This page was not yet optimized for use on mobile devices.
OpenSSL FIPS Provider for AlmaLinux 9
Certificate details
| Certificate ID | #4823 |
|---|---|
| Status | historical |
| Historical reason | Replaced by certificate #5482 |
| Validation dates | 07.10.2024 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation. When operated in Approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy |
| Exceptions |
|
| Description | AlmaLinux 9.2 OpenSSL FIPS provider implementation providing cryptographic services to Linux user space software components. |
| Tested configurations |
|
| Vendor | Cloudlinux Inc., TuxCare division http://www.tuxcare.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-256, AES-, AES-128, CAST, HMAC, CMACAsymmetric Algorithms
RSA-PSS, RSA-OAEP, ECDH, ECDSA, ECC, DH, Diffie-HellmanHash functions
SHA-1, SHA-224, SHA-512, SHA-256, SHA-3, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHAKE128, SHAKE256, PBKDF2, PBKDFSchemes
MAC, Key Exchange, Key AgreementProtocols
SSH, TLS v1.3, TLS v1.2, TLS 1.2, TLS, TLS 1.3, IKERandomness
DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-256, P-384, P-521, P-224Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Side-channel analysis
side-channel, timing attacks, Fault InductionStandards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 202, FIPS 180-4, FIPS 1403, FIPS 197, SP 800-132, SP 800-56C, SP 800-135, SP 800-90A, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-56A, SP 800-38D, SP 800-108, SP 800-140B, SP 800-90B, PKCS#1, RFC7627, RFC 5288, RFC8446, RFC 3526, RFC 7919, RFC 4253, RFC 6668, RFC 8446Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4823,
"dgst": "9189d4def691cd31",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"SHA2-256A4082",
"#A4056",
"KDF ANS 9.63A4082",
"KAS-FFC-SSC Sp800-56Ar3A4085",
"SHA2-384A4082",
"TLS v1.3 KDFA4052",
"#A4061",
"AES-OFBA4063",
"HMAC-SHA3-384A4055",
"#A4068",
"RSA SigGen (FIPS186-4)A4082",
"#A4067",
"#A4077",
"ECDSA SigVer (FIPS186-4)A4082",
"#A4082",
"HMAC-SHA2-256A4082",
"AES-CCMA4063",
"Hash DRBGA4053",
"AES-CMACA4063",
"KDF ANS 9.42A4082",
"SHA3-224A4055",
"#A4078",
"HMAC-SHA3-224A4055",
"HMAC-SHA3-256A4055",
"#A4055",
"RSA SigVer (FIPS186-4)A4082",
"#A4051",
"SHA2-224A4082",
"AES-XTS Testing Revision 2.0A4063",
"PBKDFA4082",
"#A4066",
"HMAC-SHA2-512/256A4082",
"#A4052",
"HMAC-SHA2-512/224A4082",
"#A4065",
"KDF SP800-108A4084",
"AES-ECBA4066",
"#A4079",
"AES-CBC-CS1A4063",
"SHA2-512/256A4082",
"HMAC-SHA2-224A4082",
"AES-CTRA4063",
"#A4053",
"AES-GCMA4078",
"RSA KeyGen (FIPS186-4)A4082",
"AES-KWPA4063",
"#A4063",
"#A4062",
"SHA-1A4082",
"SHA3-384A4055",
"HMAC-SHA2-384A4082",
"#A4076",
"SHA2-512/224A4082",
"SHA3-512A4055",
"KAS-ECC-SSC Sp800-56Ar3A4082",
"Safe Primes Key GenerationA4085",
"AES-CBCA4063",
"HMAC DRBGA4053",
"AES-CFB128A4063",
"#A4081",
"#A4085",
"HMAC-SHA2-512A4082",
"SHA3-256A4055",
"ECDSA KeyVer (FIPS186-4)A4082",
"KDF SSHA4066",
"#A4080",
"ECDSA KeyGen (FIPS186-4)A4082",
"#A4070",
"AES-CFB8A4063",
"KDA OneStep SP800-56Cr2A4051",
"SHAKE-256A4055",
"SHA2-512A4082",
"AES-CBC-CS3A4063",
"Counter DRBGA4053",
"#A4084",
"#A4058",
"#A4059",
"#A4074",
"HMAC-SHA-1A4082",
"#A4069",
"AES-GMACA4078",
"#A4073",
"AES-CBC-CS2A4063",
"#A4072",
"TLS v1.2 KDF RFC7627A4082",
"AES-CFB1A4063",
"#A4071",
"#A4075",
"#A4060",
"SHAKE-128A4055",
"ECDSA SigGen (FIPS186-4)A4082",
"HMAC-SHA3-512A4055",
"KDA HKDF Sp800-56Cr1A4052",
"#A4057",
"AES-KWA4063",
"#A4054",
"#A4064"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"9"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Used to perform symmetric encryption of an entry plaintext",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_CIPHER_REDH AT_FIPS_INDICATO R_APPROVED",
"inputs": "Plaintext, AES key",
"name": "Symmetric Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetric Encryption with AES"
},
{
"description": "Used to perform symmetric decryption of an entry ciphertext",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_CIPHER_REDH AT_FIPS_INDICATO R_APPROVED",
"inputs": "Ciphertex t, AES key",
"name": "Symmetric Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Symmetric Decryption with AES"
},
{
"description": "Used to perform authenticate d symmetric encryption with AES",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_CIPHER_REDH AT_FIPS_INDICATO R_APPROVED",
"inputs": "Plaintext, AES key, IV",
"name": "Authenticat ed Encryption",
"outputs": "Ciphertext, Tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authenticat ed Symmetric Encryption Key wrapping with AES- KW Key wrapping with AES- KWP Key wrapping with AES- GCM"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Key wrapping with AES- CCM"
},
{
"description": "Used to perform authenticate d symmetric decryption with AES",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_CIPHER_REDH AT_FIPS_INDICATO R_APPROVED",
