AudioCodes BoringCrypto

Certificate details

Certificate ID #5543
Status active
Validation dates 06.10.2026 , 21.10.2026
Sunset date 17-04-2031
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications
Vendor AudioCodes Ltd. http://www.audiocodes.com
Lab DEKRA Cybersecurity Certification Laboratory
Algorithms
  • AES-CBCA6134
  • AES-CCMA6134
  • AES-CTRA6134
  • AES-ECBA6134
  • AES-GCMA6134
  • AES-GMACA6134
  • AES-KWA6134
  • AES-KWPA6134
  • Counter DRBGA6134
  • ECDSA KeyGen (FIPS186-5)A6134
  • ECDSA KeyVer (FIPS186-5)A6134
  • ECDSA SigGen (FIPS186-5)A6134
  • ECDSA SigVer (FIPS186-5)A6134
  • HMAC-SHA-1A6134
  • HMAC-SHA2-224A6134
  • HMAC-SHA2-256A6134
  • HMAC-SHA2-384A6134
  • HMAC-SHA2-512/256A6134
  • HMAC-SHA2-512A6134
  • KAS-ECC-SSC Sp800-56Ar3A6134
  • KAS-FFC-SSC Sp800-56Ar3A6134
  • KDA HKDF Sp800-56Cr1A6134
  • RSA KeyGen (FIPS186-5)A6134
  • RSA SigGen (FIPS186-5)A6134
  • RSA SigVer (FIPS186-5)A6134
  • SHA-1A6134
  • SHA2-224A6134
  • SHA2-256A6134
  • SHA2-384A6134
  • SHA2-512/256A6134
  • SHA2-512A6134
  • TLS v1.2 KDF RFC7627A6134
  • TLS v1.3 KDFA6134
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES-256, AES, AES-, CAST, DES, Triple-DES, HMAC, HMAC-SHA-256
Asymmetric Algorithms
ECDSA, DHE, DH
Hash functions
SHA-1, SHA-256, MD4, MD5
Schemes
MAC, Key Agreement
Protocols
TLS v1.2, TLS v1.3, TLS, TLS 1.2, TLS 1.3
Randomness
DRBG, RBG
Libraries
BoringSSL
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
CBC, GCM, SIV

Trusted Execution Environments
PSP, SSC
Vendor
Qualcomm

Security level
Level 1, level 1

Creation date D:20261021135857-04'00'
Modification date D:20261021135857-04'00'
Pages 38
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5543,
  "dgst": "9302a967cce44378",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-512A6134",
        "RSA SigVer (FIPS186-5)A6134",
        "AES-ECBA6134",
        "ECDSA SigVer (FIPS186-5)A6134",
        "RSA KeyGen (FIPS186-5)A6134",
        "AES-CBCA6134",
        "AES-KWPA6134",
        "SHA-1A6134",
        "HMAC-SHA2-512/256A6134",
        "ECDSA KeyVer (FIPS186-5)A6134",
        "#A6134",
        "KAS-ECC-SSC Sp800-56Ar3A6134",
        "AES-CTRA6134",
        "SHA2-512/256A6134",
        "ECDSA KeyGen (FIPS186-5)A6134",
        "HMAC-SHA-1A6134",
        "Counter DRBGA6134",
        "AES-CCMA6134",
        "KDA HKDF Sp800-56Cr1A6134",
        "ECDSA SigGen (FIPS186-5)A6134",
        "RSA SigGen (FIPS186-5)A6134",
        "AES-GCMA6134",
        "SHA2-512A6134",
        "AES-GMACA6134",
        "HMAC-SHA2-224A6134",
        "SHA2-384A6134",
        "KAS-FFC-SSC Sp800-56Ar3A6134",
        "SHA2-256A6134",
        "SHA2-224A6134",
        "TLS v1.3 KDFA6134",
        "HMAC-SHA2-256A6134",
        "HMAC-SHA2-384A6134",
        "TLS v1.2 KDF RFC7627A6134",
        "AES-KWA6134"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC, AES-ECB",
            "cavpCertName": "A6134",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A6134",
            "properties": "Key Length - 128 Tag Length - 32, 64 IV Length - IV Length: 104 Payload Length - Payload Length: 0- 256 Increment 8 AAD Length - AAD Length: 0-524288 Increment 8",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A6134",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8- 128 Increment 8 Supports Counter larger than maximum value - Yes Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A6134",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 0- 65536 Increment 8",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "AAD Length - AAD Length: 0-65536 Increment 8",
            "reference": ""
          },
          {
            "algorithm": "AES-GMAC",
            "cavpCertName": "A6134",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 0-65536 Increment 8",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A6134",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 64",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KWP",
            "cavpCertName": "A6134",
            "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8- 4096 Increment 8",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A6134",
            "properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0- 384 Increment 16 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0-384 Increment 16 Returned Bits - 2048",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A6134",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186- 5)",
            "cavpCertName": "A6134",
            "properties": "Curve - P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186- 5), ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A6134",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2- 256, SHA2-384, SHA2-512, SHA2- 512/256",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A6134",
            "properties": "MAC - MAC: 32-160 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A6134",
            "properties": "MAC - MAC: 32-224 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256, HMAC- SHA2-512/256",
