This page was not yet optimized for use on mobile devices.

HP-UX Kernel Cryptographic Module

Certificate details

Certificate ID	#2079
Status	historical
Historical reason	Moved to historical list due to sunsetting
Validation dates	07.02.2014 , 18.12.2019
Standard	FIPS 140-2
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When installed, initialized and configured as specified in Section 3 of the Security Policy. When operated in FIPS mode. No assurance of the minimum strength of generated keys
Exceptions	Physical Security: N/A Mitigation of Other Attacks: N/A
Description	HP-UX Kernel Crypto Module (HP-UX KCM) is a kernel-space crypto engine in the HP-UX operating system containing core cryptographic algorithms and operations in a single shared library. It implements asymmetric, symmetric, and digest operations that are used by HP-UX security solutions. HP-UX KCM is available on HP-UX 11i v3 operating system on the HPE Integrity Platform and the HPE Portable HP-UX Platform.
Tested configurations	HP-UX 11i v3 on HPE Portable HP-UX on Red Hat Enterprise Linux Server 7.5 (x86-64) running on an HPE ProLiant DL580 Gen10 with an Intel Xeon Gold 6146 (single user mode) HP-UX 11i v3 running on an HPE Integrity BL860c i2 server blade with an Intel Itanium Processor 9350 HP-UX 11i v3 running on an HPE Integrity BL890c i6 server blade with an Intel Itanium Processor 9740
Vendor	Hewlett Packard Enterprise Development LP http://www.hpe.com
Lab	CGI Information Systems & Management Consultants Inc, Leidos Accredited Testing & Evaluation (AT&E) Lab
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, HMAC

Asymmetric Algorithms

RSA 2048

Hash functions

SHA-256, SHA-384, SHA-512

Schemes

MAC, Key Exchange

Protocols

IKE, IPsec

Randomness

DRBG, RNG, RBG

Block cipher modes

CBC

Security level

Level 1, Level 5, level 1

Standards

FIPS 140-2, FIPS 197, FIPS 186-4, FIPS 180-4, FIPS 198-1, FIPS PUB 140-2, SP 800-38A, SP 800-133, SP 800-131A, SP 800-90A, PKCS#1

Cross-references

Outgoing

192 - historical - 7206 VXR Router

Creation date	D:20191211112753-05'00'
Modification date	D:20191211112753-05'00'
Pages	17

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
23.12.2024

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Moved to historical list due to sunsetting.

The date_sunset property was set to None.
09.02.2023

The certificate data changed.
Certificate changed

The cert_id was updated.

The new value is 2079.

The web extraction data was updated.

The following values were inserted: {'validation_history': [{'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2014-02-07', 'validation_type': 'Initial', 'lab': 'CGI Information Systems & Management Consultants Inc'}, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2019-12-18', 'validation_type': 'Update', 'lab': 'LEIDOS CSTL'}], 'vendor_url': 'http://www.hpe.com', 'certificate_pdf_url': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0038.pdf', 'hw_versions': None, 'fw_versions': None}.

The standard property was set to FIPS 140-2.

The status property was set to active.

The level property was set to 1.

The embodiment property was set to Multi-Chip Stand Alone.

The following properties were deleted: ['date_validation', 'algorithms', 'vendor_www', 'lab', 'lab_nvlap', 'security_policy_www', 'certificate_www', 'hw_version', 'fw_version', 'product_url'].

The PDF extraction data was updated.

The following values were inserted: {'policy_metadata': {'pdf_file_size_bytes': 937169, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 17, '/CreationDate': "D:20191211112753-05'00'", '/ModDate': "D:20191211112753-05'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['mailto:[email protected]', 'https://www.hpe.com/', 'https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules', 'https://csrc.nist.gov/projects/cryptographic-module-validation-program']}}}.

The following properties were deleted: ['cert_id', 'algorithms', 'clean_cert_ids', 'st_metadata'].

The computed heuristics were updated.

