Amazon Linux 2023 OpenSSL FIPS Provider

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

Certificate details

Certificate ID #5438
Status active
Validation dates 27.07.2026
Sunset date 26-07-2031
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Description The Amazon Linux 2023 OpenSSL FIPS Provider is a software library implementing general purpose cryptographic algorithms.
Vendor Amazon Web Services, Inc. http://www.amazon.com
Lab atsec information security corporation
Algorithms
  • AES-CBC-CS1A7494
  • AES-CBC-CS2A7494
  • AES-CBC-CS3A7494
  • AES-CBCA7494
  • AES-CCMA7494
  • AES-CFB128A7494
  • AES-CFB1A7494
  • AES-CFB8A7494
  • AES-CMACA7494
  • AES-CTRA7494
  • AES-ECBA7511
  • AES-GCMA7507
  • AES-GMACA7507
  • AES-KWA7494
  • AES-KWPA7494
  • AES-OFBA7494
  • AES-XTS Testing Revision 2.0A7494
  • Counter DRBGA7441
  • ECDSA KeyGen (FIPS186-5)A7498
  • ECDSA KeyVer (FIPS186-5)A7498
  • ECDSA SigGen (FIPS186-5)A7498
  • ECDSA SigVer (FIPS186-5)A7498
  • Hash DRBGA7441
  • HMAC DRBGA7441
  • HMAC-SHA-1A7498
  • HMAC-SHA2-224A7498
  • HMAC-SHA2-256A7498
  • HMAC-SHA2-384A7498
  • HMAC-SHA2-512/224A7498
  • HMAC-SHA2-512/256A7498
  • HMAC-SHA2-512A7498
  • HMAC-SHA3-224A7452
  • HMAC-SHA3-256A7452
  • HMAC-SHA3-384A7452
  • HMAC-SHA3-512A7452
  • KAS-ECC-SSC Sp800-56Ar3A7498
  • KAS-FFC-SSC Sp800-56Ar3A7456
  • KDA HKDF Sp800-56Cr1A7440
  • KDA OneStep SP800-56Cr2A7455
  • KDA TwoStep SP800-56Cr2A7455
  • KDF ANS 9.42A7498
  • KDF ANS 9.63A7498
  • KDF SP800-108A7454
  • KDF SSHA7511
  • PBKDFA7498
  • RSA KeyGen (FIPS186-5)A7498
  • RSA SigGen (FIPS186-5)A7498
  • RSA SigVer (FIPS186-4)A7498
  • RSA SigVer (FIPS186-5)A7498
  • Safe Primes Key GenerationA7456
  • Safe Primes Key VerificationA7456
  • SHA-1A7498
  • SHA2-224A7498
  • SHA2-256A7498
  • SHA2-384A7498
  • SHA2-512/224A7498
  • SHA2-512/256A7498
  • SHA2-512A7498
  • SHA3-224A7452
  • SHA3-256A7452
  • SHA3-384A7452
  • SHA3-512A7452
  • SHAKE-128A7452
  • SHAKE-256A7452
  • TLS v1.2 KDF RFC7627A7498
  • TLS v1.3 KDFA7440
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, HMAC, HMAC-SHA-256, CMAC
Asymmetric Algorithms
RSA-PSS, RSA-OAEP, ECDH, ECDSA, ECC, DHE, DH, Diffie-Hellman
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-3, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHAKE128, SHAKE256, PBKDF2, PBKDF
Schemes
MAC, Key Exchange, Key Agreement
Protocols
SSH, TLS v1.2, TLS v1.3, TLS 1.2, TLS 1.3, TLS, IKE
Randomness
DRBG, RNG, RBG
Libraries
OpenSSL
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Trusted Execution Environments
PSP, SSC

Security level
Level 1

Creation date D:20260724083401-04'00'
Modification date D:20260724083401-04'00'
Pages 68
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

CVE matches

ID Links Severity CVSS Score Published on
Base score
CVE-2024-6387
C N
HIGH 8.1 01.07.2024

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5438,
  "dgst": "ac1488e797545c40",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA KeyGen (FIPS186-5)A7498",
        "#A7441",
        "#A7450",
        "AES-CTRA7494",
        "SHA2-512A7498",
        "#A7493",
        "#A7502",
        "SHA2-384A7498",
        "HMAC-SHA2-512/224A7498",
        "AES-ECBA7511",
        "ECDSA SigGen (FIPS186-5)A7498",
        "Hash DRBGA7441",
        "ECDSA KeyVer (FIPS186-5)A7498",
        "AES-CBC-CS3A7494",
        "#A7507",
        "#A7492",
        "HMAC-SHA2-256A7498",
        "#A7444",
        "#A7494",
        "AES-CFB8A7494",
        "HMAC-SHA2-512/256A7498",
        "KDF ANS 9.63A7498",
        "RSA KeyGen (FIPS186-5)A7498",
        "#A7495",
        "#A7508",
        "#A7503",
        "#A7497",
        "AES-CMACA7494",
        "KDA TwoStep SP800-56Cr2A7455",
        "SHA3-384A7452",
        "#A7500",
        "RSA SigVer (FIPS186-5)A7498",
        "#A7456",
        "SHA2-512/256A7498",
        "PBKDFA7498",
        "#A7447",
        "#A7511",
        "Safe Primes Key GenerationA7456",
        "TLS v1.2 KDF RFC7627A7498",
        "KDF SP800-108A7454",
        "HMAC-SHA3-256A7452",
        "Counter DRBGA7441",
        "#A7505",
        "ECDSA SigVer (FIPS186-5)A7498",
        "#A7501",
        "AES-CBC-CS2A7494",
        "AES-XTS Testing Revision 2.0A7494",
        "AES-GMACA7507",
        "#A7438",
        "HMAC-SHA2-224A7498",
        "SHAKE-128A7452",
        "#A7455",
        "HMAC-SHA2-384A7498",
        "#A7496",
        "#A7443",
        "#A7452",
        "AES-KWA7494",
        "AES-CBC-CS1A7494",
        "AES-GCMA7507",
        "HMAC-SHA2-512A7498",
        "HMAC DRBGA7441",
        "AES-CFB1A7494",
        "KAS-ECC-SSC Sp800-56Ar3A7498",
        "Safe Primes Key VerificationA7456",
        "AES-KWPA7494",
        "KAS-FFC-SSC Sp800-56Ar3A7456",
        "#A7449",
        "#A7445",
        "AES-CBCA7494",
        "#A7442",
        "SHA-1A7498",
        "#A7499",
        "#A7510",
        "#A7446",
        "#A7509",
        "SHA2-512/224A7498",
        "HMAC-SHA-1A7498",
        "HMAC-SHA3-512A7452",
        "KDF ANS 9.42A7498",
        "AES-CFB128A7494",
        "KDA OneStep SP800-56Cr2A7455",
        "SHA2-256A7498",
        "KDA HKDF Sp800-56Cr1A7440",
        "#A7451",
        "#A7498",
        "#A7453",
        "RSA SigGen (FIPS186-5)A7498",
        "HMAC-SHA3-384A7452",
        "RSA SigVer (FIPS186-4)A7498",
        "SHA3-256A7452",
        "#A7506",
        "#A7448",
        "SHA3-512A7452",
        "#A7504",
        "SHAKE-256A7452",
        "#A7454",
        "TLS v1.3 KDFA7440",
        "AES-OFBA7494",
        "SHA3-224A7452",
        "SHA2-224A7498",
        "#A7440",
        "AES-CCMA7494",
        "KDF SSHA7511",
        "HMAC-SHA3-224A7452"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*",
        "cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2023"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2024-6387"
      ]
    },
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC-CS1",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC-CS2",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CBC-CS3",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Key Length - 128, 192, 256",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CFB1",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CFB128",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CFB8",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A7438, A7442, A7443, A7453, A7492, A7493, A7494, A7508, A7509, A7510, A7511",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A7447, A7448, A7449, A7450, A7499, A7500, A7501, A7502, A7503, A7504, A7505, A7506, A7507",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal Key Length - 128, 192, 256 IV Generation Mode - 8.2.2",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GMAC",
            "cavpCertName": "A7447, A7448, A7449, A7450, A7499, A7500, A7501, A7502, A7503, A7504, A7505, A7506, A7507",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-KW",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-KWP",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38F"
