This page was not yet optimized for use on mobile devices.
Dell BSAFE Crypto Module for Java
Certificate details
| Certificate ID | #5361 |
|---|---|
| Status | active |
| Validation dates | 30.06.2026 |
| Sunset date | 29-06-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | Crypto-J software library is designed for developers to incorporate FIPS 140-3 approved cryptography into Java-based products. Crypto-J security software helps protect sensitive data as it is stored, using strong encryption techniques that ease integration with existing data models. Using the capabilities of Crypto-J software in applications helps provide a persistent level of protection for data, lessening the risk of internal, as well as external, compromise. |
| Vendor | Dell Australia Pty Limited, BSAFE Product Team http://www.dell.com |
| Lab | Lightship Security, Inc. |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, CAST, RC2, RC5, RC4, DES, 3DES, TDES, Triple-DES, ChaCha20, ChaCha, Poly1305, HMAC, CMACAsymmetric Algorithms
RSA-CRT, ECDH, ECDSA, EdDSA, ECIES, ECC, DHE, DH, Diffie-Hellman, DSAPost-quantum Algorithms
ML-DSA, LMS, HSS, PQCHash functions
SHA-1, SHA-2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, SHAKE256, SHAKE128, MD5, PBKDF, PBKDF2Schemes
MAC, Key Agreement, AEADProtocols
TLS, TLS v1.2, TLS v1.3, TLS 1.2, TLS 1.3, TLS1.2Randomness
PRNG, DRBG, RNG, RBGElliptic Curves
P-224, P-256, P-384, P-521, P-192, B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, B-163, K-163Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSJavaCard packages
java.util.concurrent, com.rsa.crypto, com.rsa.cryptoj.eventhandler, com.rsa.crypto.jcm, com.rsa.cryptoj.jcm, com.rsa.cryptoj.fips140.katstatus.fileTrusted Execution Environments
PSPVendor
MicrosoftSecurity level
Level 1Side-channel analysis
timing attacks, Timing Attacks, timing attackStandards
FIPS 140-3, FIPS186-5, FIPS 186-5, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 204, FIPS 180-4, FIPS 202, FIPS140-3, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-108, SP 800-56B, SP 800-208, SP 800-132, SP 800-135, SP 800-89, SP 800-186, NIST SP 800-57, PKCS 1, PKCS #1, PKCS#1, RFC7627, RFC5288, RFC 7539, RFC2898Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5361,
"dgst": "a68a5f2e3a4446bf",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KDF SP800-108A6943",
"ECDSA KeyGen (FIPS186-5)A6943",
"AES-CBCA6943",
"HMAC-SHA-1A6943",
"ECDSA KeyGen (FIPS186-4)A6943",
"PBKDFA6943",
"SHA2-224A6943",
"LMS SigVerA6943",
"HMAC-SHA2-384A6943",
"EDDSA SigVerA6943",
"HMAC-SHA2-256A6943",
"AES-XTS Testing Revision 2.0A6943",
"HMAC-SHA3-384A6943",
"AES-CBC-CS3A6943",
"EDDSA KeyGenA6943",
"DSA SigVer (FIPS186-4)A6943",
"AES-CBC-CS1A6943",
"SHA3-512A6943",
"HMAC-SHA2-512/256A6943",
"KAS-IFC-SSCA6943",
"Safe Primes Key GenerationA6943",
"DSA KeyGen (FIPS186-4)A6943",
"AES-CFB128A6943",
"ECDSA SigGen (FIPS186-5)A6943",
"HMAC-SHA2-512/224A6943",
"SHA2-512/224A6943",
"AES-KWPA6943",
"AES-OFBA6943",
"HMAC-SHA2-224A6943",
"KDA OneStep SP800-56Cr2A6943",
"RSA SigVer (FIPS186-5)A6943",
"RSA SigGen (FIPS186-5)A6943",
"Hash DRBGA6943",
"AES-KWA6943",
"ML-DSA SigGenA6943",
"SHA3-384A6943",
"SHA3-224A6943",
"AES-GCMA6943",
"SHAKE-128A6943",
"SHA2-384A6943",
"AES-CTRA6943",
"ECDSA SigVer (FIPS186-4)A6943",
"KAS-ECC-SSC Sp800-56Ar3A6943",
"ML-DSA SigVerA6943",
"RSA SigVer (FIPS186-4)A6943",
"ECDSA SigGen (FIPS186-4)A6943",
"ECDSA SigVer (FIPS186-5)A6943",
"SHA2-256A6943",
"AES-CBC-CS2A6943",
"TLS v1.2 KDF RFC7627A6943",
"HMAC-SHA2-512A6943",
"Counter DRBGA6943",
"SHAKE-256A6943",
"HMAC-SHA3-256A6943",
"HMAC-SHA3-512A6943",
"DSA PQGGen (FIPS186-4)A6943",
"AES-CMACA6943",
"RSA KeyGen (FIPS186-5)A6943",
"KAS-KC SP800-56A6943",
"EDDSA SigGenA6943",
"TLS v1.3 KDFA6943",
"SHA3-256A6943",
"AES-ECBA6943",
"#A6943",
"SHA2-512/256A6943",
"SHA2-512A6943",
"KAS-FFC-SSC Sp800-56Ar3A6943",
"SHA-1A6943",
"HMAC-SHA3-224A6943",
"ML-DSA KeyGenA6943",
"Deterministic ECDSA SigGen (FIPS186-5)A6943",
"HMAC DRBGA6943",
"AES-CCMA6943",
"KTS-IFCA6943"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 2,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A6943",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A6943",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A6943",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A6943",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A6943",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A6943",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A6943",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Deterministic ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "DSA KeyGen (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "L - 2048, 3072 N - 224, 256",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA PQGGen (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "L - 2048, 3072 N - 224, 256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "DSA SigVer (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "L - 1024, 2048, 3072 N - 160, 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "Component - No Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "Component - No Curve - B-163, B-233, B-283, B-409, B-571, K-163, K-233, K-283, K-409, K-571, P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyGen",
