This page was not yet optimized for use on mobile devices.
Red Hat Enterprise Linux 9 Kernel Cryptographic API
Certificate details
| Certificate ID | #4796 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 11.09.2024 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | Interim validation. When operated in approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy. The module generates random strings whose strengths are modified by available entropy. |
| Exceptions |
|
| Description | The Red Hat Enterprise Linux 9 Kernel Cryptographic API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality |
| Tested configurations |
|
| Vendor | Red Hat(R), Inc. http://www.redhat.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, CMACHash functions
SHA-1, SHA-512, SHA-256, SHA512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2Schemes
MACProtocols
IKEv2, IPsecRandomness
DRBG, RNG, RBGBlock cipher modes
ECB, CBC, CTR, CFB, GCM, CCM, XTSSecurity level
Level 1Side-channel analysis
Fault InductionStandards
FIPS 140-3, FIPS PUB 140-3, FIPS 198-1, FIPS 186-4, FIPS 180-4, FIPS 202, FIPS186-4, FIPS 186-5, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38E, SP 800-90A, PKCS 1, PKCS#1, RFC 4106, RFC 7296Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4796,
"dgst": "ae46bd6ed6ba612b",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A3722",
"#A3720",
"Counter DRBGA3724",
"#A3635",
"#A3723",
"SHA-1A3722",
"RSA SigVer (FIPS186-4)A3722",
"#A3629",
"HMAC-SHA3-384A3728",
"#A4549",
"#A3645",
"HMAC-SHA2-512A3722",
"#A3721",
"#A3726",
"HMAC-SHA3-256A3728",
"HMAC-SHA3-512A3728",
"SHA3-512A3728",
"#A3641",
"#A3643",
"AES-GCMA3724",
"#A3640",
"SHA2-256A3722",
"SHA3-384A3728",
"#A3719",
"#A3639",
"SHA3-224A3728",
"#A3632",
"SHA2-224A3722",
"#A3636",
"HMAC DRBGA3724",
"#A3728",
"AES-GMACA3722",
"HMAC-SHA3-224A3728",
"SHA3-256A3728",
"#A3633",
"#A3724",
"HMAC-SHA2-384A3722",
"HMAC-SHA-1A3722",
"AES-CMACA3722",
"#A3722",
"#A3634",
"AES-CBCA4549",
"Hash DRBGA3724",
"#A3631",
"#A3646",
"#A3647",
"SHA2-384A3722",
"#A3725",
"AES-OFBA3726",
"AES-ECBA3724",
"#A3637",
"HMAC-SHA2-224A3722",
"#A3630",
"#A3727",
"#A3642",
"AES-CCMA3722",
"#A3638",
"AES-CBC-CS3A3727",
"#A3644",
"AES-CFB128A3725",
"SHA2-512A3722",
"AES-CTRA4549",
"AES-XTS Testing Revision 2.0A4549"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"9"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A3629",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3629",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3629",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3629",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3629",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3629",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3629",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3629",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3629",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3629",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3629",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3629",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3629",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3629",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3629",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3629",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A3629",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3629",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3629",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3629",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3629",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3629",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A3630",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A3630",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A3630",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A3630",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3630",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3630",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3630",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3630",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3631",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3632",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3633",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3634",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3634",
"properties": "Direction - Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3634",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3634",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3634",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3635",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3635",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3635",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3635",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3635",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3636",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3636",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3636",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3636",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3636",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3636",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3636",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3636",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3637",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3637",
"properties": "Direction - Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3637",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3637",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3637",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3638",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3638",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3638",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3638",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3638",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3639",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3639",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3639",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3639",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3639",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3639",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3639",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3639",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3639",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3639",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3639",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3640",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3640",
"properties": "Direction - Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3640",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3640",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3640",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3641",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3641",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3641",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3641",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3641",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3642",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3643",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3644",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3645",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3645",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3645",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3645",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3645",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3645",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3645",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A3645",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3645",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3645",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3645",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3645",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3645",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3646",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3646",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3646",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3646",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3646",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3646",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3646",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A3646",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3646",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3646",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3646",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3646",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3646",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3647",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3647",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3647",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3647",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3647",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3647",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3647",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A3647",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3647",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3647",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3647",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3647",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3647",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3719",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3719",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3719",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3719",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3719",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3719",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3719",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3719",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3719",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3720",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3720",
