{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "b59593174a9ed010", "cert_id": 5221, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "IBM ClevOS 3 OpenSSL Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-04-01", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.ibm.com", "vendor": "IBM Corporation", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2026_010526_0732.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "The IBM ClevOS 3 OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-03-31", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-256": 6, "HMAC-SHA-1": 10, "HMACSHA512": 1, "HMAC 1": 2, "SHA2-224": 41, "SHA2-256": 70, "SHA2-384": 36, "SHA2-512": 61, "SHA3-224": 9, "SHA3-256": 15, "SHA3-384": 10, "SHA3-512": 10, "SHA-1": 46, "SHA2- 384": 11, "SHA3- 224": 1, "SHA-256": 52, "SHA-224": 1, "SHA-3": 1, "RSA 1": 2, "- PKCS 1": 10, "PKCS#1": 26, "AES-128": 7, "AES-192": 6, "AES-256": 8, "AES 1": 1, "AES- 128": 6, "PKCS 1": 10}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 95}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 53, "AES-128": 7, "AES-192": 6, "AES-256": 8, "AES-": 6}, "CAST": {"CAST": 246}}, "constructions": {"MAC": {"HMAC": 23, "HMAC-SHA-256": 3, "KMAC": 13, "CMAC": 2}}}, "asymmetric_crypto": {"RSA": {"RSA-OAEP": 3}, "ECC": {"ECDH": {"ECDH": 5}, "ECDSA": {"ECDSA": 130}, "ECC": {"ECC": 2}}, "FF": {"DH": {"DHE": 1, "DH": 40, "Diffie-Hellman": 7}, "DSA": {"DSA": 5}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 46}, "SHA2": {"SHA-256": 52, "SHA-224": 1}, "SHA3": {"SHA3-224": 9, "SHA3-256": 15, "SHA3-384": 10, "SHA3-512": 10, "SHA-3": 1}}, "PBKDF": {"PBKDF2": 10, "PBKDF": 24}}, "crypto_scheme": {"MAC": {"MAC": 14}, "KEX": {"Key Exchange": 2}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {"SSH": {"SSH": 36}, "TLS": {"TLS": {"TLS v1.2": 21, "TLS v1.3": 5, "TLS 1.2": 9, "TLS 1.3": 9, "TLS": 23}}, "IKE": {"IKE": 6}}, "randomness": {"PRNG": {"DRBG": 49}, "RNG": {"RNG": 1, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 2}, "CTR": {"CTR": 1}, "CFB": {"CFB": 1}, "OFB": {"OFB": 1}, "GCM": {"GCM": 17}, "CCM": {"CCM": 2}, "XTS": {"XTS": 8}}, "ecc_curve": {"NIST": {"P-224": 94, "P-256": 90, "P-384": 96, "P-521": 62, "P-192": 32, "curve P-192": 4, "B-233": 12, "B-283": 13, "B-409": 10, "B-571": 12, "K-233": 8, "K-283": 12, "K-571": 11, "B-163": 6, "K-163": 10, "K-409": 6}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"OpenSSL": {"OpenSSL": 99}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 6}, "IBM": {"SSC": 4}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 104, "FIPS PUB 140-3": 2, "FIPS186-5": 114, "FIPS 186-5": 54, "FIPS186-4": 38, "FIPS 186-4": 30, "FIPS 198-1": 41, "FIPS186-2": 6, "FIPS 180-4": 37, "FIPS 202": 9, "FIPS 186-2": 2, "FIPS 197": 1}, "NIST": {"SP 800-132": 13, "SP 800-38A": 34, "SP 800-38C": 4, "SP 800-38B": 5, "SP 800-38D": 22, "SP 800-38F": 7, "SP 800-38E": 7, "SP 800-90A": 4, "SP 800-56A": 9, "SP 800-56C": 3, "SP 800-135": 23, "SP 800-108": 2, "SP 800-185": 3, "SP 800-90B": 1}, "PKCS": {"PKCS 1": 10, "PKCS#1": 13}, "RFC": {"RFC7627": 15, "RFC 8446": 2, "RFC 5288": 3, "RFC8446": 2, "RFC 4253": 