"cavpCertName": "A6943",
"properties": "Curve - ED-25519, ED-448",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A6943",
"properties": "Curve - ED-25519, ED-448 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A6943",
"properties": "Curve - ED-25519, ED-448 PreHash - Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A6943",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A6943",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A6943",
"properties": "Key Length - Key Length: 8-51200 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A6943",
"properties": "Domain Parameter Generation Methods - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P- 256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder staticUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A6943",
"properties": "Domain Parameter Generation Methods - FB, FC, ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder dhOneFlow - KAS Role - initiator, responder dhStatic - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-IFC-SSC",
"cavpCertName": "A6943",
"properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic Scheme - KAS1 - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-KC SP800-56 (CVL)",
"cavpCertName": "A6943",
"properties": "KAS Role - Initiator, Responder Key Confirmation Methods - Key Confirmation Directions - Bilateral, Unilateral",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A6943",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-8192 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A6943",
"properties": "KDF Mode - Feedback Supported Lengths - Supported Lengths: 8-4096 Increment 8",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KTS-IFC",
"cavpCertName": "A6943",
"properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg2-basic Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Key Length - 1024",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "LMS SigVer",
"cavpCertName": "A6943",
"properties": "LMS Modes - LMS_SHA256_M24_H10, LMS_SHA256_M24_H15, LMS_SHA256_M24_H20, LMS_SHA256_M24_H25, LMS_SHA256_M24_H5, LMS_SHA256_M32_H10, LMS_SHA256_M32_H15, LMS_SHA256_M32_H20, LMS_SHA256_M32_H25, LMS_SHA256_M32_H5, LMS_SHAKE_M24_H10, LMS_SHAKE_M24_H15, LMS_SHAKE_M24_H20, LMS_SHAKE_M24_H25, LMS_SHAKE_M24_H5, LMS_SHAKE_M32_H10, LMS_SHAKE_M32_H15, LMS_SHAKE_M32_H20, LMS_SHAKE_M32_H25, LMS_SHAKE_M32_H5",
"reference": "SP 800-208"
},
{
"algorithm": "ML-DSA KeyGen",
"cavpCertName": "A6943",
"properties": "Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87",
"reference": "FIPS 204"
},
{
"algorithm": "ML-DSA SigGen",
"cavpCertName": "A6943",
"properties": "Deterministic - No, Yes Signature Interfaces - external, internal Pre Hash - preHash, pure External Mu - No, Yes Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87 Message Length - Message Length: 8-65536 Increment 8 Hash Algorithms - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHAKE-128, SHAKE-256 Context Length - Context Length: 0-2040 Increment 8",
"reference": "FIPS 204"
},
{
"algorithm": "ML-DSA SigVer",
"cavpCertName": "A6943",
"properties": "Signature Interfaces - external, internal Pre Hash - preHash, pure External Mu - No, Yes Parameter Sets - ML-DSA-44, ML-DSA-65, ML-DSA-87 Message Length - Message Length: 8-65536 Increment 8 Hash Algorithms - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHAKE-128, SHAKE-256 Context Length - Context Length: 0-2040 Increment 8",
"reference": "FIPS 204"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A6943",
"properties": "Iteration Count - Iteration Count: 1-10000000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Key Generation Mode - probableWithProbableAux Modulo - 2048, 3072, 4096, 6144, 8192 Primality Tests - 2pow100 Private Key Format - crt",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A6943",
"properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A6943",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A6943",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A6943",
"properties": "Message Length - Message Length: 0-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A6943",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A6943",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A6943",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A6943",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Perform authenticated decryption",
"indicator": "API return value",
"inputs": "Ciphertext, MAC, key",
"name": "Authenticated decryption",
"outputs": "Plaintext, status",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - AES GCM IV: W,E",
"secFunImpl": "Authenticated Decryption"
},
{