The following values were inserted: {'policy_prunned_references': {'_type': 'Set', 'elements': ['192']}, 'module_prunned_references': {'_type': 'Set', 'elements': []}, 'policy_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': {'_type': 'Set', 'elements': ['192']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['192']}}, 'module_processed_references': {'_type': 'sec_certs.sample.certificate.References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'direct_transitive_cves': None, 'indirect_transitive_cves': None}.

The algorithms property was set to {'_type': 'Set', 'elements': ['DRBG#346', 'SHS#2106', 'RSA#1277', 'AES#2488', 'HMAC#1530']}.

The following properties were deleted: ['keywords', 'unmatched_algs', 'clean_cert_ids', 'st_references', 'web_references'].

The state was updated.

The following values were inserted: {'module_download_ok': True, 'policy_download_ok': True, 'policy_convert_garbage': False, 'policy_convert_ok': True, 'module_extract_ok': True, 'policy_extract_ok': True, 'policy_pdf_hash': 'c7d8fd0dae2b5444bb6b732d84c855ed256fe3349e168bbaed5a288d31ecd654', 'policy_txt_hash': '0de82564e7b52b15f3c9b4f0705efb57cfec31d6b129e4a02ec6d834d9971675'}.

The following properties were deleted: ['sp_path', 'html_path', 'tables_done', 'file_status', 'txt_state'].
05.11.2022

The certificate data changed.
Certificate changed

The web extraction data was updated.

The algorithms property was set to {'_type': 'Set', 'elements': []}.

The computed heuristics were updated.

The algorithms property was set to {'_type': 'Set', 'elements': []}.
25.10.2022

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_cert_id': {'__update__': {'Cert': {'__delete__': ['#1']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC 512': 2}, '__update__': {'RSA 2048': 4, 'DRBG 2': 1}, '__delete__': ['HMAC 512, 1024']}}}, 'eval_facility': {'__delete__': ['TTA']}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 12}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 9}}}}}}, 'asymmetric_crypto': {'__update__': {'RSA': {'__update__': {'RSA 2048': 4}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA2': {'__delete__': ['SHA-2']}}, '__delete__': ['SHA1', 'SHA3']}}}, 'crypto_scheme': {'__update__': {'MAC': {'__update__': {'MAC': 1}}}, '__delete__': ['KA']}, 'crypto_protocol': {'__update__': {'IKE': {'__update__': {'IKE': 2}}, 'IPsec': {'__update__': {'IPsec': 6}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 22}}, 'RNG': {'__update__': {'RNG': 1, 'RBG': 2}}}}, 'cipher_mode': {'__update__': {'CBC': {'__update__': {'CBC': 4}}}}, 'tee_name': {}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 19}}, 'NIST': {'SP 800-38A': 1, 'SP 800-133': 2, 'SP 800-131A': 1, 'SP 800-90A': 3}}}} data.

The computed heuristics were updated.

The st_references property was updated, with the {'directly_referencing': {'_type': 'Set', 'elements': ['192']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['192']}} data.

The state was updated.

The tables_done property was set to True.
08.10.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The st_references property was updated, with the {'directly_referencing': None, 'indirectly_referencing': None} data.
17.07.2022

The certificate data changed.
Certificate changed

The web extraction data was updated.

