This page was not yet optimized for use on mobile devices.
Red Hat Enterprise Linux 9 libgcrypt
Certificate details
| Certificate ID | #4754 |
|---|---|
| Status | historical |
| Historical reason | Replaced by certificate #5366 |
| Validation dates | 09.08.2024 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy |
| Exceptions |
|
| Description | The Red Hat Enterprise Linux 9 libgcrypt is a software library implementing general purpose cryptographic algorithms |
| Tested configurations |
|
| Vendor | Red Hat(R), Inc. http://www.redhat.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, HMAC-SHA-256, CMACAsymmetric Algorithms
ECDH, ECDSA, ECCHash functions
SHA-1, SHA-256, SHA-512, SHA-384, SHA-224, SHA-2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD5, PBKDF, PBKDF2Schemes
MACRandomness
DRBG, RNG, RBGLibraries
libgcryptElliptic Curves
P-224, P-256, P-384, P-521Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSPSecurity level
Level 1Side-channel analysis
timing attacks, Fault InductionStandards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-2, FIPS 180-4, FIPS 202, FIPS 186-2, FIPS140-3, FIPS180-4, FIPS197, FIPS198-1, FIPS202, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-132, PKCS 1, PKCS#1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4754,
"dgst": "8faa834d6d1f19e0",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES-XTS Testing Revision 2.0A4676",
"ECDSA KeyGen (FIPS186-4)A3762",
"SHA3-224A3762",
"HMAC-SHA3-224A3762",
"#A3757",
"AES-ECBA4676",
"SHAKE-256A3762",
"AES-CMACA3762",
"#A3762",
"Counter DRBGA3762",
"AES-CFB128A4676",
"RSA KeyGen (FIPS186-4)A3762",
"SHA2-512A4676",
"SHA3-256A3762",
"#A3759",
"AES-CFB8A4676",
"HMAC-SHA2-512/256A3762",
"AES-OFBA3762",
"HMAC-SHA2-512A3762",
"HMAC-SHA2-224A3762",
"ECDSA SigVer (FIPS186-4)A3762",
"HMAC-SHA3-256A3762",
"AES-KWA3762",
"AES-CCMA3762",
"RSA SigVer (FIPS186-2)A3762",
"SHA2-512/224A3762",
"SHAKE-128A3762",
"ECDSA KeyVer (FIPS186-4)A3762",
"HMAC-SHA2-256A3762",
"SHA3-384A3762",
"#A4675",
"ECDSA SigGen (FIPS186-4)A3762",
"Hash DRBGA3762",
"HMAC-SHA-1A3762",
"SHA3-512A3762",
"#A3758",
"HMAC DRBGA3762",
"HMAC-SHA2-512/224A3762",
"SHA-1A3762",
"HMAC-SHA3-512A3762",
"SHA2-384A3762",
"PBKDFA3762",
"#A3760",
"AES-CBCA4676",
"HMAC-SHA2-384A3762",
"SHA2-224A3762",
"HMAC-SHA3-384A3762",
"#A4676",
"SHA2-256A4676",
"SHA2-512/256A3762",
"AES-CTRA4676",
"RSA SigVer (FIPS186-4)A3762",
"#A3761",
"RSA SigGen (FIPS186-4)A3762"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"9"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3757",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3757",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3757",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3757",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3757",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3757",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A3757",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3757",
"properties": "Iteration Count - Iteration Count: 1000- 10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A3757",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3757",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3757",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3757",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3757",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3758",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3758",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3759",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3759",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3759",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3759",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": ""
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3759",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3759",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3759",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3759",
"properties": "Iteration Count - Iteration Count: 1000- 10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A3759",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3759",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3759",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3760",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3760",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3760",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3760",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3760",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3760",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3760",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3760",
"properties": "Iteration Count - Iteration Count: 1000- 10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A3760",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3760",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3760",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3761",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3761",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A3761",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3761",
"properties": "Iteration Count - Iteration Count: 1000- 10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A3761",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3761",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3761",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3761",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3761",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3762",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3762",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3762",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3762",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3762",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3762",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A3762",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A3762",