"properties": "Direction - Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3720",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3720",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3720",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3721",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3721",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3721",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3721",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3721",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A3722",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A3722",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A3722",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A3722",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3722",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3722",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A3722",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A3722",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3722",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3722",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3722",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A3722",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A3722",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A3722",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A3722",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A3722",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "RSA SigVer (FIPS186- 4)",
"cavpCertName": "A3722",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A3722",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A3722",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A3722",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A3722",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A3722",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3723",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3723",
"properties": "Direction - Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3723",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3723",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3723",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A3724",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A3724",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A3724",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A3724",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A3724",
"properties": "Prediction Resistance - No, Yes Mode - SHA-1, SHA2-256, SHA2-512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A3725",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A3726",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A3727",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A3728",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A3728",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A3728",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A3728",
"properties": "Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A3728",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A3728",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A3728",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A3728",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4549",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4549",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4549",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Compute a message digest",
"indicator": "crypto_shash_init returns 0",
"inputs": "Messag e",
"name": "Message digest",
"outputs": "Digest value",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "Hashing"
},
{
"description": "Wrap a key",
"indicator": "crypto_skcipher_set key returns 0; crypto_shash_init returns 0",
"inputs": "AES key, key to be wrappe d",
"name": "Key wrapping",
"outputs": "wrapped key",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E - HMA C key: W,E",
"secFunImpl": "Key wrapping"
},
{
"description": "Unwrap a key",
"indicator": "crypto_skcipher_set key returns 0; crypto_shash_init returns 0",
"inputs": "AES key, key to be unwrap ped",
"name": "Key unwrappin g",
"outputs": "unwrapped key",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E - HMA C",
"secFunImpl": "Key unwrappin g"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "key: W,E",
"secFunImpl": ""
},
{
"description": "Encrypt a plaintext",
"indicator": "crypto_skcipher_set key returns 0",
"inputs": "AES key, plaintex t",
"name": "Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Encryption with AES"
},
{
"description": "Decrypt a ciphertext",
"indicator": "crypto_skcipher_set key returns 0",
"inputs": "AES key, cipherte xt",
"name": "Decryptio n",
"outputs": "Plaintext",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Decryptio n with AES"
},
{
"description": "Encrypt and authentic ate a plaintext",
"indicator": "For all except AES GCM: crypto_aead_setkey returns 0; For AES GCM: crypto_aead_get_fla gs(tfm) has the CRYPTO_TFM_ FIPS_COMPLIANCE flag set",
"inputs": "AES key, plaintex t",
"name": "Authentica ted encryption",
"outputs": "Ciphertext, MAC tag",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Authentic ated encryption with AES"
},
{
"description": "Encrypt and authentic ate a ciphertext",
"indicator": "For all except AES GCM: crypto_aead_setkey returns 0; For AES GCM: crypto_aead_get_fla gs(tfm) has the CRYPTO_TFM_ FIPS_COMPLIANCE flag set",
"inputs": "AES key, cipherte xt, MAC tag",
"name": "Authentica ted decryption",
"outputs": "Plaintext or failure",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E",
"secFunImpl": "Authentic ated decryption with AES"
},
{
"description": "Compute a MAC tag",
"indicator": "crypto_shash_init returns 0",
"inputs": "AES: AES key, messag e; HMAC: HMAC key, messag e",
"name": "Message authentica tion generatio n",
"outputs": "MAC tag",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E - HMA C key: W,E",
"secFunImpl": "Message authentica tion"
},
{
"description": "Compute a MAC tag",
"indicator": "crypto_shash_init returns 0",
"inputs": "AES: AES key, messag e, MAC tag; HMAC: HMAC key, messag e, MAC tag",
"name": "Message authentica tion verificatio n",
"outputs": "Success/Fa ilure",
"rolesSspAccess": "Crypt o Offic er - AES key: W,E - HMA C key: W,E",
"secFunImpl": "Message authentica tion"
},
{
"description": "Generate random bytes",
"indicator": "crypto_rng_get_byt es returns 0",
"inputs": "Output length",
"name": "Random number generatio n",
"outputs": "Random bytes",
"rolesSspAccess": "Crypt o Offic er - Entro py input: W,E - DRB G seed: G,E - DRB G Inter nal state (V, Key): G,W, E - DRB G Inter nal state (V, C): G,W, E",
"secFunImpl": "Random number generatio n with DRBGs"
},
{
"description": "Compute an EDC (crc32, crct10dif)",
"indicator": "None",
"inputs": "Messag e",
"name": "Error detection code",
"outputs": "EDC",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Compress data (deflate, lz4, lz4hc, lzo, zlibdeflat e, zstd)",
"indicator": "None",
"inputs": "Data",
"name": "Compressi on",
"outputs": "Compresse d data",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Use the kernel to perform various non- cryptogra phic operation s",
"indicator": "None",
"inputs": "Identifie r, various argume nts",
"name": "Generic system call",
"outputs": "Various return values",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Return the module name and version informatio n",
"indicator": "None",
"inputs": "N/A",
"name": "Show version",
"outputs": "Module name and version",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Return the module status",
"indicator": "None",
"inputs": "N/A",
"name": "Show status",
"outputs": "Module status",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and integrity tests",
"indicator": "None",
"inputs": "N/A",
"name": "Self-test",
"outputs": "Pass/fail",
"rolesSspAccess": "Crypt o Offic er",
"secFunImpl": "Encryption with AES Decryptio n with AES Hashing Message authentica tion Random number generatio n with DRBGs Signature verificatio n with RSA Authentic ated encryption with AES Authentic ated"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "decryption with AES"
},
{
"description": "Zeroize all SSPs",
"indicator": "None",
"inputs": "Any SSP",
"name": "Zeroizatio n",
"outputs": "N/A",