This property was added with value {'_type': 'sec_certs.sample.fips.FIPSCertificate.WebData', 'module_name': 'HP-UX Kernel Cryptographic Module', 'standard': 'FIPS140-2', 'status': 'Active', 'date_sunset': '2024-12-17', 'date_validation': ['2014-02-07', '2019-12-18'], 'level': '1', 'caveat': 'When installed, initialized and configured as specified in Section 3 of the Security Policy. When operated in FIPS mode. No assurance of the minimum strength of generated keys', 'exceptions': ['Physical Security: N/A', 'Mitigation of Other Attacks: N/A'], 'module_type': 'Software', 'embodiment': 'Multi Chip Standalone', 'algorithms': {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1530', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1277', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2488', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#346', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2106', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}]}, 'tested_conf': ['HP-UX 11i v3 on HPE Portable HP-UX on Red Hat Enterprise Linux Server 7.5 (x86-64) running on an HPE ProLiant DL580 Gen10 with an Intel Xeon Gold 6146 (single user mode)', 'HP-UX 11i v3 running on an HPE Integrity BL860c i2 server blade with an Intel Itanium Processor 9350', 'HP-UX 11i v3 running on an HPE Integrity BL890c i6 server blade with an Intel Itanium Processor 9740'], 'description': 'HP-UX Kernel Crypto Module (HP-UX KCM) is a kernel-space crypto engine in the HP-UX operating system containing core cryptographic algorithms and operations in a single shared library. It implements asymmetric, symmetric, and digest operations that are used by HP-UX security solutions. HP-UX KCM is available on HP-UX 11i v3 operating system on the HPE Integrity Platform and the HPE Portable HP-UX Platform.', 'mentioned_certs': {}, 'vendor': 'Hewlett Packard Enterprise Development LP', 'vendor_www': 'http://www.hpe.com', 'lab': None, 'lab_nvlap': None, 'historical_reason': None, 'security_policy_www': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp2079.pdf', 'certificate_www': 'https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0038.pdf', 'hw_version': None, 'fw_version': None, 'revoked_reason': None, 'revoked_link': None, 'sw_versions': '1.0', 'product_url': None}.

The PDF extraction data was updated.

This property was added with value {'_type': 'sec_certs.sample.fips.FIPSCertificate.PdfData', 'cert_id': 2079, 'keywords': {'fips_cert_id': {'Cert': {'#192': 1, '#1': 2}}, 'fips_security_level': {'Level': {'Level 1': 3, 'Level 5': 1, 'level 1': 1}}, 'fips_certlike': {'Certlike': {'HMAC13': 2, 'HMAC 512, 1024': 2, 'HMAC SHA-256': 1, 'HMAC SHA-384': 1, 'HMAC SHA-512': 1, 'SHA-256': 8, 'SHA-384': 5, 'SHA-512 1277': 1, 'SHA12 -256': 1, 'SHA-512 2106': 1, 'SHA-512 1530': 1, 'SHA-512': 2, 'RSA3': 1, 'RSA16': 1, 'RSA 2048': 6, 'PKCS#1': 4, 'AES1': 1, 'AES 128, 192': 1, 'DRBG15': 1, 'DRBG 2': 2}}, 'vendor': {}, 'eval_facility': {'Leidos': {'Leidos': 1}, 'TTA': {'TTA': 1}}, 'symmetric_crypto': {'AES_competition': {'AES': {'AES': 13}}, 'constructions': {'MAC': {'HMAC': 11}}}, 'asymmetric_crypto': {'RSA': {'RSA 2048': 6}}, 'pq_crypto': {}, 'hash_function': {'SHA': {'SHA1': {'SHA1': 1}, 'SHA2': {'SHA-256': 8, 'SHA-384': 5, 'SHA-512': 5, 'SHA-2': 8}, 'SHA3': {'SHA-3': 5}}}, 'crypto_scheme': {'MAC': {'MAC': 12}, 'KEX': {'Key Exchange': 2}, 'KA': {'KA': 2}}, 'crypto_protocol': {'IKE': {'IKE': 3}, 'IPsec': {'IPsec': 7}}, 'randomness': {'PRNG': {'DRBG': 31}, 'RNG': {'RNG': 5, 'RBG': 33}}, 'cipher_mode': {'CBC': {'CBC': 5}}, 'ecc_curve': {}, 'crypto_engine': {}, 'tls_cipher_suite': {}, 'crypto_library': {}, 'vulnerability': {}, 'side_channel_analysis': {}, 'device_model': {}, 'tee_name': {'IBM': {'SE': 14}, 'other': {'T6': 1}}, 'os_name': {}, 'cplc_data': {}, 'ic_data_group': {}, 'standard_id': {'FIPS': {'FIPS 140-2': 20, 'FIPS 197': 1, 'FIPS 186-4': 2, 'FIPS 180-4': 1, 'FIPS 198-1': 1, 'FIPS PUB 140-2': 1}, 'NIST': {'SP 800-3': 1, 'SP 800-1': 3, 'SP 800-9': 3}, 'PKCS': {'PKCS#1': 2}}, 'javacard_version': {}, 'javacard_api_const': {}, 'javacard_packages': {}, 'certification_process': {}}, 'algorithms': {'_type': 'Set', 'elements': []}, 'clean_cert_ids': {'#192': 1}, 'st_metadata': {'pdf_file_size_bytes': 937169, 'pdf_is_encrypted': False, 'pdf_number_of_pages': 17, '/CreationDate': "D:20191211112753-05'00'", '/ModDate': "D:20191211112753-05'00'", 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://www.hpe.com/', 'mailto:[email protected]', 'https://csrc.nist.gov/projects/cryptographic-module-validation-program', 'https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules']}}}.

