This page was not yet optimized for use on mobile devices.

BShield Cryptographic Module

Certificate details

Certificate ID	#5170
Status	active
Validation dates	05.03.2026
Sunset date	10-07-2029
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	MultiChipStand
Caveat	No assurance of the minimum strength of generated SSPs (e.g., keys).
Exceptions	Physical security: N/A Non-invasive security: N/A Life-cycle assurance: Level 3
Description	The BShield Cryptographic Module is a general-purpose library integrated into BShield, a mobile application protection solution developed by Verichains, as well as other Verichains products, to provide FIPS 140-3 validated cryptographic functions for the protection of sensitive information.
Vendor	Verichains http://www.verichains.io
Lab	Acumen Security
Algorithms	AES-CBC-CS1A4481 AES-CBC-CS2A4481 AES-CBC-CS3A4481 AES-CBCA4481 AES-CCMA4481 AES-CFB128A4481 AES-CFB1A4481 AES-CFB8A4481 AES-CMACA4481 AES-CTRA4481 AES-ECBA4481 AES-GCMA4481 AES-GMACA4481 AES-KWA4481 AES-KWPA4481 AES-OFBA4481 AES-XTS Testing Revision 2.0A4481 Counter DRBGA4481 DSA KeyGen (FIPS186-4)A4481 DSA PQGGen (FIPS186-4)A4481 DSA PQGVer (FIPS186-4)A4481 DSA SigGen (FIPS186-4)A4481 DSA SigVer (FIPS186-4)A4481 ECDSA KeyGen (FIPS186-4)A4481 ECDSA KeyVer (FIPS186-4)A4481 ECDSA SigGen (FIPS186-4)A4481 ECDSA SigVer (FIPS186-4)A4481 EDDSA KeyGenA4481 EDDSA KeyVerA4481 EDDSA SigGenA4481 EDDSA SigVerA4481 Hash DRBGA4481 HMAC DRBGA4481 HMAC-SHA-1A4481 HMAC-SHA2-224A4481 HMAC-SHA2-256A4481 HMAC-SHA2-384A4481 HMAC-SHA2-512/224A4481 HMAC-SHA2-512/256A4481 HMAC-SHA2-512A4481 HMAC-SHA3-224A4481 HMAC-SHA3-256A4481 HMAC-SHA3-384A4481 HMAC-SHA3-512A4481 KAS-ECC CDH-Component SP800-56Ar3A4481 KAS-ECC-SSC Sp800-56Ar3A4481 KAS-FFC-SSC Sp800-56Ar3A4481 KAS-IFC-SSCA4481 KDA HKDF SP800-56Cr2A4481 KDA OneStep SP800-56Cr2A4481 KDA TwoStep SP800-56Cr2A4481 KDF ANS 9.42A4481 KDF ANS 9.63A4481 KDF SP800-108A4481 KDF SSHA4481 KMAC-128A4481 KMAC-256A4481 KTS-IFCA4481 PBKDFA4481 RSA KeyGen (FIPS186-4)A4481 RSA SigGen (FIPS186-4)A4481 RSA SigGen (FIPS186-5)A4481 RSA Signature PrimitiveA4481 RSA SigVer (FIPS186-4)A4481 RSA SigVer (FIPS186-5)A4481 Safe Primes Key GenerationA4481 Safe Primes Key VerificationA4481 SHA-1A4481 SHA2-224A4481 SHA2-256A4481 SHA2-384A4481 SHA2-512/224A4481 SHA2-512/256A4481 SHA2-512A4481 SHA3-224A4481 SHA3-256A4481 SHA3-384A4481 SHA3-512A4481 SHAKE-128A4481 SHAKE-256A4481 TLS v1.2 KDF RFC7627A4481 TLS v1.3 KDFA4481
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-128, AES-192, AES-256, CAST, HMAC, KMAC, CMAC

Asymmetric Algorithms

ECDSA, EdDSA, ECC, DSA

Hash functions

SHA-1, SHA2, SHA3-256, SHA3-512, SHA-3, SHA3, SHA3-224, SHA3-384, SHAKE128, SHAKE256, PBKDF

Schemes

MAC, Key agreement, Key Agreement, AEAD

Protocols

SSHv2, SSH, TLS v1.2, TLS v1.3, TLS 1.3, TLS, TLS 1.2

Randomness

DRBG, RBG

Libraries

OpenSSL

Elliptic Curves

P-224, P-256, P-384, P-521, P-192, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, B-163, K-163

Block cipher modes

CTR, GCM, CCM, XTS

JavaCard API constants

ED25519, ED448

Trusted Execution Environments

PSP, SSC

Vendor

Microsoft

Security level

Level 1

Side-channel analysis

timing attacks

Cross-references

Outgoing

210 - historical - VPN 3000 Concentrator Series

Author	Hawes, David J. (Fed)
Creation date	D:20260303105101-05'00'
Modification date	D:20260303105341-05'00'
Pages	35
Creator	Acrobat PDFMaker 25 for Word
Producer	Adobe PDF Library 25.1.5

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

06.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 2}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA3-256': 6, 'SHA-1': 4, 'SHA2-512': 7}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 4}}, 'SHA3': {'__update__': {'SHA3-256': 6}}}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key agreement': 14}}}}} data.
05.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 1}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA3-256': 7, 'SHA-1': 5, 'SHA2-512': 8}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 5}}, 'SHA3': {'__update__': {'SHA3-256': 7}}}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key agreement': 17}}}}} data.
24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 2}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA3-256': 6, 'SHA-1': 4, 'SHA2-512': 7}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 4}}, 'SHA3': {'__update__': {'SHA3-256': 6}}}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key agreement': 14}}}}} data.

The is_br1_format property was set to True.