"rolesSspAccess": "Crypt o Offic er - AES key: Z - HMA C key: Z - Entro py input: Z - DRB G Inter nal state (V, Key): Z - DRB G Inter nal state (V, C): Z - DRB G seed: Z",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA-1 (A3629)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3645)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3646)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3647)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A3722)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3629)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3645)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3646)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A3647)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA2-224 (A3722)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3629)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3645)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3646)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3647)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A3722)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3629)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3645)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3646)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3647)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A3722)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3629)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3645)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3646)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3647)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A3722)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A3630)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A3728)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A3630)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA3-256 (A3728)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A3630)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A3728)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A3630)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A3728)",
"condition": "Module initialization",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "0-8184 bit messages",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3634)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3635)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3637)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3638)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3640)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3641)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3720)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3721)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3723)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB (A3724)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3634)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3635)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3637)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3638)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3640)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3641)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3720)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3721)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3723)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A3724)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CBC (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4549)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4549)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A3633)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A3644)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A3727)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A3633)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A3644)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A3727)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A3643)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB128 (A3631)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB128 (A3642)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB128 (A3725)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES- CFB128 (A3631)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB128 (A3642)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES- CFB128 (A3725)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4549)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4549)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192,",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "256 bit keys; 128-bit IVs",
"type": ""
},
{
"algorithmOrTest": "AES-CCM (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; 128-bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3634)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3635)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3637)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3638)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3640)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3641)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3720)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3721)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3723)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys; Internal 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3724)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128, 192, 256 bit keys;",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "Internal 96- bit IVs",
"type": ""
},
{
"algorithmOrTest": "AES-GCM (A3629)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3634)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3635)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3636)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3637)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3638)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3639)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3640)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3641)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3719)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3720)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3721)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3722)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3723)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A3724)",
"condition": "Module initialization",
"details": "Encryption, Decryption",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128, 192, 256 bit keys; external 96- bit IVs",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3629)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3639)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3719)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Encrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3722)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CMAC (A3629)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3639)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3719)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A3722)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "Decrypt with 128 and 256 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3629)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3645)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "SHA-1, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3646)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3647)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A3722)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3629)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3645)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3646)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3647)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A3722)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3629)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3645)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3646)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3647)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A3722)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256, 32-64 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3629)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3645)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3646)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3647)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A3722)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3629)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "SHA2-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3645)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3646)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3647)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A3722)",
"condition": "Module initialization. Before integrity test.",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3630)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A3728)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-224, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3630)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-256, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A3728)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-256, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3630)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A3728)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-384, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3630)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A3728)",
