{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "a33b9df1b504c55a", "cert_id": 5507, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Bitwarden Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-08-27", "validation_type": "Initial", "lab": "DEKRA Cybersecurity Certification Laboratory"}], "vendor_url": "https://bitwarden.com/", "vendor": "Bitwarden, Inc.", "certificate_pdf_url": null, "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys) and random strings. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "The Bitwarden Cryptographic module provides cryptographic operations for the Bitwarden password manager application and vault data. The cryptographic operations provided by the Bitwarden Cryptographic module support the secure storage of passwords, authentication information, storage of credentials and other sensitive documents using 256-bit AES encryption, zero-knowledge architecture, and two-factor authentication.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2029-08-26", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-256": 28, "HMAC-SHA-1": 16, "HMAC- SHA-1": 2, "HMAC 160": 1, "HMAC-SHA- 256": 4, "HMAC- SHA-256": 2, "HMAC 160, 224": 1, "SHA2-224": 26, "SHA2-256": 32, "SHA2-384": 28, "SHA2-512": 36, "SHA-1": 40, "SHA3-224": 14, "SHA3-256": 16, "SHA3-384": 14, "SHA3-512": 6, "SHA3- 512": 8, "SHA-2": 2, "SHA- 3": 1, "SHA-512": 15, "SHA-3": 1, "SHA- 1 1024": 1, "SHA-256": 17, "SHA-224": 2, "SHA3": 4, "- PKCS 1": 2, "PKCS 1": 6, "PKCS#1": 8, "AES-128": 4, "AES-192": 4, "AES-256": 4, "Diffie- Hellman 224": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 54, "AES-128": 4, "AES-192": 4, "AES-256": 4, "AES-": 1}, "CAST": {"CAST": 162}}, "DES": {"3DES": {"Triple-DES": 5, "TDES": 4}}, "constructions": {"MAC": {"HMAC": 31, "HMAC-SHA-256": 14, "KMAC": 8, "CMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 6}, "ECDSA": {"ECDSA": 64}, "EdDSA": {"EdDSA": 22}, "ECC": {"ECC": 19}}, "FF": {"DH": {"DHE": 2, "Diffie-Hellman": 2, "DH": 31}, "DSA": {"DSA": 40}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 40}, "SHA2": {"SHA-512": 15, "SHA-256": 17, "SHA-224": 2, "SHA-2": 2}, "SHA3": {"SHA3-224": 14, "SHA3-256": 16, "SHA3-384": 14, "SHA3-512": 6, "SHA-3": 1, "SHA3": 4}}, "SHAKE": {"SHAKE256": 1}, "PBKDF": {"PBKDF": 16}}, "crypto_scheme": {"MAC": {"MAC": 48}, "KA": {"Key Agreement": 19}}, "crypto_protocol": {"SSH": {"SSH": 7, "SSHv2": 2}, "TLS": {"TLS": {"TLS 1.2": 10, "TLS v1.2": 7, "TLS v1.3": 7, "TLS 1.3": 9}}}, "randomness": {"PRNG": {"DRBG": 79}, "RNG": {"RNG": 22, "RBG": 21}}, "cipher_mode": {"CBC": {"CBC": 2}, "GCM": {"GCM": 10}, "XTS": {"XTS": 10}}, "ecc_curve": {"NIST": {"P-224": 38, "P-256": 30, "P-384": 30, "P-521": 30, "P-192": 12, "B-233": 15, "B-283": 13, "B-409": 12, "B-571": 15, "K-233": 19, "K-283": 13, "K-409": 15, "K-571": 12, "B-163": 6, "K-163": 6}, "Brainpool": {"brainpoolP224r1": 2, "brainpoolP256r1": 4, "brainpoolP320r1": 4, "brainpoolP384r1": 4, "brainpoolP512r1": 4}, "Edwards": {"Ed25519": 16, "Ed448": 16}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 8}}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"side-channel": 1, "timing attacks": 