wolfCrypt

Certificate #2425

Webpage information

Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 11.08.2015 , 15.09.2015 , 30.09.2015 , 18.11.2015 , 23.06.2016 , 11.08.2017 , 25.08.2017 , 20.10.2017 , 27.03.2018 , 06.04.2018 , 07.06.2018 , 15.10.2018
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.
Tested configurations
  • Android 4.4 running on a Samsung Galaxy S5
  • Android Dalvik 4.2.2 running on a MXT-700-NC 7” Touch Panel
  • Debian 8.7.0 running on Intel® x64 Server System R1304SP
  • Debian 8.8 running on CA PAM 304L Server
  • FreeRTOS 7.6 running on uTrust TS Reader
  • iOS 8.1 running on an iPhone 6
  • Linux 3.0 (SLES 11 SP4, 64-bit) on Microsoft Hyper-V 2012R2 Core running on Dell® PowerEdge™ r630
  • Linux 3.0 (SLES 11 SP4, 64-bit) on VMWare ESXi 5.5.0 running on Dell® PowerEdge r630™
  • Linux 3.0 (SLES 11 SP4, 64-bit) running on Imprivata OneSign
  • Linux 3.13.0 (Ubuntu) running on a HP EliteBook
  • Linux 4.1.15 running on a NX-1200 NetLinx NX Integrated Controller
  • Linux 4.4 (SLES 12 SP3, 64-bit) on Microsoft Hyper-V 2016 Core running on Dell® PowerEdge™ r720
  • Linux 4.4 (SLES 12 SP3, 64-bit) on VMWare ESXi 6.5.0 running on Dell® PowerEdge™ r420
  • NET+OS v7.6 running on Sigma IV infusion pump
  • Windows 10 Pro running on Dell™ Latitude™ 7480
  • Windows 7 (64-bit) on VMWare ESXi 5.5.0 running on Dell® PowerEdge™ r630
  • Windows 7 (64-bit) running on Sony Vaio Pro
  • Windows 7 Professional SP1 running on Dell Latitude E6520 Laptop
  • Windows Server 2012R2 running on CA Technologies PAMHAF995 (single-user mode)
Vendor wolfSSL Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, RC4, DES, TDES, HMAC
Asymmetric Algorithms
ECDH, DH
Hash functions
MD4, MD5
Schemes
Key agreement, Key Agreement
Protocols
SSL, TLS, TLS 1.1
Randomness
DRBG, RNG
Libraries
wolfSSL
Block cipher modes
CBC, CTR, GCM

Trusted Execution Environments
SGX
Vendor
NXP, Samsung, Qualcomm, Microsoft

Security level
Level 1

Standards
FIPS 197, PKCS #1, PKCS1

File metadata

Title Microsoft Word - 1400f - wolfCrypt Security Policy 2.16.docx
Author lgarcia
Creation date D:20181012152232-07'00'
Modification date D:20181012152232-07'00'
Pages 31
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 17.0 (Windows)