"inputs": "Ciphertex t, AES key, IV, Tag",
"name": "Authenticat ed Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authenticat ed Symmetric Decryption Key unwrappin g with AES- KW Key unwrappin g with AES- KWP Key unwrappin g with AES- GCM Key unwrappin g with AES- CCM"
},
{
"description": "Perform AES- based key wrapping (compliant to SP800-38F and FIPS 140-3 IG D.G)",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_CIPHER_REDH AT_FIPS_INDICATO R_APPROVED",
"inputs": "Key to be wrapped, AES key",
"name": "Key Wrapping",
"outputs": "Wrapped key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key wrapping with AES- KW Key wrapping with AES- KWP Key wrapping with AES- CCM Key wrapping with AES-"
},
{
"description": "Perform AES- based key unwrapping (compliant to SP 800-38F and FIPS 140-3 IG D.G)",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_CIPHER_REDH AT_FIPS_INDICATO R_APPROVED",
"inputs": "Wrapped key, AES key",
"name": "Key Unwrappin g",
"outputs": "Unwrapped key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key unwrappin g with AES- KW Key wrapping with AES- KWP Key wrapping with AES- CCM Key"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "wrapping with AES- GCM"
},
{
"description": "Compute a MAC tag",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_MAC_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Message, AES key or HMAC key",
"name": "Message Authenticat ion Code",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E - AES key: W,E",
"secFunImpl": "Message Authenticat ion Code"
},
{
"description": "Verify a MAC tag",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED, EVP_MAC_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Message, AES key or HMAC key, MAC tag",
"name": "Message Authenticat ion Code Verification",
"outputs": "Pass/fail",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E - AES key: W,E",
"secFunImpl": "Message Authenticat ion Code"
},
{
"description": "Used to generate a SHA-1, SHA- 2, or SHA- 3/SHAKE message digest",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message digest"
},
{
"description": "Derive a key from a key- derivation key",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Key- derivation key",
"name": "Key Derivation with KBKDF",
"outputs": "KBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - Key Derivati on Key: W,E - KBKDF Derived Key: G,R",
"secFunImpl": "Key Derivation with KBKDF"
},
{
"description": "Derive a key from a shared secret using HKDF",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Shared secret",
"name": "Key Derivation with HKDF",
"outputs": "HKDF Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - HKDF Derived Key: G,R",
"secFunImpl": "Key Derivation with HKDF"
},
{
"description": "Derive a key from a shared",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_",
"inputs": "Shared secret",
"name": "Key Derivation",
"outputs": "SSH Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret:",
"secFunImpl": "Key Derivation"
},
{
"description": "secret using SSH KDF",
"indicator": "FIPS_INDICATOR_A PPROVED",
"inputs": "",
"name": "with SSH KDF",
"outputs": "",
"rolesSspAccess": "W,E - SSH Derived Key: G,R",
"secFunImpl": "with SSH KDF"
},
{
"description": "Derive a key from a shared secret using X9.63 KDF",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Shared secret",
"name": "Key Derivation with X9.63 KDF",
"outputs": "X9.63 Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - X9.63 Derived Key: G,R",
"secFunImpl": "Key Derivation with X9.63 KDF"
},
{
"description": "Derive a key from a shared secret using X9.63 KDF",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Shared secret",
"name": "Key Derivation with X9.42 KDF",
"outputs": "X9.42 Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - X9.42 Derived Key: G,R",
"secFunImpl": "Key Derivation with X9.42 KDF"
},
{
"description": "Derive a key from a shared secret using KDA OneStep",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Shared secret",
"name": "Key Derivation with KDA OneStep",
"outputs": "KDA OneStep Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KDA OneSte p Derived Key: G,R",
"secFunImpl": "Key Derivation with KDA OneStep"
},
{
"description": "Derive a key from a shared secret using TLS 1.2 KDF / TLS 1.3 KDF",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Shared secret",
"name": "TLS Key Derivation",
"outputs": "TLS Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - TLS Derived Key: G,R",
"secFunImpl": "TLS Key Derivation"
},
{
"description": "Derive a key from a password",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED EVP_KDF_REDHAT_ FIPS_INDICATOR_A PPROVED",
"inputs": "Password or passphra se",
"name": "Password- based Key Derivation",
"outputs": "PBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - Passwor d or passphr ase:",