            "cavpCertName": "A6134",
            "properties": "MAC - MAC: 32-256 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A6134",
            "properties": "MAC - MAC: 32-384 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A6134",
            "properties": "MAC - MAC: 32-512 Increment 8 Key Length - Key Length: 8-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
            "cavpCertName": "A6134",
            "properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder staticUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800- 56Ar3",
            "cavpCertName": "A6134",
            "properties": "Domain Parameter Generation Methods - FB, FC Scheme - dhEphem - KAS Role - initiator",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDA HKDF Sp800-56Cr1",
            "cavpCertName": "A6134",
            "properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-65336 Increment 8 HMAC Algorithm - SHA2-224, SHA2- 256, SHA2-384, SHA2-512, SHA2- 512/256",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-5)",
            "cavpCertName": "A6134",
            "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Fixed Public Exponent - 010001 Info Generated By Server - Yes Private Key Format - standard Public Exponent Mode - fixed",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-5)",
            "cavpCertName": "A6134",
            "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A6134",
            "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Fixed Public Exponent - 010001 Public Exponent Mode - fixed",
            "reference": ""
          },
          {
            "algorithm": "SHA-1, SHA2-224, SHA2- 256, SHA2-384, SHA2- 512, SHA2-512/256",
            "cavpCertName": "A6134",
            "properties": "Message Length - Message Length: 0-65528 Increment 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A6134",
            "properties": "Hash Algorithm - SHA2-256, SHA2- 384, SHA2-512 Key Block Length - Key Block Length: 1024",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "TLS v1.3 KDF (CVL)",
            "cavpCertName": "A6134",
            "properties": "HMAC Algorithm - SHA2-256, SHA2- 384 KDF Running Modes - DHE, PSK, PSK-DHE",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Module Initializatio n",
            "indicator": "N/A",
            "inputs": "N/A",
            "name": "Module Initializati on",
            "outputs": "Return Code",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "Symmetric encryption of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Plaintext, AAD, IV, encryptio n key",
            "name": "Symmetr ic Encryptio n",
            "outputs": "Return code, ciphertext, tag",
            "rolesSspAccess": "Crypto Officer (CO) - AES Key: W,E - AES- GCM Key: W,E",
            "secFunImpl": "Authenticat ed Encryption Encryption"
          },
          {
            "description": "Symmetric decryption of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Cipherte xt, AAD, IV, tag, decryptio n key",
            "name": "Symmetr ic Decrypti on",
            "outputs": "Return code, plaintext",
            "rolesSspAccess": "Crypto Officer (CO) - AES Key: W,E - AES- GCM Key: W,E",
            "secFunImpl": "Authenticat ed Decryption Decryption"
          },
          {
            "description": "Symmetric message authenticat ion of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Message , key",
            "name": "Keyed Hashing",
            "outputs": "Return code, Message Authenticat ion Code",
            "rolesSspAccess": "Crypto Officer (CO) - HMAC Key: W,E - AES- GCM Key: W,E",
            "secFunImpl": "Message Authenticat ion"
          },
          {
            "description": "Hashing of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Message",
            "name": "Hashing",
            "outputs": "Return code, hash",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "Hashing"
          },
          {
            "description": "Generation of random bits for calling application",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Random Bit Generati on",
            "outputs": "Return code, random bits",
            "rolesSspAccess": "Crypto Officer (CO) - CTR_DR BG Entropy Input: W,E - CTR_DR BG Seed:",
            "secFunImpl": "Random Bit Generation"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "G,E - CTR_DR BG V: G,E - CTR_DR BG Key: G,E",
            "secFunImpl": ""
          },
          {
            "description": "Digital signature of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Message , signing key",
            "name": "Signatur e Generati on",
            "outputs": "Return code, signature",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Signing Key: W,E - RSA Signature Generatio n Key: W,E - CTR_DR BG V: E - CTR_DR BG Key: E",
            "secFunImpl": "Signature Generation"
          },
          {