          },
          {
            "algorithm": "AES-OFB",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A7438, A7442, A7443, A7492, A7493, A7494",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A7441",
            "properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Curve - P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512, SHA2-512/224, SHA2-512/256 Component - No",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A7446, A7452",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512 Component - No",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512, SHA2-512/224, SHA2-512/256",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A7446, A7452",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A7441",
            "properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A7441",
            "properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 224",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 256",
            "cavpCertName": "A7444, A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 384",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512/224",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2- 512/256",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 224",
            "cavpCertName": "A7446, A7452",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 256",
            "cavpCertName": "A7446, A7452",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 384",
            "cavpCertName": "A7446, A7452",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA3- 512",
            "cavpCertName": "A7446, A7452",
            "properties": "Key Length - Key Length: 112-524288 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Domain Parameter Generation Methods - P-224, P-256, P- 384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A7456",
            "properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem -",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDA HKDF Sp800-56Cr1",
            "cavpCertName": "A7440",
            "properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2- 384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "KDA OneStep SP800-56Cr2",
            "cavpCertName": "A7455",
            "properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "KDA TwoStep SP800-56Cr2",
            "cavpCertName": "A7455",
            "properties": "MAC Salting Methods - default, random KDF Mode - feedback Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8",
            "reference": "SP 800-56C Rev. 2"
          },
          {
            "algorithm": "KDF ANS 9.42 (CVL)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "KDF Type - DER Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 8-4096 Increment 8",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF ANS 9.42 (CVL)",
            "cavpCertName": "A7446, A7452",
            "properties": "KDF Type - DER Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512 Key Data Length - Key Data Length: 8-4096 Increment 8",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF ANS 9.63 (CVL)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2- 512, SHA2-512/224, SHA2-512/256 Key Data Length - Key Data Length: 128-4096 Increment 8",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF ANS 9.63 (CVL)",
            "cavpCertName": "A7446, A7452",
            "properties": "Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3- 512 Key Data Length - Key Data Length: 128-4096 Increment 8",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "KDF SP800-108",
            "cavpCertName": "A7454",
            "properties": "KDF Mode - Counter, Feedback Supported Lengths - Supported Lengths: 8, 72, 128, 776, 3456, 4096",
            "reference": "SP 800-108 Rev. 1"
          },
          {
            "algorithm": "KDF SSH (CVL)",
            "cavpCertName": "A7453, A7508, A7509, A7510, A7511",
            "properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "PBKDF",
            "cavpCertName": "A7445, A7446, A7451, A7452, A7495, A7496, A7497, A7498",
            "properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
            "reference": "SP 800-132"
          },
          {
            "algorithm": "RSA KeyGen (FIPS186-5)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Key Generation Mode - probableWithProbableAux Modulo - 2048, 3072, 4096 Primality Tests - 2powSecStr Private Key Format - standard",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-5)",
            "cavpCertName": "A7445, A7446, A7451, A7452, A7495, A7496, A7497, A7498",
            "properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-4)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024",
            "reference": "FIPS 186-4"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A7445, A7446, A7451, A7452, A7495, A7496, A7497, A7498",
            "properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Safe Primes Key Generation",
            "cavpCertName": "A7456",
            "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "Safe Primes Key Verification",
            "cavpCertName": "A7456",
            "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP- 4096, MODP-6144, MODP-8192",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A7444, A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512/224",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512/256",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA3-224",
            "cavpCertName": "A7446, A7452",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-256",
            "cavpCertName": "A7446, A7452",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-384",
            "cavpCertName": "A7446, A7452",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHA3-512",
            "cavpCertName": "A7446, A7452",
            "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHAKE-128",
            "cavpCertName": "A7446, A7452",
            "properties": "Output Length - Output Length: 16-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "SHAKE-256",
            "cavpCertName": "A7446, A7452",
            "properties": "Output Length - Output Length: 16-65536 Increment 8",
            "reference": "FIPS 202"
          },
          {
            "algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
            "cavpCertName": "A7445, A7451, A7495, A7496, A7497, A7498",
            "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "TLS v1.3 KDF (CVL)",
            "cavpCertName": "A7440",
            "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
            "reference": "SP 800-135 Rev. 1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Compute a message digest",
            "indicator": "EVP_DigestFinal_ex returns 1",
