Hewlett Packard Enterprise OpenSSL 3 Provider

Certificate details

Certificate ID #4876
Status active
Validation dates 13.11.2024 , 03.04.2026 , 10.04.2026
Sunset date 12-11-2026
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat Interim validation. When configured as specified in Section 11.2 of the Security Policy. No assurance of the minimum strength of generated SSPs
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Description The Hewlett Packard Enterprise OpenSSL 3 Provider Module is one of the components within a variety of Hewlett Packard Enterprise and HPE Aruba products, including the Aruba Mobility Conductors, Mobility Controllers/Gateways, and controller-managed Aruba Access Points (APs) running the ArubaOS operating system running on the Aruba hardware-based equipment or Aruba virtual appliances.
Version (Hardware) N/A
Version (Firmware) N/A
Tested configurations
  • Ubuntu 20.04 on VMWare ESXi 6.7 running on HPE ProLiant ML 110 Gen10 on Intel Xeon Silver 4110 (Skylake) with PAA
  • Ubuntu 20.04 on VMWare ESXi 6.7 running on HPE ProLiant ML 110 Gen10 on Intel Xeon Silver 4110 (Skylake) without PAA
Vendor Hewlett Packard Enterprise http://www.hpe.com/us/en/networking
Lab Lightship Security, Inc.
Algorithms
  • AES-CBCA4803
  • AES-CCMA4803
  • AES-CFB128A4803
  • AES-CFB8A4803
  • AES-CMACA4803
  • AES-CTRA4803
  • AES-ECBA4803
  • AES-GCMA4803
  • AES-GMACA4803
  • AES-KWA4803
  • AES-KWPA4803
  • AES-OFBA4803
  • AES-XTS Testing Revision 2.0A4803
  • Counter DRBGA4803
  • ECDSA KeyGen (FIPS186-4)A4803
  • ECDSA KeyVer (FIPS186-4)A4803
  • ECDSA SigGen (FIPS186-4)A4803
  • ECDSA SigVer (FIPS186-4)A4803
  • HMAC-SHA2-224A4803
  • HMAC-SHA2-256A4803
  • HMAC-SHA2-384A4803
  • HMAC-SHA2-512A4803
  • HMAC-SHA3-224A4803
  • HMAC-SHA3-256A4803
  • HMAC-SHA3-384A4803
  • HMAC-SHA3-512A4803
  • KAS-ECC CDH-Component SP800-56Ar3A4803
  • KAS-ECC-SSC Sp800-56Ar3A4803
  • KAS-FFC-SSC Sp800-56Ar3A4803
  • KDA HKDF SP800-56Cr2A4803
  • KDA OneStep SP800-56Cr2A4803
  • KDA TwoStep SP800-56Cr2A4803
  • KDF KMAC Sp800-108r1A4803
  • KDF SP800-108A4803
  • KDF SSHA4803
  • KMAC-128A4803
  • KMAC-256A4803
  • PBKDFA4803
  • RSA KeyGen (FIPS186-4)A4803
  • RSA SigGen (FIPS186-4)A4803
  • RSA Signature PrimitiveA4803
  • RSA SigVer (FIPS186-4)A4803
  • Safe Primes Key GenerationA4803
  • Safe Primes Key VerificationA4803
  • SHA2-224A4803
  • SHA2-256A4803
  • SHA2-384A4803
  • SHA2-512A4803
  • SHA3-224A4803
  • SHA3-256A4803
  • SHA3-384A4803
  • SHA3-512A4803
  • SHAKE-128A4803
  • SHAKE-256A4803
  • TLS v1.2 KDF RFC7627A4803
  • TLS v1.3 KDFA4803
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, CAST, HMAC, KMAC, CMAC
Asymmetric Algorithms
RSA 2048, ECDH, ECDSA, ECC, DH
Hash functions
SHA-1, SHA-512, SHA2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA3, PBKDF, PBKDF2
Schemes
Key agreement, AEAD
Protocols
SSH, TLS v1.2, TLS v1.3, TLS, TLS 1.2, TLS 1.3, VPN
Randomness
DRBG, RBG
Libraries
OpenSSL
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Trusted Execution Environments
PSP, SSC
Vendor
Microsoft

Security level
Level 1
Side-channel analysis
side-channel, timing attacks

Author Hawes, David J. (Fed)
Creation date D:20260409100945-04'00'
Modification date D:20260409100945-04'00'
Pages 45
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4876,
  "dgst": "a053262db2c019c6",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA3-256A4803",
        "HMAC-SHA2-256A4803",
        "AES-KWA4803",
        "AES-XTS Testing Revision 2.0A4803",
        "KAS-FFC-SSC Sp800-56Ar3A4803",
        "ECDSA SigGen (FIPS186-4)A4803",
        "KMAC-128A4803",
        "PBKDFA4803",
        "SHA2-384A4803",
        "SHA2-512A4803",
        "KDA TwoStep SP800-56Cr2A4803",
        "KDF SP800-108A4803",
        "AES-CCMA4803",
        "HMAC-SHA3-512A4803",
        "HMAC-SHA2-224A4803",
        "SHAKE-128A4803",
        "AES-CFB8A4803",
        "HMAC-SHA2-512A4803",
        "AES-CTRA4803",
        "Counter DRBGA4803",
        "SHA3-224A4803",
        "HMAC-SHA2-384A4803",
        "KDF SSHA4803",
        "ECDSA KeyVer (FIPS186-4)A4803",
        "AES-OFBA4803",
        "SHA2-224A4803",
        "KMAC-256A4803",
        "HMAC-SHA3-224A4803",
        "RSA Signature PrimitiveA4803",
        "AES-CBCA4803",
        "Safe Primes Key VerificationA4803",
        "TLS v1.2 KDF RFC7627A4803",
        "RSA KeyGen (FIPS186-4)A4803",
        "TLS v1.3 KDFA4803",
        "AES-KWPA4803",
        "KDA OneStep SP800-56Cr2A4803",
        "KDA HKDF SP800-56Cr2A4803",
        "RSA SigGen (FIPS186-4)A4803",
        "#A4803",
        "KAS-ECC CDH-Component SP800-56Ar3A4803",
        "KAS-ECC-SSC Sp800-56Ar3A4803",
        "AES-CMACA4803",
        "RSA SigVer (FIPS186-4)A4803",
        "Safe Primes Key GenerationA4803",
        "AES-ECBA4803",
        "ECDSA KeyGen (FIPS186-4)A4803",
        "AES-GMACA4803",
        "KDF KMAC Sp800-108r1A4803",
        "AES-CFB128A4803",
        "HMAC-SHA3-384A4803",
        "AES-GCMA4803",
        "SHA2-256A4803",
        "SHA3-512A4803",
        "HMAC-SHA3-256A4803",
        "SHA3-384A4803",
        "SHAKE-256A4803",
        "ECDSA SigVer (FIPS186-4)A4803"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "POST or CAST failure",