"condition": "Module initialization",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA3-512, 32-1048 bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3629)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "Counter DRBG (A3634)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3635)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3636)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3637)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3638)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3639)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "available for use.",
"testMethod": "",
"testProps": "of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "Counter DRBG (A3640)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3641)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3719)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3720)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3721)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3722)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3723)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3724)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3629)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3634)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3635)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3636)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3637)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "Counter DRBG (A3638)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3639)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3640)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3641)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3719)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3720)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "available for use.",
"testMethod": "",
"testProps": "of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "Counter DRBG (A3721)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3722)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3723)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A3724)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128, 192, 256 bit keys With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3629)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3634)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3635)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3636)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3637)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3638)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3639)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3640)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3641)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "test per section 11.3 of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "Hash DRBG (A3645)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3646)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3647)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3720)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3721)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3722)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "available for use.",
"testMethod": "",
"testProps": "of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "Hash DRBG (A3723)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A3724)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-256 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3629)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3634)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3635)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3636)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3637)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3638)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3639)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3640)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3641)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3645)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3646)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "and services are available for use.",
"testMethod": "",
"testProps": "PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A3647)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3720)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3721)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3722)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3723)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A3724)",
"condition": "Module initialization",
"details": "Seed, Generate",
"indicator": "Module becomes operational and services are",
"testMethod": "KAT",
"testProps": "HMAC-SHA- 256, SHA512 With/without PR; Health test per section 11.3",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "available for use.",
"testMethod": "",
"testProps": "of SP 800- 90Arev1",
"type": ""
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3629)",
"condition": "Module initialization. Before integrity test.",
"details": "Verify",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3645)",
"condition": "Module initialization. Before integrity test.",
"details": "Verify",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3646)",
"condition": "Module initialization. Before integrity test.",
"details": "Verify",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3647)",
"condition": "Module initialization. Before integrity test.",
"details": "Verify",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 4) (A3722)",
"condition": "Module initialization. Before integrity test.",
"details": "Verify",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "4096-bit key with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source",
"condition": "Entropy source initialization",
"details": "Entropy source start- up test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "RCT",
"testProps": "1024 samples",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source",
"condition": "Entropy source initialization",
"details": "Entropy source start- up test",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "APT",
"testProps": "1024 samples",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source",
"condition": "Continuously",
"details": "Entropy source continuous test",
"indicator": "Entropy source is operational",
"testMethod": "RCT",
"testProps": "Cutoff C = 61",
"type": "CAST"
},
{
"algorithmOrTest": "Entropy Source",
"condition": "Continuously",
"details": "Entropy source continuous test",
"indicator": "Entropy source is operational",
"testMethod": "APT",
"testProps": "Cutoff C = 355",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Any self-test failure",
"description": "The Linux kernel immediately stops executing",
"indicator": "Kernel Panic",
"name": "Error State",
"recoveryMethod": "Restart of the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.3",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non-approved service is requested",
"name": "Non- approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.3",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES-GCM with external IV",
"use": "Encryption"
},
{
"name": "KBKDF (libkcapi)",
"use": "Key derivation"
},
{
"name": "HKDF (libkcapi)",
"use": "Key derivation"
},
{
"name": "PBKDF2 (libkcapi)",
"use": "Password-based key derivation"
},
{
"name": "RSA",
"use": "Encryption primitive; Decryption primitive"
},
{
"name": "RSA with PKCS#1 v1.5 padding",
"use": "Signature generation (pre-hashed message); Signature verification (pre-hashed message)"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES-GCM with external IV",
"description": "Encrypt a plaintext using AES GCM with an external IV",
"name": "AES GCM external IV encryption",
"role": "CO"
},
{
"alg_accessed": "KBKDF (libkcapi) HKDF (libkcapi)",
"description": "Derive a key from a key- derivation key or a shared secret",
"name": "Key derivation",
"role": "CO"
},
{
"alg_accessed": "PBKDF2 (libkcapi)",
"description": "Derive a key from a password",
"name": "Password-based key derivation",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Compute the raw RSA encryption of a plaintext",
"name": "RSA encryption primitive",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Compute the raw RSA decryption of a cipertext",
"name": "RSA decryption primitive",
"role": "CO"
},
{
"alg_accessed": "RSA with PKCS#1 v1.5 padding",
"description": "Generate a digital signature for a pre-hashed message",
"name": "RSA signature generation (pre-hashed message)",
"role": "CO"
},
{
"alg_accessed": "RSA with PKCS#1 v1.5 padding",
"description": "Verify a digital signature for a pre-hashed message",
"name": "RSA signature verification (pre-hashed message)",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API data input parameters, AF_ALG type sockets",
"logicalInterface": "Data Input",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs."
},
{
"data": "API data output parameters, AF_ALG type sockets",
"logicalInterface": "Data Output",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs."
},
{
"data": "API function calls, API control input parameters, AF_ALG type sockets, kernel command line",
"logicalInterface": "Control Input",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs."
},
{
"data": "API return values, AF_ALG type sockets, kernel logs",
"logicalInterface": "Status Output",
"physicalPort": "As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs."