            "inputs": "Message",
            "name": "Message digest",
            "outputs": "Digest value",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "Hashing"
          },
          {
            "description": "Compute output of XOF",
            "indicator": "EVP_DigestFinalXOF_ex returns 1",
            "inputs": "Message , output length",
            "name": "XOF",
            "outputs": "Digest value",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "Extendabl e Output Function"
          },
          {
            "description": "Encrypt a plaintext",
            "indicator": "EVP_EncryptFinal_ex returns 1",
            "inputs": "Plaintex t, AES key",
            "name": "Encryption",
            "outputs": "Cipherte xt",
            "rolesSspAccess": "Crypto Officer - AES key: W,E",
            "secFunImpl": "Encryptio n with AES"
          },
          {
            "description": "Decrypt a plaintext",
            "indicator": "EVP_DecryptFinal_ex returns 1",
            "inputs": "Ciphert ext, AES key",
            "name": "Decryption",
            "outputs": "Plaintext",
            "rolesSspAccess": "Crypto Officer - AES key: W,E",
            "secFunImpl": "Decryptio n with AES"
          },
          {
            "description": "Encrypt and authenticate a plaintext",
            "indicator": "AES GCM: EVP_CIPHER_REDHAT_FIPS_INDICATOR_A PPROVED; Others: EVP_EncryptFinal_ex returns 1",
            "inputs": "AES key, IV (only CCM and GCM), plaintex t",
            "name": "Authentica ted Encryption",
            "outputs": "Cipherte xt, MAC tag (only CCM and GCM)",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - AES-GCM IV: W,E",
            "secFunImpl": "Authentic ated Encryptio n with AES"
          },
          {
            "description": "Decrypt and authenticate a ciphertext",
            "indicator": "AES GCM: EVP_CIPHER_REDHAT_FIPS_INDICATOR_A PPROVED; Others: EVP_DecryptFinal_ex returns 1",
            "inputs": "AES key, cipherte xt, MAC tag (only CCM and GCM), IV (only CCM",
            "name": "Authentica ted Decryption",
            "outputs": "Plaintext or failure",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - AES-GCM IV: W,E",
            "secFunImpl": "Authentic ated Decryptio n with AES"
          },
          {
            "description": "Computes a MAC tag",
            "indicator": "HMAC: EVP_MAC_REDHAT_FIPS_INDICATOR_APPR OVED; Others: EVP_MAC_final returns 1",
            "inputs": "GCM) Message , AES or HMAC key",
            "name": "Message Authentica tion Code Generation",
            "outputs": "MAC tag",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E - AES-GCM IV: W,E",
            "secFunImpl": "MAC Generatio n with AES- GMAC MAC Verificatio n with AES- GMAC MAC Generatio n with AES- CMAC or HMAC"
          },
          {
            "description": "Computes a MAC tag",
            "indicator": "EVP_MAC_final returns 1",
            "inputs": "Message , AES key",
            "name": "Message Authentica tion Code Verificatio n",
            "outputs": "MAC tag",
            "rolesSspAccess": "Crypto Officer - AES key: W,E - AES-GCM IV: W,E",
            "secFunImpl": "MAC Verificatio n with AES- GMAC"
          },
          {
            "description": "Derive a key from a key- derivation key using KBKDF",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Key- derivati on key",
            "name": "Key derivation with KBKDF",
            "outputs": "KBKDF Derived key",
            "rolesSspAccess": "Crypto Officer - Key- derivation key: W,E - KBKDF Derived key: G,R",
            "secFunImpl": "Key derivation with KBKDF"
          },
          {
            "description": "Derive a key from a shared secret using HKDF",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation with HKDF",
            "outputs": "HKDF Derived key",
            "rolesSspAccess": "Crypto Officer - HKDF Derived key: G,R - Shared secret: W,E",
            "secFunImpl": "Key derivation with HKDF"
          },
          {
            "description": "Derive a key from a shared secret using TLS KDF",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation with TLS KDF",
            "outputs": "TLS Derived key",
            "rolesSspAccess": "Crypto Officer - Shared secret: W,E - TLS Derived key: G,R",
            "secFunImpl": "Key derivation with TLS 1.2 KDF Key derivation with TLS 1.3 KDF"
          },
          {
            "description": "Derive a key from a shared secret using SSH KDF",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation with SSH KDF",
            "outputs": "SSH Derived key",
            "rolesSspAccess": "Crypto Officer - Shared secret: W,E - SSH",
            "secFunImpl": "Key derivation with SSH KDF"
          },
          {
            "description": "Derive a key from a shared secret using X9.63 KDF",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation with X9.63 KDF",
            "outputs": "X9.63 Derived key",
            "rolesSspAccess": "G,R Crypto Officer - Shared secret: W,E - X9.63 Derived key:",
            "secFunImpl": "Key derivation with X9.63 KDF"
          },
          {
            "description": "Derive a key from a shared secret using X9.42 KDF",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation using X9.42 KDF",
            "outputs": "X9.42 Derived key",
            "rolesSspAccess": "Crypto Officer - Shared secret: W,E - X9.42 Derived key: G,R",
            "secFunImpl": "Key derivation with X9.42 KDF"
          },
          {
            "description": "Derive a key from a shared secret using KDA OneStep",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation with KDA OneStep",
            "outputs": "KDA OneStep Derived key",
            "rolesSspAccess": "Crypto Officer - KDA OneStep Derived key: G,R - Shared",
            "secFunImpl": "Key derivation using KDA OneStep"
          },
          {
            "description": "Derive a key from a shared secret using KDA OneStep",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Shared secret",
            "name": "Key derivation with KDA TwoStep",
            "outputs": "KDA TwoStep Derived key",
            "rolesSspAccess": "Crypto Officer - KDA TwoStep Derived key: G,R - Shared secret: W,E",
            "secFunImpl": "Key derivation using KDA TwoStep"
          },
          {
            "description": "Derive a key from a password",
            "indicator": "EVP_KDF_REDHAT_FIPS_INDICATOR_APPR OVED",
            "inputs": "Passwor d, salt, iteration count",
            "name": "Password- based key derivation",
            "outputs": "PBKDF Derived key",
            "rolesSspAccess": "Crypto Officer - Password: W,E - PBKDF Derived key:",
            "secFunImpl": "Key derivation with PBKDF"
          },
          {
            "description": "Generate random bytes",