            "description": "Digital signature verification of calling application data",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Signatur e, verificatio n key",
            "name": "Signatur e Verificati on",
            "outputs": "Return code",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Verificatio n Key: W,E - RSA Signature Verificatio n Key:",
            "secFunImpl": "Signature Verification"
          },
          {
            "description": "Symmetric key wrapping of calling application key",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, unwrapp ed key, wrapping key",
            "name": "Key Wrap Service",
            "outputs": "Return code, wrapped key",
            "rolesSspAccess": "W,E Crypto Officer (CO) - AES Wrapping Key: W,E - Unwrapp ed Key:",
            "secFunImpl": "AES- KeyWrap"
          },
          {
            "description": "Descriptio n",
            "indicator": "Indicator",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Outputs",
            "rolesSspAccess": "SSP Access W - Wrapped Key: G,R",
            "secFunImpl": "Security Functions"
          },
          {
            "description": "Symmetric key unwrappin g of calling application key",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, wrapped key",
            "name": "Key Unwrap Service",
            "outputs": "Return code, unwrapped key",
            "rolesSspAccess": "Crypto Officer (CO) - AES Wrapping Key: W,E - Wrapped Key: W - Unwrapp ed Key: G,R",
            "secFunImpl": "AES- KeyWrap"
          },
          {
            "description": "API call parameter s",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "Return code, shared secret",
            "name": "Key Agreeme nt Service",
            "outputs": "Return code, shared secret",
            "rolesSspAccess": "Crypto Officer (CO) - EC DH Private Key: G,E - EC DH Public Key: G,R - Other Party EC DH Public Key: W,E - DH Private Key: G,E - Other Party DH Public Key: W,E - KAS Shared Secret: G,R - DH Public Key: W,E",
            "secFunImpl": "KAS-ECC- SSC KAS-FFC- SSC"
          },
          {
            "description": "Hash based key derivation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs,",
            "name": "Key Derivatio n KDA",
            "outputs": "Return code, derived",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "Key Derivation"
          },
          {
            "description": "for calling application",
            "indicator": "",
            "inputs": "shared secret",
            "name": "",
            "outputs": "keying material",
            "rolesSspAccess": "- KDA Shared Secret: W,E - Derived Keying Material: G,R",
            "secFunImpl": "Hash Based"
          },
          {
            "description": "TLS Key derivation for calling application",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, TLS KDF input",
            "name": "TLS Key Derivatio n",
            "outputs": "Return code, TLS Keying Material",
            "rolesSspAccess": "Crypto Officer (CO) - TLS KDF input: W,E - TLS Keying Material: G,R",
            "secFunImpl": "Key Derivation TLS 1.2 Key Derivation TLS 1.3"
          },
          {
            "description": "Asymmetri c key generation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Key Generati on",
            "outputs": "Return code, key pair",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Signing Key: G,R - ECDSA Verificatio n Key: G,R - RSA Signature Generatio n Key: G,R - RSA Signature Verificatio n Key: G,R - CTR_DR BG V: E - CTR_DR BG Key: E",
            "secFunImpl": "Signature Key Generation"
          },
          {
            "description": "Asymmetri c key pair validation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs, key pair",
            "name": "Key Verificati on",
            "outputs": "Return code",
            "rolesSspAccess": "Crypto Officer (CO) - ECDSA Signing Key: W,E - ECDSA Verificatio n Key: W,E",
            "secFunImpl": "Signature Key Validation"
          },
          {
            "description": "On- Demand Self-Test",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "N/A",
            "name": "On- Demand Self-Test",
            "outputs": "Return Code",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "Authenticat ed Decryption Authenticat ed Encryption Decryption Encryption Hashing KAS-ECC- SSC KAS-FFC- SSC Key Derivation Hash Based Key Derivation TLS 1.2 Key Derivation TLS 1.3 AES- KeyWrap Message Authenticat ion Random Bit Generation Signature Generation Signature Verification"
          },
          {
            "description": "Zeroisation",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "N/A",
            "name": "Zeroisati on",
            "outputs": "N/A",
            "rolesSspAccess": "Crypto Officer (CO) - AES",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Key: Z - AES- GCM Key: Z - AES Wrapping Key: Z - Wrapped Key: Z - Unwrapp ed Key: Z - ECDSA Signing Key: Z - ECDSA Verificatio n Key: Z - EC DH Private Key: Z - EC DH Public Key: Z - Other Party EC DH Public Key: Z - DH Private Key: Z - DH Public Key: Z - Other Party DH Public Key: Z - KAS Shared Secret: Z - KDA Shared Secret: Z - HMAC Key: Z - RSA",