"description": "Perform authenticated encryption",
"indicator": "API return value",
"inputs": "Plaintext, key",
"name": "Authenticated encryption",
"outputs": "Ciphertext, MAC, Status",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - AES GCM IV: W,E",
"secFunImpl": "Authenticated Encryption"
},
{
"description": "Asymmetric key decapsulation",
"indicator": "API return value",
"inputs": "Ciphertext, Key",
"name": "Decapsulation",
"outputs": "Plaintext, Status",
"rolesSspAccess": "Crypto Officer - RSA Private key: W,E",
"secFunImpl": "Decapsulation"
},
{
"description": "Perform unauthenticated decryption",
"indicator": "API return value",
"inputs": "Ciphertext, key",
"name": "Decryption",
"outputs": "Plaintext, Status",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Decryption"
},
{
"description": "Digital Signature Generation",
"indicator": "API return value",
"inputs": "Message Digest",
"name": "Digital Signature Generation",
"outputs": "Signature, Status",
"rolesSspAccess": "Crypto Officer - EC Private Key: W,E - EdDSA Private key: W,E - ML-DSA Private Key: W,E - RSA Private key: W,E",
"secFunImpl": "DetECDSA SigGen ECDSA SigGen EdDSA SigGen ML-DSA PureGen ML-DSA PreHashGen RSA SigGen"
},
{
"description": "Digital Signature Verification",
"indicator": "API return value",
"inputs": "Message Digest, Signature",
"name": "Digital Signature Verification",
"outputs": "Verify Status, Status",
"rolesSspAccess": "Crypto Officer - DSA Public key: W,E - EC Public key: W,E - EdDSA Public key: W,E - LMS Public key: W,E - ML-DSA Public Key: W,E - RSA Public key: W,E",
"secFunImpl": "ECDSA SigVer EdDSA SigVer LMS SigVer ML-DSA PureVer ML-DSA PreHashVer RSA SigVer Legacy DSA SigVer Legacy ECDSA SigVer Legacy RSA SigVer"
},
{
"description": "Asymmetric key encapsulation",
"indicator": "API return value",
"inputs": "Plaintext, Key",
"name": "Encapsulation",
"outputs": "Ciphertext, Status",
"rolesSspAccess": "Crypto Officer - RSA Private key: W,E",
"secFunImpl": "Encapsulation"
},
{
"description": "Perform unauthenticated encryption",
"indicator": "API return value",
"inputs": "Plaintext, key",
"name": "Encryption",
"outputs": "Ciphertext, status",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption"
},
{
"description": "Perform explicit validation of public and private keys",
"indicator": "API return value",
"inputs": "Keys",
"name": "Key Assurance",
"outputs": "Validation Status, Status",
"rolesSspAccess": "Crypto Officer - RSA Private key: W - RSA Public key: W",
"secFunImpl": "None"
},
{
"description": "Key Confirmation",
"indicator": "API return value",
"inputs": "MAC",
"name": "Key Confirmation",
"outputs": "verify Status",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E",
"secFunImpl": "Key Confirmation"
},
{
"description": "Key Derivation",
"indicator": "API return value",
"inputs": "Secret",
"name": "Key Derivation",
"outputs": "Key Text, Status",
"rolesSspAccess": "Crypto Officer - HKDF key derivation key: W,E - HKDF derived key: G,R - PBKDF2 derived key: G,R - PBKDF2 Password: W,E - One-Step KDF Secret: W,E - One-Step KDF derived key: G,R - TLS 1.3 KDF derived key: G,R - TLS 1.2 KDF derived key: G,R - TLS Master secret: W,E",
"secFunImpl": "KBKDF KDF One Step KDF TLS 1.2 KDF TLS 1.3 PBKDF"
},
{
"description": "Perform Key Generation",
"indicator": "API return value",
"inputs": "Domain parameters",
"name": "Key Generation",
"outputs": "Key pair, Status",
"rolesSspAccess": "Crypto Officer - DH domain parameters: W,E - DH Public key: G - DH Private key: G - EC Private Key: G - EC Public key: G - EdDSA Private key: G - EdDSA Public key: G - RSA Public key: G - RSA Private key: G - ML-DSA Public Key: G - ML-DSA Private Key: G - AES Key: G - CMAC key: G - HMAC key: G",
"secFunImpl": "Key Generation CKG"
},
{
"description": "Perform Key Parameter Generation",
"indicator": "API return value",
"inputs": "Random number",
"name": "Key Parameter Generation",
"outputs": "Domain parameters, status",
"rolesSspAccess": "Crypto Officer - DH domain parameters: G,R",
"secFunImpl": "Key Parameter Generation"
},
{
"description": "Perform Key Unwrap",
"indicator": "API return value",
"inputs": "Ciphertext, key",
"name": "Key Unwrap",
"outputs": "Plaintext, Status",
"rolesSspAccess": "Crypto Officer - AES key wrap key: W,E",
"secFunImpl": "Key Unwrap"
},
{
"description": "Perform Key Wrap",
"indicator": "API return value",
"inputs": "Plaintext, key",
"name": "Key Wrap",
"outputs": "Ciphertext, Status",
"rolesSspAccess": "Crypto Officer - AES key wrap key: W,E",
"secFunImpl": "Key Wrap"
},
{
"description": "Perform MAC Generation",
"indicator": "API return value",
"inputs": "Plaintext, key",
"name": "MAC Generation",
"outputs": "MAC, Status",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E - CMAC key: W,E",
"secFunImpl": "MAC Generation"
},
{
"description": "Perform MAC Verification",
"indicator": "API return value",
"inputs": "Plaintext, ciphertext, key",