The _type was updated.

The new value is sec_certs.sample.fips.FIPSCertificate.

The computed heuristics were updated.

The following values were inserted: {'clean_cert_ids': {'#192': 1}}.

The _type property was set to sec_certs.sample.fips.FIPSCertificate.Heuristics.

The keywords property was set to {}.

The algorithms property was set to {'_type': 'Set', 'elements': [{'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1530', 'algorithm_type': 'HMAC', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#1277', 'algorithm_type': 'RSA', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2488', 'algorithm_type': 'AES', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#346', 'algorithm_type': 'DRBG', 'vendor': None, 'implementation': None, 'date': None}, {'_type': 'sec_certs.sample.fips_algorithm.FIPSAlgorithm', 'cert_id': '#2106', 'algorithm_type': 'SHS', 'vendor': None, 'implementation': None, 'date': None}]}.

The st_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References', 'directly_referencing': {'_type': 'Set', 'elements': ['192']}, 'indirectly_referencing': {'_type': 'Set', 'elements': ['192']}} data.

The web_references property was updated, with the {'_type': 'sec_certs.sample.certificate.References'} data.

The state was updated.

The _type property was set to sec_certs.sample.fips.FIPSCertificate.InternalState.

The following properties were deleted: ['fragment_path'].

The web_scan was updated.

This property was removed.

The pdf_scan was updated.

This property was removed.
14.06.2022

The certificate data changed.
Certificate changed

The pdf_scan was updated.

The keywords property was updated, with the {'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 186-4', 'FIPS 180-4', 'FIPS 198-1']}, 'PKCS[ #]*[1-9]+': {'__update__': {'PKCS#1': {'__update__': {'count': 1}}}}}}, 'rules_block_cipher_modes': {'__update__': {'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}}}, 'rules_other': {'__update__': {'library': {'__update__': {'library': {'__update__': {'count': 1}}}}}}} data.

The computed heuristics were updated.

The keywords property was updated, with the {'rules_standard_id': {'__update__': {'FIPS ?(?:PUB )?[0-9]+-[0-9]+?': {'__delete__': ['FIPS 140-2', 'FIPS 186-4', 'FIPS 180-4', 'FIPS 198-1']}, 'PKCS[ #]*[1-9]+': {'__update__': {'PKCS#1': {'__update__': {'count': 1}}}}}}, 'rules_block_cipher_modes': {'__update__': {'CBC': {'__update__': {'CBC': {'__update__': {'count': 1}}}}}}, 'rules_other': {'__update__': {'library': {'__update__': {'library': {'__update__': {'count': 1}}}}}}} data.
08.03.2022

The certificate data changed.
Certificate changed

The web_scan was updated.

The following properties were deleted: ['connections'].

The pdf_scan was updated.

The following properties were deleted: ['connections'].

The computed heuristics were updated.

The following values were inserted: {'st_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}, 'web_references': {'_type': 'References', 'directly_referenced_by': None, 'indirectly_referenced_by': None, 'directly_referencing': None, 'indirectly_referencing': None}}.