The br1_tables property was set to {'_type': 'sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables', 'security_levels': {'section': 1, 'subsection': 2, 'found': True, 'entries': [{'section': '1', 'title': 'General', 'level': '1'}, {'section': '2', 'title': 'Cryptographic module specification', 'level': '1'}, {'section': '3', 'title': 'Cryptographic module interfaces', 'level': '1'}, {'section': '4', 'title': 'Roles, services, and authentication', 'level': '1'}, {'section': '5', 'title': 'Software/Firmware security', 'level': '1'}, {'section': '6', 'title': 'Operational environment', 'level': '1'}, {'section': '7', 'title': 'Physical security', 'level': 'N/A'}, {'section': '8', 'title': 'Non-invasive security', 'level': 'N/A'}, {'section': '9', 'title': 'Sensitive security parameter management', 'level': '1'}, {'section': '10', 'title': 'Self-tests', 'level': '1'}, {'section': '11', 'title': 'Life-cycle assurance', 'level': '3'}, {'section': '12', 'title': 'Mitigation of other attacks', 'level': '1'}, {'section': '', 'title': 'Overall Level', 'level': '1'}]}, 'tested_module_id_hw': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'tested_module_id_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': True, 'entries': [{'packageFileName': 'fips.so', 'swFwVersion': '3.0.10 with KP_1.2', 'features': 'N/A', 'integrityTest': 'HMAC-SHA2-256 #A4481 over the complete module file image'}]}, 'tested_module_id_hw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'tested_op_env_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': True, 'entries': [{'operatingSystem': 'Ubuntu 20.04 LTS', 'hardwarePlatform': 'Dell Inspiron 7591', 'processors': 'Intel Core i7-10510U', 'paa_pai': 'Yes', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Ubuntu 20.04 LTS', 'hardwarePlatform': 'Dell Inspiron 7591', 'processors': 'Intel Core i7-10510U', 'paa_pai': 'No', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Red Hat Enterprise Linux 9', 'hardwarePlatform': 'HPE ProLiant XL420 Gen10', 'processors': 'Intel® Xeon® Silver 4214R CPU', 'paa_pai': 'Yes', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Red Hat Enterprise Linux 9', 'hardwarePlatform': 'HPE ProLiant XL420 Gen10', 'processors': 'Intel® Xeon® Silver 4214R CPU', 'paa_pai': 'No', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Microsoft Windows 11 Pro', 'hardwarePlatform': 'Dell Optiplex SFF 7020', 'processors': 'Intel® Core™ i3-14100 (Raptor Lake)', 'paa_pai': 'Yes', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Microsoft Windows 11 Pro', 'hardwarePlatform': 'Dell Optiplex SFF 7020', 'processors': 'Intel® Core™ i3-14100 (Raptor Lake)', 'paa_pai': 'No', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Microsoft Windows Server 2022', 'hardwarePlatform': 'Dell PowerEdge R450', 'processors': 'Intel® Xeon® Silver 4309Y (Ice Lake)', 'paa_pai': 'Yes', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}, {'operatingSystem': 'Microsoft Windows Server 2022', 'hardwarePlatform': 'Dell PowerEdge R450', 'processors': 'Intel® Xeon® Silver 4309Y (Ice Lake)', 'paa_pai': 'No', 'hypervisorHostOs': '', 'version': '3.0.10 with KP_1.2'}]}, 'vendor_affirmed_op_env_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': True, 'entries': [{'operatingSystem': 'Ubuntu 18.04', 'hardwarePlatform': 'Dell Inspiron 7591 with Intel® Core™ i7-10510U'}, {'operatingSystem': 'Ubuntu 18.04', 'hardwarePlatform': 'Dell PowerEdge R7515 with AMD EPYC 7313P'}, {'operatingSystem': 'Ubuntu 22.04 LTS', 'hardwarePlatform': 'HPE ProLiant DL325 Gen10 Plus v2 with AMD EPYC 7313P'}, {'operatingSystem': 'Ubuntu 22.04 LTS', 'hardwarePlatform': 'HPE ProLiant DL60 Gen9 with Intel® Xeon® E5-2609'}, {'operatingSystem': 'CentOS 7.9', 'hardwarePlatform': 'Ampere® Altra® 2U Server R272-P33 with Ampere® Altra® SOC with Aarch64 ARMv8'}, {'operatingSystem': 'CentOS 7.9', 'hardwarePlatform': 'HW Platform: HPE ProLiant DL60 Gen9 with Intel® Xeon® E5-2609'}]}, 'modes_of_operation': {'section': 2, 'subsection': 4, 'found': True, 'entries': [{'name': 'Nominal', 'description': 'Approved mode of operation', 'type': 'Approved', 'statusIndicator': ''}]}, 'approved_algorithms': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'vendor_affirmed_algos': {'section': 2, 'subsection': 5, 'found': True, 'entries': [{'name': 'CKG Section 4', 'algoPropList': '', 'implName': 'KeyPair FIPS Provider for OpenSSL 3', 'reference': 'NIST, SP 800-133 Rev. 2'}, {'name': 'CKG Section 5', 'algoPropList': '', 'implName': 'KeyPair FIPS Provider for OpenSSL 3', 'reference': 'NIST, SP 800-133 Rev. 2'}, {'name': 'CKG Section 6.2', 'algoPropList': '', 'implName': 'KeyPair FIPS Provider for OpenSSL 3', 'reference': 'NIST, SP 800-133 Rev. 2'}, {'name': 'Hash DRBG with SHA3-256, SHA3-512', 'algoPropList': '', 'implName': 'KeyPair FIPS Provider for OpenSSL 3', 'reference': 'NIST, SP 800-90A Rev. 1'}, {'name': 'HMAC DRBG with SHA3-256, SHA3-512', 'algoPropList': '', 'implName': 'KeyPair FIPS Provider for OpenSSL 3', 'reference': 'NIST, SP 800-90A Rev. 1'}]}, 'non_approved_allowed_algos': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_allowed_NSC': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_not_allowed': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'ports_interfaces': {'section': 3, 'subsection': 1, 'found': True, 'entries': [{'physicalPort': 'N/A (API - input)', 'logicalInterface': 'Control Input Data Input', 'data': 'API input: stack frame including non-sensitive parameters.'}, {'physicalPort': 'N/A (API - output)', 'logicalInterface': 'Data Output Status Output', 'data': 'API output: output parameters and return value resulting from call execution.'}]}, 'authentication_methods': {'section': 4, 'subsection': 1, 'found': False, 'entries': []}, 'roles': {'section': 4, 'subsection': 2, 'found': True, 'entries': [{'name': 'CO', 'type': 'Role', 'operatorType': 'CO', 'authMethodList': ''}]}, 'approved_services': {'section': 4, 'subsection': 3, 'found': True, 'entries': [{'name': 'Cipher', 'description': 'Encrypt or decrypt data, including AEAD modes (CCM, GCM).', 'indicator': 'FIPS_OK', 'inputs': 'Encryption or decryption key; plaintext or ciphertext data; flags.', 'outputs': 'Status return. Plaintext or ciphertext data.', 'secFunImpl': 'Cipher (Unauth) Cipher (Auth)', 'rolesSspAccess': 'CO - SC_EDK_AES: W,E - SC_EDK_XTS: W,E'}, {'name': 'Get capabilities', 'description': 'Reports information on the requested capabilities.', 'indicator': 'FIPS_OK', 'inputs': 'Provider context, capability, callback pointer and arguments.', 'outputs': 'Description of capabilities.', 'secFunImpl': '', 'rolesSspAccess': ''}, {'name': 'Initialize', 'description': 'Module initialization, including instantiation of the', 'indicator': 'FIPS_OK', 'inputs': 'Core handle, dispatch in and out, provider context.', 'outputs': 'Initialization status (1 = pass, 0 = fail).', 'secFunImpl': 'Random MAC HMAC', 'rolesSspAccess': 'CO - DRBG_EI: W,E,Z'}, {'name': '', 'description': 'opaque (managed within the module) Counter DRBG instance.', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- DRBG_Seed: G,E,Z - DRBG_Key: G,W,E - DRBG_V: G,W,E'}, {'name': 'Key agreement', 'description': 'Perform key agreement primitives on behalf of the calling process (does not establish keys into the module).', 'indicator': 'FIPS_OK', 'inputs': 'Key structs (key agreement keys); flags.', 'outputs': 'Status return; key agreement shared secret.', 'secFunImpl': 'CKG Section 5 Key agreement', 'rolesSspAccess': 'CO - KAS_Private_ECC: W,E - KAS_Public_ECC: W,E - KAS_Private_FFC: W,E - KAS_Public_FFC: W,E - KAS_Private_IFC: W,E - KAS_Public_IFC: W,E - KAS_SS_ECC: G,R - KAS_SS_FFC: G,R - KAS_SS_IFC: G,R'}, {'name': 'Key derivation', 'description': 'Derive keying material from a shared secret.', 'indicator': 'FIPS_OK', 'inputs': 'Key agreement shared secret; flags.', 'outputs': 'Status return; derived keying material.', 'secFunImpl': 'Key derivation CKG Section 6.2', 'rolesSspAccess': 'CO - KD_DKM_KDF: G,R - KD_PW_PBKDF: W,E - KD_DKM_PBKDF: G,R - KD_SK: W,E'}, {'name': 'Key management', 'description': 'Generate asymmetric key pairs.', 'indicator': 'FIPS_OK', 'inputs': 'ECDSA, EdDSA: curve identifier. DSA, RSA: domain parameter targets.', 'outputs': 'Status return; general digital signature private and public keys.', 'secFunImpl': 'Key management ECC Key management Edwards Key management FFC Key management IFC CKG Section 4', 'rolesSspAccess': 'CO - DRBG_C: G,W,E - DRBG_Key: W,G,E - DRBG_V: W,G,E - GKP_Private_ECC: G,R - GKP_Public_ECC: G,R - GKP_Private_Edwards: G,R - GKP_Public_Edwards: G,R - GKP_Private_FFC: G,R - GKP_Public_FFC: G,R - GKP_Private_IFC: G,R - GKP_Public_IFC: G,R'}, {'name': 'Key transport', 'description': 'Encapsulate or decapsulate key material on behalf of the calling process.', 'indicator': 'FIPS_OK', 'inputs': 'Key encapsulation/decapsulation key or Key wrap/unwrap key.', 'outputs': 'Status return; key transport shared secret.', 'secFunImpl': 'CKG Section 5 Key transport KTS (Cipher w/ CMAC, GMAC,', 'rolesSspAccess': 'CO - KTS_KDK_IFC: W,E - KTS_KEK_IFC: W,E - KTS_SS_IFC: G,R'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': 'HMAC, KMAC) KTS (AES KW, KWP)', 'rolesSspAccess': ''}, {'name': 'Message authentication', 'description': 'Generate or verify data integrity.', 'indicator': 'FIPS_OK', 'inputs': 'Keyed hash key.', 'outputs': 'Status return; MAC output value.', 'secFunImpl': 'MAC AES (CMAC, GMAC) MAC HMAC MAC KMAC (XOF)', 'rolesSspAccess': 'CO - KH_Key_AES-CMAC: W,E - KH_Key_AES-GMAC: W,E - KH_Key_HMAC: W,E - KH_Key_KMAC: W,E'}, {'name': 'Message digest', 'description': 'Generate a message digest.', 'indicator': 'FIPS_OK', 'inputs': 'Message; flags.', 'outputs': 'Status return; Hash output value.', 'secFunImpl': 'Message Digest Message Digest (XOF SHAKE)', 'rolesSspAccess': ''}, {'name': 'Query', 'description': 'Report available crypto operations.', 'indicator': 'FIPS_OK', 'inputs': 'Provider context, operation ID.', 'outputs': 'Array of available operations.', 'secFunImpl': '', 'rolesSspAccess': ''}, {'name': 'Random', 'description': 'Generate random bits using the DRBG.', 'indicator': 'FIPS_OK', 'inputs': 'DRBG struct (RBG State); DRBG_Seed.', 'outputs': 'Status return; Random value.', 'secFunImpl': 'Random CKG Section 4', 'rolesSspAccess': 'CO - DRBG_C: W,E - DRBG_EI: W,E,Z - DRBG_Seed: G,E,Z - DRBG_Key: W,E - DRBG_V: W,E'}, {'name': 'Self-test', 'description': 'Perform the self-test sequence.', 'indicator': 'FIPS_OK', 'inputs': 'Provider context.', 'outputs': 'Status (1 = pass, 0 = fail).', 'secFunImpl': '', 'rolesSspAccess': ''}, {'name': 'Show module name and versioning information', 'description': 'Return module name and versioning information.', 'indicator': 'FIPS_OK', 'inputs': 'Provider context, parameter types (array).', 'outputs': 'Parameter types (array) with: Name, Version.', 'secFunImpl': '', 'rolesSspAccess': ''}, {'name': 'Show status', 'description': 'OpenSSL core metadata (Gettable parameters; Get parameters).', 'indicator': 'FIPS_OK', 'inputs': 'Provider context, parameter types (array).', 'outputs': 'Parameter types with: BuildInfo, Status, SecurityChecks; Status return.', 'secFunImpl': '', 'rolesSspAccess': ''}, {'name': 'Signature', 'description': 'Generate or verify digital signatures. (SSPs are passed in by the calling process.)', 'indicator': 'FIPS_OK', 'inputs': 'Sign: signing key; message. Verify: signature value; flags; sizes.', 'outputs': 'Status return; Signature value.', 'secFunImpl': 'CKG Section 5 Signature DSA Signature ECDSA Signature EDDSA Signature RSA', 'rolesSspAccess': 'CO - DS_SGK_ECC: W,E - DS_SVK_ECC: W,E - DS_SGK_Edwards: W,E - DS_SVK_Edwards: W,E'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- DS_SGK_FFC: W,E - DS_SVK_FFC: W,E - DS_SGK_IFC: W,E - DS_SVK_IFC: W,E'}, {'name': 'Teardown', 'description': 'Uninstantiate the module; zeroizes internal CTR DRBG state (DRBG_Key, DRBG_V).', 'indicator': 'FIPS_OK', 'inputs': 'Provider context.', 'outputs': 'None.', 'secFunImpl': '', 'rolesSspAccess': 'CO - DRBG_Key: Z - DRBG_V: Z'}, {'name': 'Zeroize', 'description': 'Zeroization of allocated key structures using openssl_cleanse.', 'indicator': 'FIPS_OK', 'inputs': 'Memory pointer.', 'outputs': 'Void.', 'secFunImpl': '', 'rolesSspAccess': 'CO - DRBG_C: Z - DRBG_EI: Z - DRBG_Key: Z - DRBG_Seed: Z - DRBG_V: Z - DS_SGK_ECC: Z - DS_SGK_Edwards: Z - DS_SGK_FFC: Z - DS_SGK_IFC: Z - DS_SVK_ECC: Z - DS_SVK_Edwards: Z - DS_SVK_FFC: Z - DS_SVK_IFC: Z - GKP_Private_ECC: Z - GKP_Private_Edwards: Z - GKP_Private_FFC: Z - GKP_Private_IFC: Z - GKP_Public_ECC: Z - GKP_Public_Edwards: Z - GKP_Public_FFC: Z - GKP_Public_IFC: Z - KAS_Private_ECC: Z - KAS_Private_FFC: Z - GKP_Private_ECC: Z - KAS_Private_IFC: Z - KAS_Public_ECC: Z - KAS_Public_FFC: Z'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': '- KAS_Public_IFC: Z - KAS_SS_ECC: Z - KD_DKM_KDF: Z - KD_DKM_PBKDF: Z - KD_SK: Z - KH_Key_AES-CMAC: Z - KH_Key_AES-GMAC: Z - KH_Key_HMAC: Z - KH_Key_KMAC: Z - KTS_KDK_IFC: Z - KTS_KEK_IFC: Z - KTS_SS_IFC: Z - KAS_SS_ECC: Z - SC_EDK_AES: Z - SC_EDK_XTS: Z'}]}, 'non_approved_services': {'section': 4, 'subsection': 4, 'found': False, 'entries': []}, 'mechanisms_actions': {'section': 7, 'subsection': 1, 'found': False, 'entries': []}, 'storage_areas': {'section': 9, 'subsection': 1, 'found': True, 'entries': [{'name': 'RAM', 'description': 'R: Random access memory', 'persistance': 'Dynamic'}]}, 'ssp_io_methods': {'section': 9, 'subsection': 2, 'found': True, 'entries': [{'name': 'I', 'source': 'Calling process', 'dest': 'Call stack (API) input parameters', 'format': 'Plaintext', 'distribution': 'Manual', 'entry': 'Electronic', 'sfiAlgo': ''}, {'name': 'O', 'source': 'Call stack (API) output parameters', 'dest': 'Calling process', 'format': 'Plaintext', 'distribution': 'Manual', 'entry': 'Electronic', 'sfiAlgo': ''}]}, 'ssp_zeroization_methods': {'section': 9, 'subsection': 3, 'found': True, 'entries': [{'method': 'C', 'description': 'C (Cleanse): Caller invocation of openssl_cleanse.', 'rationale': 'Overwrites with zeros', 'operatorId': 'Caller invocation of openssl_cleanse'}, {'method': 'T', 'description': 'T (Teardown): Module unload - invokes cleanse internally.', 'rationale': 'Overwrites with zeros', 'operatorId': 'Occurs when module is unloaded'}]}, 'self_tests': {'section': 10, 'subsection': 1, 'found': False, 'entries': []}, 'cond_self_tests': {'section': 10, 'subsection': 2, 'found': True, 'entries': [{'algorithmOrTest': 'AES-ECB', 'testProps': '128-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Encrypt', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'AES-ECB', 'testProps': '128-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Decrypt', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'AES-GCM', 'testProps': '256-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Encrypt', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'AES-GCM', 'testProps': '256-bit', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Decrypt', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'Counter DRBG', 'testProps': 'AES-128 with derivation function', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Instantiate, Generate, Reseed', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'DSA SigGen (FIPS186-4)', 'testProps': '2048-bit with SHA2-384', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Sign', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'DSA SigVer (FIPS186-4)', 'testProps': '2048-bit with SHA2-384', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Verify', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'ECDSA SigGen (FIPS186-4)', 'testProps': 'P-224 with SHA2-512', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Sign', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'ECDSA SigVer (FIPS186-4)', 'testProps': 'P-224 with SHA2-512', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Verify', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'EDDSA ED448 SigGen', 'testProps': 'Edwards448 SigGen with SHA2- 256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Sign', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'EDDSA ED448 SigVer', 'testProps': 'Edwards448 SigVer with SHA2- 256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Verify', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'EDDSA ED25519 SigGen', 'testProps': 'Edwards25519 SigGen with SHA2-512', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Sign', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'EDDSA ED25519 SigVer', 'testProps': 'Edwards25519 SigVer with SHA2-512', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Verify', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'Hash DRBG', 'testProps': 'SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Instantiate, Generate, Reseed', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'HMAC DRBG', 'testProps': 'SHA-1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Instantiate, Generate, Reseed', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'HMAC-SHA2-256', 'testProps': 'SHA2-256 with a 256-bit key', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Generate', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KAS-ECC-SSC Sp800-56Ar3', 'testProps': 'P-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Ephemeral Unified Shared Secret (Z) Computation', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KAS-FFC-SSC Sp800-56Ar3', 'testProps': 'L=2048/N=256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'dhEphem Shared Secret (Z) Computation', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KAS-IFC-SSC', 'testProps': 'k=2048', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-56B Rev. 2 Section 8.2.2 RSA Primitive Computation', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KAS-KDF OneStep SP800- 56Cr2', 'testProps': 'SHA2-224', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-56C Rev. 2 Section 4 OneStep KDF (AKA OpenSSL single- step or SS-KDF)', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KAS-KDF TwoStep SP800- 56Cr2', 'testProps': 'SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-56C Rev. 2 Section 5 TwoStep KDF (HKDF variant)', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KDF ANS 9.42', 'testProps': 'Fixed input KAT', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-135 Rev. 1 Section 5.1 ANSI X9.42-2001 KDF KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KDF ANS 9.63', 'testProps': 'Fixed input KAT', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-135 Rev. 1 Section 5.1 X9.63-2001 KDF KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KDF SP800-108', 'testProps': 'HMAC-SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-108 Rev. 1 Section 4.1 KAT for a Counter Mode KDF', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KDF SSH', 'testProps': 'Fixed input KAT', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-135 Rev. 1 Section 5.2 SSHv2 KDF KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KTS-IFC', 'testProps': 'k=2048', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-56B Rev. 2 Decrypt for CRT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KTS-IFC', 'testProps': 'k=2048', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-56B Rev. 2 Encrypt for Basic', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'KTS-IFC', 'testProps': 'k=2048', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-56B Rev. 2 Decrypt for Basic', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'PBKDF', 'testProps': 'SHA2-256, 24-byte password, 36-byte salt, iteration count of 4096', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-132 Section 5.3 KAT of Master Key derivation', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'RSA SigGen (FIPS186-4)', 'testProps': 'k=2048 with SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Sign', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'RSA SigVer (FIPS186-4)', 'testProps': 'k=2048 with SHA2-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Verify', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'SHA-1', 'testProps': 'SHA-1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Simple SHA KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'SHA2-512', 'testProps': 'SHA2-512', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Simple SHA KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'SHA3-256', 'testProps': 'SHA3-256', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'Simple SHA KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'TLS v1.2 KDF RFC7627', 'testProps': 'Fixed input KAT', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'SP 800-135 Rev. 1 Section 4.2.2 TLS 1.2 KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'TLS v1.3 KDF', 'testProps': 'Fixed input KAT', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'FIPS_OK', 'details': 'RFC8446 Section 7.1 TLS v1.3 KDF KAT', 'condition': 'Performed on module load.'}, {'algorithmOrTest': 'DSA KeyGen (FIPS186-4)', 'testProps': 'PCT performed using the generated key pair', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'FIPS_OK', 'details': 'Sign, Verify', 'condition': 'Performed on FFC (DSA, KAS-FFC-SSC) key pair generation, prior to returning the key pair on conclusion of the call.'}, {'algorithmOrTest': 'ECDSA KeyGen (FIPS186-4)', 'testProps': 'PCT performed using the generated key pair', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'FIPS_OK', 'details': 'Sign, Verify', 'condition': 'Performed on ECC (ECDSA) key pair generation, prior to returning the key pair on conclusion of the call.'}, {'algorithmOrTest': 'EDDSA KeyGen', 'testProps': 'PCT performed using the generated key pair', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'FIPS_OK', 'details': 'Sign, Verify', 'condition': 'Performed on Edwards (EdDSA) key pair generation, prior to returning the key pair on conclusion of the call.'}, {'algorithmOrTest': 'RSA KeyGen (FIPS186-4)', 'testProps': 'PCT performed using the generated key pair', 'testMethod': 'PCT', 'type': 'PCT', 'indicator': 'FIPS_OK', 'details': 'Sign, Verify', 'condition': 'Performed on IFC (RSA, KAS-IFC-SSC, KTS-IFC) key pair generation, prior to returning the key pair on conclusion of the call.'}]}, 'error_states': {'section': 10, 'subsection': 4, 'found': True, 'entries': [{'name': 'Self-test failure', 'description': 'The self-test failure error state', 'conditions': 'If one of the KATs fails or integrity test fails', 'recoveryMethod': 'Reload the Module into memory', 'indicator': 'PROV_R_FIPS_MODULE_IN_ERROR_STATE'}]}}.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 1}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA3-256': 7, 'SHA-1': 5, 'SHA2-512': 8}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 5}}, 'SHA3': {'__update__': {'SHA3-256': 7}}}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key agreement': 17}}}}, 'side_channel_analysis': {'__update__': {'SCA': {'__update__': {'timing attacks': 2}}}}, 'standard_id': {'__update__': {'NIST': {'__update__': {'SP 800-133': 7}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['HMAC-SHA2-256A4481', 'AES-KWA4481', 'AES-CBC-CS2A4481', 'EDDSA KeyVerA4481', 'KMAC-256A4481', 'KAS-FFC-SSC Sp800-56Ar3A4481', 'SHA2-512A4481', 'KDF ANS 9.63A4481', 'DSA PQGGen (FIPS186-4)A4481', 'RSA KeyGen (FIPS186-4)A4481', 'AES-CMACA4481', 'HMAC-SHA2-512/256A4481', 'KAS-ECC-SSC Sp800-56Ar3A4481', 'ECDSA KeyVer (FIPS186-4)A4481', 'AES-CFB8A4481', 'AES-OFBA4481', 'HMAC-SHA3-512A4481', 'RSA SigGen (FIPS186-4)A4481', 'AES-CTRA4481', 'HMAC-SHA2-512A4481', 'Counter DRBGA4481', 'SHA2-512/224A4481', 'Hash DRBGA4481', 'SHA2-256A4481', 'SHA2-224A4481', 'SHA2-512/256A4481', 'RSA SigGen (FIPS186-5)A4481', 'KDF ANS 9.42A4481', 'AES-GMACA4481', 'SHA2-384A4481', 'HMAC-SHA2-224A4481', 'AES-GCMA4481', 'AES-ECBA4481', 'SHA3-224A4481', 'HMAC-SHA2-384A4481', 'KDA HKDF SP800-56Cr2A4481', 'SHAKE-256A4481', 'TLS v1.3 KDFA4481', 'KTS-IFCA4481', 'SHA-1A4481', 'AES-CFB1A4481', 'HMAC-SHA-1A4481', 'AES-CBCA4481', 'HMAC-SHA3-256A4481', 'Safe Primes Key VerificationA4481', 'KDF SSHA4481', 'AES-CBC-CS1A4481', 'AES-XTS Testing Revision 2.0A4481', 'EDDSA KeyGenA4481', 'ECDSA SigVer (FIPS186-4)A4481', 'TLS v1.2 KDF RFC7627A4481', 'EDDSA SigGenA4481', 'KDF SP800-108A4481', 'HMAC-SHA2-512/224A4481', 'SHA3-256A4481', 'ECDSA SigGen (FIPS186-4)A4481', 'SHAKE-128A4481', 'AES-KWPA4481', 'Safe Primes Key GenerationA4481', 'ECDSA KeyGen (FIPS186-4)A4481', 'DSA PQGVer (FIPS186-4)A4481', 'KDA OneStep SP800-56Cr2A4481', 'RSA SigVer (FIPS186-5)A4481', 'SHA3-512A4481', 'AES-CFB128A4481', 'KAS-ECC CDH-Component SP800-56Ar3A4481', 'AES-CCMA4481', 'HMAC DRBGA4481', 'RSA Signature PrimitiveA4481', 'KDA TwoStep SP800-56Cr2A4481', 'RSA SigVer (FIPS186-4)A4481', 'AES-CBC-CS3A4481', 'KAS-IFC-SSCA4481', 'HMAC-SHA3-224A4481', 'DSA SigGen (FIPS186-4)A4481', 'PBKDFA4481', 'SHA3-384A4481', 'DSA SigVer (FIPS186-4)A4481', 'HMAC-SHA3-384A4481', 'KMAC-128A4481', 'DSA KeyGen (FIPS186-4)A4481', 'EDDSA SigVerA4481']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A4481']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 2}}}}, 'cipher_mode': {'__insert__': {'XTS': {'XTS': 1}}}, 'side_channel_analysis': {'__update__': {'SCA': {'__update__': {'timing attacks': 1}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-3': 56}}, 'NIST': {'__update__': {'SP 800-133': 6}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A4481']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': 'c13123e38efa92f1f16bf609704edb1c783ae6595ff8effe777d22b0fc649ddb', 'json_hash': 'aa90e73606b6fda81c831c8975dbf2d8dbb805a6fc5e214bcf1717143899296a'} data.
31.08.2026

