGA6780",
        "SHA2-224A6780",
        "ECDSA KeyGen (FIPS186-5)A6780",
        "SHA2-256A6780",
        "AES-CFB1A6780",
        "AES-CBCA6780",
        "AES-XTS Testing Revision 2.0A6780",
        "HMAC-SHA-1A6780"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A6780",
            "properties": "Key Length - 128, 192, 256",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CFB1",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CFB128",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CFB8",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A6780",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-OFB",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A6780",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A6780",
            "properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A6780",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A6780",
            "properties": "Curve - P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A6780",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512 Component - No",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A6780",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A6780",
            "properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A6780",
            "properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A6780",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A6780",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A6780",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A6780",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A6780",
            "properties": "Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
            "cavpCertName": "A6780",
            "properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800- 56Ar3",
            "cavpCertName": "A6780",
            "properties": "Domain Parameter Generation Methods - MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF IKEv2 (CVL)",
            "cavpCertName": "A6780",
            "properties": "Diffie-Hellman Shared Secret Length - Diffie-Hellman Shared Secret Length: 224-8192 Increment 8 Derived Keying Material Length - Derived Keying Material Length: 160- 3072 Increment 8 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KTS-IFC",
            "cavpCertName": "A6780",
            "properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Key Length - 768",
            "reference": "SP 800-56B Rev. 2"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186- 5)",
            "cavpCertName": "A6780",
            "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2pow100 Private Key Format - standard",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigGen (FIPS186- 5)",
            "cavpCertName": "A6780",
            "properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigVer (FIPS186- 4)",
            "cavpCertName": "A6780",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186- 5)",
            "cavpCertName": "A6780",
            "properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Safe Primes Key Generation",
            "cavpCertName": "A6780",
            "properties": "Safe Prime Groups - MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "Safe Primes Key Verification",
            "cavpCertName": "A6780",
            "properties": "Safe Prime Groups - MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A6780",
            "properties": "Message Length - Message Length: 160, 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A6780",
            "properties": "Message Length - Message Length: 224, 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A6780",
            "properties": "Message Length - Message Length: 256, 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A6780",
            "properties": "Message Length - Message Length: 384, 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A6780",
            "properties": "Message Length - Message Length: 512, 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Compute DH/ECDH shared secret",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters",
            "name": "Compute shared secret",
            "outputs": "API call parameters",
            "rolesSspAccess": "User - DH public key: W,E,Z - DH private key: W,E,Z - ECDH public key: W,E,Z - ECDH private key: W,E,Z - Shared secret: G,R,Z",
            "secFunImpl": "DH Shared Secret Computation ECDH Shared Secret Computation"
          },
          {
            "description": "Compute a message authentication code",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, message",
            "name": "Generate keyed hash",
            "outputs": "Status, MAC",
            "rolesSspAccess": "User - HMAC key: W,E,Z",
            "secFunImpl": "HMAC for Message Authentication"
          },
          {
            "description": "Generate a message digest",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, message",
            "name": "Generate hash",
            "outputs": "Status, hash",
            "rolesSspAccess": "User",
            "secFunImpl": "SHA for Message Digest Generation"
          },
          {
            "description": "Return random bits to the calling application",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, DRBG type, entropy",
            "name": "Generate random number",
            "outputs": "Status, random number",
            "rolesSspAccess": "User - DRBG entropy input: W,E,Z - DRBG \u0027C\u0027 value: G,E,Z - DRBG \u0027V\u0027 value: G,E,Z - DRBG \u0027Key\" Value: G,E,Z - DRBG seed: W,E,Z",
            "secFunImpl": "CTR_DRBG Hash_DRBG HMAC_DRBG"
          },
          {
            "description": "Generate symmetric digest",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, plaintext",
            "name": "Generate symmetric digest",
            "outputs": "Status, digest",
            "rolesSspAccess": "User - AES-CMAC key: W,E,Z",
            "secFunImpl": "AES-CMAC for MAC Generation"
          },
          {
            "description": "Perform pre- operational self- tests",
            "indicator": "Indicator API return value = 1",
            "inputs": "Re-instantiate module; API call parameters",
            "name": "Perform self- tests on- demand",
            "outputs": "Status",
            "rolesSspAccess": "",
            "secFunImpl": "HMAC for Module Integrity Test"
          },
          {
            "description": "Encrypt plaintext data",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, plaintext",
            "name": "Perform symmetric encryption",
