This page was not yet optimized for use on mobile devices.

Nexus FIPS 140-2 Crypto Module

Certificate #1440

Webpage information ?

Status	historical
Historical reason	RNG SP800-131A Revision 1 Transition
Validation dates	08.11.2010
Standard	FIPS 140-2
Security level	1
Type	Hardware
Embodiment	Multi-Chip Embedded
Caveat	When operated in FIPS mode
Description	The Nexus FIPS140-2 Crypto Module is a single-board security module designed to conform to FIPS140-2 standards and primarily intended for use in P25 radio equipment. The module supports both KFD and KMF management implementations, including a dedicated 3-wire KFD interface. It includes a complete key storage and critical security material management function for TEK, KEK, UKEK, CKEK and KSKEK keys in non-volatile memory within the FIPS module, with protection from unauthorized disclosure or modification. The FIPS Module executes encryption and decryption of P25 Phase 1 voice and data tra
Version (Hardware)	1.0
Version (Firmware)	ES0408_RL01_R1_01_000 version 1.01.000 and ES0408_RL02_R1_00_000 version 1.00.000
Vendor	Nexus Wireless
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES, AES-256, DES, HMAC

Asymmetric Algorithms

DSA

Hash functions

SHA-1

Schemes

MAC

Randomness

PRNG, RNG

Block cipher modes

ECB, CBC, CFB, OFB

Security level

Level 1, Level 0, Level 2

Side-channel analysis

physical probing

Standards

FIPS140-2, FIPS PUB 140-2, FIPS PUB 46-3, FIPS PUB 180-3, FIPS PUB 186-2, FIPS PUB 197, FIPS PUB 198-1, FIPS197, FIPS186-2, FIPS198-1, FIPS180-3, SP 800-108

File metadata

Title	Microsoft Word - NX0408-ME03_v104_FipsModuleSecurityPolicy.doc
Author	pauld
Creation date	D:20100427211626-09'00'
Modification date	D:20100616122903-04'00'
Pages	24
Creator	PrimoPDF http://www.primopdf.com/
Producer	PrimoPDF

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

09.02.2023 The certificate data changed.
Certificate changed

The cert_id was updated.
- The new value is 1440.
The web extraction data was updated.
- The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2010-11-08', 'validation_type': 'Initial', 'lab': 'COACT INC CAFE LAB'}], 'vendor_url': 'http://www.nexuswireless.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt1440.pdf', 'hw_versions': '1.0', 'fw_versions': 'ES0408_RL01_R1_01_000 version 1.01.000 and ES0408_RL02_R1_00_000 version 1.00.000'}.
- The standard property was set to FIPS 140-2.
- The status property was set to historical.
- The level property was set to 1.
- The embodiment property was set to Multi-Chip Embedded.
- The description property was set to The Nexus FIPS140-2 Crypto Module is a single-board security module designed to conform to FIPS140-2 standards and primarily intended for use in P25 radio equipment. The module supports both KFD and KMF management implementations, including a dedicated 3-wire KFD interface. It includes a complete key storage and critical security material management function for TEK, KEK, UKEK, CKEK and KSKEK keys in non-volatile memory within the FIPS module, with protection from unauthorized disclosure or modification. The FIPS Module executes encryption and decryption of P25 Phase 1 voice and data tra.
- The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].
The PDF extraction data was updated.
- The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 279540, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 24, '/ModDate': "D:20100616122903-04'00'", '/CreationDate': "D:20100427211626-09'00'", '/Title': 'Microsoft Word - NX0408-ME03_v104_FipsModuleSecurityPolicy.doc', '/Creator': 'PrimoPDF http://www.primopdf.com/', '/Author': 'pauld', '/Producer': 'PrimoPDF', 'pdf_hyperlinks': {'_type': 'Set', 'elements': []}}}.
- The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].
The computed heuristics were updated.
- The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': []}, 'module_prunned_references': {'_type': 'Set', 'elements': []}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}.
- The algorithms property was set to {'_type': 'Set', 'elements': ['RNG#524', 'SHS#928', 'HMAC#533', 'AES#914', 'DSA#337', 'SHS#901']}.
- The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].
The state was updated.
- The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': '1a16b89500f3a2830c64bb4dbeb531a518189bf196af9e57239d6830d15845b3', 'policy_txt_hash': '24c3e4e4e0289f4c5118e158f667e2b1ef206b7c9befc9401c4389351e8682d9'}.
- The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
07.12.2022 The certificate data changed.
Certificate changed