            "description": "The module\u0027s error state.",
            "indicator": "Status return code",
            "name": "Error",
            "recoveryMethod": "Reload the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [],
        "found": false,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "N/A - Authentication not required for Level 1",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          },
          {
            "authMethodList": "N/A - Authentication not required for Level 1",
            "name": "User",
            "operatorType": "User",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [],
        "found": false,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Module memory",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API Entry",
            "sfiAlgo": "N/A",
            "source": "Calling application memory"
          },
          {
            "dest": "Calling application memory",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API Output",
            "sfiAlgo": "N/A",
            "source": "Module memory"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "All SSPs are zeroized by rebooting the host platform.",
            "method": "Reboot",
            "operatorId": "Rebooting the host platform must be performed under the control of the operator.",
            "rationale": "SSPs are only stored in volatile memory and so are zeroized by rebooting the host platform."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "All SSPs are stored in the volatile memory of the Operational Environment.",
            "name": "Volatile Memory",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "N/A",
            "modelPartNum": "N/A",
            "processors": "N/A"
          },
          {
            "features": "",
            "fwVersion": "Features",
            "hwVersion": "Software/ Firmware Version",
            "modelPartNum": "Package or File Name",
            "processors": "Integrity Test"
          },
          {
            "features": "",
            "fwVersion": "FIPS provider for OpenSSL 3",
            "hwVersion": "3.1.4a",
            "modelPartNum": "fips.so",
            "processors": "HMAC-SHA2-256"
          },
          {
            "features": "N/A",
            "fwVersion": "N/A",
            "hwVersion": "N/A",
            "modelPartNum": "N/A",
            "processors": "N/A"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "HPE ProLiant ML 110 Gen10",
            "hypervisorHostOs": "VMWare ESXi 6.7",
            "operatingSystem": "Ubuntu 22.04",
            "paa_pai": "Yes",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4110 (Skylake)",
            "version": "3.1.4a"
          },
          {
            "hardwarePlatform": "HPE ProLiant ML 110 Gen10",
            "hypervisorHostOs": "VMWare ESXi 6.7",
            "operatingSystem": "Ubuntu 22.04",
            "paa_pai": "No",
            "processors": "Intel\u00ae Xeon\u00ae Silver 4110 (Skylake)",
            "version": "3.1.4a"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [
          {
            "algoPropList": "Symmetric keys, seeds for asymmetric keys",
            "implName": "-",
            "name": "CKG",
            "reference": "SP 800-133r2 section 4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "4100i",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "5420",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "6100",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "6200F",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "6200M",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "6300",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "6400",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8100",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8360",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8320",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8325",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8325H",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8325P",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "8400",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "9300",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "9300S",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "10000",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "10040",
            "operatingSystem": "HPE ANW CX Switch Operating System (AOS-CX) 10.16 or later"
          },
          {