            "indicator": "EVP_RAND_generate returns 1",
            "inputs": "Seed, Output length",
            "name": "Random number generation",
            "outputs": "Random bytes",
            "rolesSspAccess": "G,R Crypto Officer - Entropy input: W,E - DRBG seed: G,E - Internal state (V, Key): G,E - Internal state (V, C): G,E",
            "secFunImpl": "Random Number Generatio n with DRBG"
          },
          {
            "description": "Compute a shared secret",
            "indicator": "EVP_PKEY_derive returns 1",
            "inputs": "DH private key, DH public key; EC private key, EC public key",
            "name": "Shared secret computatio n",
            "outputs": "Shared secret",
            "rolesSspAccess": "Crypto Officer - Shared secret: G,R - DH private key: W,E - DH public key: W,E - EC private key: W,E - EC public key: W,E",
            "secFunImpl": "KAS-FFC- SSC Shared secret computati on KAS-ECC- SSC Shared secret computati on"
          },
          {
            "description": "Generate a signature",
            "indicator": "RSA: OSSL_RH_FIPSINDICATOR_APPROVED and EVP_SIGNATURE_REDHAT_FIPS_INDICATO R_APPROVED; ECDSA: OSSL_RH_FIPSINDICATOR_APPROVED",
            "inputs": "Message , RSA or EC private key",
            "name": "Signature generation",
            "outputs": "Signatur e",
            "rolesSspAccess": "Crypto Officer - RSA private key: W,E - EC private key: W,E",
            "secFunImpl": "Signature Generatio n with RSA Signature Generatio n with ECDSA"
          },
          {
            "description": "Verify a siganture",
            "indicator": "RSA: OSSL_RH_FIPSINDICATOR_APPROVED and EVP_SIGNATURE_REDHAT_FIPS_INDICATO R_APPROVED; ECDSA: OSSL_RH_FIPSINDICATOR_APPROVED",
            "inputs": "Message , signatur e, RSA or EC public key",
            "name": "Signature verification",
            "outputs": "Pass/fail",
            "rolesSspAccess": "Crypto Officer - RSA public key: W,E - EC public key: W,E",
            "secFunImpl": "Signature Verificatio n with RSA Signature Verificatio n with ECDSA Signature Verificatio n (Legacy)"
          },
          {
            "description": "Generate a key pair",
            "indicator": "EVP_PKEY_generate returns 1",
            "inputs": "Group; Curve; Modulu s bits",
            "name": "Key pair generation",
            "outputs": "DH key pair; EC key pair; RSA key pair",
            "rolesSspAccess": "Crypto Officer - Module Generated DH private key: G,R - Module Generated DH public key: G,R - Module Generated RSA private key: G,R - Module Generated RSA public key: G,R - Module Generated EC private",
            "secFunImpl": "Key Pair Generatio n with RSA Key Pair Generatio n with ECDSA Key Pair Generatio n with Safe Primes"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "key: G,R - Module Generated EC public key: G,R - Intermediat e key generation value: G,E,Z",
            "secFunImpl": ""
          },
          {
            "description": "Verify an EC public key",
            "indicator": "EVP_PKEY_public_check or EVP_PKEY_private_check or EVP_PKEY_check returns 1",
            "inputs": "EC public key",
            "name": "Public key verification",
            "outputs": "Pass/fail",
            "rolesSspAccess": "Crypto Officer - EC public key: W,E",
            "secFunImpl": "Public Key Verificatio n with ECDSA"
          },
          {
            "description": "Verify a DH key pair",
            "indicator": "EVP_PKEY_public_check or EVP_PKEY_private_check or EVP_PKEY_check returns 1",
            "inputs": "DH public key; DH private key",
            "name": "Key pair verification",
            "outputs": "Pass/fail",
            "rolesSspAccess": "Crypto Officer - DH private key: W,E - DH public key: W,E",
            "secFunImpl": "Key Pair Verificatio n with Safe Primes"
          },
          {
            "description": "Show the name and version information (i.e., via list_provider_i nfo())",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show version",
            "outputs": "Name and version informat ion",
            "rolesSspAccess": "Unauthentic ated",
            "secFunImpl": "None"
          },
          {
            "description": "Return the module status",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show status",
            "outputs": "Module status",
            "rolesSspAccess": "Unauthentic ated",
            "secFunImpl": "None"
          },
          {
            "description": "Perform CASTs and integrity test",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Self-tests",
            "outputs": "Pass/fail results of self-tests",
            "rolesSspAccess": "Unauthentic ated",
            "secFunImpl": "Encryptio n with AES Decryptio n with AES Authentic ated Encryptio n with AES Authentic ated Decryptio n with AES KAS-FFC- SSC Shared secret computati on KAS-ECC- SSC"
          },
          {
            "description": "Description",
            "indicator": "Indicator",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Outputs Security",
            "rolesSspAccess": "",
            "secFunImpl": "SSP Access"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "Functions Shared secret computati on Hashing MAC Generatio n with AES- CMAC or HMAC MAC Generatio n with AES- GMAC MAC Verificatio n with AES- GMAC Key Pair Generatio n with RSA Key Pair Generatio n with ECDSA Public Key Verificatio n with ECDSA Signature Generatio n with RSA Signature Verificatio n with RSA Signature Verificatio n (Legacy) Signature Generatio n with ECDSA Signature Verificatio n with ECDSA",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "Indicator",
            "indicator": "Inputs",
            "inputs": "Outputs",
            "name": "Name Description",
            "outputs": "Security Functions",
            "rolesSspAccess": "",
            "secFunImpl": "SSP Access"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "Random Number Generatio n with DRBG Key derivation with KBKDF Key derivation with HKDF Key derivation with TLS 1.2 KDF Key derivation with TLS 1.3 KDF Key derivation with SSH KDF Key derivation with X9.63 KDF Key derivation with X9.42 KDF Key derivation with PBKDF Key Pair Generatio n with Safe Primes Key derivation using KDA OneStep Key derivation using KDA TwoStep",
            "rolesSspAccess": "",
            "secFunImpl": ""
          },
          {
            "description": "None",
            "indicator": "Any SSP",
            "inputs": "None",
            "name": "Zeroization Zeroize any SSP",
            "outputs": "None",
            "rolesSspAccess": "",
            "secFunImpl": "Unauthentic ated"
          },
          {
            "description": "Description",
            "indicator": "Indicator",
            "inputs": "Inputs",
            "name": "Name",
            "outputs": "Outputs",