            "secFunImpl": ""
          },
          {
            "description": "Descriptio n",
            "indicator": "Indicator",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Outputs",
            "rolesSspAccess": "SSP",
            "secFunImpl": "Security Functions"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Access Signature Generatio n Key: Z - RSA Signature Verificatio n Key: Z - TLS KDF input: Z - TLS Keying Material: Z - CTR_DR BG Entropy Input: Z - CTR_DR BG Seed: Z - CTR_DR BG V: Z - CTR_DR BG Key: Z - Derived Keying Material: Z",
            "secFunImpl": ""
          },
          {
            "description": "Show Status",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Show Status",
            "outputs": "Return code, status",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "Show module name",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Show Name",
            "outputs": "Return code, string of module name",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          },
          {
            "description": "Show module version",
            "indicator": "fips_service_indi cator set to 1",
            "inputs": "API call paramete rs",
            "name": "Show Version",
            "outputs": "Return code, string of module version",
            "rolesSspAccess": "Crypto Officer (CO)",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "AES- CBC Encrypt KAT",
            "condition": "module power-up",
            "details": "Encrypt",
            "indicator": "None on success. \"AES- CBC-encrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- CBC Decrypt KAT",
            "condition": "module power-up",
            "details": "Decrypt",
            "indicator": "None on success. \"AES- CBC-decrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- GCM Encrypt KAT",
            "condition": "module power-up",
            "details": "Encrypt",
            "indicator": "None on success. \"AES- GCM-encrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "AES- GCM Decrypt KAT",
            "condition": "module power-up",
            "details": "Decrypt",
            "indicator": "None on success. \"AES- GCM-decrypt KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "Counter DRBG KAT",
            "condition": "module power-up",
            "details": "Instantiat e, Reseed, Generate",
            "indicator": "None on success. \"CTR- DRBG failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "initialize, reseed, generate tests, per SP 800- 90Arev1 Section 11.3",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigGen KAT",
            "condition": "On first use",
            "details": "Sign",
            "indicator": "None on success. \"ECDSA-sign KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA SigVer KAT",
            "condition": "On first use",
            "details": "Verify",
            "indicator": "None on success. \"ECDSA-verify KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "HMAC- SHA2- 256 KAT",
            "condition": "module power-up",
            "details": "MAC",
            "indicator": "None on success. \"HMAC-SHA-256 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "128",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS- ECC- SSC Sp800- 56Ar3 KAT",
            "condition": "On first use",
            "details": "SSC",
            "indicator": "None on success. \"Z- computation KAT failed.\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KAS- FFC- SSC Sp800- 56Ar3 KAT",
            "condition": "On first use",
            "details": "SSC",
            "indicator": "None on success. \"FFDH failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "KDA HKDF Sp800-",
            "condition": "module power-up",
            "details": "KDF",
            "indicator": "None on success. \"HKDF failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "HMAC SHA-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "56Cr1 KAT",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "RSA SigGen KAT",
            "condition": "On first use",
            "details": "Sign",
            "indicator": "None on success. \"RSA- sign KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "RSA SigVer KAT",
            "condition": "On first use",
            "details": "Verify",
            "indicator": "None on success. \"RSA- verify KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "2048",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA-1 KAT",
            "condition": "module power-up",
            "details": "Hash",
            "indicator": "None on success. \"SHA- 1 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "n/a",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA2- 256 KAT",
            "condition": "module power-up",
            "details": "Hash",