            "hardwarePlatform": "EC-XS",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-US",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-10104",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-XS",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-XS (2020)",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-10106",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-10108",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-S",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-S-P",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-M",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-M-P",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-M-H",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-L, EC-L-NM",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-L-P, EC-L-P-NM",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-XL-P, EC-XL-P-NM (10G)",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-XL-P, EC-XL-P-NM (25G)",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-L-H",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-XL-H",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-10150",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later running on VMware ESXi/ESX 6.7"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later running on VMware ESXi/ESX 7.0"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later running on Red Hat KVM 8.x"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later running on KVM, QEMU 4.x"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later running on Microsoft Hyper V 10.0"
          },
          {
            "hardwarePlatform": "EC-V",
            "operatingSystem": "HPE ANW EdgeConnect Operating System (AOS-EC) 9.7 or later running on Citrix Xen Server 8.1.0"
          },
          {
            "hardwarePlatform": "Orchestrator on-prem",
            "operatingSystem": "HPE ANW Orchestrator 9.6 or later running on VMware ESXi/ESX 6.7"
          },
          {
            "hardwarePlatform": "Orchestrator on-prem",
            "operatingSystem": "HPE ANW Networking Orchestrator 9.6 or later running on VMware ESXi/ESX 7.0"
          },
          {
            "hardwarePlatform": "Orchestrator on-prem",
            "operatingSystem": "HPE ANW Networking Orchestrator 9.6 or later running on Red Hat KVM 8.x"
          },
          {
            "hardwarePlatform": "Orchestrator on-prem",
            "operatingSystem": "HPE ANW Networking Orchestrator 9.6 or later running on KVM, QEMU 4.x"
          },
          {
            "hardwarePlatform": "Orchestrator on-prem",
            "operatingSystem": "HPE ANW Networking Orchestrator 9.6 or later running on Microsoft Hyper V 10.0"
          },
          {
            "hardwarePlatform": "Orchestrator on-prem",
            "operatingSystem": "HPE ANW Networking Orchestrator 9.6 or later running on Citrix Xen Server 8.1.0"
          },
          {
            "hardwarePlatform": "AP-51x and AP-57x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-50x and AP-56x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-53x, AP-555, AP-58x, and AP-63x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-515 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-535 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-605 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-610 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-615 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-630 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-635 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-650 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-655 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-670 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-725 Wireless Access Point",
            "operatingSystem": "HPE ANW WIreless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-73x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-745 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-75x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-76x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "70xx Mobility Controllers",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "72xx Mobility Controllers",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "7220 Mobility Controller",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "90xx Gateways",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "9106 Gateways",
            "operatingSystem": "HPE ANW WIreless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "92xx Gateways",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "9012 Gateway",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "MCR-HW-5K Mobility Conductor Hardware Appliance",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "MC-VA-50 Mobility Controller Virtual Appliance on HPE ProLiant ML110 Gen10",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "MCR-HW-xxx Mobility Conductor Hardware Appliances",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "MC-VA-xxx Mobility Controller Virtual Appliances on HPE ProLiant ML110 Gen10",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "MCR-VA-xxx Mobility Conductor Virtual Appliances on HPE ProLiant ML110 Gen10",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "Virtual Appliances on HPE EdgeLine 20",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "Virtual Appliances on PacStar PS451-1258 Series",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "Virtual Appliances on device running an equivalent Intel processor (Intel Atom, i5, i7, or Xeon)",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 8.13"
          },
          {