"properties": "Iteration Count - Iteration Count: 1000- 10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A3762",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A3762",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3762",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A3762",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A3762",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4675",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4675",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4675",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4675",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4675",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4675",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4675",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4675",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4676",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4676",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4676",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4676",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4676",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4676",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4676",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4676",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Encrypt a plaintext / Decrypt a ciphertext",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_CIPHE R, ...) returns GPG_ERR_NO_E RROR",
"inputs": "AES key, plaintext/ci phertext",
"name": "Symmetric encryption and decryption",
"outputs": "Cipher text/ plaint ext",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Symme tric encrypti on and decrypti on Authent icated symmet ric encrypti on and decrypti on Symme tric encrypti on and decrypti on with AES XTS (for data storage )"
},
{
"description": "Generate a key pair",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_PK_FLA GS, ...) returns GPG_ERR_NO_E RROR",
"inputs": "Modulus bits",
"name": "Key Pair Generation with RSA",
"outputs": "RSA public key, RSA privat e key",
"rolesSspAccess": "Crypto Officer - RSA Private Key: G,R - RSA Public Key: G,R - Interm ediate key genera tion value: G,E,Z",
"secFunImpl": "Key pair generat ion with RSA"
},
{
"description": "Generate a key pair",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_PK_FLA GS, ...) returns GPG_ERR_NO_E RROR",
"inputs": "Curve",
"name": "Key Pair Generation with ECDSA",
"outputs": "ECDS A public key, ECDS A privat e key",
"rolesSspAccess": "Crypto Officer - ECDSA Private Key: G,R - ECDSA Public Key: G,R - Interm ediate key genera tion value: G,E,Z",
"secFunImpl": "Key pair generat ion with ECDSA"
},
{
"description": "Generate a signature",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_PK_FLA GS, ...) and gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MD, ...) return",
"inputs": "RSA private key, message",
"name": "Digital signature generation with RSA",
"outputs": "Signat ure",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E",
"secFunImpl": "Digital signatur e generat ion with RSA"
},
{
"description": "",
"indicator": "GPG_ERR_NO_E RROR",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Generate a signature",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_PK_FLA GS, ...) and gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MD, ...) return GPG_ERR_NO_E RROR",
"inputs": "ECDSA private key, message",
"name": "Digital signature generation with ECDSA",
"outputs": "Signat ure",
"rolesSspAccess": "Crypto Officer - ECDSA Private Key: W,E",
"secFunImpl": "Digital signatur e generat ion with ECDSA"
},
{
"description": "Verify a signature",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_PK_FLA GS, ...) and gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MD, ...) return GPG_ERR_NO_E RROR",
"inputs": "RSA public key, message, signature",
"name": "Digital signature verification with RSA",
"outputs": "Pass/f ail",
"rolesSspAccess": "Crypto Officer - RSA Public Key: W,E",
"secFunImpl": "FIPS 186-4 Digital signatur e verificat ion with RSA FIPS 186-2 Digital signatur e verificat ion with RSA"
},
{
"description": "Verify a signature",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_PK_FLA GS, ...) and gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MD, ...) return GPG_ERR_NO_E RROR",
"inputs": "ECDSA public key, message, signature",
"name": "Digital signature verification with ECDSA",
"outputs": "Pass/f ail",
"rolesSspAccess": "Crypto Officer - ECDSA Public Key: W,E",
"secFunImpl": "Digital signatur e verificat ion with ECDSA"
},
{
"description": "Verify ECDSA public key",
"indicator": "gcry_mpi_ec_cu rve_point() returns GPG_ERR_NO_E RROR",
"inputs": "ECDSA public key",
"name": "Public key verification",
"outputs": "Pass/f ail",
"rolesSspAccess": "Crypto Officer - ECDSA Public",
"secFunImpl": "Public key verificat ion with ECDSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Key: W,E",
"secFunImpl": ""
},
{
"description": "Generate random bitstrings from CTR_DRBG/H MAC_DRBG",
"indicator": "gcry_randomize (), gcry_random_by tes(), gcry_random_by tes_secure() return GPG_ERR_NO_E RROR",
"inputs": "Output length",
"name": "Random Number Generation with CTR_DRBG/H MAC_DRBG",
"outputs": "Rando m bytes",
"rolesSspAccess": "Crypto Officer - Entrop y Input: W,E - DRBG seed: G,E - DRBG interna l state (V value, Key): G,W,E",
"secFunImpl": "Random number generat ion with CTR_DR BG Random number generat ion with HMAC_ DRBG"
},
{
"description": "Generate random bitstrings from Hash_DRBG",
"indicator": "gcry_randomize (), gcry_random_by tes(), gcry_random_by tes_secure() return GPG_ERR_NO_E RROR",
"inputs": "Output length",
"name": "Random Number Generation with Hash_DRBG",
"outputs": "Rando m bytes",
"rolesSspAccess": "Crypto Officer - Entrop y Input: W,E - DRBG seed: G,E - DRBG interna l state (V value, C value): G,W,E",
"secFunImpl": "Random number generat ion with Hash_D RBG"
},
{
"description": "Compute SHA hashes",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MD, ...) returns GPG_ERR_NO_E RROR",
"inputs": "Message",
"name": "Message digest",
"outputs": "Digest value",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Messag e digest with SHA-3 Messag e digest with SHA-1 Messag e digest"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "with SHA-2"
},
{
"description": "Compute HMAC",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MAC, .. .) returns GPG_ERR_NO_E RROR",
"inputs": "HMAC key",
"name": "Message authenticatio n code (MAC) with HMAC",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC keys: W,E",
"secFunImpl": "Messag e authent ication code with HMAC"
},
{
"description": "Compute AES-based CMAC",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_MAC, .. .) returns GPG_ERR_NO_E RROR",
"inputs": "AES key",
"name": "Message authenticatio n code (MAC) with CMAC",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Messag e authent ication generat ion with AES- CMAC"
},
{
