{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "b903eceaae4690fa", "cert_id": 5562, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Ergotron Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-25", "validation_type": "Initial", "lab": "Teron Labs"}], "vendor_url": "http://www.ergotron.com/en-us/", "vendor": "Ergotron, Inc.", "certificate_pdf_url": null, "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "No assurance of the minimum strength of generated SSPs (e.g., keys); No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs; When operated in approved mode", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "CorSSL is a software module with a multi-chip standalone embodiment. The module is designed to operate within a modifiable operational environment. Additionally, the module is designed to utilize the AES-NI extended instruction set when available by the host platform\u2019s CPU for processor algorithm acceleration (PAA) of its AES implementation.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-07-18", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#3": 7, "#12": 1, "#1": 18, "#2": 18, "#4": 4, "#5": 2, "#6": 2}}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 6, "SHA2-224": 12, "SHA2-256": 21, "SHA2-384": 12, "SHA2-512": 11, "SHA-1": 14, "SHA3- 224": 1, "SHA3-256": 4, "SHA3-384": 2, "SHA3-512": 2, "SHA3-224": 1, "SHA2- 256": 4, "PKCS 1": 2, "PKCS#1": 4, "AES-128": 1, "AES-192": 1, "AES-256": 1, "AES 1": 1, "AES-GCM #1": 2, "AES-GCM #2": 2, "AES-CMAC #1": 2, "AES-CMAC #2": 2, "AES-CMAC #3": 2, "AES-CMAC #4": 2, "AES-CMAC #5": 2, "AES-CMAC #6": 2, "DRBG #1": 2, "DRBG #2": 2, "DRBG #3": 2}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 113, "AES-128": 1, "AES-192": 1, "AES-256": 1, "AES-": 6}, "CAST": {"CAST": 91, "CAST5": 1}, "RC": {"RC2": 3, "RC4": 1, "RC5": 3}}, "DES": {"DES": {"DES": 6}, "3DES": {"TDES": 22}}, "djb": {"ChaCha": {"ChaCha20": 3}, "Poly": {"Poly1305": 2}}, "miscellaneous": {"IDEA": {"IDEA": 3}, "Blowfish": {"Blowfish": 3}, "Camellia": {"Camellia": 3}, "ARIA": {"ARIA": 3}, "SM4": {"SM4": 3}, "SEED": {"SEED": 3}}, "constructions": {"MAC": {"HMAC": 23, "CMAC": 14}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 39}, "ECDSA": {"ECDSA": 90}, "EdDSA": {"EdDSA": 6}}, "FF": {"DH": {"DHE": 1, "DH": 37, "Diffie-Hellman": 1}, "DSA": {"DSA": 43}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 14}, "SHA3": {"SHA3-256": 4, "SHA3-384": 2, "SHA3-512": 2, "SHA3-224": 1}}, "BLAKE": {"Blake2": 3}, "MD": {"MD4": {"MD4": 2}, "MD5": {"MD5": 2}}, "RIPEMD": {"RIPEMD": 2}, "PBKDF": {"PBKDF": 21, "PBKDF2": 4}}, "crypto_scheme": {"MAC": {"MAC": 24}, "KA": {"Key Agreement": 2}, "AEAD": {"AEAD": 2}}, "crypto_protocol": {"TLS": {"SSL": {"SSL": 3}, "TLS": {"TLS": 37, "TLS v1.2": 10, "TLS v1.3": 10, "TLS 1.3": 4, "TLS 1.2": 1}}}, "randomness": {"PRNG": {"DRBG": 57}, "RNG": {"RNG": 3, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 1}, "CTR": {"CTR": 1}, "GCM": {"GCM": 27}, "CCM": {"CCM": 13}, "XEX": {"XEX": 1}, "XTS": {"XTS": 9}}, "ecc_curve": {"NIST": {"P-224": 18, "P-256": 12, "P-521": 12, "P-192": 6, "P-384": 4, "B-233": 6, "B-283": 6, "B-409": 6, "B-571": 6, "K-233": 8, "K-283": 5, "K-409": 6, "K-571": 6, "B-163": 3, "K-163": 3}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 2, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8": 1}}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 6}, "IBM": {"SSC": 1}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 89, "FIPS186-4": 15, "FIPS 186-4": 10, "FIPS186-5": 23, "FIPS 186-5": 7, "FIPS 198-1": 9, "FIPS 180-4": 5, "FIPS 202": 6, "FIPS PUB 186-4": 2, "FIPS PUB 186-2": 1, "FIPS PUB 186-5": 2}, "NIST": {"SP 800-38A": 7, "SP 800-38C": 1, "SP 800-38B": 1, "SP 800-38D": 5, "SP 800-38F": 4, "SP 800-38E": 1, "SP 800-90A": 1, "SP 800-56A": 2, "SP 800-132": 1, "SP 800-67": 7, "SP 800-135": 3, "SP 800-133": 1, "NIST SP 800-38D": 3, "NIST SP 800-56A": 1, "NIST SP 800-132": 2}, "PKCS": {"PKCS 1": 1, "PKCS#1": 2}, "RFC": {"RFC7627": 3, "RFC 5288": 1, "RFC 8446": 1}, "ISO": {"ISO/IEC 19790": 8, "ISO/IEC 19790:2012": 1}}, "javacard_version": {}, "javacard_api_const": {"curves": {"SM2": 2}}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 494581, "pdf_is_encrypted": false, "pdf_number_of_pages": 64, "/Author": "jjing", "/CreationDate": "D:20260901162609-04'00'", "/Creator": "PScript5.dll Version 5.2.2", "/ModDate": "D:20260901162609-04'00'", "/Producer": "Acrobat Distiller 26.0 (Windows)", "/Title": "Microsoft Word - TID-39-0090-RBND-IS-2608251358_140sp.docx", "pdf_hyperlinks": {"_type": "Set", "elements": []}}, "module_algorithms": {"_type": "Set", "elements": ["AES-OFBA7573", "SHA3-512A7573", "HMAC-SHA3-512A7573", "SHAKE-256A7573", "AES-CFB8A7573", "SHA3-224A7573", "TDES-CFB1A7573", "RSA