            "hardwarePlatform": "AP-51x and AP-57x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-50x and AP-56x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-53x, AP-555, AP-58x, and AP- 63x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-515 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-535 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-605 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-610 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-615 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-630 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-635 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-650 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-655 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-670 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-72xH Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-725 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-73x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-745 Wireless Access Point",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-75x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "AP-76x Wireless Access Points",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "70xx Mobility Controllers",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "72xx Mobility Controllers",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "7220 Mobility Controller",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "90xx Gateways",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "92xx Gateways",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "91xx Gateways",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "MCR-HW-5K Mobility Conductor Hardware Appliance",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "MC-VA-50 Mobility Controller Virtual Appliance on HPE ProLiant ML110 Gen10",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "MCR-HW-xxx Mobility Conductor Hardware Appliances",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "MC-VA-xxx Mobility Controller Virtual Appliances on HPE ProLiant ML110 Gen10",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "MCR-VA-xxx Mobility Conductor Virtual Appliances on HPE ProLiant ML110 Gen10",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "Virtual Appliances on HPE EdgeLine 20",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "Virtual Appliances on PacStar PS451-1258 Series",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "Virtual Appliances on device running an equivalent Intel processor (Intel Atom, i5, i7, or Xeon)",
            "operatingSystem": "HPE ANW Wireless Operating System (AOS) 10.8"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 3720",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 3760",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 5720",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 7700",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 3660",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 5260",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE StoreOnce 5660",
            "operatingSystem": "SW Version 5.3.0 and later"
          },
          {
            "hardwarePlatform": "HPE Alletra Storage MP X10000 data protection accelerator node",
            "operatingSystem": "SW Version 5.3.0 and later"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 1
          },
          "ECDSA": {
            "ECDSA": 38
          }
        },
        "FF": {
          "DH": {
            "DH": 44
          }
        },
        "RSA": {
          "RSA 2048": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 7
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 4
        },
        "CTR": {
          "CTR": 7
        },
        "ECB": {
          "ECB": 7
        },
        "GCM": {
          "GCM": 8
        },
        "OFB": {
          "OFB": 6
        },
        "XTS": {
          "XTS": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 17
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 8
        },
        "TLS": {
          "TLS": {
            "TLS": 2,
            "TLS 1.2": 3,
            "TLS 1.3": 2,
            "TLS v1.2": 7,
            "TLS v1.3": 8
          }
        },
        "VPN": {
          "VPN": 1
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "KA": {
          "Key agreement": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 4,
          "P-256": 4,
          "P-384": 2,
          "P-521": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 128,192": 11,
          "AES 128,256": 1,
          "DRBG 128": 2,
          "DRBG 256": 3,
          "HMAC 224": 4,
          "HMAC 256": 4,
          "HMAC 384": 4,
          "HMAC 512": 4,
          "HMAC-SHA- 256": 2,
          "RSA 2048": 1,
          "SHA- 256": 1,
          "SHA- 3": 1,
          "SHA-1": 1,
          "SHA-512": 1,
          "SHA2": 1,
          "SHA2-224": 4,
          "SHA2-256": 7,
          "SHA2-384": 3,
          "SHA2-512": 3,
          "SHA3": 2,
          "SHA3- 224": 1,
          "SHA3-224": 3,
          "SHA3-256": 4,
          "SHA3-384": 3,
          "SHA3-512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 6
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 19,
          "PBKDF2": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 1
          },
          "SHA2": {
            "SHA-512": 1,
            "SHA2": 5
          },
          "SHA3": {
            "SHA3": 2,
            "SHA3-224": 3,
