Communication Cryptographic Library (CCL)

Certificate details

Certificate ID #2854
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 02.03.2017 , 28.06.2018 , 28.04.2021
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates keys whose strengths are modified by available entropy
Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description The CCL is a dynamically linked library implemented using the C programming language with an external Java interface. Application developers wishing to use the CCL can use the CCL's Application Programming Interface (API) to perform AES, ECDSA, HMAC, DRBG, SHA256 and SHA512 security related functions. It also includes non-validated legacy services to support DES encryption while operating in the Non-Approved mode of operation.
Tested configurations
  • Android 6.0 running on a Nexus 5X (single-user mode)
Vendor EFJohnson Technologies http://www.efjohnson.com
Lab UL Verification Services, Inc.
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, DES, HMAC, HMAC-SHA-256
Asymmetric Algorithms
ECDSA
Hash functions
SHA256, SHA512, SHA-512, SHA-256
Schemes
MAC
Randomness
DRBG
Elliptic Curves
P-256
Block cipher modes
ECB, CBC, CFB, OFB

Vendor
Qualcomm

Security level
Level 1

Title Security Policy 5100
Subject FIPS-140-2 Security Policy
Author John Oblak
Creation date D:20210427150726-07'00'
Modification date D:20210427150738-07'00'
Pages 15
Creator Acrobat PDFMaker 17 for Word
Producer Adobe PDF Library 17.11.238

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2854,
  "dgst": "a91612704c1770a3",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#3985",
        "#882",
        "#3290",
        "#1178",
        "SHS#3290",
        "ECDSA#882",
        "DRBG#1178",
        "HMAC#2601",
        "AES#3985",
        "KTS#3985",
        "#2601"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 19
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CFB": {
          "CFB": 1
        },
        "ECB": {
          "ECB": 8
        },
        "OFB": {
          "OFB": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 10
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1178": 1,
          "#2601": 1,
          "#3290": 1,
          "#3985": 2,
          "#882": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#2601 SHA": 1,
          "#3985 AES": 1,
          "#3985 DRBG": 1,
          "#882 HMAC": 1,
          "AES 128": 5,
          "AES 192": 5,
          "AES 256": 4,
          "AES-128": 2,
          "AES-128 CBC 4": 1,
          "AES-192": 2,
          "AES-192 CBC 7": 1,
          "AES-256": 2,
          "AES-256 CBC 10": 1,
          "Cert # AES": 1,
          "DES 56": 2,
          "DRBG 256": 1,
          "DRBG 4": 1,
          "DRBG 56": 1,
          "HMAC- SHA-256": 1,
          "HMAC-SHA- 256 256": 2,
          "HMAC-SHA-256": 6,
          "HMAC-SHA-256 256": 2,
          "HMAC-SHA256 15": 2,
          "SHA - 256": 1,
          "SHA - 512": 1,
          "SHA- 256": 2,
          "SHA- 512": 1,
          "SHA-256": 10,
          "SHA-512": 7,
          "SHA-512 #3290": 1,
          "SHA256": 2,
          "SHA512": 1,
          "SHA512 13": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 12
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 10,
            "SHA-512": 8,
            "SHA256": 2,
            "SHA512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 23
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 22,
          "FIPS 180-4": 1,
          "FIPS 186-4": 1,
          "FIPS 197": 1,
          "FIPS 198-1": 1
        },
        "NIST": {
          "SP 800-107": 1,
          "SP 800-131A": 1,
          "SP 800-38A": 1,
          "SP 800-38F": 1,
          "SP 800-90A": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 47,
            "AES-128": 3,
            "AES-192": 3,
            "AES-256": 3
          }
        },
        "DES": {
          "DES": {
            "DES": 17
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 6,
            "HMAC-SHA-256": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 4
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#3290",
        "KTS#3985",
        "ECDSA#882",
        "DRBG#1178",
        "AES#3985",
        "HMAC#2601"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#3985",
        "#882",
        "#1178",
        "#3290",
        "#2601"
      ]
    },
    "policy_metadata": {
      "/Author": "John Oblak",
      "/Company": "EF Johnson",
      "/CreationDate": "D:20210427150726-07\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 17 for Word",
      "/ModDate": "D:20210427150738-07\u002700\u0027",
      "/Producer": "Adobe PDF Library 17.11.238",
      "/SourceModified": "D:20210427220522",
      "/Subject": "FIPS-140-2 Security Policy",
      "/Title": "Security Policy 5100",
      "pdf_file_size_bytes": 350277,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 15
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "0bc44e84208f816d12a22158984646f10299fa6f0792b85eff74db6ef59185db",
      "source_hash": "48059741f2cc0dc77803f378ca7b6aeeeb18df2a774c86129179f74c36000373",
      "txt_hash": "0be5272b55bdc107601591d53fb88428722056ba91fa6748e498ef2a89fce621"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates keys whose strengths are modified by available entropy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertMar2017.pdf",
    "date_sunset": null,
    "description": "The CCL is a dynamically linked library implemented using the C programming language with an external Java interface. Application developers wishing to use the CCL can use the CCL\u0027s Application Programming Interface (API) to perform AES, ECDSA, HMAC, DRBG, SHA256 and SHA512 security related functions. It also includes non-validated legacy services to support DES encryption while operating in the Non-Approved mode of operation.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Communication Cryptographic Library (CCL)",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "Product Number 039-5804-200 Rev 3.0",
    "tested_conf": [
      "Android 6.0 running on a Nexus 5X (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2017-03-02",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2018-06-28",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2021-04-28",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Update"
      }
    ],
    "vendor": "EFJohnson Technologies",
    "vendor_url": "http://www.efjohnson.com"
  }
}