wolfCrypt

Certificate details

Certificate ID #2425
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 11.08.2015 , 15.09.2015 , 30.09.2015 , 18.11.2015 , 23.06.2016 , 11.08.2017 , 25.08.2017 , 20.10.2017 , 27.03.2018 , 06.04.2018 , 07.06.2018 , 15.10.2018
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.
Tested configurations
  • Android 4.4 running on a Samsung Galaxy S5
  • Android Dalvik 4.2.2 running on a MXT-700-NC 7” Touch Panel
  • Debian 8.7.0 running on Intel® x64 Server System R1304SP
  • Debian 8.8 running on CA PAM 304L Server
  • FreeRTOS 7.6 running on uTrust TS Reader
  • iOS 8.1 running on an iPhone 6
  • Linux 3.0 (SLES 11 SP4, 64-bit) on Microsoft Hyper-V 2012R2 Core running on Dell® PowerEdge™ r630
  • Linux 3.0 (SLES 11 SP4, 64-bit) on VMWare ESXi 5.5.0 running on Dell® PowerEdge r630™
  • Linux 3.0 (SLES 11 SP4, 64-bit) running on Imprivata OneSign
  • Linux 3.13.0 (Ubuntu) running on a HP EliteBook
  • Linux 4.1.15 running on a NX-1200 NetLinx NX Integrated Controller
  • Linux 4.4 (SLES 12 SP3, 64-bit) on Microsoft Hyper-V 2016 Core running on Dell® PowerEdge™ r720
  • Linux 4.4 (SLES 12 SP3, 64-bit) on VMWare ESXi 6.5.0 running on Dell® PowerEdge™ r420
  • NET+OS v7.6 running on Sigma IV infusion pump
  • Windows 10 Pro running on Dell™ Latitude™ 7480
  • Windows 7 (64-bit) on VMWare ESXi 5.5.0 running on Dell® PowerEdge™ r630
  • Windows 7 (64-bit) running on Sony Vaio Pro
  • Windows 7 Professional SP1 running on Dell Latitude E6520 Laptop
  • Windows Server 2012R2 running on CA Technologies PAMHAF995 (single-user mode)
Vendor wolfSSL Inc. http://www.wolfssl.com
Lab UL Verification Services, Inc.
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, RC4, DES, TDES, HMAC
Asymmetric Algorithms
RSA 1024, ECDH, DH
Hash functions
MD4, MD5, RIPEMD
Schemes
Key agreement, Key Agreement
Protocols
SSL, TLS, TLS 1.1
Randomness
DRBG, RNG
Libraries
wolfSSL
Block cipher modes
CBC, CTR, GCM