1, "RFC 6668": 1, "RFC 3526": 3, "RFC 7919": 3}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1012692, "pdf_is_encrypted": false, "pdf_number_of_pages": 94, "/Author": "Christopher Dickerman", "/Comments": "", "/Company": "", "/CreationDate": "D:20260331125229-04'00'", "/Creator": "Acrobat PDFMaker 25 for Word", "/Keywords": "", "/ModDate": "D:20260331130120-04'00'", "/Producer": "Adobe PDF Library 25.1.51", "/SourceModified": "", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf", "https://www.ietf.org/rfc/rfc3526.txt", "https://www.ietf.org/rfc/rfc5288.txt", "https://webstore.ansi.org/standards/ascx9/ansix9632001", "https://www.ietf.org/rfc/rfc8446.txt", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf", "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "http://www.atsec.com/", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf", "http://www.ietf.org/rfc/rfc3447.txt", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://webstore.ansi.org/standards/ascx9/ansix9422001", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf", "http://www.ibm.com/", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf", "https://www.ietf.org/rfc/rfc7919.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-CBCA6912", "KAS-FFC-SSC Sp800-56Ar3A6919", "KMAC-256A6910", "HMAC-SHA2-224A6909", "ECDSA SigVer (FIPS186-4)A6917", "Safe Primes Key GenerationA6919", "HMAC-SHA3-256A6910", "TLS v1.2 KDF RFC7627A6909", "SHA2-384A6909", "KDF SP800-108A6906", "HMAC-SHA3-224A6910", "KDA TwoStep SP800-56Cr2A6915", "KDA OneStep SP800-56Cr2A6915", "AES-CBC-CS2A6912", "SHA-1A6909", "HMAC-SHA2-256A6909", "KDF ANS 9.42A6910", "KMAC-128A6910", "AES-CFB1A6912", "Counter DRBGA6905", "ECDSA SigVer (FIPS186-5)A6917", "Hash DRBGA6905", "KDF KMAC Sp800-108r1A6906", "RSA SigVer (FIPS186-4)A6909", "SHAKE-256A6910", "ECDSA KeyGen (FIPS186-5)A6916", "AES-OFBA6912", "PBKDFA6910", "HMAC-SHA2-384A6909", "HMAC-SHA2-512/224A6909", "ECDSA KeyVer (FIPS186-5)A6916", "ECDSA SigGen (FIPS186-5)A6917", "AES-CBC-CS1A6912", "SHAKE-128A6910", "AES-GCMA6914", "SHA3-384A6910", "Safe Primes Key VerificationA6919", "KDF ANS 9.63A6910", "HMAC-SHA3-512A6910", "KDF SSHA6909", "HMAC-SHA3-384A6910", "SHA2-512A6909", "HMAC-SHA-1A6909", "AES-KWA6912", "AES-CBC-CS3A6912", "AES-XTS Testing Revision 2.0A6912", "HMAC DRBGA6905", "KDA HKDF SP800-56Cr2A6918", "SHA3-512A6910", "RSA SigVer (FIPS186-5)A6910", "SHA2-512/224A6909", "SHA3-224A6910", "SHA2-256A6909", "ECDSA KeyVer (FIPS186-4)A6916", "RSA SigVer (FIPS186-2)A6909", "RSA SigGen (FIPS186-5)A6910", "AES-CFB128A6912", "AES-CCMA6912", "TLS v1.3 KDFA6918", "SHA3-256A6910", "AES-CTRA6912", "SHA2-224A6909", "HMAC-SHA2-512/256A6909", "AES-CFB8A6912", "KAS-ECC-SSC Sp800-56Ar3A6909", "RSA KeyGen (FIPS186-5)A6909", "SHA2-512/256A6909", "AES-ECBA6912", "AES-GMACA6914", "AES-KWPA6912", "AES-CMACA6912", "HMAC-SHA2-512A6909"]}, "extracted_versions": {"_type": "Set", "elements": ["3"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "c8696285d1fce90db4cd9694da04eb49f0fa09a1068f276118bb2ee9672330bd", "txt_hash": "874c831a245f4696f02aa20dc3f9d67a7397dc91b28824370924429d91edcbee", "json_hash": null}}}