"secFunImpl": "Password- based Key Derivation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "W,E - PBKDF Derived Key: G,R",
"secFunImpl": ""
},
{
"description": "Compute a shared secret",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED",
"inputs": "DH private key, DH public key; EC private key, EC public key",
"name": "Shared Secret Computatio n",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - DH Private key: W,E - EC Public key: W,E - Shared Secret: G,R - DH Public key : W,E - Shared Secret: G,R",
"secFunImpl": "Shared Secret Computatio n with DH Shared Secret Computatio n with ECDH"
},
{
"description": "Generate a digital signature",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED OSSL_SIGNATURE_ PARAM_REDHAT_FI PS_INDICATOR",
"inputs": "Message, private key",
"name": "Signature Generation",
"outputs": "Signature",
"rolesSspAccess": "Crypto Officer - RSA private key: W,E - EC Private key: W,E",
"secFunImpl": "Signature Generation"
},
{
"description": "Verify a digital signature",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED OSSL_SIGNATURE_ PARAM_REDHAT_FI PS_INDICATOR",
"inputs": "Message, public key, signature",
"name": "Signature Verification",
"outputs": "Pass/fail",
"rolesSspAccess": "Crypto Officer - RSA public key: W,E - EC Public key: W,E",
"secFunImpl": "Signature Verification"
},
{
"description": "Generate a key pair",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED",
"inputs": "Group; Curve; Modulus bits",
"name": "Key Pair Generation",
"outputs": "DH key pair; EC key pair; RSA key pair",
"rolesSspAccess": "Crypto Officer - RSA private key: G,R - DH",
"secFunImpl": "Key Pair Generation with RSA Key Pair Generation with ECDSA"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Private key: G,R - RSA public key: G,R - DH Public key : G,R - EC Private key: G,R - EC Public key: G,R - Interme diate key generati on value: G,E,Z",
"secFunImpl": "Key Pair Generation with Safe Primes"
},
{
"description": "Verify a key pair",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED",
"inputs": "Key pair",
"name": "Key Pair Verification",
"outputs": "Pass/fail",
"rolesSspAccess": "Crypto Officer - DH Public key : W,E - EC Public key: W,E - DH Private key: W,E - EC Private key:",
"secFunImpl": "Key Pair Verification with Safe Primes Key Pair Verification with ECDSA"
},
{
"description": "Generate random bytes",
"indicator": "OSSL_RH_FIPSINDI CATOR_APPROVED",
"inputs": "Output length",
"name": "Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - Entropy input: G,E - DRBG internal state (V value, C value): G,E,W - DRBG",
"secFunImpl": "Random Number Generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "internal state (V value, Key): G,E,W - DRGB seed: G,E,W",
"secFunImpl": ""
},
{
"description": "Show the current status of the module",
"indicator": "None",
"inputs": "N/A",
"name": "Show status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module name and the version of the module",
"indicator": "None",
"inputs": "N/A",
"name": "Show module name and version",
"outputs": "Name and version information",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform CASTs and integrity test",
"indicator": "None",
"inputs": "N/A",
"name": "Self-test",
"outputs": "Pass/fail result of self-tests",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message digest Message Authenticat ion Code Symmetric Encryption with AES Symmetric Decryption with AES Authenticat ed Symmetric Encryption Authenticat ed Symmetric Decryption Signature Generation Signature Verification Key Derivation with KBKDF Key Derivation with KDA OneStep Key Derivation with HKDF Key Derivation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "with X9.42 KDF Key Derivation with X9.63 KDF Key Derivation with SSH KDF TLS Key Derivation Password- based Key Derivation Random Number Generation Shared Secret Computatio n with DH Shared Secret Computatio n with ECDH"
},
{
"description": "Zeroize SSPs.",
"indicator": "None",
"inputs": "Any SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - RSA private key: Z - RSA public key: Z - DH Private key: Z - DH Public key : Z - EC Private key: Z - EC Public key: Z - Key Derivati on Key: Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- KBKDF Derived Key: Z - Passwor d or passphr ase: Z - PBKDF Derived Key: Z - KBKDF Derived Key: Z - HKDF Derived Key: Z - SSH Derived Key: Z - X9.42 Derived Key: Z - X9.63 Derived Key: Z - KDA OneSte p Derived Key: Z - TLS Derived Key: Z - Shared Secret: Z - Entropy input: Z - DRGB seed: Z - DRBG internal state (V value, C value): Z - DRBG internal state (V value, Key): Z - Interme diate",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "key generati on value: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA-1 (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4080)",