            "rolesSspAccess": "SSP Access",
            "secFunImpl": "Security"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- AES key: Z - HMAC key: Z - Key- derivation key: Z - Shared secret: Z - Password: Z - KBKDF Derived key: Z - HKDF Derived key: Z - X9.63 Derived key: Z - X9.42 Derived key: Z - SSH Derived key: Z - KDA OneStep Derived key: Z - KDA TwoStep Derived key: Z - TLS Derived key: Z - PBKDF Derived key: Z - Entropy input: Z - DRBG seed: Z - Internal state (V, Key): Z - Internal state (V, C): Z - DH private key: Z - DH public",
            "secFunImpl": "Functions"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "key: Z - EC private key: Z - EC public key: Z - RSA private key: Z - RSA public key: Z - Intermediat e key generation value: Z",
            "secFunImpl": ""
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA-1 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA3-256 (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA3-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA3-256 (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA3-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7444)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2- 256 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA3- 256 (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA3-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA3- 256 (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA3-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7447) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7447) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7448) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7448) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7449) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7449) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7450) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7450) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7499) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7499) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7500) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7500) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7501) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7501) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7502) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7502) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7503) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7503) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7504) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7504) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7505) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7505) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7506) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7506) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7507) - Encrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, encrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7507) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7438) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7442) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7443) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7453) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7492) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7493) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7494) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7508) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7509) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7510) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7511) - Decrypt",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128-bit keys, decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SP800-108 (A7454)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Key based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "Counter mode; HMAC-SHA-256; 128-bit input key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A7440)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224, SHA2- 256; 48-bit, 392-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDA TwoStep SP800-56Cr2 (A7455)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA2-256, 48-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDA OneStep SP800-56Cr2 (A7455)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-224; 392-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SSH (A7453)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based SSH KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1; 1056-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SSH (A7508)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based SSH KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1; 1056-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SSH (A7509)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based SSH KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1; 1056-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SSH (A7510)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based SSH KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1; 1056-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF SSH (A7511)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based SSH KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1; 1056-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.2 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 384-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.2 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 384-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.2 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 384-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.2 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 384-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.2 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 384-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.2 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 384-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "TLS v1.3 KDF (A7440)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based TLS v1.3 KDF key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "Extract and expand modes; SHA-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "PBKDF (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Password-based key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A7441)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90Ar1 including health test per section 11.3 (instantiate, generate, reseed)",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "AES-128 with prediction resistance",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A7441)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90Ar1 including health test per section 11.3 (instantiate, generate,",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256 with prediction