2, "timing attack": 1}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 10}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 13, "FIPS 140": 8, "FIPS186-4": 41, "FIPS 186-4": 26, "FIPS 186-5": 11, "FIPS 198-1": 22, "FIPS 180-4": 14, "FIPS 202": 12}, "NIST": {"SP 800-38A": 20, "SP 800-38C": 2, "SP 800-38B": 2, "SP 800-38F": 5, "SP 800-38E": 3, "SP 800-90A": 10, "SP 800-56A": 10, "SP 800-56C": 6, "SP 800-135": 10, "SP 800-108": 4, "SP 800-185": 4, "SP 800-56B": 2, "SP 800-132": 7, "SP 800-67": 4, "SP 800-186": 2, "NIST SP 800-38D": 1}, "PKCS": {"PKCS 1": 4, "PKCS#1": 4}, "RFC": {"RFC7627": 6, "RFC 5288": 1, "RFC 5246": 1, "RFC 8446": 2, "RFC 7627": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1011551, "pdf_is_encrypted": false, "pdf_number_of_pages": 122, "/Author": "jjing", "/CreationDate": "D:20260826110048-04'00'", "/Creator": "PScript5.dll Version 5.2.2", "/ModDate": "D:20260826110048-04'00'", "/Producer": "Acrobat Distiller 26.0 (Windows)", "/Title": "Microsoft Word - TID-38-SR58-RBND-IS-2608181205_140sp.docx", "pdf_hyperlinks": {"_type": "Set", "elements": []}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["RSA SigGen (FIPS186-4)A5173", "AES-CBC-CS1A5173", "SHAKE-128A5173", "SHA2-224A5173", "AES-OFBA5173", "HMAC-SHA3-384A5173", "TDES-ECBA5173", "AES-CBC-CS3A5173", "AES-KWPA5173", "AES-CFB8A5173", "SHA3-256A5173", "HMAC-SHA2-256A5173", "KAS-FFC-SSC Sp800-56Ar3A5173", "KDA TwoStep SP800-56Cr2A5173", "KTS-IFCA5173", "KDF KMAC Sp800-108r1A5173", "SHA-1A5173", "DSA KeyGen (FIPS186-4)A5173", "HMAC-SHA2-512/224A5173", "AES-XTS Testing Revision 2.0A5173", "SHA2-384A5173", "HMAC-SHA2-512A5173", "KAS-IFC-SSCA5173", "HMAC DRBGA5173", "EDDSA KeyVerA5173", "Safe Primes Key GenerationA5173", "SHA3-384A5173", "KAS-ECC-SSC Sp800-56Ar3A5173", "Hash DRBGA5173", "RSA SigVer (FIPS186-4)A5173", "AES-GCMA5173", "KDF ANS 9.42A5173", "AES-CFB1A5173", "SHA2-256A5173", "DSA PQGGen (FIPS186-4)A5173", "PBKDFA5173", "SHAKE-256A5173", "HMAC-SHA2-512/256A5173", "HMAC-SHA3-512A5173", "Counter DRBGA5173", "HMAC-SHA3-224A5173", "HMAC-SHA2-224A5173", "ECDSA KeyVer (FIPS186-4)A5173", "TLS v1.3 KDFA5173", "EDDSA KeyGenA5173", "HMAC-SHA3-256A5173", "KDF ANS 9.63A5173", "SHA3-224A5173", "KDA OneStep SP800-56Cr2A5173", "HMAC-SHA-1A5173", "ECDSA SigVer (FIPS186-4)A5173", "KDF SP800-108A5173", "TDES-CBCA5173", "SHA2-512A5173", "DSA SigVer (FIPS186-4)A5173", "HMAC-SHA2-384A5173", "KDF SSHA5173", "AES-CBCA5173", "AES-GMACA5173", "AES-CBC-CS2A5173", "Safe Primes Key VerificationA5173", "AES-CFB128A5173", "EDDSA SigGenA5173", "RSA KeyGen (FIPS186-4)A5173", "SHA2-512/224A5173", "SHA2-512/256A5173", "AES-CTRA5173", "AES-KWA5173", "KDA HKDF SP800-56Cr2A5173", "AES-CCMA5173", "ECDSA SigGen (FIPS186-4)A5173", "SHA3-512A5173", "ECDSA KeyGen (FIPS186-4)A5173", "AES-CMACA5173", "KMAC-128A5173", "TLS v1.2 KDF RFC7627A5173", "DSA PQGVer (FIPS186-4)A5173", "EDDSA SigVerA5173", "AES-ECBA5173", "KMAC-256A5173"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "0e04a109d96cae24e91e2ba6747fc1d18b6fd1f30f3e2b5592ed2e51b83cfa89", "txt_hash": "e84b7a18930fb21f5cd7686927d069fa9a8335d8fbed79e7742709a6e6387336", "json_hash": null}}}