            "outputs": "Status, ciphertext",
            "rolesSspAccess": "User - AES key: W,E,Z - AES-XTS key: W,E,Z",
            "secFunImpl": "AES for Symmetric Encryption AES for Symmetric Decryption AES-XTS for Symmetric Encryption AES-XTS for Symmetric Decryption"
          },
          {
            "description": "Decrypt ciphertext data",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, ciphertext",
            "name": "Perform symmetric decryption",
            "outputs": "Status, plaintext",
            "rolesSspAccess": "User - AES key: W,E,Z - AES-XTS key: W,E,Z",
            "secFunImpl": "AES for Symmetric Encryption AES for Symmetric Decryption AES-XTS for Symmetric Encryption AES-XTS for Symmetric Decryption"
          },
          {
            "description": "Return module versioning information",
            "indicator": "N/A",
            "inputs": "API call parameters",
            "name": "Show versioning information",
            "outputs": "Module name, version",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Return FIPS mode status",
            "indicator": "N/A",
            "inputs": "API call parameters",
            "name": "Show status",
            "outputs": "Current operational status",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Zeroize and de- allocate memory containing sensitive data",
            "indicator": "N/A",
            "inputs": "Remove power; reboot/power- cycle host device; API call parameters",
            "name": "Zeroize",
            "outputs": "None",
            "rolesSspAccess": "Crypto Officer - AES key: Z - AES-CCM key: Z - AES-GCM key: Z - AES-XTS key: Z - AES-CMAC key: Z - HMAC key: Z - RSA private key: Z - RSA public key: Z - ECDSA private key: Z - ECDSA public key: Z - DH private key: Z - DH public key: Z - ECDH private key: Z - ECDH public key: Z - IKEv2 encryption key: Z - Shared secret: Z - DRBG entropy input: Z - DRBG seed: Z - DRBG \u0027C\u0027 value: Z - DRBG \u0027V\u0027 value: Z - DRBG \u0027Key\" Value: Z - AES-GCM IV: Z - IKEv2 authentication",
            "secFunImpl": "None"
          },
          {
            "description": "Verify symmetric digest",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, ciphertext, digest",
            "name": "Verify symmetric digest",
            "outputs": "Status",
            "rolesSspAccess": "User - AES-CMAC key: W,E,Z",
            "secFunImpl": "AES-CMAC for MAC Verification"
          },
          {
            "description": "Encrypt plaintext with authentication tag",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, plaintext",
            "name": "Perform authenticated symmetric encryption",
            "outputs": "Status, ciphertext, tag",
            "rolesSspAccess": "User - AES-CCM key: G,E,Z - AES-GCM key: G,E,Z - AES-GCM IV: G,E,Z",
            "secFunImpl": "AES-GCM for Authenticated Symmetric Encryption AES-CCM for Authenticated Symmetric Encryption"
          },
          {
            "description": "Decrypt ciphertext with authentication tag",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, ciphertext, tag",
            "name": "Perform authenticated symmetric decryption",
            "outputs": "Status, plaintext",
            "rolesSspAccess": "User - AES-CCM key: G,E,Z - AES-GCM key: G,E,Z - AES-GCM IV: G,E,Z",
            "secFunImpl": "AES-GCM for Authenticated Symmetric Decryption AES-CCM for Authenticated Symmetric"
          },
          {
            "description": "Generate a public/private key pair",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters",
            "name": "Generate asymmetric key pair",
            "outputs": "Status, key pair",
            "rolesSspAccess": "User - ECDSA public key: G,R,Z - ECDSA private key: G,R,Z - RSA public key: G,R,Z - RSA private key: G,R,Z - DH private key: G,R,Z - DH public key: G,R,Z - ECDH private key: G,R,Z - ECDH public",
            "secFunImpl": "Decryption RSA for Key Generation ECDSA for Key Generation DH Key Generation ECDH Key Generation"
          },
          {
            "description": "Verify an ECDSA public key",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key",
            "name": "Verify ECDSA public key",
            "outputs": "Status",
            "rolesSspAccess": "User - ECDSA public key: W,E,Z",
            "secFunImpl": "ECDSA (FIPS 186-5) for Key Verification"
          },
          {
            "description": "Generate a digital signature",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, message",
            "name": "Generate digital signature",
            "outputs": "Status, signature",
            "rolesSspAccess": "User - ECDSA private key: W,E,Z - RSA private key: W,E,Z",
            "secFunImpl": "ECDSA for Signature Generation RSA (FIPS 186-5) for Signature Generation"
          },
          {
            "description": "Verify a digital signature",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, key, signature, message",
            "name": "Verify digital signature",
            "outputs": "Status",
            "rolesSspAccess": "User - ECDSA public key: W,E,Z - RSA public key: W,E,Z",
            "secFunImpl": "ECDSA for Signature Verification RSA (FIPS 186-4) for Signature Verification (legacy) RSA (FIPS 186-5) for Signature Verification"
          },
          {
            "description": "Perform key wrap",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, encryption key, key",
            "name": "Perform key wrap",
            "outputs": "Status, encrypted key",
            "rolesSspAccess": "User - AES key: W,E,Z - AES-CCM key: W,E,Z - AES-CMAC key: W,E,Z - AES-GCM key: W,E,Z - HMAC key: W,E,Z - AES-GCM IV: E,Z",
            "secFunImpl": "AES-CCM for Wrap/Unwrap AES-GCM for Wrap/Unwrap AES+MAC for Key Wrap/Unwrap"
          },
          {
            "description": "Perform key encapsulation",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameter, encapsulating key, key",
            "name": "Perform key encapsulation",
            "outputs": "Status, encapsulated key",
            "rolesSspAccess": "User - RSA private key: W,E,Z",
            "secFunImpl": "RSA for Key Transport"
          },
          {
            "description": "Perform key decapsulation",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameter, decapsulating key, encapsulated key",
            "name": "Perform key decapsulation",
            "outputs": "Status, decapsulated key",
            "rolesSspAccess": "User - RSA public key: W,E,Z",
            "secFunImpl": "RSA for Key Transport"