"name": "MAC Verification",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E - CMAC key: W,E",
"secFunImpl": "MAC Verification"
},
{
"description": "Perform Message Digest Operation",
"indicator": "API return value",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message Digest, Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest XOF"
},
{
"description": "Perform Random Number Generation",
"indicator": "API return value",
"inputs": "Entropy input",
"name": "Random Number Generation",
"outputs": "Random bytes, Status",
"rolesSspAccess": "Crypto Officer - Hash DRBG Seed: G,E - Hash DRBG V: G,E - Hash DRBG C: G,E - HMAC DRBG Seed: G,E - HMAC DRBG V: G,E - HMAC DRBG Key: G,E - CTR DRBG Seed: G,E - CTR DRBG V: G,E - CTR DRBG Key: G,E - Entropy input: W",
"secFunImpl": "Random Number Generation"
},
{
"description": "Perform Self-test",
"indicator": "API return value",
"inputs": "Command",
"name": "Self-test",
"outputs": "Status",
"rolesSspAccess": "Unauthenticated",
"secFunImpl": "None"
},
{
"description": "Computer a shared secret",
"indicator": "API return value",
"inputs": "Keys, domain parameters",
"name": "Shared secret computation",
"outputs": "Shared secret, status",
"rolesSspAccess": "Crypto Officer - DH Private key: W,E - DH Public key: W,E - DH Shared Secret: G,R - DH domain parameters: W,E - EC Private Key: W,E - EC Public key: W,E - EC Shared Secret: G,R",
"secFunImpl": "Shared Secret Computation"
},
{
"description": "Show module status",
"indicator": "-",
"inputs": "Command",
"name": "Show status",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module name and version",
"indicator": "-",
"inputs": "Command",
"name": "Show version",
"outputs": "Status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform SSP zeroisation",
"indicator": "-",
"inputs": "-",
"name": "Zeroisation",
"outputs": "-",
"rolesSspAccess": "Unauthenticated",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES CCM",
"condition": "Module load",
"details": "Encrypt, decrypt",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES CMAC",
"condition": "Module load",
"details": "Generate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES ECB",
"condition": "Module load",
"details": "Encrypt, decrypt",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES GCM",
"condition": "Module load",
"details": "Encrypt, decrypt",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG",
"condition": "Module load",
"details": "Instantiate, Generate, Reseed",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "DH DSA key pairs",
"condition": "Key Pair Generation",
"details": "Sign and verify",
"indicator": "API return code",
"testMethod": "PCT",
"testProps": "-",
"type": "PCT"
},
{
"algorithmOrTest": "DSA Verify",
"condition": "Module load",
"details": "Verify",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "L=2048, N=224, SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Diffie-Hellman",
"condition": "Module load",
"details": "Calculate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "2048-bit FFC shared secret calculation",
"type": "CAST"
},
{
"algorithmOrTest": "ECDH",
"condition": "Module load",
"details": "Calculate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "P-256, ECC shared secret calculation",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA Sign",
"condition": "Module load",
"details": "Sign",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "P-256, B-233, fixed k-value",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA Verify",
"condition": "Module load",
"details": "Verify",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "P-256, B-233",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA key pairs",
"condition": "Key Pair Generation",
"details": "Sign and verify",
"indicator": "API return code",
"testMethod": "PCT",
"testProps": "-",
"type": "PCT"
},
{
"algorithmOrTest": "EdDSA Sign",
"condition": "Module load",
"details": "Sign",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "Edwards25519, Edwards448",
"type": "CAST"
},
{
"algorithmOrTest": "EdDSA Verify",
"condition": "Module load",
"details": "Verify",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "Edwards25519, Edwards448",
"type": "CAST"
},
{
"algorithmOrTest": "EdDSA key pairs",
"condition": "Key Pair Generation",
"details": "Sign and verify",
"indicator": "API return code",
"testMethod": "PCT",
"testProps": "-",
"type": "PCT"
},
{
"algorithmOrTest": "HMAC DRBG",
"condition": "Module load",
"details": "Instantiate, Generate, Reseed",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HSS Verify",
"condition": "Module load",
"details": "Verify",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "LMS_SHA256_M32_H5",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG",
"condition": "Module load",
"details": "Instantiate, Generate, Reseed",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep",
"condition": "Module load",
"details": "Generate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA2-224, 2048 bits",