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The algorithms property was set to {'_type': 'Set', 'elements': ['HMAC-SHA2-256A4481', 'AES-KWA4481', 'AES-CBC-CS2A4481', 'EDDSA KeyVerA4481', 'KMAC-256A4481', 'KAS-FFC-SSC Sp800-56Ar3A4481', 'SHA2-512A4481', 'KDF ANS 9.63A4481', 'DSA PQGGen (FIPS186-4)A4481', 'RSA KeyGen (FIPS186-4)A4481', 'AES-CMACA4481', 'HMAC-SHA2-512/256A4481', 'ECDSA KeyVer (FIPS186-4)A4481', 'KAS-ECC-SSC Sp800-56Ar3A4481', 'AES-CFB8A4481', 'AES-OFBA4481', 'HMAC-SHA3-512A4481', 'RSA SigGen (FIPS186-4)A4481', 'AES-CTRA4481', 'HMAC-SHA2-512A4481', 'Counter DRBGA4481', 'SHA2-512/224A4481', 'Hash DRBGA4481', 'SHA2-256A4481', 'SHA2-224A4481', 'SHA2-512/256A4481', 'RSA SigGen (FIPS186-5)A4481', 'KDF ANS 9.42A4481', 'AES-GMACA4481', 'SHA2-384A4481', 'HMAC-SHA2-224A4481', 'SHA3-224A4481', 'AES-GCMA4481', 'AES-ECBA4481', 'HMAC-SHA2-384A4481', 'KDA HKDF SP800-56Cr2A4481', 'SHAKE-256A4481', 'TLS v1.3 KDFA4481', 'KTS-IFCA4481', 'SHA-1A4481', 'AES-CFB1A4481', 'AES-CBCA4481', 'HMAC-SHA-1A4481', 'KDF SSHA4481', 'HMAC-SHA3-256A4481', 'Safe Primes Key VerificationA4481', 'AES-CBC-CS1A4481', 'AES-XTS Testing Revision 2.0A4481', 'EDDSA KeyGenA4481', 'EDDSA SigGenA4481', 'TLS v1.2 KDF RFC7627A4481', 'ECDSA SigVer (FIPS186-4)A4481', 'KDF SP800-108A4481', 'HMAC-SHA2-512/224A4481', 'SHA3-256A4481', 'ECDSA SigGen (FIPS186-4)A4481', 'SHAKE-128A4481', 'AES-KWPA4481', 'Safe Primes Key GenerationA4481', 'ECDSA KeyGen (FIPS186-4)A4481', 'DSA PQGVer (FIPS186-4)A4481', 'KDA OneStep SP800-56Cr2A4481', 'AES-CFB128A4481', 'RSA SigVer (FIPS186-5)A4481', 'SHA3-512A4481', 'KAS-ECC CDH-Component SP800-56Ar3A4481', 'AES-CCMA4481', 'HMAC DRBGA4481', 'RSA Signature PrimitiveA4481', 'KDA TwoStep SP800-56Cr2A4481', 'RSA SigVer (FIPS186-4)A4481', 'AES-CBC-CS3A4481', 'KAS-IFC-SSCA4481', 'HMAC-SHA3-224A4481', 'DSA SigGen (FIPS186-4)A4481', 'PBKDFA4481', 'SHA3-384A4481', 'DSA SigVer (FIPS186-4)A4481', 'HMAC-SHA3-384A4481', 'KMAC-128A4481', 'DSA KeyGen (FIPS186-4)A4481', 'EDDSA SigVerA4481']}.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2026_020426_1121-signed.pdf.
30.03.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5170,
  "dgst": "8df93a86bb739d44",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "KDF ANS 9.63A4481",
        "HMAC-SHA-1A4481",
        "DSA PQGVer (FIPS186-4)A4481",
        "EDDSA KeyGenA4481",
        "SHA3-384A4481",
        "ECDSA KeyGen (FIPS186-4)A4481",
        "DSA SigGen (FIPS186-4)A4481",
        "AES-OFBA4481",
        "SHA3-512A4481",
        "HMAC-SHA2-224A4481",
        "KAS-FFC-SSC Sp800-56Ar3A4481",
        "SHA2-512/224A4481",
        "SHA3-224A4481",
        "KTS-IFCA4481",
        "RSA SigGen (FIPS186-5)A4481",
        "TLS v1.3 KDFA4481",
        "KDF ANS 9.42A4481",
        "HMAC-SHA3-384A4481",
        "KMAC-128A4481",
        "Counter DRBGA4481",
        "AES-CCMA4481",
        "HMAC-SHA2-512/224A4481",
        "ECDSA SigVer (FIPS186-4)A4481",
        "KMAC-256A4481",
        "SHA-1A4481",
        "KDA TwoStep SP800-56Cr2A4481",
        "RSA SigVer (FIPS186-4)A4481",
        "EDDSA KeyVerA4481",
        "RSA KeyGen (FIPS186-4)A4481",
        "AES-KWPA4481",
        "AES-XTS Testing Revision 2.0A4481",
        "DSA KeyGen (FIPS186-4)A4481",
        "AES-GCMA4481",
        "AES-CFB128A4481",
        "DSA SigVer (FIPS186-4)A4481",
        "HMAC-SHA2-384A4481",
        "PBKDFA4481",
        "KAS-IFC-SSCA4481",
        "HMAC-SHA2-256A4481",
        "AES-GMACA4481",
        "RSA SigVer (FIPS186-5)A4481",
        "EDDSA SigVerA4481",
        "AES-CFB1A4481",
        "AES-ECBA4481",
        "SHA2-256A4481",
        "KDF SSHA4481",
        "ECDSA SigGen (FIPS186-4)A4481",
        "AES-KWA4481",
        "AES-CBC-CS1A4481",
        "TLS v1.2 KDF RFC7627A4481",
        "RSA SigGen (FIPS186-4)A4481",
        "SHAKE-128A4481",
        "AES-CBC-CS3A4481",
        "SHA2-384A4481",
        "ECDSA KeyVer (FIPS186-4)A4481",
        "SHA2-512/256A4481",
        "HMAC-SHA3-512A4481",
        "RSA Signature PrimitiveA4481",
        "AES-CMACA4481",
        "KDF SP800-108A4481",
        "KAS-ECC CDH-Component SP800-56Ar3A4481",
        "AES-CTRA4481",
        "HMAC-SHA2-512/256A4481",
        "HMAC-SHA3-256A4481",
        "KDA OneStep SP800-56Cr2A4481",
        "SHA3-256A4481",
        "AES-CBCA4481",
        "AES-CFB8A4481",
        "Safe Primes Key GenerationA4481",
        "AES-CBC-CS2A4481",
        "SHAKE-256A4481",
        "Hash DRBGA4481",
        "SHA2-512A4481",
        "HMAC-SHA2-512A4481",
        "SHA2-224A4481",
        "DSA PQGGen (FIPS186-4)A4481",
        "HMAC DRBGA4481",
        "KDA HKDF SP800-56Cr2A4481",
        "KAS-ECC-SSC Sp800-56Ar3A4481",
        "HMAC-SHA3-224A4481",
        "#A4481",
        "EDDSA SigGenA4481",
        "Safe Primes Key VerificationA4481"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "210"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "100",
          "210",
          "147"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "210"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Encrypt or decrypt data, including AEAD modes (CCM, GCM).",
            "indicator": "FIPS_OK",
            "inputs": "Encryption or decryption key; plaintext or ciphertext data; flags.",
            "name": "Cipher",
            "outputs": "Status return. Plaintext or ciphertext data.",
            "rolesSspAccess": "CO - SC_EDK_AES: W,E - SC_EDK_XTS: W,E",
            "secFunImpl": "Cipher (Unauth) Cipher (Auth)"
          },
          {
            "description": "Reports information on the requested capabilities.",
            "indicator": "FIPS_OK",
            "inputs": "Provider context, capability, callback pointer and arguments.",
            "name": "Get capabilities",
            "outputs": "Description of capabilities.",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Module initialization, including instantiation of the",
            "indicator": "FIPS_OK",
            "inputs": "Core handle, dispatch in and out, provider context.",
            "name": "Initialize",
            "outputs": "Initialization status (1 = pass, 0 = fail).",
            "rolesSspAccess": "CO - DRBG_EI: W,E,Z",
            "secFunImpl": "Random MAC HMAC"
          },
          {
            "description": "opaque (managed within the module) Counter DRBG instance.",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- DRBG_Seed: G,E,Z - DRBG_Key: G,W,E - DRBG_V: G,W,E",
            "secFunImpl": ""
          },
          {
            "description": "Perform key agreement primitives on behalf of the calling process (does not establish keys into the module).",
            "indicator": "FIPS_OK",
            "inputs": "Key structs (key agreement keys); flags.",
            "name": "Key agreement",
            "outputs": "Status return; key agreement shared secret.",
            "rolesSspAccess": "CO - KAS_Private_ECC: W,E - KAS_Public_ECC: W,E - KAS_Private_FFC: W,E - KAS_Public_FFC: W,E - KAS_Private_IFC: W,E - KAS_Public_IFC: W,E - KAS_SS_ECC: G,R - KAS_SS_FFC: G,R - KAS_SS_IFC: G,R",
            "secFunImpl": "CKG Section 5 Key agreement"
          },
          {
            "description": "Derive keying material from a shared secret.",
            "indicator": "FIPS_OK",
            "inputs": "Key agreement shared secret; flags.",
            "name": "Key derivation",
            "outputs": "Status return; derived keying material.",
            "rolesSspAccess": "CO - KD_DKM_KDF: G,R - KD_PW_PBKDF: W,E - KD_DKM_PBKDF: G,R - KD_SK: W,E",
            "secFunImpl": "Key derivation CKG Section 6.2"
          },
          {
            "description": "Generate asymmetric key pairs.",
            "indicator": "FIPS_OK",
            "inputs": "ECDSA, EdDSA: curve identifier. DSA, RSA: domain parameter targets.",
            "name": "Key management",
            "outputs": "Status return; general digital signature private and public keys.",
            "rolesSspAccess": "CO - DRBG_C: G,W,E - DRBG_Key: W,G,E - DRBG_V: W,G,E - GKP_Private_ECC: G,R - GKP_Public_ECC: G,R - GKP_Private_Edwards: G,R - GKP_Public_Edwards: G,R - GKP_Private_FFC: G,R - GKP_Public_FFC: G,R - GKP_Private_IFC: G,R - GKP_Public_IFC: G,R",
            "secFunImpl": "Key management ECC Key management Edwards Key management FFC Key management IFC CKG Section 4"
          },
          {
            "description": "Encapsulate or decapsulate key material on behalf of the calling process.",
            "indicator": "FIPS_OK",
            "inputs": "Key encapsulation/decapsulation key or Key wrap/unwrap key.",
            "name": "Key transport",
            "outputs": "Status return; key transport shared secret.",
            "rolesSspAccess": "CO - KTS_KDK_IFC: W,E - KTS_KEK_IFC: W,E - KTS_SS_IFC: G,R",
            "secFunImpl": "CKG Section 5 Key transport KTS (Cipher w/ CMAC, GMAC,"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "",
            "secFunImpl": "HMAC, KMAC) KTS (AES KW, KWP)"
          },
          {
            "description": "Generate or verify data integrity.",
            "indicator": "FIPS_OK",
            "inputs": "Keyed hash key.",
            "name": "Message authentication",
            "outputs": "Status return; MAC output value.",
            "rolesSspAccess": "CO - KH_Key_AES-CMAC: W,E - KH_Key_AES-GMAC: W,E - KH_Key_HMAC: W,E - KH_Key_KMAC: W,E",
            "secFunImpl": "MAC AES (CMAC, GMAC) MAC HMAC MAC KMAC (XOF)"
          },
          {
            "description": "Generate a message digest.",
            "indicator": "FIPS_OK",
            "inputs": "Message; flags.",
            "name": "Message digest",