"description": "Perform AES- based key wrapping",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_CIPHE R, ...) returns GPG_ERR_NO_E RROR",
"inputs": "AES key, any CSP",
"name": "Key wrapping",
"outputs": "Wrapp ed CSP",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Key wrappin g with AES"
},
{
"description": "Perform AES- based key unwrapping",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_CIPHE R, ...) returns GPG_ERR_NO_E RROR",
"inputs": "AES key, wrapped CSP",
"name": "Key unwrapping",
"outputs": "Unwra pped CSP",
"rolesSspAccess": "Crypto Officer - AES keys: W,E",
"secFunImpl": "Key unwrap ping with AES"
},
{
"description": "Perform key derivation",
"indicator": "gcry_control(GC RYCTL_FIPS_ SERVICE_INDICA TOR_KDF, ... ) returns GPG_ERR_NO_E RROR",
"inputs": "Password, salt, iteration count",
"name": "Key derivation",
"outputs": "Derive d key",
"rolesSspAccess": "Crypto Officer - Passwo rd or passph rase: W,E - Derive d key: G,R",
"secFunImpl": "Key derivati on with PBKDF"
},
{
"description": "Perform on- demand integrity test",
"indicator": "N/A",
"inputs": "N/A",
"name": "On-demand Integrity test",
"outputs": "Pass/f ail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Messag e authent ication"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "code with HMAC"
},
{
"description": "Show module status",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show status",
"outputs": "Modul e status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize all SSPs",
"indicator": "N/A",
"inputs": "Any SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform self- tests",
"indicator": "N/A",
"inputs": "N/A",
"name": "Self-tests",
"outputs": "Pass/f ail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module name and version",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show module name and version",
"outputs": "Modul e name and versio n inform ation",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4675)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4676)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4675)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4676)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key MAC generation, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3759)",
"condition": "Test runs at power-on before the",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key MAC",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "generation, encrypt",
"type": ""
},
{
"algorithmOrTest": "AES-CMAC (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key MAC generation, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key MAC generation, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2- 256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2- 256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3760)",
"condition": "Test runs at power-on before the",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2- 256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2- 256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800- 90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2- 256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186- 4) (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186- 4) (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A3758)",
"condition": "Test runs at power-on before the",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA- 1 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3762)",
"condition": "Test runs at power-on before the",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-384",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen",
"condition": "Test runs at power-on before the",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit",
"type": "CAST"
},
{
"algorithmOrTest": "(FIPS186- 4) (A3759)",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "key and SHA2-256",
"type": ""
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 4) (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048-bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3758)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3762)",
"condition": "Test runs at power-on before the",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA2-256 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4675)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4676)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4675)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4676)",
"condition": "Test runs at power-on before the",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3762)",
"condition": "Test runs at power-on before the",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A3757)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3759)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3760)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A3761)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 password length 24 characters, master key length of 320 bits, iteration count of",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "4096, and salt length of 288 bits",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A3762)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3757)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3759)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3760)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3761)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186- 4) (A3762)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2- 256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3757)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3759)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3760)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen",
"condition": "Key pair generation",
"details": "Signature generation",
"indicator": "Key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "(FIPS186- 4) (A3761)",
"condition": "",
"details": "and verification",
"indicator": "is successful",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186- 4) (A3762)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Failure of pre- operational tests or conditional tests.",
"description": "The module will return an error code to indicate the error and will enter the Error state. Any further cryptographic operation is inhibited.",
"indicator": "An error message related to the cause of the failure.",
"name": "Error State",
"recoveryMethod": "The error can be recovered by a restart (i.e., powering off and powering on) of the module."