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2425,
  "dgst": "884787790b634bcd",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA#2612",
        "DRBG#2006",
        "AES#5325",
        "DRBG#875",
        "Triple-DES#1901",
        "Triple-DES#1972",
        "RSA#1803",
        "DRBG#1566",
        "AES#3490",
        "Triple-DES#2470",
        "HMAC#3605",
        "SHS#4277",
        "SHS#4222",
        "DRBG#1561",
        "AES#3330",
        "DRBG#821",
        "SHS#2763",
        "RSA#1602",
        "HMAC#1990",
        "HMAC#2241",
        "HMAC#3471",
        "RSA#1710",
        "RSA#2534",
        "SHS#3806",
        "RSA#2923",
        "HMAC#2175",
        "AES#5244",
        "AES#4643",
        "RSA#2853",
        "Triple-DES#1966",
        "DRBG#1651",
        "SHS#2893",
        "AES#4772",
        "AES#4635",
        "HMAC#3183",
        "RSA#1749",
        "SHS#3915",
        "RSA#1791",
        "DRBG#2055",
        "DRBG#863",
        "HMAC#3068",
        "AES#3417",
        "HMAC#3075",
        "SHS#2614",
        "AES#3508",
        "SHS#3799",
        "Triple-DES#1800",
        "SHS#2882",
        "Triple-DES#1928",
        "DRBG#650",
        "DRBG#2132",
        "Triple-DES#2737",
        "RSA#2804",
        "HMAC#3523",
        "Triple-DES#2465",
        "Triple-DES#2687",
        "AES#3157",
        "AES#5447",
        "DRBG#775",
        "HMAC#2228",
        "HMAC#2121",
        "SHS#4366",
        "Triple-DES#2652",
        "RSA#2530",
        "Triple-DES#2535",
        "SHS#2823"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 4
          }
        },
        "FF": {
          "DH": {
            "DH": 9
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 1
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "wolfSSL": {
          "wolfSSL": 87
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 2,
            "TLS 1.1": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2,
          "Key agreement": 4
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "Cert # AES": 1,
          "Cert # DRBG": 1,
          "Cert # SHA": 1,
          "PKCS #1": 2,
          "PKCS1": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 10
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 11
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 197": 1
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 12
          },
          "RC": {
            "RC4": 2
          }
        },
        "DES": {
          "3DES": {
            "TDES": 8
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 9
          }
        }
      },
      "tee_name": {
        "Intel": {
          "SGX": 11
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        },
        "NXP": {
          "NXP": 2
        },
        "Qualcomm": {
          "Qualcomm": 1
        },
        "Samsung": {
          "Samsung": 1
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "lgarcia",
      "/CreationDate": "D:20181012152232-07\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20181012152232-07\u002700\u0027",
      "/Producer": "Acrobat Distiller 17.0 (Windows)",
      "/Title": "Microsoft Word - 1400f - wolfCrypt Security Policy 2.16.docx",
      "pdf_file_size_bytes": 383981,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 31
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "336fc2e702ca62e0be09530f2fbf97008b114752b326cd64ae7fc2e308b16059",
    "policy_txt_hash": "fba13216ed220608b53f3e2e2c86f5c8fa2808a173e098c0d1486c2842500bd0"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0056.pdf",
    "date_sunset": null,
    "description": "wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "wolfCrypt",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "3.6.0, 3.6.1, 3.6.6, 3.11.2, 3.12.2, 3.12.4, 3.12.6 and 3.14.2",
    "tested_conf": [
      "Android 4.4 running on a Samsung Galaxy S5",
      "Android Dalvik 4.2.2 running on a MXT-700-NC 7\u201d Touch Panel",
      "Debian 8.7.0 running on Intel\u00ae x64 Server System R1304SP",
      "Debian 8.8 running on CA PAM 304L Server",
      "FreeRTOS 7.6 running on uTrust TS Reader",
      "iOS 8.1 running on an iPhone 6",
      "Linux 3.0 (SLES 11 SP4, 64-bit) on Microsoft Hyper-V 2012R2 Core running on Dell\u00ae PowerEdge\u2122 r630",
      "Linux 3.0 (SLES 11 SP4, 64-bit) on VMWare ESXi 5.5.0 running on Dell\u00ae PowerEdge r630\u2122",
      "Linux 3.0 (SLES 11 SP4, 64-bit) running on Imprivata OneSign",
      "Linux 3.13.0 (Ubuntu) running on a HP EliteBook",
      "Linux 4.1.15 running on a NX-1200 NetLinx NX Integrated Controller",
      "Linux 4.4 (SLES 12 SP3, 64-bit) on Microsoft Hyper-V 2016 Core running on Dell\u00ae PowerEdge\u2122 r720",
      "Linux 4.4 (SLES 12 SP3, 64-bit) on VMWare ESXi 6.5.0 running on Dell\u00ae PowerEdge\u2122 r420",
      "NET+OS v7.6 running on Sigma IV infusion pump",
      "Windows 10 Pro running on Dell\u2122 Latitude\u2122 7480",
      "Windows 7 (64-bit) on VMWare ESXi 5.5.0 running on Dell\u00ae PowerEdge\u2122 r630",
      "Windows 7 (64-bit) running on Sony Vaio Pro",
      "Windows 7 Professional SP1 running on Dell Latitude E6520 Laptop",
      "Windows Server 2012R2 running on CA Technologies PAMHAF995 (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-08-11",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-09-15",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-09-30",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-11-18",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2016-06-23",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-08-11",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-08-25",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-10-20",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-03-27",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-04-06",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-06-07",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-10-15",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "wolfSSL Inc.",
    "vendor_url": "http://www.wolfssl.com"
  }
}