resistance",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A7441)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Compliant with SP 800-90Ar1 including health test per section 11.3 (instantiate, generate, reseed)",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA-256 with prediction resistance",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A7456)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "ffdhe2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Shared secret computation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7445)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7451)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7495)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7496)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7497)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7498)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-4) (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7445)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification; SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7451)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification; SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7495)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification; SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7496)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification; SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7497)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification; SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7498)",
            "condition": "Key pair generation",
            "details": "Signature generation \u0026 verification; SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "SHA2-256",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature generation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Digital signature verification",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; P-224, P- 256, P-384, P-521",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Safe Primes Key Generation (A7456)",
            "condition": "Key pair generation",
            "details": "SP 800-56Arev3 Section 5.6.2.1.4",
            "indicator": "Successful key pair generation",
            "testMethod": "PCT",
            "testProps": "N/A",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.63 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-256; 192-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7445)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7446)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7451)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7452)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7495)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7496)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7497)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KDF ANS 9.42 (A7498)",
            "condition": "Test runs at power-on before the integrity test",
            "details": "Industry-based ANS X9.42 key derivation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with AES-128 KW; 160-bit input secret",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Automatically entered whenever an approved service is requested",
            "name": "Approved mode",
            "statusIndicator": "Equivalent to the indicator (specified in Section 4.3) of the requested service",
            "type": "Approved"
          },
          {
            "description": "Automatically entered whenever a non- approved service is requested",
            "name": "Non-approved mode",
            "statusIndicator": "Equivalent to the indicator (specified in Section 4.3) of the requested service",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES GCM (external IV)",
            "use": "Authenticated encryption (not CAVP tested)"
          },
          {
            "name": "HMAC (\u003c 112-bit keys)",
            "use": "Message authentication"
          },
          {
            "name": "KBKDF, KDA OneStep, KDA TwoStep, HKDF, ANS X9.42 KDF, ANS X9.63 KDF (\u003c 112-bit keys)",
            "use": "Key derivation"
          },
          {
            "name": "KDA OneStep, KDA TwoStep (SHAKE128, SHAKE256)",
            "use": "Key derivation"
          },
          {
            "name": "ANS X9.42 KDF (SHAKE128, SHAKE256)",
            "use": "Key derivation"
          },
          {
            "name": "ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256)",
            "use": "Key derivation"
          },
          {
            "name": "SSH KDF (SHA-512/224, SHA-512/256, SHA-3, SHAKE128, SHAKE256)",
            "use": "Key derivation"
          },
          {
            "name": "TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224, SHA-512/256, SHA-3)",
            "use": "Key derivation"
          },
          {
            "name": "TLS 1.2 KDF without Extended Master Secret (SHA-1, SHA-224, SHA- 512/224, SHA-512/256, SHA-256, SHA-384, SHA-3)",
            "use": "Key derivation"
          },
          {
            "name": "TLS 1.3 KDF (SHA-1, SHA-224, SHA-512, SHA-512/224, SHA-512/256, SHA-3)",
            "use": "Key derivation"
          },
          {
            "name": "PBKDF2 (\u003c 8 characters password; \u003c 128 salt length; \u003c 1000 iterations; \u003c 112- bit keys)",
            "use": "Password-based key derivation"
          },
          {
            "name": "RSA (KAS1, KAS2 schemes)",
            "use": "Shared secret computation (not CAVP tested)"
          },
          {
            "name": "RSA and ECDSA (pre-hashed message)",
            "use": "Signature generation; Signature verification"
          },
          {
            "name": "RSA-PSS (invalid salt length)",
            "use": "Signature generation; Signature verification"
          },
          {
            "name": "RSA-OAEP",
            "use": "Asymmetric encryption; Asymmetric decryption (not CAVP tested)"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES GCM (external IV)",
            "description": "Encrypt a plaintext",
            "name": "Encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "HMAC (\u003c 112-bit keys)",
            "description": "Compute a MAC tag",
            "name": "Message authentication",
            "role": "CO"
          },
          {
            "alg_accessed": "KBKDF, KDA OneStep, KDA TwoStep, HKDF, ANS X9.42 KDF, ANS X9.63 KDF (\u003c 112-bit keys) KDA OneStep, KDA TwoStep (SHAKE128, SHAKE256) ANS X9.42 KDF (SHAKE128, SHAKE256) ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256) SSH KDF (SHA-512/224, SHA-512/256, SHA-3, SHAKE128, SHAKE256) TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224, SHA-512/256, SHA-3) TLS 1.2 KDF without Extended Master Secret (SHA-1, SHA- 224, SHA-512/224, SHA-512/256, SHA-256, SHA-384, SHA- 3) TLS 1.3 KDF (SHA-1, SHA-224, SHA-512, SHA-512/224, SHA-512/256, SHA-3)",