"condition": "Test runs at power-on before the",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA-1 (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Message digest",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A4055)",
"condition": "Test runs at power-on before the",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "32-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-GCM (A4067)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4068)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4069)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4070)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4071)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4072)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4073)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4074)",
"condition": "Test runs at power-on before the",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-GCM (A4075)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4076)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4077)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4078)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4067)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4068)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4069)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4070)",
"condition": "Test runs at power-on before the",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-GCM (A4071)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4072)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4073)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4074)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4075)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4076)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4077)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4078)",
"condition": "Test runs at power-on before the",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key and 96-bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB (A4054)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4056)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4057)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4058)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4061)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4062)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4063)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4064)",
"condition": "Test runs at power-on before the",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB (A4065)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4066)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4059)",
"condition": "Test runs at power-on before the",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "and 2048- bit key",
"type": ""
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256 and 2048- bit key",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4055)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 and P-224, P-256, P- 384, and P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 and P-224, P-256, P- 384, and P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 and P-224, P-256, P- 384, and P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4080)",
"condition": "Test runs at power-on before the",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 and P-224, P-256, P-",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "384, and P- 521",
"type": ""
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 and P-224, P-256, P- 384, and P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 and P-224, P-256, P- 384, and P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4055)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4082)",
"condition": "Test runs at power-on before the",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KDF SP800- 108 (A4084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key Derivation with KBKDF",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC- SHA2-256 in counter mode and 128-bit input key",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800- 56Cr2 (A4051)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224 and 448-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800- 56Cr1 (A4052)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 48-bit secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4055)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 KW and SHA-1 and 160-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 KW and SHA-1 and 160-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 KW and SHA-1 and 160-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 KW and SHA-1 and 160-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4081)",
"condition": "Test runs at power-on before the",
"details": "ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 KW and SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "and 160-bit input secret",