            "indicator": "None on success. \"SHA- 256 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "n/a",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "SHA2- 512 KAT",
            "condition": "module power-up",
            "details": "Hash",
            "indicator": "None on success. \"SHA- 512 KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "n/a",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC762 7 KAT",
            "condition": "module power-up",
            "details": "KDF",
            "indicator": "None on success. \"TLS12-KDF KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "TLS v1.3 KDF KAT",
            "condition": "module power-up",
            "details": "KDF",
            "indicator": "None on success. \"TLS13-KDF KAT failed\" on stderr on failure.",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAS T"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen PCT",
            "condition": "Keypair generated",
            "details": "Sign/Veri fy PCT",
            "indicator": "None on success. \"EC_KEY_generate_key_ fips failed\" on stderr on failure.",
            "testMethod": "Sign/Veri fy PCT",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen PCT",
            "condition": "Keypair generated",
            "details": "Sign/Veri fy PCT",
            "indicator": "None on success. \"RSA_generate_key_fips failed\" on stderr on failure.",
            "testMethod": "Sign/Veri fy PCT",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KAS- ECC- SSC Sp800- 56Ar3 PCT",
            "condition": "Keypair generated",
            "details": "SP 800- 56Arev3 validity tests",
            "indicator": "None on success. Module aborted on failure.",
            "testMethod": "SP 800- 56Arev3 validity tests",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KAS- FFC- SSC Sp800- 56Ar3 PCT",
            "condition": "Keypair generated",
            "details": "SP 800- 56Arev3 validity tests",
            "indicator": "None on success. Module aborted on failure.",
            "testMethod": "SP 800- 56Arev3 validity tests",
            "testProps": "Generate d key- pair",
            "type": "PCT"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Failure of any FIPS self-test",
            "description": "The module\u0027s error state",
            "indicator": "SIGABRT signal as module aborts. Prior to that most self-tests output an informational message on stderr (see Pre-Operational Self-Tests and Conditional Self-Tests tables for each test\u0027s failure message).",
            "name": "Error state",
            "recoveryMethod": "Restart the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "MD5, MD4",
            "use": "Non-Approved Hashing"
          },
          {
            "name": "POLYVAL",
            "use": "Non-Approved authenticated encryption"
          },
          {
            "name": "DES, Triple-DES (non-compliant)",
            "use": "Non-Approved encryption/decryption"
          },
          {
            "name": "AES (non-compliant)",
            "use": "Non-Approved encryption/decryption"
          },
          {
            "name": "DH (non-compliant)",
            "use": "Non-Approved key agreement"
          },
          {
            "name": "RSA PKCS #1 v1.5 key wrapping (non-compliant)",
            "use": "Non-Approved key wrapping"
          },
          {
            "name": "TLS 1.0/1.1 KDF (non-compliant)",
            "use": "Non-Approved TLS key derivation"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "TLS 1.0/1.1 KDF (non-compliant)",
            "description": "Perform hashing operations when used with the TLS protocol version 1.0 and 1.1",
            "name": "TLS 1.0/1.1 KDF",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "MD5, MD4",
            "description": "Perform hashing operations",
            "name": "Hashing",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "POLYVAL",
            "description": "Used as part of AES-GCM- SIV",
            "name": "Hashing for GCM-SIV",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "DES, Triple-DES (non-compliant) AES (non-compliant)",
            "description": "Perform symmetric encryption and/or decryption operations",
            "name": "Symmetric encryption/decryption",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "RSA PKCS #1 v1.5 key wrapping (non- compliant)",
            "description": "Perform RSA PKCS #1 v1.5 key transport",
            "name": "Key Transport",
            "role": "Crypto Officer (CO)"
          },
          {
            "alg_accessed": "DH (non-compliant)",
            "description": "Perform non-compliant DH key agreement",
            "name": "Key Agreement",
            "role": "Crypto Officer (CO)"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input parameters",
            "logicalInterface": "Data Input",
            "physicalPort": "n/a"
          },
          {
            "data": "API output parameters and return values",