"type": "CAST"
},
{
"algorithmOrTest": "ML-DSA Key pairs",
"condition": "Key Pair Generation",
"details": "Sign and verify",
"indicator": "API return code",
"testMethod": "PCT",
"testProps": "-",
"type": "PCT"
},
{
"algorithmOrTest": "ML-DSA KeyGen",
"condition": "Module load",
"details": "Generate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "ML-DSA-44",
"type": "CAST"
},
{
"algorithmOrTest": "ML-DSA Sign",
"condition": "Module load",
"details": "Sign",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "ML-DSA-65",
"type": "CAST"
},
{
"algorithmOrTest": "ML-DSA Verify",
"condition": "Module load",
"details": "Verify",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "ML-DSA-87",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF",
"condition": "Module load",
"details": "Derive",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA-1, 10,000 iterations",
"type": "CAST"
},
{
"algorithmOrTest": "RSA Cipher key pairs",
"condition": "Key Pair Generation",
"details": "Encrypt and decrypt",
"indicator": "API return code",
"testMethod": "PCT",
"testProps": "-",
"type": "PCT"
},
{
"algorithmOrTest": "RSA Decrypt",
"condition": "Module load",
"details": "Decrypt",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "2048-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA Encrypt",
"condition": "Module load",
"details": "Encrypt",
"indicator": "API return",
"testMethod": "KAT",
"testProps": "2048-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA Sign",
"condition": "Module load",
"details": "Sign",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA2-512, PKCS#1 V1.5, 2048-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA Verify",
"condition": "Module load",
"details": "Verify",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA2-512, PKCS#1 V1.5, 2048-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "RSA signature key pairs",
"condition": "Key Pair Generation",
"details": "Sign and Verify",
"indicator": "API return code",
"testMethod": "PCT",
"testProps": "-",
"type": "PCT"
},
{
"algorithmOrTest": "SHA-2",
"condition": "Module load",
"details": "Generate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-3",
"condition": "Module load",
"details": "Generate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE",
"condition": "Module load",
"details": "Generate",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "SHAKE256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS 1.2 KDF",
"condition": "Module load",
"details": "Derive",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS 1.3 KDF",
"condition": "Module load",
"details": "Derive",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "XTS Duplicate key",
"condition": "On cipher initialization",
"details": "Compare",
"indicator": "API return code",
"testMethod": "CT",
"testProps": "-",
"type": "Critical Function"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "POST or CAST Failure",
"description": "The module suspends all cryptographic operations and becomes non-responsive",
"indicator": "API return code",
"name": "Error State",
"recoveryMethod": "Reload / Reboot Module"
},
{
"conditions": "PCT failure",
"description": "The module outputs an error indicator then resumes normal operation",
"indicator": "API return code",
"name": "Soft error",
"recoveryMethod": "Automatic"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Approved Mode Of Operation",
"name": "Approved",
"statusIndicator": "API CryptoModule.isFips140Mode() returns true",
"type": "Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Configuration parameters for the API interface Module Config which sets the mode of operation.",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "Plaintext, Ciphertext, Message Digest, Signature, MAC, Secret Keys, Key Text, Wrapped Key Text",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "Status, ciphertext, plaintext, signature, key text, wrapped key text, MAC, Random bytes",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "Mode of operation indicator from the API CryptoModule.isFIPS140Mode(). The state of the module from the API CryptoModule.getState().",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "Integrity test",
"details": "-",
"indicator": "API return code",
"testMethod": "KAT",
"testProps": "160-bit hash, 240-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "RAM",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "From App",
"sfiAlgo": "",
"source": "Calling application"
},
{
"dest": "Calling application",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "To App",
"sfiAlgo": "",
"source": "RAM"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Automatic zeroisation of SSPs that are no longer needed.",
"method": "Auto",
"operatorId": "N/A",
"rationale": "Memory is overwritten with 0\u0027s"
},
{
"description": "Power-cycle the host device",
"method": "Reboot",
"operatorId": "Unplugging the host device",
"rationale": "All RAM is zeroised by a power- cycle."
