{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "a01939fb3fb61c02", "cert_id": 5031, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "NSS cryptography module for AlmaLinux 9", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2025-06-25", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.tuxcare.com", "vendor": "Cloudlinux Inc., TuxCare division", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2025_080725_0749.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode and installed, initialized and configured as specified in section 11 of the Security Policy.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "Multi-Chip Stand Alone", "description": "Network Security Services (NSS) is a set of C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2030-06-24", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 2}}, "fips_certlike": {"Certlike": {"HMAC-SHA-256": 2, "SHA2-224": 11, "SHA2-256": 26, "SHA2-384": 13, "SHA2-512": 13, "SHA-1": 16, "SHA2- 384": 5, "SHA2- 512": 5, "SHA-224": 2, "SHA-256": 9, "SHA- 384": 2, "SHA-512": 3, "SHA3-256": 1, "SHA-384": 1, "SHA- 256": 1, "SHA2- 256": 4, "PKCS#5": 6, "PKCS#7": 2, "PKCS#11": 2, "PKCS#12": 6, "- PKCS 1": 4, "PKCS#1": 18, "PKCS 1": 4}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 2}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 71}, "CAST": {"CAST": 87}, "RC": {"RC2": 3, "RC4": 3}}, "DES": {"DES": {"DES": 5}, "3DES": {"Triple-DES": 5}}, "djb": {"ChaCha": {"ChaCha20": 3}}, "miscellaneous": {"Camellia": {"Camellia": 5}, "SEED": {"SEED": 5}}, "constructions": {"MAC": {"HMAC": 19, "HMAC-SHA-256": 1, "CBC-MAC": 2, "CMAC": 6}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 9}, "ECDSA": {"ECDSA": 52}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 6, "DH": 28}, "DSA": {"DSA": 6}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 16}, "SHA2": {"SHA-224": 2, "SHA-256": 9, "SHA-512": 3, "SHA-384": 1}, "SHA3": {"SHA3-256": 1}}, "MD": {"MD5": {"MD5": 13}}, "PBKDF": {"PBKDF2": 6, "PBKDF": 17}}, "crypto_scheme": {"MAC": {"MAC": 14}}, "crypto_protocol": {"TLS": {"SSL": {"SSL": 2}, "TLS": {"TLS": 19, "TLS v1.2": 7, "TLS 1.2": 17, "TLS 1.3": 4}}, "IKE": {"IKEv2": 19, "IKEv1": 2, "IKE": 13}}, "randomness": {"PRNG": {"DRBG": 29}, "RNG": {"RNG": 2, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 1}, "CTR": {"CTR": 1}, "GCM": {"GCM": 15}, "XTS": {"XTS": 2}}, "ecc_curve": {"NIST": {"P-256": 26, "P-384": 14, "P-521": 22, "P-192": 12}, "Edwards": {"Ed25519": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"NSS": {"NSS": 76}}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"Timing attacks": 1, "timing attack": 1, "timing attacks": 1}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 4}, "IBM": {"SSC": 2}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 80, "FIPS PUB 140-3": 3, "FIPS186-5": 42, "FIPS 186-5": 16, "FIPS 198-1": 8, "FIPS186-2": 4, "FIPS 186-4": 4, "FIPS186-4": 4, "FIPS 180-4": 8, "FIPS 1864": 1, "FIPS 186-2": 1, "FIPS140-3": 1, "FIPS180-4": 1, "FIPS197": 1, "FIPS198-1": 1}, "NIST": {"SP 800-132": 8, "SP 800-38A": 7, "SP 800-38B": 2, "SP 800-38D": 2, "SP 800-38F": 6, "SP 800-90A": 2, "SP 800-56A": 5, "SP 800-56C": 1, "SP 800-135": 3, "SP 