          },
          {
            "description": "Derive keys for IKEv2 sessions",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, shared secret",
            "name": "Perform IKEv2 key derivation",
            "outputs": "Status, derived key",
            "rolesSspAccess": "User - Shared secret: W,E,Z - IKEv2 encryption key: G,R - IKEv2 authentication key: G,R",
            "secFunImpl": "KDF for IKEv2"
          },
          {
            "description": "Perform key unwrap",
            "indicator": "Indicator API return value = 1",
            "inputs": "API call parameters, decryption key, key",
            "name": "Perform key unwrap",
            "outputs": "Status, decrypted key",
            "rolesSspAccess": "User - AES key: W,E,Z - AES-CCM key: W,E,Z - AES-GCM key: W,E,Z - AES-CMAC key: W,E,Z - HMAC key: W,E,Z - AES-GCM IV: E,Z",
            "secFunImpl": "AES-CCM for Wrap/Unwrap AES-GCM for Wrap/Unwrap AES+MAC for Key Wrap/Unwrap AES for Unauthenticated Key Unwrap (allowed) (legacy)"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-CBC (A6780) - Encrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Encrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A6780) - Decrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm.",
            "details": "Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A6780) - Encrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Encrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "192-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A6780) - Decrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "192-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A6780) - Encrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Encrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A6780) - Decrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6780) - Encrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Encrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128/256- bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6780) - Decrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128/256- bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A6780) - Generate",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Generate",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128/256- bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A6780) - Verify",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Verify",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128/256- bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Generate/Instantiate/Reseed",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Generate/Instantiate/Reseed",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Generate/Instantiate/Reseed",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA-1 (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "MAC",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "MAC",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 512 (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "MAC",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "N/A",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Sign",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "P-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Sign",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "P-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Sign",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Verify",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA Encrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Encrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "2048-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA Decrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "2048-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Shared secret computation",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "P-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF IKEv2 (A6780)",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Key derivation",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6780)",
            "condition": "Prior to using an EDSA keypair as part of an ECDSA",
            "details": "Sign/Verify",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6780)",
            "condition": "Prior to using an RSA keypair as part of an RSA sign/verify function",
            "details": "Sign/Verify",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen KTS (A6780)",
            "condition": "Prior to using an RSA keypair as part of an RSA key transport function",
            "details": "Encrypt/Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "DH KeyGen",
            "condition": "Prior to using a DH keypair as part of an DH shared secret computation",
            "details": "Key Generation",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDH KeyGen",
            "condition": "Prior to using an ECDH keypair as part of an ECDH key agreement function",
            "details": "Key generation",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "AES-ECB (A6780) - Encrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Encrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A6780) - Decrypt",
            "condition": "On initial power-up sequence and prior to first use of the algorithm",
            "details": "Decrypt",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "KAT",
            "testProps": "128-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6780)",
            "condition": "Prior to using AES-XTS keys for encryption",
            "details": "Key comparison",
            "indicator": "Sets return value to \"0\" if test is failed (default value is \"1\")",
            "testMethod": "Duplicate Key Test",
            "testProps": "N/A",
            "type": "Critical Function"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Upon failure of any of the module\u0027s pre- operational or conditional self- tests.",
            "description": "Will prevent the execution of any cryptographic services while the error state persists. Subsequent requests will return an error result.",
            "indicator": "FIPS_self_test_fail error flag will be set.",
            "name": "Critical Error",
            "recoveryMethod": "The module must be re-instantiated, or the host device must be rebooted/power-cycled. If these recovery methods do not result in the successful completion of all pre-operational self-tests or conditional CASTs, the module should not resume normal operations, and Wind River Systems, Inc. should be contacted for assistance."