            "outputs": "Status return; Hash output value.",
            "rolesSspAccess": "",
            "secFunImpl": "Message Digest Message Digest (XOF SHAKE)"
          },
          {
            "description": "Report available crypto operations.",
            "indicator": "FIPS_OK",
            "inputs": "Provider context, operation ID.",
            "name": "Query",
            "outputs": "Array of available operations.",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Generate random bits using the DRBG.",
            "indicator": "FIPS_OK",
            "inputs": "DRBG struct (RBG State); DRBG_Seed.",
            "name": "Random",
            "outputs": "Status return; Random value.",
            "rolesSspAccess": "CO - DRBG_C: W,E - DRBG_EI: W,E,Z - DRBG_Seed: G,E,Z - DRBG_Key: W,E - DRBG_V: W,E",
            "secFunImpl": "Random CKG Section 4"
          },
          {
            "description": "Perform the self-test sequence.",
            "indicator": "FIPS_OK",
            "inputs": "Provider context.",
            "name": "Self-test",
            "outputs": "Status (1 = pass, 0 = fail).",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Return module name and versioning information.",
            "indicator": "FIPS_OK",
            "inputs": "Provider context, parameter types (array).",
            "name": "Show module name and versioning information",
            "outputs": "Parameter types (array) with: Name, Version.",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "OpenSSL core metadata (Gettable parameters; Get parameters).",
            "indicator": "FIPS_OK",
            "inputs": "Provider context, parameter types (array).",
            "name": "Show status",
            "outputs": "Parameter types with: BuildInfo, Status, SecurityChecks; Status return.",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Generate or verify digital signatures. (SSPs are passed in by the calling process.)",
            "indicator": "FIPS_OK",
            "inputs": "Sign: signing key; message. Verify: signature value; flags; sizes.",
            "name": "Signature",
            "outputs": "Status return; Signature value.",
            "rolesSspAccess": "CO - DS_SGK_ECC: W,E - DS_SVK_ECC: W,E - DS_SGK_Edwards: W,E - DS_SVK_Edwards: W,E",
            "secFunImpl": "CKG Section 5 Signature DSA Signature ECDSA Signature EDDSA Signature RSA"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- DS_SGK_FFC: W,E - DS_SVK_FFC: W,E - DS_SGK_IFC: W,E - DS_SVK_IFC: W,E",
            "secFunImpl": ""
          },
          {
            "description": "Uninstantiate the module; zeroizes internal CTR DRBG state (DRBG_Key, DRBG_V).",
            "indicator": "FIPS_OK",
            "inputs": "Provider context.",
            "name": "Teardown",
            "outputs": "None.",
            "rolesSspAccess": "CO - DRBG_Key: Z - DRBG_V: Z",
            "secFunImpl": ""
          },
          {
            "description": "Zeroization of allocated key structures using openssl_cleanse.",
            "indicator": "FIPS_OK",
            "inputs": "Memory pointer.",
            "name": "Zeroize",
            "outputs": "Void.",
            "rolesSspAccess": "CO - DRBG_C: Z - DRBG_EI: Z - DRBG_Key: Z - DRBG_Seed: Z - DRBG_V: Z - DS_SGK_ECC: Z - DS_SGK_Edwards: Z - DS_SGK_FFC: Z - DS_SGK_IFC: Z - DS_SVK_ECC: Z - DS_SVK_Edwards: Z - DS_SVK_FFC: Z - DS_SVK_IFC: Z - GKP_Private_ECC: Z - GKP_Private_Edwards: Z - GKP_Private_FFC: Z - GKP_Private_IFC: Z - GKP_Public_ECC: Z - GKP_Public_Edwards: Z - GKP_Public_FFC: Z - GKP_Public_IFC: Z - KAS_Private_ECC: Z - KAS_Private_FFC: Z - GKP_Private_ECC: Z - KAS_Private_IFC: Z - KAS_Public_ECC: Z - KAS_Public_FFC: Z",
            "secFunImpl": ""
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- KAS_Public_IFC: Z - KAS_SS_ECC: Z - KD_DKM_KDF: Z - KD_DKM_PBKDF: Z - KD_SK: Z - KH_Key_AES-CMAC: Z - KH_Key_AES-GMAC: Z - KH_Key_HMAC: Z - KH_Key_KMAC: Z - KTS_KDK_IFC: Z - KTS_KEK_IFC: Z - KTS_SS_IFC: Z - KAS_SS_ECC: Z - SC_EDK_AES: Z - SC_EDK_XTS: Z",
            "secFunImpl": ""
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES-ECB",
            "condition": "Performed on module load.",
            "details": "Encrypt",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "128-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB",
            "condition": "Performed on module load.",
            "details": "Decrypt",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "128-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM",
            "condition": "Performed on module load.",
            "details": "Encrypt",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM",
            "condition": "Performed on module load.",
            "details": "Decrypt",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "256-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG",
            "condition": "Performed on module load.",
            "details": "Instantiate, Generate, Reseed",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "AES-128 with derivation function",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "DSA SigGen (FIPS186-4)",
            "condition": "Performed on module load.",
            "details": "Sign",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "2048-bit with SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "DSA SigVer (FIPS186-4)",
            "condition": "Performed on module load.",
            "details": "Verify",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "2048-bit with SHA2-384",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-4)",
            "condition": "Performed on module load.",
            "details": "Sign",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "P-224 with SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-4)",
            "condition": "Performed on module load.",
            "details": "Verify",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "P-224 with SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "EDDSA ED448 SigGen",
            "condition": "Performed on module load.",
            "details": "Sign",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Edwards448 SigGen with SHA2- 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "EDDSA ED448 SigVer",
            "condition": "Performed on module load.",
            "details": "Verify",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Edwards448 SigVer with SHA2- 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "EDDSA ED25519 SigGen",
            "condition": "Performed on module load.",
            "details": "Sign",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Edwards25519 SigGen with SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "EDDSA ED25519 SigVer",
            "condition": "Performed on module load.",
            "details": "Verify",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Edwards25519 SigVer with SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG",
            "condition": "Performed on module load.",
            "details": "Instantiate, Generate, Reseed",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG",
            "condition": "Performed on module load.",
            "details": "Instantiate, Generate, Reseed",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256",
            "condition": "Performed on module load.",
            "details": "Generate",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with a 256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3",
            "condition": "Performed on module load.",
            "details": "Ephemeral Unified Shared Secret (Z) Computation",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3",
            "condition": "Performed on module load.",
            "details": "dhEphem Shared Secret (Z) Computation",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "L=2048/N=256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-IFC-SSC",
            "condition": "Performed on module load.",
            "details": "SP 800-56B Rev. 2 Section 8.2.2 RSA Primitive Computation",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "k=2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-KDF OneStep SP800- 56Cr2",
            "condition": "Performed on module load.",
            "details": "SP 800-56C Rev. 2 Section 4 OneStep KDF (AKA OpenSSL single- step or SS-KDF)",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA2-224",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-KDF TwoStep SP800- 56Cr2",
            "condition": "Performed on module load.",
            "details": "SP 800-56C Rev. 2 Section 5 TwoStep KDF (HKDF variant)",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42",
            "condition": "Performed on module load.",
            "details": "SP 800-135 Rev. 1 Section 5.1 ANSI X9.42-2001 KDF KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Fixed input KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63",
            "condition": "Performed on module load.",
            "details": "SP 800-135 Rev. 1 Section 5.1 X9.63-2001 KDF KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Fixed input KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SP800-108",
            "condition": "Performed on module load.",
            "details": "SP 800-108 Rev. 1 Section 4.1 KAT for a Counter Mode KDF",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SSH",
            "condition": "Performed on module load.",
            "details": "SP 800-135 Rev. 1 Section 5.2 SSHv2 KDF KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Fixed input KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KTS-IFC",