The computed heuristics were updated.
- The st_references property was updated, with the {'indirectly_referencing': {'__add__': {'_type': 'Set', 'elements': ['502', '626', '271', '561', '245']}}} data.
05.11.2022 The certificate data changed.
Certificate changed

The web extraction data was updated.
- The algorithms property was set to {'_type': 'Set', 'elements': []}.
The PDF extraction data was updated.
- The clean_cert_ids property was set to {'#914': 3, '#524': 1, '#901': 1, '#928': 1, '#337': 1, '#533': 1}.
The computed heuristics were updated.
- The algorithms property was set to {'_type': 'Set', 'elements': []}.
- The clean_cert_ids property was set to {'#914': 3, '#524': 1, '#901': 1, '#928': 1, '#337': 1, '#533': 1}.
- The st_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['928', '901', '914', '524', '533', '337']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['928', '901', '914', '524', '533', '337']}} data.
25.10.2022 The certificate data changed.
Certificate changed

The PDF extraction data was updated.
- The keywords property was updated, with the {'eval_facility': {}, 'symmetric_crypto': {'__update__': {'DES': {'__update__': {'DES': {'__update__': {'DES': 9}}}}}}, 'crypto_scheme': {'__update__': {'MAC': {'__update__': {'MAC': 12}}}, '__delete__': ['KA']}, 'randomness': {'__update__': {'RNG': {'__update__': {'RNG': 14}}}}, 'ecc_curve': {}, 'tee_name': {}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS140-2': 27}}, 'NIST': {'SP 800-108': 1}}}} data.
The state was updated.
- The tables_done property was set to True.
17.07.2022 The certificate data changed.
Certificate changed

The _type was updated.
- The new value is sec_certs.sample.fips.FIPSCertificate.
The computed heuristics were updated.
- The following values were inserted: {'clean_cert_ids': {}}.
- The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.
- The keywords property was set to {}.
- The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#533', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#901', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#928', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#337', 'algorithm_type': 'DSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#524', 'algorithm_type': 'RNG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#914', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}]}.
- The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
- The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.
The state was updated.
- The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.
- The following properties were deleted: ['fragment_path'].
25.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
21.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
14.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The pdf_scan was updated.
- The keywords property was updated, with the {'rules_cert_id': {}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS140-2': {'__update__': {'count': 1}}}, '__delete__': ['FIPS PUB 46-3', 'FIPS PUB 140-2', 'FIPS PUB 180-3', 'FIPS PUB 186-2', 'FIPS PUB 198-1', 'FIPS186-2', 'FIPS198-1', 'FIPS180-3']}, 'FIPS ?(?:PUB )?[0-9]+?': {'__delete__': ['FIPS PUB 197']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'OFB': {'__update__': {'OFB': {'__update__': {'count': 1}}}}}}} data.
The computed heuristics were updated.
- The keywords property was updated, with the {'rules_cert_id': {}, 'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__update__': {'FIPS140-2': {'__update__': {'count': 1}}}, '__delete__': ['FIPS PUB 46-3', 'FIPS PUB 140-2', 'FIPS PUB 180-3', 'FIPS PUB 186-2', 'FIPS PUB 198-1', 'FIPS186-2', 'FIPS198-1', 'FIPS180-3']}, 'FIPS ?(?:PUB )?[0-9]+?': {'__delete__': ['FIPS PUB 197']}}}, 'rules_block_cipher_modes': {'__update__': {'ECB': {'__update__': {'ECB': {'__update__': {'count': 1}}}}, 'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}, 'OFB': {'__update__': {'OFB': {'__update__': {'count': 1}}}}}}} data.
- The algorithms property was updated.
07.06.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
24.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
20.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
17.05.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
18.04.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
11.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
10.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
08.03.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
- The following properties were deleted: ['connections'].
The pdf_scan was updated.
- The following properties were deleted: ['connections'].
The computed heuristics were updated.
- The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}}.
- The algorithms property was updated.
- The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
18.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
- The extracted_versions property was set to {'_type': 'Set', 'elements': ['1.01.000', '1.00.000', '1.0']}.
12.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
11.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The algorithms property was updated.
The computed heuristics were updated.
- The algorithms property was updated.
02.02.2022 The certificate data changed.
Certificate changed