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Upon successful completion of all pre-operational self- tests, the module supports the use of Approved/allowed algorithms only.",
            "name": "ApprovedMode",
            "statusIndicator": "A non-zero return from a call to the FIPS_module_mode() API command",
            "type": "Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input parameters - Includes data to be encrypted/decrypted/signed/verified/hashed, keys to be used in cryptographic services, random seed material for the module\u0027s DRBG, and keying material to be used as input to key establishment services",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API output parameters and return values - Includes data that has been encrypted/decrypted/verified, digital signatures, hashes, random values generated by the module\u0027s DRBG, and keys established using module\u0027s key establishment methods",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A"
          },
          {
            "data": "API method calls - Includes API commands invoking cryptographic services, modes/key sizes/etc. used with cryptographic services",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API output parameters and return/error codes - Includes status information regarding the module and status information regarding the invoked service/operation",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          },
          {
            "authMethodList": "None",
            "name": "User",
            "operatorType": "User",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "Integrity Test (Wind River FIPS",
            "details": "MAC",
            "indicator": "Returns \"1\" for success and",
            "testMethod": "KAT",
            "testProps": "HMAC SHA-",
            "type": "SW/FW"
          },
          {
            "algorithmOrTest": "Cryptographic Module (libcrypto))",
            "details": "verification",
            "indicator": "\"0\" for failure",
            "testMethod": "",
            "testProps": "1",
            "type": "Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "RAM (module)",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Input via API",
            "sfiAlgo": "",
            "source": "External (calling application)"
          },
          {
            "dest": "External (calling application)",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Output via API",
            "sfiAlgo": "",
            "source": "RAM (module)"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "API call zeroizes SSPs.",
            "method": "API call",
            "operatorId": "Invoke the following API commands to zeroize the specified SSPs: * FIPS_rsa_free * FIPS_ecdsa_sig_free * FIPS_ec_key_free * FIPS_dh_free * OPENSSL_cleanse (HMAC, AES, CMAC)",
            "rationale": "The operator executing the API call overwrites the SSPs with zeroes, yielding the SSPs irretrievable."
          },
          {
            "description": "Upon removing power from the host device, the SSPs in memory are zeroized.",
            "method": "Remove power",
            "operatorId": "Operator removes power from the host device",
            "rationale": "Removing power from the host device yields SSPs in memory irretrievable and unusable, effectively zeroizing them."
          },
          {
            "description": "Upon rebooting the host device, the SSPs in memory are zeroized.",
            "method": "Reboot",
            "operatorId": "Operator reboots the host device",
            "rationale": "Rebooting the host device yields SSPs in memory irretrievable and unusable, effectively zeroizing them."
          },
          {
            "description": "Upon power-cycling the host device, the SSPs in memory are zeroized.",
            "method": "Power-cycle",
            "operatorId": "Operator power-cycles the host device",
            "rationale": "Power-cycling the host device yields SSPs in memory irretrievable and unusable, effectively zeroizing them."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [],
        "found": false,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "BAE Systems RAD5545 SpaceVPX single- board computer",
            "hypervisorHostOs": "",
            "operatingSystem": "Wind River VxWorks 7.0 SR640",
            "paa_pai": "No",
            "processors": "BAE Systems RAD5500",
            "version": "2.0.16.004"
          },
          {
            "hardwarePlatform": "Gaisler GR-CPCI-GR740 single-board computer",
            "hypervisorHostOs": "",
            "operatingSystem": "Wind River VxWorks 6.9.4.12",
            "paa_pai": "No",
            "processors": "Gaisler LEON4FT SPARC V8",
            "version": "2.0.16.004"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Asymmetric",
            "implName": "N/A",
            "name": "CKG",
            "reference": "SP 800-133 Rev2 section 4 example 1 and IG D.H"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 35
          },
          "ECDSA": {
            "ECDSA": 55
          }
        },
        "FF": {
          "DH": {
            "DH": 34,
            "Diffie-Hellman": 4
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 1