},
{
"description": "The module stores all its keys and CSPs in volatile memory. Users can ensure CSPs are properly zeroised by making use of the clearSensitiveData() method.",
"method": "Zcmd",
"operatorId": "API call to the clearSensitiveData() method",
"rationale": "All of the module\u0027s keys and CSPs are zeroisable. The clearSensitiveData() method overwrites the key or CSP value with zeros."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Volatile memory",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Dell PowerEdge R760",
"hypervisorHostOs": "ESXi 8.0.3",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 17",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4510",
"version": "7.1"
},
{
"hardwarePlatform": "Dell PowerEdge R760",
"hypervisorHostOs": "ESXi 8.0.3",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 21",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4510",
"version": "7.1"
},
{
"hardwarePlatform": "Dell PowerEdge R760",
"hypervisorHostOs": "ESXi 8.0.3",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 8",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4510",
"version": "7.1"
},
{
"hardwarePlatform": "Dell PowerEdge R760",
"hypervisorHostOs": "ESXi 8.0.3",
"operatingSystem": "Windows Server 2019 with Oracle JRE 8",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4510",
"version": "7.1"
},
{
"hardwarePlatform": "Dell PowerEdge R760",
"hypervisorHostOs": "ESXi 8.0.3",
"operatingSystem": "Windows Server 2022 with OpenJDK 11",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4510",
"version": "7.1"
},
{
"hardwarePlatform": "Dell PowerEdge R760",
"hypervisorHostOs": "ESXi 8.0.3",
"operatingSystem": "Windows Server 2022 with OpenJDK 17",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4510",
"version": "7.1"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "key type:Symmetric",
"implName": "BSAFE Crypto Module for Java",
"name": "CKG",
"reference": "SP 800-133r2 section 4"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Dell PowerProtect Data Domain OS 7.13 (x64_64) with Oracle JRE 8"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "Dell PowerProtect Data Domain OS 8.3 with Oracle JRE 8"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Dell PowerStoreOS 4 (x86_64)"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Microsoft Windows 10 Enterprise (x86_64) with Oracle JRE 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Microsoft Windows 10 Enterprise (x86_64) with Oracle JRE 8"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Microsoft Windows Server 2016 (x86_64) with Oracle JRE 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Microsoft Windows Server 2016 (x86_64) with Oracle JRE 8"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Microsoft Windows Server 2019 (x86_64) with Oracle JRE 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Microsoft Windows Server 2022 (x86_64) with OpenJDK 21"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Red Hat Enterprise Linux 8.9 (x86_64) with Oracle JRE 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "Red Hat Enterprise Linux 8.9 (x86_64) with Oracle JRE 8"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 12 SP5 (x86_64) with OpenJDK 8"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 12 SP5 (x86_64) with Oracle JRE 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP2 (x86_64) with OpenJDK 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP2 (x86_64) with OpenJDK 8"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP4 (x86_64) with OpenJDK 8"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP4 with OpenJDK 11 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP4 with OpenJDK 17 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP5 (x86_64) with OpenJDK 11"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP5 (x86_64) with OpenJDK 17"
},
{