"type": ""
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.42 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 KW and SHA-1 and 160-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4055)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 192-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 192-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 192-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 192-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 192-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "ANS X9.63 key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 192-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4054)",
"condition": "Test runs at power-on before the",
"details": "SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 and 1056-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KDF SSH (A4064)",
"condition": "Test runs at power-on before the integrity test",
"details": "SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 and 1056-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4065)",
"condition": "Test runs at power-on before the integrity test",
"details": "SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 and 1056-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4066)",
"condition": "Test runs at power-on before the integrity test",
"details": "SSH KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 and 1056-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 384-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 384-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 384-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 384-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4082)",
"condition": "Test runs at power-on before the",
"details": "TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 and 384-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "TLS v1.3 KDF (A4052)",
"condition": "Test runs at power-on before the integrity test",
"details": "TLS v1.3 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, extract and expand modes",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4055)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based Key Derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based Key Derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based Key Derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based Key Derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based Key Derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password- based Key Derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4053)",
"condition": "Test runs at power-on before the",
"details": "Instantiate; Generate; Reseed (compliant to SP 800-",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 with derivation function and",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "integrity test",
"details": "90Arev1 Section 11.3)",
"indicator": "",
"testMethod": "",
"testProps": "prediction resistance",
"type": ""
},
{
"algorithmOrTest": "Hash DRBG (A4053)",
"condition": "Test runs at power-on before the integrity test",
"details": "Instantiate; Generate; Reseed (compliant to SP 800- 90Arev1 Section 11.3)",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4053)",
"condition": "Test runs at power-on before the integrity test",
"details": "Instantiate; Generate; Reseed (compliant to SP 800- 90Arev1 Section 11.3)",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 1",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC- SSC Sp800- 56Ar3 (A4085)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC- SSC Sp800- 56Ar3 (A4059)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC- SSC Sp800- 56Ar3 (A4079)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC- SSC Sp800- 56Ar3 (A4080)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC- SSC Sp800- 56Ar3 (A4081)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC- SSC Sp800- 56Ar3 (A4082)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A4085)",
"condition": "Key pair generation",
"details": "SP 800- 56Arev3 Section 5.6.2.1.4",
"indicator": "Key pair generation is successful",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4059)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4079)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4080)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4081)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4082)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4059)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4079)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "(FIPS186-4) (A4080)",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4081)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4082)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is sucessful",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure CAST failure",
