IOS Common Cryptographic Module (IC2M)

Certificate details

Certificate ID #2301
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 18.12.2014 , 12.06.2015
Standard FIPS 140-2
Security level 1
Type Firmware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode. No assurance of the minimum strength of generated keys
Exceptions
  • Mitigation of Other Attacks: N/A
  • Tested: Cisco ASR1K 1NG, Cisco ISR 4451-X, Cisco ISR 4441, Cisco ASR1K RP2 and Cisco ASR1K 2KP (kingpin) with processor Intel Xeon on IOS XE3.10
  • Cisco ISR 3925E and Cisco ISR 3945E with processor Intel Xeon on IOS 15.3
  • Cisco ASR1K RP1 with processor Freescale SC8548H on IOS XE3.10
  • Cisco ISR c2951, Cisco ISR c3925 and Cisco ISR c3945 with processor Freescale 8752E on IOS 15.3
  • Cisco ISR 1921 with processor Cavium CN5020 on IOS 15.3
  • Cisco ISR 1941 and Cisco ISR 2900 with processor Cavium CN5220 on IOS 15.3
  • Cisco Catalyst 4K with processor MPC8572C on IOS XE 3.6
  • Cisco Catalyst 3750x and Cisco Catalyst 3560x with processor Power-PC 405 on IOS 15.2
  • Cisco Catalyst 3650 with processor AMCC PowerPC 405EX on IOS XE3.6
  • Cisco Catalyst 2960 with processor Cavium CN5230 on IOS 15.2
Description The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.
Version (Firmware) Rel 3(1.5.2)
Vendor Cisco Systems, Inc. http://www.cisco.com
Lab Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, RC4, RC2, DES, Triple-DES, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
Asymmetric Algorithms
ECDH, ECDSA, ECC, DH, Diffie-Hellman
Hash functions
SHA-1, SHA-256, SHA-512, SHA-384, MD5
Schemes
Key agreement
Randomness
DRBG, RNG
Elliptic Curves
P-256, P-384

Vendor
Cisco, Cisco Systems, Cisco Systems, Inc

Security level
Level 1, level 1

Title Microsoft Word - IC2M Security Policy_rel3(1.5)_6-12-2015.docx
Author noltinge
Creation date D:20150612145017-04'00'
Modification date D:20150612145017-04'00'
Pages 12
Creator PScript5.dll Version 5.2.2
Producer Acrobat Distiller 11.0 (Windows)

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2301,
  "dgst": "a0bd500821a86e56",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#2338",
        "CVL#253",
        "#1688",
        "#481",
        "#2361",
        "SHS#2361",
        "#1670",
        "Triple-DES#1688",
        "#1471",
        "#1764",
        "#2817",
        "Triple-DES#1671",
        "ECDSA#493",
        "AES#2817",
        "#493",
        "HMAC#1764",
        "#253",
        "#252",
        "#1671",
        "#2783",
        "SHS#2338",
        "RSA#1471",
        "DRBG#481",
        "Triple-DES#1670",
        "AES#2783",
        "CVL#252"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.5.2"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 3
          },
          "ECDSA": {
            "ECDSA": 7
          }
        },
        "FF": {
          "DH": {
            "DH": 3,
            "Diffie-Hellman": 6
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 8,
          "P-384": 8
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#252": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 2817 and 2783": 1,
          "CVL 252": 1,
          "DRBG 481": 1,
          "Diffie-Hellman (CVL Cert. #252": 2,
          "HMAC SHA-1": 1,
          "HMAC SHA-256": 1,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-256": 4,
          "HMAC-SHA-384": 2,
          "HMAC-SHA-512": 2,
          "RSA 1471": 1,
          "SHA-1": 3,
          "SHA-1, 256": 1,
          "SHA-256": 3,
          "SHA-384": 2,
          "SHA-512": 2,
          "SHS 1764": 1,
          "SHS 2361 and 2338": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 3
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA-256": 3,
            "SHA-384": 2,
            "SHA-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 8
        },
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 14,
          "FIPS 198": 1,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "NIST SP 800-131A": 1,
          "SP 800-90": 8
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6
          },
          "RC": {
            "RC2": 1,
            "RC4": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 9
          },
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 4,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-384": 1,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Cisco": {
          "Cisco": 26,
          "Cisco Systems": 3,
          "Cisco Systems, Inc": 6
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "CVL#253",
        "AES#2817",
        "SHS#2361",
        "SHS#2338",
        "HMAC#1764",
        "Triple-DES#1688",
        "RSA#1471",
        "ECDSA#493",
        "DRBG#481",
        "Triple-DES#1671",
        "Triple-DES#1670",
        "AES#2783",
        "CVL#252"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#2361",
        "#2338",
        "#1670",
        "#493",
        "#253",
        "#1471",
        "#252",
        "#1764",
        "#2817",
        "#1671",
        "#2783",
        "#1688",
        "#481"
      ]
    },
    "policy_metadata": {
      "/Author": "noltinge",
      "/CreationDate": "D:20150612145017-04\u002700\u0027",
      "/Creator": "PScript5.dll Version 5.2.2",
      "/ModDate": "D:20150612145017-04\u002700\u0027",
      "/Producer": "Acrobat Distiller 11.0 (Windows)",
      "/Title": "Microsoft Word - IC2M Security Policy_rel3(1.5)_6-12-2015.docx",
      "pdf_file_size_bytes": 131573,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 12
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "d8d3fb946577154ccb4f097167d6c909773e6e9257d448ac7597a8aa47ecf821",
      "source_hash": "af9dcaf7260162e3b51672d3f9395bcec4f9f0721fa6b14cee87e3c4a403eede",
      "txt_hash": "21109a62a6630542550180ccd87a44e41c3c27ec8aa27704f3f66868e9649a97"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0048.pdf",
    "date_sunset": null,
    "description": "The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Mitigation of Other Attacks: N/A",
      "Tested: Cisco ASR1K 1NG, Cisco ISR 4451-X, Cisco ISR 4441, Cisco ASR1K RP2 and Cisco ASR1K 2KP (kingpin) with processor Intel Xeon on IOS XE3.10",
      "Cisco ISR 3925E and Cisco ISR 3945E with processor Intel Xeon on IOS 15.3",
      "Cisco ASR1K RP1 with processor Freescale SC8548H on IOS XE3.10",
      "Cisco ISR c2951, Cisco ISR c3925 and Cisco ISR c3945 with processor Freescale 8752E on IOS 15.3",
      "Cisco ISR 1921 with processor Cavium CN5020 on IOS 15.3",
      "Cisco ISR 1941 and Cisco ISR 2900 with processor Cavium CN5220 on IOS 15.3",
      "Cisco Catalyst 4K with processor MPC8572C on IOS XE 3.6",
      "Cisco Catalyst 3750x and Cisco Catalyst 3560x with processor Power-PC 405 on IOS 15.2",
      "Cisco Catalyst 3650 with processor AMCC PowerPC 405EX on IOS XE3.6",
      "Cisco Catalyst 2960 with processor Cavium CN5230 on IOS 15.2"
    ],
    "fw_versions": "Rel 3(1.5.2)",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "IOS Common Cryptographic Module (IC2M)",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-12-18",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2015-06-12",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Update"
      }
    ],
    "vendor": "Cisco Systems, Inc.",
    "vendor_url": "http://www.cisco.com"
  }
}