            "logicalInterface": "Data Output",
            "physicalPort": "n/a"
          },
          {
            "data": "API input parameters",
            "logicalInterface": "Control Input",
            "physicalPort": "n/a"
          },
          {
            "data": "API return values",
            "logicalInterface": "Status Output",
            "physicalPort": "n/a"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer (CO)",
            "operatorType": "Crypto Officer",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A6134)",
            "details": "Single HMAC over entire module",
            "indicator": "None on success. \"FIPS integrity test failed.\" on stderr on failure.",
            "testMethod": "Integrity",
            "testProps": "Hardcoded 512 bit key",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "RAM",
            "distribution": "N/A",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "PT Input",
            "sfiAlgo": "",
            "source": "Calling Application"
          },
          {
            "dest": "Calling Application",
            "distribution": "N/A",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "PT Output",
            "sfiAlgo": "",
            "source": "RAM"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Turn off or power cycle the host computer to clear all RAM contents",
            "method": "Power Cycle Host",
            "operatorId": "Procedural - turn off or power cycle host",
            "rationale": "All module SSPs are held ephemerally in RAM, so turning off or power cycling the computer will cause them to be irretrievably lost."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Ephemeral storage in RAM",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "",
            "integrityTest": "Yes",
            "packageFileName": "bcm.o",
            "swFwVersion": "20240805"
          },
          {
            "features": "Processors",
            "integrityTest": "PAA/PAI",
            "packageFileName": "Operating System",
            "swFwVersion": "Hardware Platform"
          },
          {
            "features": "Google Tensor G4 64-bit",
            "integrityTest": "Yes",
            "packageFileName": "Android 15",
            "swFwVersion": "Google Pixel 9"
          },
          {
            "features": "Google Tensor G4 64-bit",
            "integrityTest": "No",
            "packageFileName": "Android 15",
            "swFwVersion": "Google Pixel 9"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Google Pixel 8",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "Yes",
            "processors": "Google Tensor G3 64-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 8",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "No",
            "processors": "Google Tensor G3 64-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 7",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "Yes",
            "processors": "Google Tensor G2 64-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 7",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "No",
            "processors": "Google Tensor G2 64-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 7",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "Yes",
            "processors": "Google Tensor G2 32-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 7",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "No",
            "processors": "Google Tensor G2 32-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 6",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "Yes",
            "processors": "Google Tensor 64-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 6",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "No",
            "processors": "Google Tensor 64-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 6",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "Yes",
            "processors": "Google Tensor 32-bit",
            "version": "20240805"
          },
          {
            "hardwarePlatform": "Google Pixel 6",
            "hypervisorHostOs": "",
            "operatingSystem": "Android 15",
            "paa_pai": "No",
            "processors": "Google Tensor 32-bit",
            "version": "20240805"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Key Type:Asymmetric",
            "implName": "BoringCrypto",
            "name": "CKG",
            "reference": "Section 4, example 1: U is directly output without XORing V"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "C426HD IP Phone with Rockchip RK3562 processor",
            "operatingSystem": "Android 15"
          },
          {
            "hardwarePlatform": "C436HD IP Phone with Rockchip RK3562 processor",
            "operatingSystem": "Android 15"
          },
          {
            "hardwarePlatform": "RXV200 Compute MTR with Qualcomm QCS8250 processor",
            "operatingSystem": "Android 15"
          },
          {
            "hardwarePlatform": "RX-PAD Controller with Rockchip RK3566 processor",