The web_scan was updated.
- The module_type property was set to Hardware.
30.01.2022 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1440,
  "dgst": "a4ff3ad278c7b057",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#928",
        "DSA#337",
        "HMAC#533",
        "AES#914",
        "SHS#901",
        "RNG#524"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.00.000",
        "1.01.000",
        "1.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DSA": {
            "DSA": 8
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CFB": {
          "CFB": 1
        },
        "ECB": {
          "ECB": 3
        },
        "OFB": {
          "OFB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 12
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#337": 1,
          "#524": 1,
          "#533": 1,
          "#901": 1,
          "#914": 3,
          "#928": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 256": 5,
          "AES-256": 3,
          "SHA-1": 3,
          "SHA-1 2": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 0": 2,
          "Level 1": 10,
          "Level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 7
        },
        "RNG": {
          "RNG": 14
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "physical probing": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS PUB 140-2": 8,
          "FIPS PUB 180-3": 1,
          "FIPS PUB 186-2": 1,
          "FIPS PUB 197": 1,
          "FIPS PUB 198-1": 1,
          "FIPS PUB 46-3": 1,
          "FIPS140-2": 27,
          "FIPS180-3": 1,
          "FIPS186-2": 2,
          "FIPS197": 1,
          "FIPS198-1": 1
        },
        "NIST": {
          "SP 800-108": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 10,
            "AES-256": 3
          }
        },
        "DES": {
          "DES": {
            "DES": 9
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 11
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "pauld",
      "/CreationDate": "D:20100427211626-09\u002700\u0027",
      "/Creator": "PrimoPDF http://www.primopdf.com/",
      "/ModDate": "D:20100616122903-04\u002700\u0027",
      "/Producer": "PrimoPDF",
      "/Title": "Microsoft Word - NX0408-ME03_v104_FipsModuleSecurityPolicy.doc",
      "pdf_file_size_bytes": 279540,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 24
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "1a16b89500f3a2830c64bb4dbeb531a518189bf196af9e57239d6830d15845b3",
    "policy_txt_hash": "24c3e4e4e0289f4c5118e158f667e2b1ef206b7c9befc9401c4389351e8682d9"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt1440.pdf",
    "date_sunset": null,
    "description": "The Nexus FIPS140-2 Crypto Module is a single-board security module designed to conform to FIPS140-2 standards and primarily intended for use in P25 radio equipment. The module supports both KFD and KMF management implementations, including a dedicated 3-wire KFD interface. It includes a complete key storage and critical security material management function for TEK, KEK, UKEK, CKEK and KSKEK keys in non-volatile memory within the FIPS module, with protection from unauthorized disclosure or modification. The FIPS Module executes encryption and decryption of P25 Phase 1 voice and data tra",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": null,
    "fw_versions": "ES0408_RL01_R1_01_000 version 1.01.000 and ES0408_RL02_R1_00_000 version 1.00.000",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": "1.0",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Nexus FIPS 140-2 Crypto Module",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2010-11-08",
        "lab": "COACT INC CAFE LAB",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Nexus Wireless",
    "vendor_url": "http://www.nexuswireless.com"
  }
}

Nexus FIPS 140-2 Crypto Module

Certificate #1440

Webpage information ?

Security policy ?

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Block cipher modes

Security

Security level

Side-channel analysis

Other

Standards

File metadata

Heuristics ?

References ?

Updates ?

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data