            "condition": "Performed on module load.",
            "details": "SP 800-56B Rev. 2 Decrypt for CRT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "k=2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KTS-IFC",
            "condition": "Performed on module load.",
            "details": "SP 800-56B Rev. 2 Encrypt for Basic",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "k=2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KTS-IFC",
            "condition": "Performed on module load.",
            "details": "SP 800-56B Rev. 2 Decrypt for Basic",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "k=2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF",
            "condition": "Performed on module load.",
            "details": "SP 800-132 Section 5.3 KAT of Master Key derivation",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA2-256, 24-byte password, 36-byte salt, iteration count of 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-4)",
            "condition": "Performed on module load.",
            "details": "Sign",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "k=2048 with SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4)",
            "condition": "Performed on module load.",
            "details": "Verify",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "k=2048 with SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1",
            "condition": "Performed on module load.",
            "details": "Simple SHA KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512",
            "condition": "Performed on module load.",
            "details": "Simple SHA KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA3-256",
            "condition": "Performed on module load.",
            "details": "Simple SHA KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "SHA3-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627",
            "condition": "Performed on module load.",
            "details": "SP 800-135 Rev. 1 Section 4.2.2 TLS 1.2 KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Fixed input KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.3 KDF",
            "condition": "Performed on module load.",
            "details": "RFC8446 Section 7.1 TLS v1.3 KDF KAT",
            "indicator": "FIPS_OK",
            "testMethod": "KAT",
            "testProps": "Fixed input KAT",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "DSA KeyGen (FIPS186-4)",
            "condition": "Performed on FFC (DSA, KAS-FFC-SSC) key pair generation, prior to returning the key pair on conclusion of the call.",
            "details": "Sign, Verify",
            "indicator": "FIPS_OK",
            "testMethod": "PCT",
            "testProps": "PCT performed using the generated key pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-4)",
            "condition": "Performed on ECC (ECDSA) key pair generation, prior to returning the key pair on conclusion of the call.",
            "details": "Sign, Verify",
            "indicator": "FIPS_OK",
            "testMethod": "PCT",
            "testProps": "PCT performed using the generated key pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "EDDSA KeyGen",
            "condition": "Performed on Edwards (EdDSA) key pair generation, prior to returning the key pair on conclusion of the call.",
            "details": "Sign, Verify",
            "indicator": "FIPS_OK",
            "testMethod": "PCT",
            "testProps": "PCT performed using the generated key pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-4)",
            "condition": "Performed on IFC (RSA, KAS-IFC-SSC, KTS-IFC) key pair generation, prior to returning the key pair on conclusion of the call.",
            "details": "Sign, Verify",
            "indicator": "FIPS_OK",
            "testMethod": "PCT",
            "testProps": "PCT performed using the generated key pair",
            "type": "PCT"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "If one of the KATs fails or integrity test fails",
            "description": "The self-test failure error state",
            "indicator": "PROV_R_FIPS_MODULE_IN_ERROR_STATE",
            "name": "Self-test failure",
            "recoveryMethod": "Reload the Module into memory"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Approved mode of operation",
            "name": "Nominal",
            "statusIndicator": "",
            "type": "Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input: stack frame including non-sensitive parameters.",
            "logicalInterface": "Control Input Data Input",
            "physicalPort": "N/A (API - input)"
          },
          {
            "data": "API output: output parameters and return value resulting from call execution.",
            "logicalInterface": "Data Output Status Output",
            "physicalPort": "N/A (API - output)"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "",
            "name": "CO",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "3",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "1",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Call stack (API) input parameters",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "I",
            "sfiAlgo": "",
            "source": "Calling process"
          },
          {
            "dest": "Calling process",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "O",
            "sfiAlgo": "",
            "source": "Call stack (API) output parameters"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "C (Cleanse): Caller invocation of openssl_cleanse.",
            "method": "C",
            "operatorId": "Caller invocation of openssl_cleanse",
            "rationale": "Overwrites with zeros"
          },
          {
            "description": "T (Teardown): Module unload - invokes cleanse internally.",
            "method": "T",
            "operatorId": "Occurs when module is unloaded",
            "rationale": "Overwrites with zeros"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "R: Random access memory",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "N/A",
            "integrityTest": "HMAC-SHA2-256 #A4481 over the complete module file image",
            "packageFileName": "fips.so",
            "swFwVersion": "3.0.10 with KP_1.2"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Dell Inspiron 7591",
            "hypervisorHostOs": "",
            "operatingSystem": "Ubuntu 20.04 LTS",
            "paa_pai": "Yes",
            "processors": "Intel Core i7-10510U",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "Dell Inspiron 7591",
            "hypervisorHostOs": "",
            "operatingSystem": "Ubuntu 20.04 LTS",
            "paa_pai": "No",
            "processors": "Intel Core i7-10510U",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "HPE ProLiant XL420 Gen10",
            "hypervisorHostOs": "",
            "operatingSystem": "Red Hat Enterprise Linux 9",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4214R CPU",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "HPE ProLiant XL420 Gen10",
            "hypervisorHostOs": "",
            "operatingSystem": "Red Hat Enterprise Linux 9",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4214R CPU",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "Dell Optiplex SFF 7020",
            "hypervisorHostOs": "",
            "operatingSystem": "Microsoft Windows 11 Pro",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Core\u2122 i3-14100 (Raptor Lake)",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "Dell Optiplex SFF 7020",
            "hypervisorHostOs": "",
            "operatingSystem": "Microsoft Windows 11 Pro",
            "paa_pai": "No",
            "processors": "Intel\u00ae Core\u2122 i3-14100 (Raptor Lake)",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "Dell PowerEdge R450",
            "hypervisorHostOs": "",
            "operatingSystem": "Microsoft Windows Server 2022",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4309Y (Ice Lake)",
            "version": "3.0.10 with KP_1.2"
          },
          {
            "hardwarePlatform": "Dell PowerEdge R450",
            "hypervisorHostOs": "",
            "operatingSystem": "Microsoft Windows Server 2022",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4309Y (Ice Lake)",
            "version": "3.0.10 with KP_1.2"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "",
            "implName": "KeyPair FIPS Provider for OpenSSL 3",
            "name": "CKG Section 4",
            "reference": "NIST, SP 800-133 Rev. 2"
          },
          {
            "algoPropList": "",
            "implName": "KeyPair FIPS Provider for OpenSSL 3",
            "name": "CKG Section 5",
            "reference": "NIST, SP 800-133 Rev. 2"
          },
          {
            "algoPropList": "",
            "implName": "KeyPair FIPS Provider for OpenSSL 3",
            "name": "CKG Section 6.2",
            "reference": "NIST, SP 800-133 Rev. 2"
          },
          {
            "algoPropList": "",
            "implName": "KeyPair FIPS Provider for OpenSSL 3",
            "name": "Hash DRBG with SHA3-256, SHA3-512",
            "reference": "NIST, SP 800-90A Rev. 1"
          },
          {
            "algoPropList": "",
            "implName": "KeyPair FIPS Provider for OpenSSL 3",
            "name": "HMAC DRBG with SHA3-256, SHA3-512",
            "reference": "NIST, SP 800-90A Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Dell Inspiron 7591 with Intel\u00ae Core\u2122 i7-10510U",