            "SHA3-256": 4,
            "SHA3-384": 3,
            "SHA3-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 35
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "side-channel": 1,
          "timing attacks": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 14,
          "FIPS 186-4": 6,
          "FIPS186": 7,
          "FIPS186-4": 7
        },
        "ISO": {
          "ISO/IEC 19790:2012": 1,
          "ISO/IEC 24759:2017": 1
        },
        "NIST": {
          "SP 800-52": 1,
          "SP 800-56A": 1
        },
        "RFC": {
          "RFC 5288": 1,
          "RFC 7627": 2,
          "RFC 8446": 1,
          "RFC7627": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 37,
            "AES-": 1
          },
          "CAST": {
            "CAST": 18
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 5,
            "HMAC": 25,
            "KMAC": 13
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 1
        },
        "IBM": {
          "SSC": 9
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 2
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA3-256A4803",
        "HMAC-SHA2-256A4803",
        "AES-KWA4803",
        "AES-XTS Testing Revision 2.0A4803",
        "KAS-FFC-SSC Sp800-56Ar3A4803",
        "ECDSA SigGen (FIPS186-4)A4803",
        "KMAC-128A4803",
        "PBKDFA4803",
        "SHA2-384A4803",
        "SHA2-512A4803",
        "KDA TwoStep SP800-56Cr2A4803",
        "KDF SP800-108A4803",
        "AES-CCMA4803",
        "HMAC-SHA3-512A4803",
        "HMAC-SHA2-224A4803",
        "SHAKE-128A4803",
        "AES-CFB8A4803",
        "HMAC-SHA2-512A4803",
        "AES-CTRA4803",
        "Counter DRBGA4803",
        "SHA3-224A4803",
        "HMAC-SHA2-384A4803",
        "KDF SSHA4803",
        "ECDSA KeyVer (FIPS186-4)A4803",
        "AES-OFBA4803",
        "SHA2-224A4803",
        "KMAC-256A4803",
        "HMAC-SHA3-224A4803",
        "RSA Signature PrimitiveA4803",
        "AES-CBCA4803",
        "Safe Primes Key VerificationA4803",
        "TLS v1.2 KDF RFC7627A4803",
        "RSA KeyGen (FIPS186-4)A4803",
        "TLS v1.3 KDFA4803",
        "AES-KWPA4803",
        "KDA OneStep SP800-56Cr2A4803",
        "KDA HKDF SP800-56Cr2A4803",
        "RSA SigGen (FIPS186-4)A4803",
        "KAS-ECC CDH-Component SP800-56Ar3A4803",
        "KAS-ECC-SSC Sp800-56Ar3A4803",
        "AES-CMACA4803",
        "RSA SigVer (FIPS186-4)A4803",
        "Safe Primes Key GenerationA4803",
        "AES-ECBA4803",
        "ECDSA KeyGen (FIPS186-4)A4803",
        "AES-GMACA4803",
        "KDF KMAC Sp800-108r1A4803",
        "AES-CFB128A4803",
        "HMAC-SHA3-384A4803",
        "AES-GCMA4803",
        "SHA2-256A4803",
        "SHA3-512A4803",
        "HMAC-SHA3-256A4803",
        "SHA3-384A4803",
        "SHAKE-256A4803",
        "ECDSA SigVer (FIPS186-4)A4803"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4803"
      ]
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/CreationDate": "D:20260409100945-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260409100945-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 610773,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search",
          "https://www.arubanetworks.com/",
          "https://www.arubanetworks.com/open_source",
          "https://www.hpe.com/",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 45
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "b9e9218ce611ba025fa2c6240507ec6543d2b970c0e2469c00db1ea38d7b78c2",
      "source_hash": "796886364bf939c650f2db8608830e5707b2a41e93ed2a8ffebc572c1c86b9ec",
      "txt_hash": "b0f5988183175f184b1d0ec8a9b41d6b37f62963c3f128b235de66ea8e967941"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When configured as specified in Section 11.2 of the Security Policy. No assurance of the minimum strength of generated SSPs",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2024_021224_0125.pdf",
    "date_sunset": "2026-11-12",
    "description": "The Hewlett Packard Enterprise OpenSSL 3 Provider Module is one of the components within a variety of Hewlett Packard Enterprise and HPE Aruba products, including the Aruba Mobility Conductors, Mobility Controllers/Gateways, and controller-managed Aruba Access Points (APs) running the ArubaOS operating system running on the Aruba hardware-based equipment or Aruba virtual appliances.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": "N/A",
    "historical_reason": null,
    "hw_versions": "N/A",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Hewlett Packard Enterprise OpenSSL 3 Provider",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "3.1.4a",
    "tested_conf": [
      "Ubuntu 20.04 on VMWare ESXi 6.7 running on HPE ProLiant ML 110 Gen10 on Intel Xeon Silver 4110 (Skylake) with PAA",
      "Ubuntu 20.04 on VMWare ESXi 6.7 running on HPE ProLiant ML 110 Gen10 on Intel Xeon Silver 4110 (Skylake) without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-11-13",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-04-03",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-04-10",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "Hewlett Packard Enterprise",
    "vendor_url": "http://www.hpe.com/us/en/networking"
  }
}