800-108": 1}, "PKCS": {"PKCS#5": 3, "PKCS#7": 1, "PKCS#11": 1, "PKCS#12": 3, "PKCS 1": 4, "PKCS#1": 9}, "RFC": {"RFC7627": 6, "RFC 5288": 1, "RFC8446": 2, "RFC 3526": 3, "RFC 7919": 3, "RFC 7627": 2}, "X509": {"X.509": 1}}, "javacard_version": {}, "javacard_api_const": {"curves": {"X25519": 4}}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 826725, "pdf_is_encrypted": false, "pdf_number_of_pages": 65, "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20250625094428-04'00'", "/ModDate": "D:20250625094428-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf", "https://doi.org/10.6028/NIST.FIPS.140-3", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "https://csrc.nist.gov/publications/detail/sp/800-38b/final", "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://csrc.nist.gov/files/pubs/fips/186-2/final/docs/fips186-2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1-upd1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf"]}}, "module_algorithms": {"_type": "Set", "elements": ["SHA2-256A5136", "RSA SigGen (FIPS186-5)A5136", "AES-CTRA5135", "AES-KWA5134", "ECDSA SigGen (FIPS186-5)A5136", "RSA KeyGen (FIPS186-5)A5136", "SHA2-224A5136", "KAS-ECC-SSC Sp800-56Ar3A5128", "RSA SigVer (FIPS186-2)A5136", "ECDSA SigVer (FIPS186-5)A5136", "Hash DRBGA5136", "Safe Primes Key GenerationA5128", "SHA2-512A5136", "RSA SigVer (FIPS186-4)A5136", "AES-CBC-CS1A5133", "AES-CBCA5135", "KDA HKDF Sp800-56Cr1A5127", "ECDSA KeyGen (FIPS186-5)A5128", "HMAC-SHA2-512A5136", "TLS v1.2 KDF RFC7627A5136", "HMAC-SHA2-384A5136", "AES-GCMA5135", "PBKDFA5136", "RSA SigVer (FIPS186-5)A5136", "HMAC-SHA2-256A5136", "SHA2-384A5136", "AES-KWPA5134", "KDF IKEv2A5132", "KDF SP800-108A5131", "AES-CMACA5130", "KAS-FFC-SSC Sp800-56Ar3A5128", "HMAC-SHA2-224A5136", "AES-ECBA5135"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A5128", "#A5134", "#A5129", "#A5130", "#A5127", "#A5132", "#A5133", "#A5135", "#A5131", "#A5136"]}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA2-256A5136", "#A5134", "RSA SigGen (FIPS186-5)A5136", "AES-CTRA5135", "AES-KWA5134", "ECDSA SigGen (FIPS186-5)A5136", "#A5130", "#A5132", "RSA KeyGen (FIPS186-5)A5136", "SHA2-224A5136", "KAS-ECC-SSC Sp800-56Ar3A5128", "RSA SigVer (FIPS186-2)A5136", "ECDSA SigVer (FIPS186-5)A5136", "Hash DRBGA5136", "Safe Primes Key GenerationA5128", "#A5129", "SHA2-512A5136", "RSA SigVer (FIPS186-4)A5136", "#A5127", "AES-CBC-CS1A5133", "AES-CBCA5135", "#A5131", "KDA HKDF Sp800-56Cr1A5127", "ECDSA KeyGen (FIPS186-5)A5128", "HMAC-SHA2-512A5136", "TLS v1.2 KDF RFC7627A5136", "HMAC-SHA2-384A5136", "AES-GCMA5135", "PBKDFA5136", "RSA SigVer (FIPS186-5)A5136", "HMAC-SHA2-256A5136", "SHA2-384A5136", "#A5133", "AES-KWPA5134", "#A5135", "KDF IKEv2A5132", "#A5128", "KDF SP800-108A5131", "AES-CMACA5130", "KAS-FFC-SSC Sp800-56Ar3A5128", "HMAC-SHA2-224A5136", "AES-ECBA5135", "#A5136"]}, "extracted_versions": {"_type": "Set", "elements": ["9"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "b09d3b55efe72f9cd031b17a8dd2c90121792f58ee12a4f7eb11481b9bd076a3", "txt_hash": "88d6f56cf3c7128054a9e811b73e5cf6a6f104122295223c60d46a84f925efa3", "json_hash": "e42beb09d15612b06acb1449b2a6af056133690afd64ea5c361b3d79c12c560a"}}}