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 26
        },
        "IPsec": {
          "IPsec": 1
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "MAC": {
          "MAC": 22
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 12,
          "P-256": 10,
          "P-384": 14,
          "P-521": 10
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#12": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 1,
          "AES-128": 1,
          "AES-192": 1,
          "AES-256": 1,
          "AES-GCM 96": 1,
          "HMAC SHA-1": 2,
          "HMAC SHA1": 1,
          "HMAC-SHA-1": 6,
          "PKCS 1": 1,
          "SHA-1": 11,
          "SHA1": 1,
          "SHA2-224": 4,
          "SHA2-256": 7,
          "SHA2-384": 4,
          "SHA2-512": 6
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 11,
            "SHA1": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 53
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 65,
          "FIPS 180-4": 8,
          "FIPS 186-4": 6,
          "FIPS 186-5": 16,
          "FIPS 198-1": 6,
          "FIPS PUB 180-4": 1,
          "FIPS PUB 186": 1,
          "FIPS PUB 186-4": 3,
          "FIPS186-4": 1,
          "FIPS186-5": 20
        },
        "ISO": {
          "ISO/IEC 19790:2012": 2
        },
        "NIST": {
          "NIST SP 800-38D": 2,
          "SP 800-133": 1,
          "SP 800-135": 1,
          "SP 800-38A": 11,
          "SP 800-38B": 3,
          "SP 800-38C": 4,
          "SP 800-38D": 5,
          "SP 800-38E": 1,
          "SP 800-56A": 4,
          "SP 800-56B": 2,
          "SP 800-90A": 9
        },
        "PKCS": {
          "PKCS 1": 1
        },
        "RFC": {
          "RFC 5282": 1,
          "RFC 7296": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 34,
            "AES-": 2,
            "AES-128": 1,
            "AES-192": 1,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 52
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 33
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 4
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-ECBA6780",
        "HMAC DRBGA6780",
        "ECDSA SigVer (FIPS186-5)A6780",
        "Safe Primes Key VerificationA6780",
        "AES-GCMA6780",
        "AES-CCMA6780",
        "KTS-IFCA6780",
        "HMAC-SHA2-512A6780",
        "HMAC-SHA2-384A6780",
        "RSA KeyGen (FIPS186-5)A6780",
        "AES-CTRA6780",
        "Counter DRBGA6780",
        "ECDSA KeyVer (FIPS186-5)A6780",
        "KAS-FFC-SSC Sp800-56Ar3A6780",
        "RSA SigVer (FIPS186-5)A6780",
        "AES-CMACA6780",
        "KDF IKEv2A6780",
        "AES-CFB128A6780",
        "SHA-1A6780",
        "AES-OFBA6780",
        "KAS-ECC-SSC Sp800-56Ar3A6780",
        "SHA2-512A6780",
        "SHA2-384A6780",
        "Safe Primes Key GenerationA6780",
        "RSA SigVer (FIPS186-4)A6780",
        "HMAC-SHA2-256A6780",
        "RSA SigGen (FIPS186-5)A6780",
        "ECDSA SigGen (FIPS186-5)A6780",
        "AES-CFB8A6780",
        "HMAC-SHA2-224A6780",
        "Hash DRBGA6780",
        "SHA2-224A6780",
        "ECDSA KeyGen (FIPS186-5)A6780",
        "SHA2-256A6780",
        "AES-CFB1A6780",
        "AES-CBCA6780",
        "AES-XTS Testing Revision 2.0A6780",
        "HMAC-SHA-1A6780"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A6780"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260709064903-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260709064903-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 961381,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.corsec.com/",
          "mailto:[email protected]",
          "http://csrc.nist.gov/groups/STM/cmvp",
          "https://csrc.nist.gov/CSRC/media/Projects/cryptographic-module-validation-program/documents/IG%209.3.A%20Resolution%202b%5BMarch%2026%202024%5D.pdf",
          "http://www.windriver.com/",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/Validated-Modules/Search",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=39390"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 48
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4190fe8fb0f5362bcb2e3eff5fcce5746cd4f1fe9cae99982b5a7f41baea1ddf",
      "source_hash": "c71ffc04c133ad69883e40227f303213b9478c6b95a35a86325cc2feb2259dda",
      "txt_hash": "a024554074eabe30d2f8ee8182698b53704de8caf46fad7a18ba200488f961ac"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys); No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
    "date_sunset": "2031-07-11",
    "description": "The Wind River FIPS Object Module is a general-purpose software cryptographic library offering symmetric encryption/decryption, digital signature generation/verification, hashing, cryptographic key generation, random number generation, message authentication, and key establishment functions. It is designed for ease of use with the popular OpenSSL cryptographic library and toolkit and is available for use as part of Wind River\u0027s platforms.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Wind River FIPS Object Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-07-12",
        "lab": "Teron Labs",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Wind River Systems, Inc.",
    "vendor_url": "http://www.windriver.com"
  }
}