},
{
"conditions": "Random numbers are requested in the error state or cipher operations",
"description": "The module will abort and will not be available.",
"indicator": "The module is aborted",
"name": "Fatal Error state",
"recoveryMethod": "The error can be recovered by a restart (i.e., powering off and"
},
{
"conditions": "are requested on a deallocated handle.",
"description": "",
"indicator": "",
"name": "",
"recoveryMethod": "powering on) of the module."
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved Mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non-approved service is requested",
"name": "Non- approved Mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "MD5",
"use": "Message Digest"
},
{
"name": "ECDH",
"use": "Shared Secret Computation"
},
{
"name": "AES-GCM, AES-GCM-SIV, AES-OCB, AES-EAX",
"use": "Symmetric encryption and decryption"
},
{
"name": "RSA",
"use": "Signature generation/verification primitives"
},
{
"name": "RSA",
"use": "Encryption/decryption primitives"
},
{
"name": "RSA using public key flags not listed in section 4.8",
"use": "Key generation"
},
{
"name": "RSA using public key flags not listed in section 4.8",
"use": "Signature generation/verification"
},
{
"name": "ECDSA",
"use": "Signature generation/verification primitives"
},
{
"name": "ECDSA using public key flags not listed in section 4.8",
"use": "Key generation"
},
{
"name": "ECDSA using public key flags not listed in section 4.8",
"use": "Signature generation/verification"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES-GCM, AES- GCM-SIV, AES- OCB, AES-EAX",
"description": "AES encryption/decryption using non-approved AES modes",
"name": "Symmetric encryption/decryption",
"role": "CO"
},
{
"alg_accessed": "MD5",
"description": "Non-approved message digest",
"name": "Message digest",
"role": "CO"
},
{
"alg_accessed": "ECDH",
"description": "ECDH Shared Secret Computation",
"name": "Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "RSA using public key flags not listed in section 4.8 RSA using public key flags not listed in section 4.8",
"description": "Generate RSA key pairs using public key flags not listed in section 4.8.",
"name": "Key generation with RSA",
"role": "CO"
},
{
"alg_accessed": "ECDSA using public key flags not listed in section 4.8 ECDSA using public key flags not listed in section 4.8",
"description": "Generate ECDSA key pairs using public key flags not listed in section 4.8.",
"name": "Key generation with ECDSA",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Generate/verify a signature using RSA Signature generation/verification primitives",
"name": "Digital signature generation/verification with RSA",
"role": "CO"
},
{
"alg_accessed": "ECDSA",
"description": "Generate/verify a signature using ECDSA Signature generation/verification primitives",
"name": "Digital signature generation/verification with ECDSA",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Perform encryption/decryption using RSA encryption/decryption primitives",
"name": "Asymmetric encryption/decryption",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters for data.",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters for data.",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API input parameters for control input, /proc/sys/crypto/fips_enabled control file.",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, API output parameters for status output.",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [],
"found": false,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A3760)",
"details": "Integrity test for /usr/lib64/libgcrypt.so.20.4 .0",
"indicator": "Module becomes operation al and services are available for use",
"testMethod": "Message authenticatio n",
"testProps": "256-bit key",
"type": "SW/FW Integrit y"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographi c module",
"distribution": "Manual",
"entry": "Electroni c",
"format": "Plaintex t",
"name": "API input parameter s (plaintext)",
"sfiAlgo": "",
"source": "Calling application within TOEPP"
},
{
"dest": "Calling application within TOEPP",
"distribution": "Manual",
"entry": "Electroni c",
"format": "Plaintex t",
"name": "API output parameter s (plaintext)",
"sfiAlgo": "",
"source": "Cryptographi c module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle.",
"method": "Wipe and Free memory block allocated",
"operatorId": "By calling the cipher related zeroization API which are the following: gcry_free(), gcry_cipher_close(), gcry_mac_close(), gcry_sexp_release(), gcry_mpi_release(), gcry_ctx_release(), gcry_mpi_point_release(),",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine"
},
{
"description": "",
"method": "",
"operatorId": "gcry_ctrl(GCRYCTL_TE RM_SECMEM)",
"rationale": "indicates that the zeroization procedure succeeded."