            "operatingSystem": "Android 15"
          },
          {
            "hardwarePlatform": "RX-PANEL Meeting Room Scheduler with Rockchip RK3566 processor",
            "operatingSystem": "Android 15"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 31
          }
        },
        "FF": {
          "DH": {
            "DH": 45,
            "DHE": 1
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "GCM": {
          "GCM": 6
        },
        "SIV": {
          "SIV": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "BoringSSL": {
          "BoringSSL": 1
        }
      },
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 33,
            "TLS 1.2": 5,
            "TLS 1.3": 6,
            "TLS v1.2": 7,
            "TLS v1.3": 7
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 7
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 12,
          "P-256": 20,
          "P-384": 8,
          "P-521": 8
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 3
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES- CBC Decrypt KAT 128": 1,
          "AES- CBC Encrypt KAT 128": 1,
          "AES- GCM Decrypt KAT 128": 1,
          "AES- GCM Encrypt KAT 128": 1,
          "AES-256": 1,
          "HMAC SHA-256": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-256": 4,
          "PKCS #1": 3,
          "RSA PKCS #1": 3,
          "SHA- 1": 1,
          "SHA- 256": 1,
          "SHA- 512": 1,
          "SHA-1": 4,
          "SHA-256": 4,
          "SHA2- 256": 5,
          "SHA2- 384": 2,
          "SHA2- 512": 2,
          "SHA2-224": 5,
          "SHA2-256": 3,
          "SHA2-384": 4,
          "SHA2-512": 4,
          "SHA2224": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA-256": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 15
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 10,
          "FIPS 180-4": 2,
          "FIPS 186-5": 7,
          "FIPS 198-1": 5,
          "FIPS186-5": 12
        },
        "NIST": {
          "SP 800-135": 2,
          "SP 800-38A": 2,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-38F": 2,
          "SP 800-56A": 2,
          "SP 800-56C": 1,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS #1": 3
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 5288": 1,
          "RFC 7627": 1,
          "RFC 8446": 3,
          "RFC762": 1,
          "RFC7627": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 20,
            "AES-": 16,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 20
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 2
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 9,
            "HMAC-SHA-256": 2
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 6
        },
        "IBM": {
          "SSC": 25
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 1
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-512A6134",
        "RSA SigVer (FIPS186-5)A6134",
        "AES-ECBA6134",
        "ECDSA SigVer (FIPS186-5)A6134",
        "RSA KeyGen (FIPS186-5)A6134",
        "AES-CBCA6134",
        "AES-KWPA6134",
        "SHA-1A6134",
        "HMAC-SHA2-512/256A6134",
        "ECDSA KeyVer (FIPS186-5)A6134",
        "KAS-ECC-SSC Sp800-56Ar3A6134",
        "AES-CTRA6134",
        "SHA2-512/256A6134",
        "ECDSA KeyGen (FIPS186-5)A6134",
        "HMAC-SHA-1A6134",
        "Counter DRBGA6134",
        "AES-CCMA6134",
        "KDA HKDF Sp800-56Cr1A6134",
        "ECDSA SigGen (FIPS186-5)A6134",
        "RSA SigGen (FIPS186-5)A6134",
        "AES-GCMA6134",
        "SHA2-512A6134",
        "AES-GMACA6134",
        "HMAC-SHA2-224A6134",
        "SHA2-384A6134",
        "KAS-FFC-SSC Sp800-56Ar3A6134",
        "SHA2-256A6134",
        "SHA2-224A6134",
        "TLS v1.3 KDFA6134",
        "HMAC-SHA2-256A6134",
        "HMAC-SHA2-384A6134",
        "TLS v1.2 KDF RFC7627A6134",
        "AES-KWA6134"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A6134"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20261021135857-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20261021135857-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 629934,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "b547674c172cf1a07250926c4f74e6fd79a0fb672685b9b4a388f05dd7c20ef6",
      "source_hash": "4afea592d51190233f551990ab707d304c0a0e246bd3038e8d6974043fa9a5af",
      "txt_hash": "2e469ddd3a8b9ce0f096cc2e0220fd4331ef6f83ba696bdfabeb0e5e888ab788"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": null,
    "date_sunset": "2031-04-17",
    "description": "A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "AudioCodes BoringCrypto",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-06",
        "lab": "DEKRA Cybersecurity Certification Laboratory",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-21",
        "lab": "DEKRA Cybersecurity Certification Laboratory",
        "validation_type": "Update"
      }
    ],
    "vendor": "AudioCodes Ltd.",
    "vendor_url": "http://www.audiocodes.com"
  }
}