"hardwarePlatform": "Intel x86_64",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP5 (x86_64) with OpenJDK 8"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 11 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 17 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 21 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6 with OpenJDK 8 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "Windows Server 2019 with Oracle JRE 8 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "Windows Server 2022 with OpenJDK 11 on ESXi 7.0.3"
},
{
"hardwarePlatform": "Dell PowerEdge R640",
"operatingSystem": "Windows Server 2022 with OpenJDK 17 on ESXi 7.0.3"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 3
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 38
},
"ECIES": {
"ECIES": 1
},
"EdDSA": {
"EdDSA": 26
}
},
"FF": {
"DH": {
"DH": 30,
"DHE": 1,
"Diffie-Hellman": 7
},
"DSA": {
"DSA": 23
}
},
"RSA": {
"RSA-CRT": 1
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 12
},
"ECB": {
"ECB": 3
},
"GCM": {
"GCM": 7
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 3
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"TLS": {
"TLS": {
"TLS": 15,
"TLS 1.2": 14,
"TLS 1.3": 13,
"TLS v1.2": 3,
"TLS v1.3": 3,
"TLS1.2": 1
}
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 2
},
"KA": {
"Key Agreement": 4
},
"MAC": {
"MAC": 39
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 1,
"B-233": 8,
"B-283": 4,
"B-409": 6,
"B-571": 6,
"K-163": 1,
"K-233": 6,
"K-283": 6,
"K-409": 6,
"K-571": 6,
"P-192": 2,
"P-224": 18,
"P-256": 22,
"P-384": 18,
"P-521": 18
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 3
}
},
"fips_certlike": {
"Certlike": {
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"HMAC 2": 2,
"HMAC-SHA-1": 8,
"HMAC-SHA-1 2": 2,
"PKCS #1": 4,
"PKCS 1": 2,
"PKCS#1": 4,
"RSA PKCS #1": 2,
"SHA-1": 13,
"SHA-1, 10": 1,
"SHA-2": 5,
"SHA-3": 4,
"SHA2-224": 14,
"SHA2-256": 16,
"SHA2-384": 15,
"SHA2-512": 16,
"SHA3-224": 10,
"SHA3-256": 9,
"SHA3-384": 9,
"SHA3-512": 9
}
},
"fips_security_level": {
"Level": {
"Level 1": 11
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"PBKDF": {
"PBKDF": 18,
"PBKDF2": 9
},
"SHA": {
"SHA1": {
"SHA-1": 14
},
"SHA2": {
"SHA-2": 5
},
"SHA3": {
"SHA-3": 4,
"SHA3-224": 10,
"SHA3-256": 9,
"SHA3-384": 9,
"SHA3-512": 9
}
},
"SHAKE": {
"SHAKE128": 1,
"SHAKE256": 2
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {
"com": {
"com.rsa.crypto": 21,
"com.rsa.crypto.jcm": 1,
"com.rsa.cryptoj.eventhandler": 1,
"com.rsa.cryptoj.fips140.katstatus.file": 1,
"com.rsa.cryptoj.jcm": 2
},
"java": {
"java.util.concurrent": 1
}
},
"javacard_version": {},
"os_name": {},
"pq_crypto": {
"FIPS": {
"ML-DSA": 43
},
"LMS": {
"HSS": 2,
"LMS": 9
},
"PQC": {
"PQC": 1
}
},
"randomness": {
"PRNG": {
"DRBG": 77,
"PRNG": 1
},
"RNG": {
"RBG": 2,
"RNG": 1
}
},
"side_channel_analysis": {
"SCA": {
"Timing Attacks": 1,
"timing attack": 1,
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 20,
"FIPS 180-4": 7,
"FIPS 186-4": 9,
"FIPS 186-5": 14,
"FIPS 198-1": 11,
"FIPS 202": 6,
"FIPS 204": 4,
"FIPS140-3": 1,
"FIPS186-4": 13,
"FIPS186-5": 13
},
"NIST": {
"NIST SP 800-57": 1,
"SP 800-108": 1,
"SP 800-132": 3,
"SP 800-135": 3,
"SP 800-186": 1,
"SP 800-208": 1,
"SP 800-38A": 8,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 1,
"SP 800-38E": 1,
"SP 800-38F": 3,
"SP 800-56A": 12,
"SP 800-56B": 3,
"SP 800-56C": 2,
"SP 800-89": 1,
"SP 800-90A": 4
},
"PKCS": {
"PKCS #1": 3,
"PKCS 1": 1,
"PKCS#1": 2
},
"RFC": {
"RFC 7539": 3,
"RFC2898": 2,
"RFC5288": 1,
"RFC7627": 3
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 29,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1
},
"CAST": {
"CAST": 64
},
"RC": {
"RC2": 1,
"RC4": 1,
"RC5": 2
}
},
"DES": {
"3DES": {
"3DES": 3,
"TDES": 1,
"Triple-DES": 1
},
"DES": {
"DES": 4
}
},
"constructions": {
"MAC": {
"CMAC": 8,
"HMAC": 30
}
},
"djb": {
"ChaCha": {
"ChaCha": 1,
"ChaCha20": 3