            "description": "Derive a key from a key- derivation key or a shared secret",
            "name": "Key derivation",
            "role": "CO"
          },
          {
            "alg_accessed": "PBKDF2 (\u003c 8 characters password; \u003c 128 salt length; \u003c 1000 iterations; \u003c 112-bit keys)",
            "description": "Derive a key from a password",
            "name": "Password-based key derivation",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA (KAS1, KAS2 schemes)",
            "description": "Compute a shared secret",
            "name": "Shared secret computation",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA and ECDSA (pre-hashed message) RSA-PSS (invalid salt length)",
            "description": "Generate a signature",
            "name": "Signature generation",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA and ECDSA (pre-hashed message) RSA-PSS (invalid salt length)",
            "description": "Verify a signature",
            "name": "Signature verification",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA-OAEP",
            "description": "Encrypt a plaintext",
            "name": "Asymmetric encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA-OAEP",
            "description": "Decrypt a ciphertext",
            "name": "Asymmetric decryption",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input parameters",
            "logicalInterface": "Data Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API output parameters",
            "logicalInterface": "Data Output",
            "physicalPort": "N/A"
          },
          {
            "data": "API function calls",
            "logicalInterface": "Control Input",
            "physicalPort": "N/A"
          },
          {
            "data": "API return codes, error queue",
            "logicalInterface": "Status Output",
            "physicalPort": "N/A"
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "1",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7496) - x86",
            "details": "Integrity test for fips.so",
            "indicator": "Module becomes operational",
            "testMethod": "Message authentication",
            "testProps": "256-bit key",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7451) - arm64",
            "details": "Integrity test for fips.so",
            "indicator": "Module becomes operational",
            "testMethod": "Message authentication",
            "testProps": "256-bit key",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Cryptographic module",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API input parameters",
            "sfiAlgo": "",
            "source": "Operator calling application (TOEPP)"
          },
          {
            "dest": "Operator calling application (TOEPP)",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "API output parameters",
            "sfiAlgo": "",
            "source": "Cryptographic module"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Zeroizes the SSPs contained within the cipher handle",
            "method": "Free cipher handle",
            "operatorId": "By calling the appropriate zeroization functions: AES key: EVP_CIPHER_CTX_free and EVP_MAC_CTX_free; HMAC key: EVP_MAC_CTX_free; Key-derivation key: EVP_KDF_CTX_free; Shared secret: EVP_KDF_CTX_free; Password: EVP_KDF_CTX_free; KBKDF Derived key: EVP_KDF_CTX_free; HKDF Derived key: EVP_KDF_CTX_free; TLS Derived key: EVP_KDF_CTX_free; SSH Derived key: EVP_KDF_CTX_free; X9.63 Derived key: EVP_KDF_CTX_free; X9.42 Derived key: EVP_KDF_CTX_free; PBKDF Derived key: EVP_KDF_CTX_free; KDA OneStep Derived key: EVP_KDF_CTX_free; KDA TwoStep Derived key: EVP_KDF_CTX_free; Entropy input: EVP_RAND_CTX_free; DRBG seed: EVP_RAND_CTX_free; Internal state: EVP_RAND_CTX_free; DH public \u0026 private key: EVP_PKEY_free; EC public \u0026 private key: EVP_PKEY_free; RSA public \u0026 private key: EVP_PKEY_free",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
          },
          {
            "description": "Automatically zeroized by the",
            "method": "Automatic",
            "operatorId": "N/A",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes,"
          },
          {
            "description": "module when no longer needed",
            "method": "",
            "operatorId": "",
            "rationale": "which renders the SSP values irretrievable"
          },
          {
            "description": "De-allocates the volatile memory used to store SSPs",
            "method": "Remove power from the module",
            "operatorId": "By unloading the module",
            "rationale": "Volatile memory used by the module is overwritten within nanoseconds when the module is unloaded. The successful completion of the removal of power from the module indicates that zeroization has completed."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [],
        "found": false,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "EC2 c7g.metal",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Amazon Linux 2023",
            "paa_pai": "Yes",
            "processors": "AWS Graviton3 (ARMv8-A)",
            "version": "3.2.2- 799901ad7ab41d45"
          },
          {
            "hardwarePlatform": "EC2 c6i.metal",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Amazon Linux 2023",
            "paa_pai": "Yes",
            "processors": "Intel Xeon Platinum 8375C (Sunny Cove)",
            "version": "3.2.2- 799901ad7ab41d45"
          },
          {
            "hardwarePlatform": "EC2 c7g.metal",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Amazon Linux 2023",
            "paa_pai": "No",
            "processors": "AWS Graviton3 (ARMv8-A)",
            "version": "3.2.2- 799901ad7ab41d45"
          },
          {
            "hardwarePlatform": "EC2 c6i.metal",
            "hypervisorHostOs": "N/A",
            "operatingSystem": "Amazon Linux 2023",
            "paa_pai": "No",
            "processors": "Intel Xeon Platinum 8375C (Sunny Cove)",
            "version": "3.2.2- 799901ad7ab41d45"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 6
          },
          "ECDSA": {
            "ECDSA": 84
          }
        },
        "FF": {
          "DH": {
            "DH": 33,
            "DHE": 1,
            "Diffie-Hellman": 7
          }
        },
        "RSA": {
          "RSA-OAEP": 3,
          "RSA-PSS": 3
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 5
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 18
        },
        "OFB": {
          "OFB": 1
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 7
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 3
        },
        "SSH": {
          "SSH": 38
        },
        "TLS": {
          "TLS": {
            "TLS": 18,
            "TLS 1.2": 11,