"description": "If the module fails any of the self- tests, the module enters the error state. In the error state, the module immediately stops functioning and ends the application process",
"indicator": "OSSL_PROV_PARAM_STATUS is set to 0. Module will not load.",
"name": "Error",
"recoveryMethod": "Module reinitialization"
},
{
"conditions": "PCT failure",
"description": "Pairwise consistency test failure",
"indicator": "Module is aborted",
"name": "PCT Error",
"recoveryMethod": "Module reinitialization"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [],
"found": false,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM (external IV)",
"use": "Authentication Encryption"
},
{
"name": "HMAC (\u003c 112-bit keys)",
"use": "Message Authentication Code"
},
{
"name": "KBKDF, KDA OneStep, HKDF, ANS X9.42 KDF, ANS X9.63 KDF (\u003c 112-bit keys)",
"use": "Key Derivation"
},
{
"name": "KDA OneStep (SHAKE128, SHAKE256)",
"use": "Key Derivation"
},
{
"name": "ANS X9.42 KDF (SHAKE128, SHAKE256)",
"use": "Key Derivation"
},
{
"name": "ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256)",
"use": "Key Derivation"
},
{
"name": "SSH KDF (SHA-512/224, SHA-512/256, SHA-3, SHAKE128, SHAKE256)",
"use": "Key Derivation"
},
{
"name": "TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224, SHA- 512/256, SHA-3)",
"use": "TLS Key Derivation"
},
{
"name": "TLS 1.3 KDF (SHA-1, SHA-224, SHA-512, SHA-512/224, SHA-512/256, SHA-3)",
"use": "TLS Key Derivation"
},
{
"name": "PBKDF2 (\u003c 8 characters password; \u003c 128 salt length; \u003c 1000 iterations; \u003c 112-bit keys)",
"use": "Password-based Key Derivation"
},
{
"name": "RSA (KAS1, KAS2 schemes)",
"use": "Shared secret computation"
},
{
"name": "RSA and ECDSA (pre-hashed message)",
"use": "Signature generation; Signature verification"
},
{
"name": "RSA-PSS (invalid salt length)",
"use": "Signature generation; Signature verification"
},
{
"name": "RSA-OAEP",
"use": "Asymmetric encryption; Asymmetric decryption"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM (external IV)",
"description": "Authenticated Encryption",
"name": "AES GCM (external IV)",
"role": "CO"
},
{
"alg_accessed": "HMAC (\u003c 112-bit keys)",
"description": "Compute a MAC tag",
"name": "HMAC (\u003c 112-bit keys)",
"role": "CO"
},
{
"alg_accessed": "KBKDF, KDA OneStep, HKDF, ANS X9.42 KDF, ANS X9.63 KDF (\u003c 112- bit keys) KDA OneStep (SHAKE128, SHAKE256) ANS X9.42 KDF (SHAKE128, SHAKE256) ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256) SSH KDF (SHA-512/224, SHA- 512/256, SHA-3, SHAKE128, SHAKE256)",
"description": "Derive a key from a key- derivation key or a shared secret",
"name": "Key derivation",
"role": "CO"
},
{
"alg_accessed": "TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224, SHA-512/256, SHA- 3) TLS 1.3 KDF (SHA-1, SHA-224, SHA-512, SHA-512/224, SHA- 512/256, SHA-3)",
"description": "",
"name": "",
"role": ""
},
{
"alg_accessed": "PBKDF2 (\u003c 8 characters password; \u003c 128 salt length; \u003c 1000 iterations; \u003c 112-bit keys)",
"description": "Derive a key from a password",
"name": "PBKDF2 (\u003c 112- bit keys)",
"role": "CO"
},
{
"alg_accessed": "RSA and ECDSA (pre-hashed message) RSA-PSS (invalid salt length)",
"description": "Generate a signature",
"name": "Signature generation",
"role": "CO"
},
{
"alg_accessed": "RSA and ECDSA (pre-hashed message) RSA-PSS (invalid salt length)",
"description": "Verify a signature",
"name": "Signature verification",
"role": "CO"
},
{
"alg_accessed": "RSA-OAEP",
"description": "Encrypt a plaintext",
"name": "Asymmetric encryption",
"role": "CO"
},
{
"alg_accessed": "RSA-OAEP",
"description": "Decrypt a ciphertext",
"name": "Asymmetric decryption",
"role": "CO"
},
{
"alg_accessed": "RSA (KAS1, KAS2 schemes)",
"description": "Compute a shared secret",
"name": "Shared secret computation",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters",
"logicalInterface": "Data Input",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs"
},
{
"data": "API output parameters",
"logicalInterface": "Data Output",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs"
},
{
"data": "API function calls",
"logicalInterface": "Control Input",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs"
},
{
"data": "API return codes, error queue",
"logicalInterface": "Status Output",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [],
"found": false,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256 (A4060)",
"details": "Integrity test of the shared library component of the module. Verified by comparing an HMAC SHA-256 value calculated at run time with the HMAC SHA-256 value embedded in the fips.so file that was computed at build time.",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message authentication",