The following properties were deleted: ['connections', 'directly_affected_by', 'indirectly_affected_by', 'directly_affecting', 'indirectly_affecting'].
18.02.2022

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The extracted_versions property was set to {'_type': 'Set', 'elements': ['-']}.
02.02.2022

The certificate data changed.
Certificate changed

The web_scan was updated.

The module_type property was set to Software.
30.01.2022

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2079,
  "dgst": "a89d6642c31c3352",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES#2488",
        "RSA#1277",
        "HMAC#1530",
        "SHS#2106",
        "DRBG#346"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "192"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "192"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "192"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "RSA": {
          "RSA 2048": 4
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 2
        },
        "IPsec": {
          "IPsec": 6
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 2
        },
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "Leidos": {
          "Leidos": 1
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#192": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128, 192": 1,
          "AES1": 1,
          "DRBG 2": 1,
          "DRBG15": 1,
          "HMAC 512": 2,
          "HMAC SHA-256": 1,
          "HMAC SHA-384": 1,
          "HMAC SHA-512": 1,
          "HMAC13": 2,
          "PKCS#1": 4,
          "RSA 2048": 4,
          "RSA16": 1,
          "RSA3": 1,
          "SHA-256": 8,
          "SHA-384": 5,
          "SHA-512": 2,
          "SHA-512 1277": 1,
          "SHA-512 1530": 1,
          "SHA-512 2106": 1,
          "SHA12 -256": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3,
          "Level 5": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 8,
            "SHA-384": 5,
            "SHA-512": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 22
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 19,
          "FIPS 180-4": 1,
          "FIPS 186-4": 2,
          "FIPS 197": 1,
          "FIPS 198-1": 1,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "SP 800-131A": 1,
          "SP 800-133": 2,
          "SP 800-38A": 1,
          "SP 800-90A": 3
        },
        "PKCS": {
          "PKCS#1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 12
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 9
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20191211112753-05\u002700\u0027",
      "/ModDate": "D:20191211112753-05\u002700\u0027",
      "pdf_file_size_bytes": 937169,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "mailto:[email protected]",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules",
          "https://www.hpe.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 17
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "c7d8fd0dae2b5444bb6b732d84c855ed256fe3349e168bbaed5a288d31ecd654",
      "txt_hash": "0de82564e7b52b15f3c9b4f0705efb57cfec31d6b129e4a02ec6d834d9971675"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When installed, initialized and configured as specified in Section 3 of the Security Policy. When operated in FIPS mode. No assurance of the minimum strength of generated keys",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertList0038.pdf",
    "date_sunset": null,
    "description": "HP-UX Kernel Crypto Module (HP-UX KCM) is a kernel-space crypto engine in the HP-UX operating system containing core cryptographic algorithms and operations in a single shared library. It implements asymmetric, symmetric, and digest operations that are used by HP-UX security solutions. HP-UX KCM is available on HP-UX 11i v3 operating system on the HPE Integrity Platform and the HPE Portable HP-UX Platform.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "HP-UX Kernel Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "1.0",
    "tested_conf": [
      "HP-UX 11i v3 on HPE Portable HP-UX on Red Hat Enterprise Linux Server 7.5 (x86-64) running on an HPE ProLiant DL580 Gen10 with an Intel Xeon Gold 6146 (single user mode)",
      "HP-UX 11i v3 running on an HPE Integrity BL860c i2 server blade with an Intel Itanium Processor 9350",
      "HP-UX 11i v3 running on an HPE Integrity BL890c i6 server blade with an Intel Itanium Processor 9740"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-02-07",
        "lab": "CGI Information Systems \u0026 Management Consultants Inc",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2019-12-18",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Update"
      }
    ],
    "vendor": "Hewlett Packard Enterprise Development LP",
    "vendor_url": "http://www.hpe.com"
  }
}

Sections

HP-UX Kernel Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

Security level

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

HP-UX Kernel Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

Security

Security level

Other

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data