DragonWave® Secure Cryptographic Module

Certificate #2170

Webpage information

Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 12.06.2014
Standard FIPS 140-2
Security level 1
Type Firmware-Hybrid
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys
Exceptions
  • Tested: Horizon Quantum (PN 60-000471-03) and Horizon Compact+ (PN CP-HP-18-B1-S-X-010-N-00-R1) with QNX Neutrino Real-Time Operating System Version 6.4.1
Description The DragonWave® Secure Cryptographic Module is a hybrid cryptographic module consisting of firmware and hardware. The hardware portion of the module provides AES for bulk data encryption between two Horizon Compact+ or Horizon Quantum peer devices in a radio link, while the firmware provides cryptographic state management as well as secure peer-to-peer management communications over a protected TLS tunnel.
Version (Hardware) Horizon® Quantum (PN: 74-000320) and Horizon® Compact+ (PN: 74-000320) with Tamper Evident Seal (PN: 65-000185-01-01)
Version (Firmware) 1.2.5 (Compact+) and 1.3 (Quantum)
Vendor DragonWave Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, TDES, Triple-DES, HMAC, HMAC-SHA-224, HMAC-SHA-384, HMAC-SHA-512
Asymmetric Algorithms
DH, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-256, SHA-224, SHA-384, SHA-512
Protocols
TLS, TLS 1.0, TLS v1.0
Randomness
RNG
Block cipher modes
ECB, CBC, CFB, OFB

Security level
Level 1
Side-channel analysis
physical tampering

Standards
FIPS 140-2, PKCS31, PKCS#1

File metadata

Title 1B - DragonWave SCM FIPS 140-2 Security Policy
Author klasoski
Creation date D:20140517133615-04'00'
Modification date D:20140517133615-04'00'
Pages 32
Creator PDFCreator Version 1.4.3
Producer GPL Ghostscript 9.05

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2170,
  "dgst": "9a1b6288c1d0bb97",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "RSA#1405",
        "AES#2709",
        "SHS#2274",
        "CVL#164",
        "AES#2707",
        "RNG#1256",
        "HMAC#1687",
        "AES#2708",
        "Triple-DES#1625",
        "AES#2706",
        "RSA#1404",
        "HMAC#1688",
        "CVL#165",
        "Triple-DES#1626",
        "SHS#2273",
        "RNG#1257"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.3",
        "1.2.5"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "DH": 16,
            "Diffie-Hellman": 2
          },
          "DSA": {
            "DSA": 1
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CFB": {
          "CFB": 2
        },
        "ECB": {
          "ECB": 2
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 27,
            "TLS 1.0": 1,
            "TLS v1.0": 1
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 2,
          "AES6": 1,
          "AES\u2013CBC30": 1,
          "DSA35": 1,
          "Diffie-Hellman 24": 1,
          "HMAC (112": 1,
          "HMAC SHA-1": 1,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-1 1687": 2,
          "HMAC-SHA-224": 2,
          "HMAC-SHA-384": 2,
          "HMAC-SHA-512": 2,
          "HMAC28": 2,
          "PKCS#1": 4,
          "PKCS31": 1,
          "RSA PKCS31": 1,
          "RSA26": 1,
          "SHA- 256": 1,
          "SHA-1": 6,
          "SHA-224": 1,
          "SHA-256": 7,
          "SHA-384": 1,
          "SHA-512": 1,
          "SHA24": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 4
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 7,
            "SHA-384": 1,
            "SHA-512": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 10
        }
      },
      "side_channel_analysis": {
        "FI": {
          "physical tampering": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 24
        },
        "PKCS": {
          "PKCS#1": 2,
          "PKCS31": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 30
          }
        },
        "DES": {
          "3DES": {
            "TDES": 5,
            "Triple-DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 6,
            "HMAC-SHA-224": 1,
            "HMAC-SHA-384": 1,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "klasoski",
      "/CreationDate": "D:20140517133615-04\u002700\u0027",
      "/Creator": "PDFCreator Version 1.4.3",
      "/Keywords": "",
      "/ModDate": "D:20140517133615-04\u002700\u0027",
      "/Producer": "GPL Ghostscript 9.05",
      "/Subject": "",
      "/Title": "1B - DragonWave SCM FIPS 140-2 Security Policy",
      "pdf_file_size_bytes": 3154554,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 32
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "d9254a8a5eecff29bc6c985db414c9da2b5773e16c9243e764d842859366626e",
    "policy_txt_hash": "763415ff8828271dd691f85faded65280610f48a03e0420e3dbfed279f87740b"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0042.pdf",
    "date_sunset": null,
    "description": "The DragonWave\u00ae Secure Cryptographic Module is a hybrid cryptographic module consisting of firmware and hardware. The hardware portion of the module provides AES for bulk data encryption between two Horizon Compact+ or Horizon Quantum peer devices in a radio link, while the firmware provides cryptographic state management as well as secure peer-to-peer management communications over a protected TLS tunnel.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Tested: Horizon Quantum (PN 60-000471-03) and Horizon Compact+ (PN CP-HP-18-B1-S-X-010-N-00-R1) with QNX Neutrino Real-Time Operating System Version 6.4.1"
    ],
    "fw_versions": "1.2.5 (Compact+) and 1.3 (Quantum)",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": "Horizon\u00ae Quantum (PN: 74-000320) and Horizon\u00ae Compact+ (PN: 74-000320) with Tamper Evident Seal (PN: 65-000185-01-01)",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "DragonWave\u00ae Secure Cryptographic Module",
    "module_type": "Firmware-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-06-12",
        "lab": "CGI Information Systems \u0026 Management Consultants Inc",
        "validation_type": "Initial"
      }
    ],
    "vendor": "DragonWave Inc.",
    "vendor_url": "http://www.dragonwaveinc.com"
  }
}