"testProps": "256-bits key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle.",
"method": "Free cipher handle",
"operatorId": "By calling the cipher related zeroization API",
"rationale": "By calling the appropriate zeroization functions: AES key: EVP_CIPHER_CTX_free and EVP_MAC_CTX_free; HMAC key: EVP_MAC_CTX_free; Key-derivation key: EVP_KDF_CTX_free; Shared secret: EVP_KDF_CTX_free; Password: EVP_KDF_CTX_free; KBKDF Derived Key: EVP_KDF_CTX_free; HKDF Derived Key: EVP_KDF_CTX_free; TLS Derived Key: EVP_KDF_CTX_free; SSH Derived Key: EVP_KDF_CTX_free; X9.63 Derived Key: EVP_KDF_CTX_free; X9.42 Derived Key: EVP_KDF_CTX_free; PBKDF Derived Key: EVP_KDF_CTX_free; KDA OneStep Derived"
},
{
"description": "",
"method": "",
"operatorId": "",
"rationale": "Key: EVP_KDF_CTX_free; Entropy input: EVP_RAND_CTX_free; DRBG seed: EVP_RAND_CTX_free; DRBG internal state (V value, Key), DRBG internal state (V value, C value): EVP_RAND_CTX_free; DH public \u0026 private key: EVP_PKEY_free; EC public \u0026 private key: EVP_PKEY_free; RSA public \u0026 private key: EVP_PKEY_free"
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. SSPs are stored until they are zeroized by the operator (using a zeroization call or removing power from the module) or zeroized automatically",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "fips.so",
"swFwVersion": "3.0.7- 1d2bd88ee26b3c90"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Amazon Web Services",
"hypervisorHostOs": "N/A",
"operatingSystem": "AlmaLinux 9.2",
"paa_pai": "With and without PAA (AES-NI and",
"processors": "Intel Xeon Platinum 8259CL",
"version": "3.0.7- 1d2bd88ee26b3c90"
},
{
"hardwarePlatform": "(AWS) m5.metal",
"hypervisorHostOs": "",
"operatingSystem": "",
"paa_pai": "SHA Extensions)",
"processors": "",
"version": ""
},
{
"hardwarePlatform": "Amazon Web Services (AWS) a1.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "AlmaLinux 9.2",
"paa_pai": "With and without PAA (Neon and Crypto Extensions)",
"processors": "AWS Graviton",
"version": "3.0.7- 1d2bd88ee26b3c90"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Pair Generation with RSA:2048- 16384 bits keys (112-256 bits strength) Key Pair Generation with ECDSA:P-224,",
"implName": "N/A",
"name": "(CKG) Key Pair Generation",
"reference": "SP 800-133r2 Section 4 example 1"
},
{
"algoPropList": "P-256, P-384, P-521 curves (112, 128, 192, 256 bits strength) Key Pair Generation with Safe Primes:ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 groups (112- 200 bits) Key Type:Asymmetric",
"implName": "",
"name": "",
"reference": ""
},
{
"algoPropList": "PKCS#1v1.5 and PKCSPSS:SHA3-224, SHA3-256, SHA3-384, SHA3-512 Key:2048-16384 bits Strength:112-256 bits",
"implName": "N/A",
"name": "RSA Signature Generation",
"reference": "FIPS 140-3 IG C.C"
},
{
"algoPropList": "PKCS#1v1.5 and PKCSPSS:SHA3-224, SHA3-256, SHA3-384, SHA3-512 Key:1024-16384 bits Strength:80-256 bits",
"implName": "N/A",
"name": "RSA Signature Verification",
"reference": "FIPS 140-3 IG C.C"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 13
},
"ECDSA": {
"ECDSA": 100
}
},
"FF": {
"DH": {
"DH": 35,
"Diffie-Hellman": 11
}
},
"RSA": {
"RSA-OAEP": 3,
"RSA-PSS": 3
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 11
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 26
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 113
}
},
"crypto_protocol": {
"IKE": {
"IKE": 6
},
"SSH": {
"SSH": 43
},
"TLS": {
"TLS": {
"TLS": 31,
"TLS 1.2": 9,
"TLS 1.3": 8,
"TLS v1.2": 26,
"TLS v1.3": 6
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 2
},
"KEX": {
"Key Exchange": 2
},
"MAC": {
"MAC": 9
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 18,
"P-256": 36,
"P-384": 14,
"P-521": 12
}
},
"eval_facility": {
"atsec": {
"atsec": 2
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-128": 7,
"AES-256": 2,
"HMAC SHA-256": 5,
"HMAC-SHA- 1": 2,
"HMAC-SHA-1": 16,
"PKCS#1": 30,
"SHA- 2": 1,
"SHA- 3": 1,
"SHA- 384": 1,
"SHA-1": 36,
"SHA-224": 5,
"SHA-256": 38,
"SHA-3": 10,
"SHA-512": 3,
"SHA2-224": 8,
"SHA2-256": 31,
"SHA2-384": 8,
"SHA2-512": 17,
"SHA3-224": 3,
"SHA3-256": 6,
"SHA3-384": 5,
"SHA3-512": 4
}
},
"fips_security_level": {
"Level": {
"Level 1": 1
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 32,
"PBKDF2": 8
},
"SHA": {
"SHA1": {
"SHA-1": 36
},
"SHA2": {
"SHA-224": 5,
"SHA-256": 38,
"SHA-512": 3
},
"SHA3": {
"SHA-3": 10,
"SHA3-224": 3,
"SHA3-256": 6,
"SHA3-384": 5,
"SHA3-512": 4
}
},
"SHAKE": {
"SHAKE128": 9,
"SHAKE256": 9
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 44
},
"RNG": {
"RBG": 2,
"RNG": 1
}
},
"side_channel_analysis": {
"FI": {
"Fault Induction": 2
},
"SCA": {
"side-channel": 1,
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 121,
"FIPS 1403": 1,
"FIPS 180-4": 37,
"FIPS 186-4": 42,
"FIPS 197": 1,
"FIPS 198-1": 41,
"FIPS 202": 7,
"FIPS PUB 140-3": 3,
"FIPS186-4": 134