},
"Poly": {
"Poly1305": 3
}
}
},
"tee_name": {
"AMD": {
"PSP": 7
}
},
"tls_cipher_suite": {},
"vendor": {
"Microsoft": {
"Microsoft": 6
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"Deterministic ECDSA SigGen (FIPS186-5)A6943",
"ECDSA KeyGen (FIPS186-4)A6943",
"ECDSA KeyGen (FIPS186-5)A6943",
"AES-CBCA6943",
"HMAC-SHA-1A6943",
"KDF SP800-108A6943",
"PBKDFA6943",
"LMS SigVerA6943",
"SHA2-224A6943",
"HMAC-SHA2-384A6943",
"EDDSA SigVerA6943",
"HMAC-SHA2-256A6943",
"AES-XTS Testing Revision 2.0A6943",
"HMAC-SHA3-384A6943",
"AES-CBC-CS3A6943",
"EDDSA KeyGenA6943",
"DSA SigVer (FIPS186-4)A6943",
"AES-CBC-CS1A6943",
"SHA3-512A6943",
"HMAC-SHA2-512/256A6943",
"KAS-IFC-SSCA6943",
"AES-CFB128A6943",
"DSA KeyGen (FIPS186-4)A6943",
"ECDSA SigGen (FIPS186-5)A6943",
"HMAC-SHA2-512/224A6943",
"SHA2-512/224A6943",
"HMAC DRBGA6943",
"AES-KWPA6943",
"AES-OFBA6943",
"HMAC-SHA2-224A6943",
"KDA OneStep SP800-56Cr2A6943",
"RSA SigVer (FIPS186-5)A6943",
"RSA SigGen (FIPS186-5)A6943",
"Hash DRBGA6943",
"AES-KWA6943",
"ML-DSA SigGenA6943",
"SHA3-384A6943",
"SHA3-224A6943",
"AES-GCMA6943",
"SHAKE-128A6943",
"SHA2-384A6943",
"AES-CTRA6943",
"KAS-ECC-SSC Sp800-56Ar3A6943",
"ML-DSA SigVerA6943",
"RSA SigVer (FIPS186-4)A6943",
"ECDSA SigGen (FIPS186-4)A6943",
"ECDSA SigVer (FIPS186-5)A6943",
"SHA2-256A6943",
"AES-CBC-CS2A6943",
"HMAC-SHA2-512A6943",
"SHAKE-256A6943",
"Counter DRBGA6943",
"TLS v1.2 KDF RFC7627A6943",
"HMAC-SHA3-256A6943",
"HMAC-SHA3-512A6943",
"DSA PQGGen (FIPS186-4)A6943",
"AES-CMACA6943",
"KAS-KC SP800-56A6943",
"RSA KeyGen (FIPS186-5)A6943",
"EDDSA SigGenA6943",
"TLS v1.3 KDFA6943",
"SHA3-256A6943",
"AES-ECBA6943",
"SHA2-512/256A6943",
"SHA2-512A6943",
"KAS-FFC-SSC Sp800-56Ar3A6943",
"SHA-1A6943",
"HMAC-SHA3-224A6943",
"ML-DSA KeyGenA6943",
"Safe Primes Key GenerationA6943",
"ECDSA SigVer (FIPS186-4)A6943",
"AES-CCMA6943",
"KTS-IFCA6943"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A6943"
]
},
"policy_metadata": {
"/CreationDate": "D:20260624085627-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260624085627-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 895810,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://csrc.nist.gov/index.html",
"mailto:https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization/evaluation-criteria/security-(evaluation-criteria)",
"https://eprint.iacr.org/2011/388",
"https://www.rambus.com/timing-attacks-on-implementations-of-diffie-hellman-rsa-dss-and-other-systems/",
"https://link.springer.com/content/pdf/10.1007/s001450010016.pdf",
"https://www.dell.com/support",
"http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf",
"https://tools.ietf.org/html/rfc7539"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 64
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "a89a457e09d0a9944d3d8034da74488a742f6f393322396549a2b61130a8c2e0",
"source_hash": "bb62556901ffe3188ce1dabc112cff6b6bcfb93042beb0ac37fdaeeb60b039fa",
"txt_hash": "a1e8a2c2f1a1fac877db3b1d34287f0b6bae454dadba5e64dd95b5e68b449f31"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
"date_sunset": "2031-06-29",
"description": "Crypto-J software library is designed for developers to incorporate FIPS 140-3 approved cryptography into Java-based products. Crypto-J security software helps protect sensitive data as it is stored, using strong encryption techniques that ease integration with existing data models. Using the capabilities of Crypto-J software in applications helps provide a persistent level of protection for data, lessening the risk of internal, as well as external, compromise.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Dell BSAFE Crypto Module for Java",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-06-30",
"lab": "Lightship Security, Inc.",
"validation_type": "Initial"
}
],
"vendor": "Dell Australia Pty Limited, BSAFE Product Team",
"vendor_url": "http://www.dell.com"
}
}