            "operatingSystem": "Ubuntu 18.04"
          },
          {
            "hardwarePlatform": "Dell PowerEdge R7515 with AMD EPYC 7313P",
            "operatingSystem": "Ubuntu 18.04"
          },
          {
            "hardwarePlatform": "HPE ProLiant DL325 Gen10 Plus v2 with AMD EPYC 7313P",
            "operatingSystem": "Ubuntu 22.04 LTS"
          },
          {
            "hardwarePlatform": "HPE ProLiant DL60 Gen9 with Intel\u00ae Xeon\u00ae E5-2609",
            "operatingSystem": "Ubuntu 22.04 LTS"
          },
          {
            "hardwarePlatform": "Ampere\u00ae Altra\u00ae 2U Server R272-P33 with Ampere\u00ae Altra\u00ae SOC with Aarch64 ARMv8",
            "operatingSystem": "CentOS 7.9"
          },
          {
            "hardwarePlatform": "HW Platform: HPE ProLiant DL60 Gen9 with Intel\u00ae Xeon\u00ae E5-2609",
            "operatingSystem": "CentOS 7.9"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 8
          },
          "ECDSA": {
            "ECDSA": 19
          },
          "EdDSA": {
            "EdDSA": 4
          }
        },
        "FF": {
          "DSA": {
            "DSA": 18
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CCM": {
          "CCM": 1
        },
        "CTR": {
          "CTR": 3
        },
        "GCM": {
          "GCM": 3
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 10
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 2,
          "SSHv2": 2
        },
        "TLS": {
          "TLS": {
            "TLS": 3,
            "TLS 1.2": 1,
            "TLS 1.3": 1,
            "TLS v1.2": 3,
            "TLS v1.3": 4
          }
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "KA": {
          "Key Agreement": 1,
          "Key agreement": 14
        },
        "MAC": {
          "MAC": 15
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 2,
          "B-233": 8,
          "B-283": 8,
          "B-409": 8,
          "B-571": 8,
          "K-163": 2,
          "K-233": 8,
          "K-283": 8,
          "K-409": 8,
          "K-571": 8,
          "P-192": 4,
          "P-224": 20,
          "P-256": 18,
          "P-384": 16,
          "P-521": 16
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#210": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES-128": 5,
          "AES-192": 4,
          "AES-256": 4,
          "SHA-1": 4,
          "SHA-3": 3,
          "SHA2": 1,
          "SHA2- 256": 2,
          "SHA2-224": 2,
          "SHA2-256": 7,
          "SHA2-384": 3,
          "SHA2-512": 7,
          "SHA3": 1,
          "SHA3-224": 1,
          "SHA3-256": 6,
          "SHA3-384": 1,
          "SHA3-512": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 8
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA2": 1
          },
          "SHA3": {
            "SHA-3": 3,
            "SHA3": 1,
            "SHA3-224": 1,
            "SHA3-256": 6,
            "SHA3-384": 1,
            "SHA3-512": 4
          }
        },
        "SHAKE": {
          "SHAKE128": 1,
          "SHAKE256": 1
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "ED25519": 4,
          "ED448": 4
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 31
        },
        "RNG": {
          "RBG": 3
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "timing attacks": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 56,
          "FIPS186-4": 30,
          "FIPS186-5": 2
        },
        "ISO": {
          "ISO/IEC 19790:2012": 3
        },
        "NIST": {
          "SP 800-107": 1,
          "SP 800-108": 1,
          "SP 800-132": 6,
          "SP 800-133": 7,
          "SP 800-135": 4,
          "SP 800-140D": 1,
          "SP 800-185": 1,
          "SP 800-186": 3,
          "SP 800-38D": 2,
          "SP 800-38E": 1,
          "SP 800-38F": 1,
          "SP 800-52": 1,
          "SP 800-56A": 6,
          "SP 800-56B": 7,
          "SP 800-56C": 4,
          "SP 800-57": 5,
          "SP 800-90A": 2,
          "SP 800-90B": 2
        },
        "RFC": {
          "RFC 5288": 1,
          "RFC 5647": 1,
          "RFC 8446": 1,
          "RFC7627": 2,
          "RFC8446": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 10,
            "AES-128": 5,
            "AES-192": 4,
            "AES-256": 4
          },
          "CAST": {
            "CAST": 73
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 6,
            "HMAC": 16,
            "KMAC": 7
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 12
        },
        "IBM": {
          "SSC": 1
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 4
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "KDF ANS 9.63A4481",
        "HMAC-SHA-1A4481",
        "DSA PQGVer (FIPS186-4)A4481",
        "EDDSA KeyGenA4481",
        "SHA3-384A4481",
        "ECDSA KeyGen (FIPS186-4)A4481",
        "DSA SigGen (FIPS186-4)A4481",
        "AES-OFBA4481",
        "SHA3-512A4481",
        "HMAC-SHA2-224A4481",
        "KAS-FFC-SSC Sp800-56Ar3A4481",
        "SHA2-512/224A4481",
        "SHA3-224A4481",
        "KTS-IFCA4481",
        "RSA SigGen (FIPS186-5)A4481",
        "TLS v1.3 KDFA4481",
        "KDF ANS 9.42A4481",
        "HMAC-SHA3-384A4481",
        "KMAC-128A4481",
        "Counter DRBGA4481",
        "AES-CCMA4481",
        "HMAC-SHA2-512/224A4481",
        "ECDSA SigVer (FIPS186-4)A4481",
        "KMAC-256A4481",
        "SHA-1A4481",
        "KDA TwoStep SP800-56Cr2A4481",
        "RSA SigVer (FIPS186-4)A4481",
        "EDDSA KeyVerA4481",
        "RSA KeyGen (FIPS186-4)A4481",
        "AES-KWPA4481",
        "AES-XTS Testing Revision 2.0A4481",
        "DSA KeyGen (FIPS186-4)A4481",
        "AES-GCMA4481",
        "AES-CFB128A4481",
        "DSA SigVer (FIPS186-4)A4481",
        "HMAC-SHA2-384A4481",
        "PBKDFA4481",
        "KAS-IFC-SSCA4481",
        "HMAC-SHA2-256A4481",
        "AES-GMACA4481",
        "RSA SigVer (FIPS186-5)A4481",
        "EDDSA SigVerA4481",
        "AES-CFB1A4481",
        "AES-ECBA4481",
        "SHA2-256A4481",
        "KDF SSHA4481",
        "ECDSA SigGen (FIPS186-4)A4481",
        "AES-KWA4481",
        "AES-CBC-CS1A4481",
        "TLS v1.2 KDF RFC7627A4481",
        "RSA SigGen (FIPS186-4)A4481",
        "SHAKE-128A4481",
        "AES-CBC-CS3A4481",
        "SHA2-384A4481",
        "ECDSA KeyVer (FIPS186-4)A4481",
        "SHA2-512/256A4481",
        "HMAC-SHA3-512A4481",
        "RSA Signature PrimitiveA4481",
        "AES-CMACA4481",
        "KDF SP800-108A4481",
        "KAS-ECC CDH-Component SP800-56Ar3A4481",
        "AES-CTRA4481",
        "HMAC-SHA2-512/256A4481",
        "HMAC-SHA3-256A4481",
        "KDA OneStep SP800-56Cr2A4481",
        "SHA3-256A4481",
        "AES-CBCA4481",
        "AES-CFB8A4481",
        "Safe Primes Key GenerationA4481",
        "AES-CBC-CS2A4481",
        "SHAKE-256A4481",
        "Hash DRBGA4481",
        "SHA2-512A4481",
        "HMAC-SHA2-512A4481",
        "SHA2-224A4481",
        "DSA PQGGen (FIPS186-4)A4481",
        "HMAC DRBGA4481",
        "KDA HKDF SP800-56Cr2A4481",
        "KAS-ECC-SSC Sp800-56Ar3A4481",
        "HMAC-SHA3-224A4481",
        "EDDSA SigGenA4481",
        "Safe Primes Key VerificationA4481"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4481"
      ]
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/Comments": "",
      "/Company": "",
      "/ComplianceAssetId": "",
      "/ContentTypeId": "0x010100DCA90304BC368747933546DC38C49DF0",
      "/CreationDate": "D:20260303105101-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/MediaServiceImageTags": "",
      "/ModDate": "D:20260303105341-05\u002700\u0027",
      "/Order": "1084700.000000",
      "/Producer": "Adobe PDF Library 25.1.5",
      "/SourceModified": "",
      "/Subject": "",
      "/TemplateUrl": "",
      "/Title": "",
      "/TriggerFlowInfo": "",
      "/_ExtendedDescription": "",
      "/xd_ProgID": "",
      "/xd_Signature": "0",
      "pdf_file_size_bytes": 678904,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 35
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "aa90e73606b6fda81c831c8975dbf2d8dbb805a6fc5e214bcf1717143899296a",
      "source_hash": "eb66f5befdff07f8f8aab8232518d058fd730e8e7d4b18453ac07ad2ef8f682e",
      "txt_hash": "c13123e38efa92f1f16bf609704edb1c783ae6595ff8effe777d22b0fc649ddb"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys).",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2026_020426_1121-signed.pdf",
    "date_sunset": "2029-07-10",
    "description": "The BShield Cryptographic Module is a general-purpose library integrated into BShield, a mobile application protection solution developed by Verichains, as well as other Verichains products, to provide FIPS 140-3 validated cryptographic functions for the protection of sensitive information.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Life-cycle assurance: Level 3"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "BShield Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-03-05",
        "lab": "Acumen Security",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Verichains",
    "vendor_url": "http://www.verichains.io"
  }
}

Sections

BShield Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

JavaCard API constants

Trusted Execution Environments

Vendor

Security level

Side-channel analysis

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

BShield Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Device

JavaCard API constants

Trusted Execution Environments

Vendor

Security

Security level

Side-channel analysis

Other

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data