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [],
"found": false,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-512 (A3647)",
"details": "Integrity test for vmlinuz, libkcapi components and sha512hmac binary",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A3629)",
"details": "Integrity test for kernel object files",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "Signature Verification",
"testProps": "3072-bit key with SHA- 256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographi c module",
"distribution": "Manual",
"entry": "Electroni c",
"format": "Plaintex t",
"name": "API input parameters; AF_ALG_typ e sockets (input)",
"sfiAlgo": "",
"source": "Operator calling applicatio n (TOEPP)"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle",
"method": "Free cipher handle",
"operatorId": "By calling the appropriate zeroization functions: AES key: crypto_free_skcipher and crypto_free_aead; HMAC key: crypto_free_shash and crypto_free_ahash; Entropy input: crypto_free_rng; DRBG seed: crypto_free_rng; DRBG internal state (V, Key): crypto_free_rng; DRBG internal state (V, C): crypto_free_rng;",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Remove power from the module",
"operatorId": "By removing power",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed. Module power off indicates that the zeroization procedure"
},
{
"description": "",
"method": "",
"operatorId": "",
"rationale": "succeeded. The successful removal of power implicitly indicates that the zeroization is complete."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA- 512; RSA signature verification",
"packageFileName": "/boot/vmlinuz-5.14.0-70.53.1.el9_0.x86_64; *.ko and *.ko.xz files in /usr/lib/modules/5.14.0- 70.53.1.el9_0.x86_64/kernel/crypto *.ko and *.ko.xz files in /usr/lib/modules/5.14.0- 70.53.1.el9_0.x86_64/kernel/arch/x86/crypto; /usr/lib64/libkcapi.so.1.3.1, /usr/bin/sha512hmac",
"swFwVersion": "5.14.0- 70.53.1.el9_0; 1.3.1-3.el9"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Dell PowerEdge R440",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "Yes",
"processors": "Intel Xeon Silver 4216",
"version": "5.14.0- 70.53.1.el9_0 1.3.1-3.el9"
},
{
"hardwarePlatform": "IBM z16 3931-A01",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "Yes",
"processors": "IBM z16",
"version": "5.14.0- 70.53.1.el9_0 1.3.1-3.el9"
},
{
"hardwarePlatform": "Dell PowerEdge R440",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "No",
"processors": "Intel Xeon Silver 4216",
"version": "5.14.0- 70.53.1.el9_0 1.3.1-3.el9"
},
{
"hardwarePlatform": "IBM z16 3931-A01",
"hypervisorHostOs": "N/A",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "No",
"processors": "IBM z16",
"version": "5.14.0- 70.53.1.el9_0 1.3.1-3.el9"
},
{
"hardwarePlatform": "IBM 9080- HEX",
"hypervisorHostOs": "PowerVM FW1040.00 with VIOS 3.1.3.00",
"operatingSystem": "Red Hat Enterprise Linux 9",
"paa_pai": "No",
"processors": "IBM POWER10",
"version": "5.14.0- 70.53.1.el9_0 1.3.1-3.el9"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Intel Xeon E5",
"operatingSystem": "Red Hat Enterprise Linux 9"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 14
},
"XTS": {
"XTS": 10
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKEv2": 1
},
"IPsec": {
"IPsec": 7
}
},
"crypto_scheme": {
"MAC": {
"MAC": 11
}
},
"device_model": {},
"ecc_curve": {},
"eval_facility": {
"atsec": {
"atsec": 105
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 5,
"AES-128": 15,
"AES-192": 15,
"AES-256": 15,
"AES-GCM 2": 1,
"HMAC- SHA-1": 5,
"HMAC-SHA- 256": 34,
"HMAC-SHA- 512": 2,
"HMAC-SHA-1": 32,
"PKCS 1": 5,
"PKCS#1": 10,
"SHA- 256": 6,
"SHA-1": 67,
"SHA-256": 18,
"SHA-3": 5,
"SHA-512": 1,
"SHA2- 256": 2,
"SHA2-224": 27,
"SHA2-256": 63,
"SHA2-384": 53,
"SHA2-512": 66,
"SHA3-224": 11,
"SHA3-256": 12,
"SHA3-384": 11,
"SHA3-512": 12,
"SHA512": 17
}
},
