Leonovus Cryptographic Module

Certificate details

Certificate ID #3642
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 20.04.2020
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat None
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description Whether data is in-flight or at rest, whether it is whole and in one place or fragmented and distributed across the infrastructure, the Leonovus Cryptographic Module ensures the critical data elements are secured with state-of-the-art encryption and decryption algorithms. Because of the Leonovus Cryptographic Module, the IT organization retains control over the keys independent of the storage infrastructure and services. In this manner, IT regains its control over the data while greatly improving the flexibility on where it flows and resides.
Tested configurations
  • CentOS 7.6 on VMware ESXi 6.0 running on P ProLiant DL360e Gen8 with Intel Xeon E5-2403 (single-user mode)
Vendor Leonovus Inc. http://www.leonovus.com
Lab EWA - Canada
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Extracted keywords

Symmetric Algorithms
AES
Asymmetric Algorithms
DSA
Hash functions
SHA-256
Libraries
NSS
Block cipher modes
CBC, CTR

Security level
Level 1, level 1

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

Feed
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 3642,
  "dgst": "933b7d8e3c4f0768",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#C654",
        "AES#C654",
        "DSA#C654",
        "SHS#C654"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 44,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DSA": {
            "DSA": 3
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CTR": {
          "CTR": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "NSS": {
          "NSS": 1
        }
      },
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "EWA": {
          "EWA-Canada": 1
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#11": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES KAT 1": 1,
          "PKCS #11": 2,
          "SHA- 256": 1,
          "SHA-256": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 15,
          "FIPS 180-4": 1,
          "FIPS 186-4": 1,
          "FIPS 197": 2
        },
        "PKCS": {
          "PKCS #11": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 18
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES#C654",
        "DSA#C654",
        "SHS#C654"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#C654"
      ]
    },
    "policy_metadata": {
      "/Author": "Jonathan Sero",
      "/CreationDate": "D:20200211171001-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Office 365",
      "/ModDate": "D:20200211171001-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Office 365",
      "/Title": "Leonovus CM Security Policy",
      "pdf_file_size_bytes": 575328,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.intertek.com/cybersecurity/ewa-canada/",
          "http://csrc.nist.gov/groups/STM/cmvp/index.html",
          "https://www.leonovus.com/",
          "https://git-scm.com/about/info-assurance",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=31050"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 16
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "d47103f7de5e24b8a792a7e4a075ec32c73c27e58b81bf479bcbf4fcb08625cc",
      "source_hash": "62766aa63a7796f828bea106c51252409df06c60d50e6aae06896b1acc643ebb",
      "txt_hash": "4f5fbae4f535152a36958a765ad32bdd80b3583f4f414e3cfb1b34e6aeb6a153"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2020_010520_0717.pdf",
    "date_sunset": null,
    "description": "Whether data is in-flight or at rest, whether it is whole and in one place or fragmented and distributed across the infrastructure, the Leonovus Cryptographic Module ensures the critical data elements are secured with state-of-the-art encryption and decryption algorithms. Because of the Leonovus Cryptographic Module, the IT organization retains control over the keys independent of the storage infrastructure and services. In this manner, IT regains its control over the data while greatly improving the flexibility on where it flows and resides.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Leonovus Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "3.4",
    "tested_conf": [
      "CentOS 7.6 on VMware ESXi 6.0 running on P ProLiant DL360e Gen8 with Intel Xeon E5-2403 (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2020-04-20",
        "lab": "EWA - Canada",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Leonovus Inc.",
    "vendor_url": "http://www.leonovus.com"
  }
}