Trusted Execution Environments
SGX
Vendor
NXP, Samsung, Qualcomm, Microsoft

Security level
Level 1

Title Microsoft Word - 1400f - wolfCrypt Security Policy 2.16.docx
Author lgarcia
Creation date D:20181012152232-07'00'
Modification date D:20181012152232-07'00'
Pages 31
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 17.0 (Windows)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2425,
  "dgst": "884787790b634bcd",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#2241",
        "HMAC#2228",
        "#4643",
        "Triple-DES#2470",
        "#2055",
        "AES#5244",
        "#3417",
        "AES#3508",
        "#1561",
        "HMAC#2175",
        "#2612",
        "#1791",
        "HMAC#3471",
        "#3605",
        "Triple-DES#1966",
        "#821",
        "HMAC#3075",
        "#2893",
        "#875",
        "#2241",
        "#2175",
        "DRBG#821",
        "AES#3157",
        "#3508",
        "AES#4772",
        "Triple-DES#2737",
        "DRBG#1651",
        "Triple-DES#2687",
        "#2882",
        "#2823",
        "#3471",
        "HMAC#3183",
        "#5447",
        "Triple-DES#1928",
        "DRBG#863",
        "SHS#2882",
        "RSA#2804",
        "RSA#2853",
        "SHS#4277",
        "RSA#1803",
        "SHS#2893",
        "#1901",
        "#4772",
        "#2763",
        "AES#3330",
        "RSA#1749",
        "AES#3490",
        "#1928",
        "SHS#2614",
        "#2530",
        "#1803",
        "DRBG#1561",
        "DRBG#2132",
        "#1749",
        "#5244",
        "#650",
        "DRBG#1566",
        "AES#3417",
        "Triple-DES#2652",
        "DRBG#875",
        "#3915",
        "#5325",
        "#3330",
        "SHS#3799",
        "Triple-DES#2465",
        "#3075",
        "Triple-DES#1972",
        "HMAC#3523",
        "SHS#4366",
        "SHS#4222",
        "#2121",
        "AES#4635",
        "RSA#1710",
        "#2614",
        "HMAC#3068",
        "#2652",
        "SHS#2823",
        "#3490",
        "RSA#2534",
        "#3183",
        "#2804",
        "#2534",
        "#1651",
        "#2470",
        "#1800",
        "AES#4643",
        "HMAC#3605",
        "#2853",
        "SHS#3806",
        "#3068",
        "SHS#3915",
        "Triple-DES#2535",
        "#863",
        "#3806",
        "DRBG#2055",
        "SHS#2763",
        "HMAC#1990",
        "DRBG#650",
        "#1710",
        "AES#5325",
        "RSA#1791",
        "DRBG#775",
        "#1972",
        "#2132",
        "#2923",
        "#3799",
        "HMAC#2121",
        "#2465",
        "RSA#2530",
        "#2687",
        "#775",
        "AES#5447",
        "RSA#2612",
        "#1566",
        "#4635",
        "Triple-DES#1800",
        "#1990",
        "#2228",
        "RSA#2923",
        "RSA#1602",
        "#1966",
        "DRBG#2006",
        "#1602",
        "#2535",
        "#3157",
        "#3523",
        "Triple-DES#1901",
        "#2006"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 43,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 4
          }
        },
        "FF": {
          "DH": {
            "DH": 9
          }
        },
        "RSA": {
          "RSA 1024": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 1
        },
        "GCM": {
          "GCM": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "wolfSSL": {
          "wolfSSL": 87
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 2,
            "TLS 1.1": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2,
          "Key agreement": 4
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "Cert # AES": 1,
          "Cert # DRBG": 1,
          "Cert # SHA": 1,
          "DRBG 775": 1,
          "HMAC - SHA - 256": 1,
          "PKCS #1": 2,
          "PKCS1": 2,
          "RSA 1024": 1,
          "SHA - 1": 4,
          "SHA - 2": 1,
          "SHA - 256": 4,
          "SHA - 384": 2,
          "SHA - 512": 2,
          "SHA - 512 2175": 1,
          "SHA - 512 2614": 1,
          "SHA -256": 7
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 10
          }
        },
        "RIPEMD": {
          "RIPEMD": 3
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 11
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140": 19,
          "FIPS 180": 1,
          "FIPS 186": 1,
          "FIPS 197": 1,
          "FIPS 198": 1,
          "FIPS140": 1
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 12
          },
          "RC": {
            "RC4": 2
          }
        },
        "DES": {
          "3DES": {
            "TDES": 8
          },
          "DES": {
            "DES": 6
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 11
          }
        }
      },
      "tee_name": {
        "Intel": {
          "SGX": 11
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        },
        "NXP": {
          "NXP": 2
        },
        "Qualcomm": {
          "Qualcomm": 1
        },
        "Samsung": {
          "Samsung": 1
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#4277",
        "AES#5325",
        "RSA#1803",
        "RSA#1710",
        "HMAC#2241",
        "HMAC#2228",
        "SHS#2893",
        "Triple-DES#2470",
        "RSA#1791",
        "HMAC#1990",
        "DRBG#650",
        "SHS#4222",
        "DRBG#775",
        "HMAC#3068",
        "AES#5244",
        "AES#3330",
        "SHS#2823",
        "RSA#1749",
        "AES#3490",