"fips_security_level": {
"Level": {
"Level 1": 1
}
},
"hash_function": {
"PBKDF": {
"PBKDF2": 2
},
"SHA": {
"SHA1": {
"SHA-1": 67
},
"SHA2": {
"SHA-256": 18,
"SHA-512": 1,
"SHA512": 17
},
"SHA3": {
"SHA-3": 5,
"SHA3-224": 12,
"SHA3-256": 11,
"SHA3-384": 12,
"SHA3-512": 12
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 256
},
"RNG": {
"RBG": 2,
"RNG": 1
}
},
"side_channel_analysis": {
"FI": {
"Fault Induction": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 6,
"FIPS 180-4": 26,
"FIPS 186-4": 8,
"FIPS 186-5": 2,
"FIPS 198-1": 34,
"FIPS 202": 9,
"FIPS PUB 140-3": 2,
"FIPS186-4": 12
},
"NIST": {
"SP 800-38A": 37,
"SP 800-38B": 5,
"SP 800-38C": 5,
"SP 800-38D": 20,
"SP 800-38E": 8,
"SP 800-90A": 49
},
"PKCS": {
"PKCS 1": 5,
"PKCS#1": 5
},
"RFC": {
"RFC 4106": 2,
"RFC 7296": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 65,
"AES-": 6,
"AES-128": 15,
"AES-192": 15,
"AES-256": 15
},
"CAST": {
"CAST": 505
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 85
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-256A3722",
"Counter DRBGA3724",
"SHA-1A3722",
"RSA SigVer (FIPS186-4)A3722",
"HMAC-SHA3-384A3728",
"HMAC-SHA2-512A3722",
"HMAC-SHA3-256A3728",
"HMAC-SHA3-512A3728",
"SHA3-512A3728",
"AES-GCMA3724",
"SHA2-256A3722",
"SHA3-384A3728",
"SHA3-224A3728",
"SHA2-224A3722",
"HMAC DRBGA3724",
"AES-GMACA3722",
"HMAC-SHA3-224A3728",
"SHA3-256A3728",
"HMAC-SHA2-384A3722",
"HMAC-SHA-1A3722",
"AES-CMACA3722",
"AES-CBCA4549",
"Hash DRBGA3724",
"SHA2-384A3722",
"AES-OFBA3726",
"AES-ECBA3724",
"HMAC-SHA2-224A3722",
"AES-CCMA3722",
"AES-CBC-CS3A3727",
"AES-CFB128A3725",
"SHA2-512A3722",
"AES-CTRA4549",
"AES-XTS Testing Revision 2.0A4549"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A3720",
"#A3635",
"#A3629",
"#A4549",
"#A3645",
"#A3721",
"#A3726",
"#A3641",
"#A3643",
"#A3640",
"#A3719",
"#A3639",
"#A3632",
"#A3636",
"#A3728",
"#A3633",
"#A3724",
"#A3722",
"#A3634",
"#A3631",
"#A3646",
"#A3647",
"#A3725",
"#A3637",
"#A3630",
"#A3727",
"#A3642",
"#A3638",
"#A3644",
"#A3723"
]
},
"policy_metadata": {
"/Author": "Dick Sikkema",
"/CreationDate": "D:20240903161045Z00\u002700\u0027",
"/Creator": "Word",
"/ModDate": "D:20240903161045Z00\u002700\u0027",
"/Producer": "macOS Version 12.7.6 (Build 21H1320) Quartz PDFContext",
"/Title": "140sp-new",
"pdf_file_size_bytes": 1106591,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 103
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "570489d6d4534317f81c74548d645f293856d1641d9ae43d9c878347e9f08e09",
"source_hash": "c471d6ef4d3ac49345248e3f403ab540a5b2d49c19a7ca60be11699e50ab830a",
"txt_hash": "2666d39c64a39ba92cda73f2f6bc9e1a0dca9b232e151bb8cf09e54928e471eb"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation. When operated in approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy. The module generates random strings whose strengths are modified by available entropy.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2024_011024_0217.pdf",
"date_sunset": null,
"description": "The Red Hat Enterprise Linux 9 Kernel Cryptographic API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Red Hat Enterprise Linux 9 Kernel Cryptographic API",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "historical",
"sw_versions": "5.14.0-70.53.1.el9_0; 1.3.1-3.el9",
"tested_conf": [
"Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 with PAI",
"Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 without PAI",
"Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel Xeon Silver 4216 with PAA",
"Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel Xeon Silver 4216 without PAA",
"Red Hat Enterprise Linux 9 with PowerVM FW1040.00 with VIOS 3.1.3.00 running on IBM 9080-HEX with IBM POWER10 without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-09-11",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Red Hat(R), Inc.",
"vendor_url": "http://www.redhat.com"
}
}