},
"NIST": {
"SP 800-108": 1,
"SP 800-132": 13,
"SP 800-135": 22,
"SP 800-140B": 1,
"SP 800-38A": 66,
"SP 800-38B": 7,
"SP 800-38C": 7,
"SP 800-38D": 25,
"SP 800-38E": 8,
"SP 800-38F": 15,
"SP 800-56A": 8,
"SP 800-56C": 2,
"SP 800-90A": 3,
"SP 800-90B": 1
},
"PKCS": {
"PKCS#1": 15
},
"RFC": {
"RFC 3526": 3,
"RFC 4253": 1,
"RFC 5288": 3,
"RFC 6668": 1,
"RFC 7919": 3,
"RFC 8446": 1,
"RFC7627": 20,
"RFC8446": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 68,
"AES-": 24,
"AES-128": 7,
"AES-256": 2
},
"CAST": {
"CAST": 217
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 26
}
}
},
"tee_name": {
"AMD": {
"PSP": 3
},
"IBM": {
"SSC": 13
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC DRBGA4053",
"KDF SP800-108A4084",
"SHA2-256A4082",
"AES-CFB128A4063",
"AES-GMACA4078",
"AES-ECBA4066",
"HMAC-SHA2-512A4082",
"AES-CBC-CS1A4063",
"KDF ANS 9.63A4082",
"KAS-FFC-SSC Sp800-56Ar3A4085",
"SHA2-384A4082",
"SHA3-256A4055",
"AES-CBC-CS2A4063",
"TLS v1.3 KDFA4052",
"KDF SSHA4066",
"ECDSA KeyVer (FIPS186-4)A4082",
"AES-OFBA4063",
"SHA2-512/256A4082",
"HMAC-SHA2-224A4082",
"HMAC-SHA3-384A4055",
"AES-CTRA4063",
"TLS v1.2 KDF RFC7627A4082",
"RSA SigGen (FIPS186-4)A4082",
"ECDSA KeyGen (FIPS186-4)A4082",
"ECDSA SigVer (FIPS186-4)A4082",
"AES-GCMA4078",
"RSA KeyGen (FIPS186-4)A4082",
"AES-KWPA4063",
"AES-CFB8A4063",
"HMAC-SHA2-256A4082",
"AES-CFB1A4063",
"KDA OneStep SP800-56Cr2A4051",
"AES-CCMA4063",
"SHAKE-256A4055",
"Hash DRBGA4053",
"SHA2-512A4082",
"AES-CMACA4063",
"AES-CBC-CS3A4063",
"Counter DRBGA4053",
"KDF ANS 9.42A4082",
"SHA-1A4082",
"SHA3-224A4055",
"SHA3-384A4055",
"HMAC-SHA2-384A4082",
"HMAC-SHA3-224A4055",
"SHA2-512/224A4082",
"HMAC-SHA3-256A4055",
"RSA SigVer (FIPS186-4)A4082",
"SHAKE-128A4055",
"SHA2-224A4082",
"SHA3-512A4055",
"AES-XTS Testing Revision 2.0A4063",
"ECDSA SigGen (FIPS186-4)A4082",
"HMAC-SHA3-512A4055",
"KAS-ECC-SSC Sp800-56Ar3A4082",
"KDA HKDF Sp800-56Cr1A4052",
"Safe Primes Key GenerationA4085",
"PBKDFA4082",
"AES-KWA4063",
"HMAC-SHA2-512/256A4082",
"HMAC-SHA2-512/224A4082",
"HMAC-SHA-1A4082",
"AES-CBCA4063"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4081",
"#A4056",
"#A4085",
"#A4079",
"#A4073",
"#A4072",
"#A4061",
"#A4080",
"#A4068",
"#A4053",
"#A4067",
"#A4077",
"#A4063",
"#A4070",
"#A4062",
"#A4082",
"#A4071",
"#A4078",
"#A4075",
"#A4084",
"#A4060",
"#A4076",
"#A4058",
"#A4059",
"#A4055",
"#A4051",
"#A4074",
"#A4064",
"#A4057",
"#A4066",
"#A4054",
"#A4052",
"#A4069",
"#A4065"
]
},
"policy_metadata": {
"/CreationDate": "D:20240927144708Z00\u002700\u0027",
"/ModDate": "D:20240927144708Z00\u002700\u0027",
"/Producer": "macOS Versione 14.5 (Build 23F79) Quartz PDFContext",
"pdf_file_size_bytes": 1065864,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
"https://www.ietf.org/rfc/rfc7919.txt",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://www.ietf.org/rfc/rfc5288.txt",
"https://webstore.ansi.org/standards/ascx9/ansix9422001",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38b.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://www.ietf.org/rfc/rfc3526.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://webstore.ansi.org/standards/ascx9/ansix9632001",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140B.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf",
"https://www.ietf.org/rfc/rfc8446.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 103
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "5fdb0b91d64e537e20f7a021459fa201c13e5eecdc2fc6ec71ae05f4dca649f4",
"source_hash": "5be7726d9daeb02fbc1a0aea39ea7a9cec867dd878d6019d315e0579ca6af8f1",
"txt_hash": "797c533d1af81134ecb9eebbd7847b77eacca86d50051c8332f7257c420cc39b"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation. When operated in Approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2024_041124_0733 (1).pdf",
"date_sunset": null,
"description": "AlmaLinux 9.2 OpenSSL FIPS provider implementation providing cryptographic services to Linux user space software components.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": "Replaced by certificate #5482",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "OpenSSL FIPS Provider for AlmaLinux 9",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "historical",
"sw_versions": "3.0.7-1d2bd88ee26b3c90",
"tested_conf": [
"AlmaLinux 9.2 running on Amazon Web Services (AWS) a1.metal with AWS Graviton with PAA",
"AlmaLinux 9.2 running on Amazon Web Services (AWS) a1.metal with AWS Graviton without PAA",
"AlmaLinux 9.2 running on Amazon Web Services (AWS) m5.metal with Intel Xeon Platinum 8259CL with PAA",
"AlmaLinux 9.2 running on Amazon Web Services (AWS) m5.metal with Intel Xeon Platinum 8259CL without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-10-07",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Cloudlinux Inc., TuxCare division",
"vendor_url": "http://www.tuxcare.com"
}
}