        "RSA#2534",
        "AES#3508",
        "SHS#2614",
        "HMAC#2175",
        "DRBG#1561",
        "DRBG#2132",
        "HMAC#2121",
        "HMAC#3471",
        "RSA#2530",
        "Triple-DES#1966",
        "HMAC#3075",
        "DRBG#863",
        "DRBG#1566",
        "AES#5447",
        "AES#3417",
        "DRBG#821",
        "RSA#2612",
        "Triple-DES#2652",
        "AES#3157",
        "DRBG#875",
        "Triple-DES#1800",
        "AES#4772",
        "AES#4643",
        "HMAC#3605",
        "SHS#3799",
        "Triple-DES#2465",
        "RSA#2923",
        "RSA#1602",
        "DRBG#1651",
        "Triple-DES#2687",
        "Triple-DES#2737",
        "DRBG#2006",
        "Triple-DES#1972",
        "SHS#3806",
        "HMAC#3183",
        "HMAC#3523",
        "SHS#3915",
        "Triple-DES#2535",
        "SHS#4366",
        "Triple-DES#1928",
        "DRBG#2055",
        "SHS#2763",
        "SHS#2882",
        "RSA#2804",
        "Triple-DES#1901",
        "RSA#2853",
        "AES#4635"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#4643",
        "#2614",
        "#1901",
        "#4772",
        "#2763",
        "#2055",
        "#1972",
        "#2132",
        "#2652",
        "#3490",
        "#1928",
        "#3417",
        "#1561",
        "#3183",
        "#1803",
        "#2530",
        "#2612",
        "#2923",
        "#3799",
        "#1749",
        "#1791",
        "#2804",
        "#2465",
        "#2534",
        "#5244",
        "#1651",
        "#3605",
        "#821",
        "#2893",
        "#875",
        "#2241",
        "#2687",
        "#650",
        "#775",
        "#2470",
        "#2175",
        "#1566",
        "#4635",
        "#3915",
        "#3508",
        "#5325",
        "#1800",
        "#3330",
        "#1990",
        "#2228",
        "#2853",
        "#1966",
        "#2882",
        "#3075",
        "#2823",
        "#3471",
        "#1602",
        "#3068",
        "#2535",
        "#5447",
        "#3157",
        "#863",
        "#3806",
        "#3523",
        "#1710",
        "#2121",
        "#2006"
      ]
    },
    "policy_metadata": {
      "/Author": "lgarcia",
      "/CreationDate": "D:20181012152232-07\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20181012152232-07\u002700\u0027",
      "/Producer": "Acrobat Distiller 17.0 (Windows)",
      "/Title": "Microsoft Word - 1400f - wolfCrypt Security Policy 2.16.docx",
      "pdf_file_size_bytes": 383981,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 31
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "9c7c1a54c601036a8f3c3dee6118455b5417429e4397a9ffce497a1c17803bd7",
      "source_hash": "336fc2e702ca62e0be09530f2fbf97008b114752b326cd64ae7fc2e308b16059",
      "txt_hash": "318b56745b0b219a56a62925d27cc6c9da5bb145f4613f9d609f103ff002f113"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0056.pdf",
    "date_sunset": null,
    "description": "wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "wolfCrypt",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "3.6.0, 3.6.1, 3.6.6, 3.11.2, 3.12.2, 3.12.4, 3.12.6 and 3.14.2",
    "tested_conf": [
      "Android 4.4 running on a Samsung Galaxy S5",
      "Android Dalvik 4.2.2 running on a MXT-700-NC 7\u201d Touch Panel",
      "Debian 8.7.0 running on Intel\u00ae x64 Server System R1304SP",
      "Debian 8.8 running on CA PAM 304L Server",
      "FreeRTOS 7.6 running on uTrust TS Reader",
      "iOS 8.1 running on an iPhone 6",
      "Linux 3.0 (SLES 11 SP4, 64-bit) on Microsoft Hyper-V 2012R2 Core running on Dell\u00ae PowerEdge\u2122 r630",
      "Linux 3.0 (SLES 11 SP4, 64-bit) on VMWare ESXi 5.5.0 running on Dell\u00ae PowerEdge r630\u2122",
      "Linux 3.0 (SLES 11 SP4, 64-bit) running on Imprivata OneSign",
      "Linux 3.13.0 (Ubuntu) running on a HP EliteBook",
      "Linux 4.1.15 running on a NX-1200 NetLinx NX Integrated Controller",
      "Linux 4.4 (SLES 12 SP3, 64-bit) on Microsoft Hyper-V 2016 Core running on Dell\u00ae PowerEdge\u2122 r720",
      "Linux 4.4 (SLES 12 SP3, 64-bit) on VMWare ESXi 6.5.0 running on Dell\u00ae PowerEdge\u2122 r420",
      "NET+OS v7.6 running on Sigma IV infusion pump",
      "Windows 10 Pro running on Dell\u2122 Latitude\u2122 7480",
      "Windows 7 (64-bit) on VMWare ESXi 5.5.0 running on Dell\u00ae PowerEdge\u2122 r630",
      "Windows 7 (64-bit) running on Sony Vaio Pro",
      "Windows 7 Professional SP1 running on Dell Latitude E6520 Laptop",
      "Windows Server 2012R2 running on CA Technologies PAMHAF995 (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-08-11",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-09-15",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-09-30",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-11-18",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2016-06-23",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-08-11",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-08-25",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-10-20",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-03-27",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-04-06",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-06-07",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-10-15",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "wolfSSL Inc.",
    "vendor_url": "http://www.wolfssl.com"
  }
}