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "/usr/lib64/libgcrypt.so.20.4.0",
"swFwVersion": "1.10.0- 8b6840b590cedd43"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Dell PowerEdge R440",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "AES-NI, SHA extensions (PAA)",
"processors": "Intel(R) Xeon(R) Silver 4216",
"version": "1.10.0- 8b6840b590cedd43"
},
{
"hardwarePlatform": "IBM z16 3931-A01",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "CPACF (PAI)",
"processors": "IBM z16",
"version": "1.10.0- 8b6840b590cedd43"
},
{
"hardwarePlatform": "IBM 9080- HEX",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9 with PowerVM FW1040.00 with VIOS 3.1.3.00",
"paa_pai": "ISA (PAA)",
"processors": "IBM POWER10",
"version": "1.10.0- 8b6840b590cedd43"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "RSA (FIPS 186-4):2048, 3072, 4096 with 112, 128, 149 bits of strength",
"implName": "libgcrypt (64 bit) (No Acceleration)",
"name": "Cryptographic Key Generation (CKG) with RSA",
"reference": "SP 800- 133Rev2"
},
{
"algoPropList": "ECDSA:P-224, P-256, P- 384, P-521 with 112, 128, 192, 256 bits of strength",
"implName": "libgcrypt (64 bit) (No Acceleration)",
"name": "Cryptographic Key Generation (CKG) with ECDSA",
"reference": "SP 800- 133Rev2"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Intel(R) Xeon(R) E5",
"operatingSystem": "Red Hat Enterprise Linux 9"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 134
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 5
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 1
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"libgcrypt": {
"libgcrypt": 97
}
},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 14
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 44,
"P-256": 84,
"P-384": 52,
"P-521": 54
}
},
"eval_facility": {
"atsec": {
"atsec": 85
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 15,
"AES-128": 4,
"AES-192": 5,
"AES-256": 5,
"HMAC-SHA- 1": 12,
"HMAC-SHA-1": 30,
"HMAC-SHA-256": 6,
"PKCS 1": 15,
"PKCS#1": 32,
"SHA- 224": 1,
"SHA- 256": 3,
"SHA- 384": 1,
"SHA- 512": 3,
"SHA-1": 51,
"SHA-2": 3,
"SHA-224": 1,
"SHA-256": 5,
"SHA-3": 4,
"SHA-384": 4,
"SHA-512": 4,
"SHA2- 256": 6,
"SHA2- 384": 9,
"SHA2-224": 37,
"SHA2-256": 97,
"SHA2-384": 29,
"SHA2-512": 57,
"SHA3- 384": 1,
"SHA3-224": 24,
"SHA3-256": 25,
"SHA3-384": 23,
"SHA3-512": 25
}
},
"fips_security_level": {
"Level": {
"Level 1": 1
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"PBKDF": {
"PBKDF": 36,
"PBKDF2": 2
},
"SHA": {
"SHA1": {
"SHA-1": 51
},
"SHA2": {
"SHA-2": 3,
"SHA-224": 1,
"SHA-256": 5,
"SHA-384": 4,
"SHA-512": 4
},
"SHA3": {
"SHA-3": 4,
"SHA3-224": 24,
"SHA3-256": 25,
"SHA3-384": 23,
"SHA3-512": 25
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 103
},
"RNG": {
"RBG": 3,
"RNG": 2
}
},
"side_channel_analysis": {
"FI": {
"Fault Induction": 2
},
"SCA": {
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 93,
"FIPS 180-4": 40,
"FIPS 186-2": 4,
"FIPS 186-4": 45,
"FIPS 198-1": 48,
"FIPS 202": 18,
"FIPS PUB 140-3": 3,
"FIPS140-3": 1,
"FIPS180-4": 1,
"FIPS186-2": 11,
"FIPS186-4": 107,
"FIPS197": 1,
"FIPS198-1": 1,
"FIPS202": 1
},
"NIST": {
"SP 800-132": 5,
"SP 800-38A": 34,
"SP 800-38B": 4,
"SP 800-38C": 4,
"SP 800-38E": 6,
"SP 800-38F": 4,
"SP 800-90A": 14
},