            "TLS 1.3": 14,
            "TLS v1.2": 20,
            "TLS v1.3": 5
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 29
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 56,
          "P-256": 36,
          "P-384": 54,
          "P-521": 56
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 1,
          "AES-128": 11,
          "AES-192": 2,
          "AES-256": 5,
          "AES-GCM 96": 1,
          "HMAC SHA-256": 3,
          "HMAC- SHA-512": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-256": 8,
          "PKCS 1": 1,
          "PKCS#1": 44,
          "SHA- 224": 1,
          "SHA- 3": 1,
          "SHA-1": 50,
          "SHA-224": 6,
          "SHA-256": 74,
          "SHA-3": 12,
          "SHA-384": 2,
          "SHA-512": 3,
          "SHA2- 256": 1,
          "SHA2- 384": 1,
          "SHA2- 512": 3,
          "SHA2-224": 7,
          "SHA2-256": 17,
          "SHA2-384": 8,
          "SHA2-512": 25,
          "SHA3- 512": 4,
          "SHA3-224": 6,
          "SHA3-256": 14,
          "SHA3-384": 6,
          "SHA3-512": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 32,
          "PBKDF2": 7
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 50
          },
          "SHA2": {
            "SHA-224": 6,
            "SHA-256": 74,
            "SHA-384": 2,
            "SHA-512": 3
          },
          "SHA3": {
            "SHA-3": 12,
            "SHA3-224": 6,
            "SHA3-256": 14,
            "SHA3-384": 6,
            "SHA3-512": 1
          }
        },
        "SHAKE": {
          "SHAKE128": 9,
          "SHAKE256": 9
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 43
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 8,
          "FIPS 180-4": 7,
          "FIPS 186-4": 3,
          "FIPS 186-5": 10,
          "FIPS 198-1": 11,
          "FIPS 202": 6,
          "FIPS PUB 140-3": 1,
          "FIPS186-4": 7,
          "FIPS186-5": 79
        },
        "NIST": {
          "SP 800-108": 1,
          "SP 800-132": 6,
          "SP 800-135": 7,
          "SP 800-38A": 10,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-38E": 2,
          "SP 800-38F": 2,
          "SP 800-56A": 4,
          "SP 800-56C": 3,
          "SP 800-90A": 3
        },
        "PKCS": {
          "PKCS 1": 1,
          "PKCS#1": 22
        },
        "RFC": {
          "RFC 3526": 1,
          "RFC 4253": 1,
          "RFC 5288": 2,
          "RFC 6668": 1,
          "RFC 7919": 1,
          "RFC7627": 13,
          "RFC8446": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 62,
            "AES-": 8,
            "AES-128": 11,
            "AES-192": 2,
            "AES-256": 5
          },
          "CAST": {
            "CAST": 299
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4,
            "HMAC": 26,
            "HMAC-SHA-256": 4
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 7
        },
        "IBM": {
          "SSC": 5
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA SigVer (FIPS186-5)A7498",
        "ECDSA KeyGen (FIPS186-5)A7498",
        "AES-CBCA7494",
        "AES-CFB8A7494",
        "HMAC-SHA2-512/256A7498",
        "KDF ANS 9.63A7498",
        "RSA KeyGen (FIPS186-5)A7498",
        "AES-CBC-CS2A7494",
        "SHA-1A7498",
        "AES-XTS Testing Revision 2.0A7494",
        "AES-GMACA7507",
        "AES-KWPA7494",
        "AES-CTRA7494",
        "HMAC-SHA-1A7498",
        "SHA2-512A7498",
        "SHA2-512/224A7498",
        "HMAC-SHA2-224A7498",
        "SHAKE-128A7452",
        "AES-CMACA7494",
        "HMAC-SHA3-512A7452",
        "KDF ANS 9.42A7498",
        "AES-CFB128A7494",
        "KDA OneStep SP800-56Cr2A7455",
        "HMAC-SHA2-384A7498",
        "KDA TwoStep SP800-56Cr2A7455",
        "SHA2-256A7498",
        "HMAC-SHA2-512/224A7498",
        "AES-ECBA7511",
        "KDA HKDF Sp800-56Cr1A7440",
        "SHA2-384A7498",
        "SHA3-384A7452",
        "RSA SigGen (FIPS186-5)A7498",
        "ECDSA SigGen (FIPS186-5)A7498",
        "HMAC-SHA3-384A7452",
        "RSA SigVer (FIPS186-5)A7498",
        "Hash DRBGA7441",
        "RSA SigVer (FIPS186-4)A7498",
        "SHA2-512/256A7498",
        "PBKDFA7498",
        "SHA3-256A7452",
        "ECDSA KeyVer (FIPS186-5)A7498",
        "SHA3-512A7452",
        "AES-CBC-CS3A7494",
        "AES-KWA7494",
        "SHAKE-256A7452",
        "KAS-FFC-SSC Sp800-56Ar3A7456",
        "Safe Primes Key GenerationA7456",
        "TLS v1.2 KDF RFC7627A7498",
        "KDF SP800-108A7454",
        "AES-OFBA7494",
        "TLS v1.3 KDFA7440",
        "SHA3-224A7452",
        "AES-CBC-CS1A7494",
        "HMAC-SHA3-256A7452",
        "AES-GCMA7507",
        "HMAC-SHA2-512A7498",
        "SHA2-224A7498",
        "HMAC DRBGA7441",
        "AES-CFB1A7494",
        "HMAC-SHA2-256A7498",
        "Counter DRBGA7441",
        "KAS-ECC-SSC Sp800-56Ar3A7498",
        "Safe Primes Key VerificationA7456",
        "AES-CCMA7494",
        "KDF SSHA7511",
        "HMAC-SHA3-224A7452"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A7444",
        "#A7494",
        "#A7501",
        "#A7445",
        "#A7441",
        "#A7442",
        "#A7450",
        "#A7495",
        "#A7499",
        "#A7508",
        "#A7510",
        "#A7446",
        "#A7503",
        "#A7438",
        "#A7509",
        "#A7497",
        "#A7493",
        "#A7502",
        "#A7455",
        "#A7451",
        "#A7498",
        "#A7453",
        "#A7500",
        "#A7496",
        "#A7456",
        "#A7506",
        "#A7443",
        "#A7447",
        "#A7448",
        "#A7452",
        "#A7511",
        "#A7504",
        "#A7454",
        "#A7507",
        "#A7492",
        "#A7505",
        "#A7440",
        "#A7449"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20260724083401-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20260724083401-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 972630,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.atsec.com/",
          "https://docs.aws.amazon.com/linux/al2023/ug/fips-mode.html"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 68
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "2157024b93a2e39d9f148d8d3dde5c51e4f5fad7bf0e5fcc499845ccc294b140",
      "source_hash": "e74697c6123e6def89ff914528ded7af24fb255071bb861477e90574253396b5",
      "txt_hash": "f28110ade391ccec7c707f00fac5f04d928587bd555319b4e816cc0b618351f3"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
    "date_sunset": "2031-07-26",
    "description": "The Amazon Linux 2023 OpenSSL FIPS Provider is a software library implementing general purpose cryptographic algorithms.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Amazon Linux 2023 OpenSSL FIPS Provider",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-07-27",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Amazon Web Services, Inc.",
    "vendor_url": "http://www.amazon.com"
  }
}