"PKCS": {
"PKCS 1": 15,
"PKCS#1": 16
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 46,
"AES-": 7,
"AES-128": 4,
"AES-192": 5,
"AES-256": 5
},
"CAST": {
"CAST": 277
}
},
"constructions": {
"MAC": {
"CMAC": 8,
"HMAC": 35,
"HMAC-SHA-256": 3
}
}
},
"tee_name": {
"AMD": {
"PSP": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-XTS Testing Revision 2.0A4676",
"ECDSA KeyGen (FIPS186-4)A3762",
"SHA3-224A3762",
"HMAC-SHA3-224A3762",
"AES-ECBA4676",
"SHAKE-256A3762",
"AES-CMACA3762",
"Counter DRBGA3762",
"AES-CFB128A4676",
"RSA KeyGen (FIPS186-4)A3762",
"SHA2-512A4676",
"SHA3-256A3762",
"AES-CFB8A4676",
"HMAC-SHA2-512/256A3762",
"AES-OFBA3762",
"HMAC-SHA2-512A3762",
"HMAC-SHA2-224A3762",
"ECDSA SigVer (FIPS186-4)A3762",
"HMAC-SHA3-256A3762",
"AES-KWA3762",
"AES-CCMA3762",
"RSA SigVer (FIPS186-2)A3762",
"SHA2-512/224A3762",
"SHAKE-128A3762",
"ECDSA KeyVer (FIPS186-4)A3762",
"HMAC-SHA2-256A3762",
"SHA3-384A3762",
"ECDSA SigGen (FIPS186-4)A3762",
"Hash DRBGA3762",
"HMAC-SHA-1A3762",
"SHA3-512A3762",
"HMAC DRBGA3762",
"HMAC-SHA2-512/224A3762",
"SHA-1A3762",
"HMAC-SHA3-512A3762",
"SHA2-384A3762",
"PBKDFA3762",
"AES-CBCA4676",
"HMAC-SHA2-384A3762",
"SHA2-224A3762",
"HMAC-SHA3-384A3762",
"SHA2-256A4676",
"SHA2-512/256A3762",
"AES-CTRA4676",
"RSA SigVer (FIPS186-4)A3762",
"RSA SigGen (FIPS186-4)A3762"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3757",
"#A3760",
"#A4676",
"#A3759",
"#A4675",
"#A3762",
"#A3758",
"#A3761"
]
},
"policy_metadata": {
"/CreationDate": "D:20240807190214Z00\u002700\u0027",
"/Creator": "Word",
"/ModDate": "D:20240807190214Z00\u002700\u0027",
"/Producer": "macOS Version 13.3.1 (a) (Build 22E772610a) Quartz PDFContext",
"/Title": "140sp-new",
"pdf_file_size_bytes": 1053208,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 86
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "d65ac1128b67ee2c3d0d9ff1a26e2a266715ae81d61bbf572083e55471185955",
"source_hash": "83807ceefc2fcb18bc8b95b51baa30d4f4defcff15e044f641c25ccb8681cf08",
"txt_hash": "ec6395cd23bc34e9647d76d7f36f078ed059bb16570de354ba90248687b11d9e"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
"date_sunset": null,
"description": "The Red Hat Enterprise Linux 9 libgcrypt is a software library implementing general purpose cryptographic algorithms",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": "Replaced by certificate #5366",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Red Hat Enterprise Linux 9 libgcrypt",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "historical",
"sw_versions": "1.10.0-8b6840b590cedd43",
"tested_conf": [
"Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 with PAA",
"Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 without PAA",
"Red Hat Enterprise Linux 9 running on IBM z16 3931-A01 with IBM z16 with PAI",
"Red Hat Enterprise Linux 9 running on IBM z16 3931-A01 with IBM z16 without PAI",
"Red Hat Enterprise Linux 9 with PowerVM FW1040.00 with VIOS 3.1.3.00 running on IBM 9080-HEX with IBM POWER10 with PAA",
"Red Hat Enterprise Linux 9 with PowerVM FW1040.00 with VIOS 3.1.3.00 running on IBM 9080-HEX with IBM POWER10 without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-08-09",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Red Hat(R), Inc.",
"vendor_url": "http://www.redhat.com"
}
}