SigVer (FIPS186-4)A7573", "AES-GCMA7573", "AES-KWA7573", "KAS-FFC-SSC Sp800-56Ar3A7573", "TLS v1.2 KDF RFC7627A7573", "ECDSA KeyVer (FIPS186-5)A7573", "SHA2-256A7573", "HMAC-SHA2-224A7573", "AES-CMACA7573", "HMAC-SHA2-512A7573", "SHA3-384A7573", "TDES-ECBA7573", "AES-XTS Testing Revision 2.0A7573", "AES-ECBA7573", "HMAC-SHA3-224A7573", "DSA KeyGen (FIPS186-4)A7573", "HMAC-SHA-1A7573", "DSA SigVer (FIPS186-4)A7573", "AES-CBCA7573", "KAS-ECC-SSC Sp800-56Ar3A7573", "RSA SigGen (FIPS186-5)A7573", "AES-CFB1A7573", "AES-CFB128A7573", "TDES-CBCA7573", "ECDSA SigVer (FIPS186-4)A7573", "TDES-CFB64A7573", "HMAC-SHA2-256A7573", "ECDSA KeyGen (FIPS186-5)A7573", "HMAC-SHA3-256A7573", "PBKDFA7573", "AES-CCMA7573", "AES-GMACA7573", "ECDSA SigGen (FIPS186-5)A7573", "HMAC-SHA3-384A7573", "TDES-CMACA7573", "DSA PQGGen (FIPS186-4)A7573", "ECDSA SigVer (FIPS186-5)A7573", "Counter DRBGA7573", "RSA SigVer (FIPS186-5)A7573", "SHA3-256A7573", "TLS v1.3 KDFA7572", "ECDSA KeyVer (FIPS186-4)A7573", "SHA2-384A7573", "AES-CTRA7573", "SHA-1A7573", "SHA2-224A7573", "RSA KeyGen (FIPS186-5)A7573", "TDES-CFB8A7573", "SHAKE-128A7573", "AES-KWPA7573", "TDES-OFBA7573", "HMAC-SHA2-384A7573", "SHA2-512A7573"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A7573", "#A7572"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "1"}, {"section": "6", "title": "Operational environment", "level": "1"}, {"section": "7", "title": "Physical security", "level": "N/A"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "1"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"packageFileName": "libssl.so.1.1 libcrypto.so.1.1", "swFwVersion": "2.0", "features": "", "integrityTest": "Yes"}, {"packageFileName": "libcrypto-1_1-x64.dll libssl-1_1-x64.dll", "swFwVersion": "2.0", "features": "", "integrityTest": "Yes"}]}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": true, "entries": [{"operatingSystem": "Debian 9", "hardwarePlatform": "Dell PowerEdge R440", "processors": "Intel Xeon Silver 4214R", "paa_pai": "Yes", "hypervisorHostOs": "", "version": "1.1.1zd.001"}, {"operatingSystem": "Debian 9", "hardwarePlatform": "Dell PowerEdge R440", "processors": "Intel Xeon Silver 4214R", "paa_pai": "No", "hypervisorHostOs": "", "version": "1.1.1zd.001"}, {"operatingSystem": "Windows Server 2022", "hardwarePlatform": "Dell PowerEdge R760", "processors": "Intel Xeon Gold 6542Y", "paa_pai": "Yes", "hypervisorHostOs": "VMware ESXi v8.0", "version": "1.1.1zd.001"}, {"operatingSystem": "Windows Server 2022", "hardwarePlatform": "Dell PowerEdge R760", "processors": "Intel Xeon Gold 6542Y", "paa_pai": "No", "hypervisorHostOs": "VMware ESXi v8.0", "version": "1.1.1zd.001"}]}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "Approved", "description": "The module is in the Approved mode when all pre-operational self-tests have successfully been completed, and only Approved Services are invoked.", "type": "Approved", "statusIndicator": ""}, {"name": "Non- approved", "description": "The module will operate in the non-Approved mode upon execution of a non-Approved service.", "type": "Non- Approved", "statusIndicator": ""}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CCM", "cavpCertName": "A7573", "properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 256 AAD Length - AAD Length: 0, 256, 65536", "reference": "SP 800-38C"}, {"algorithm": "AES-CFB1", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CFB128", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CFB8", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CMAC", "cavpCertName": "A7573", "properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 32-128 Increment 8 Message Length - Message Length: 0-65536 Increment 8", "reference": "SP 800-38B"}, {"algorithm": "AES-CTR", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - Yes Incremental Counter - Yes Counter Tests Performed - Yes", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-GCM", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96, 1024 Payload Length - Payload Length: 16, 128, 136, 256, 264 AAD Length - AAD Length: 0, 128, 136, 256", "reference": "SP 800-38D"}, {"algorithm": "AES-GMAC", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96, 1024 AAD Length - AAD Length: 0, 128, 136, 256", "reference": "SP 800-38D"}, {"algorithm": "AES-KW", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 64", "reference": "SP 800-38F"}, {"algorithm": "AES-KWP", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 8", "reference": "SP 800-38F"}, {"algorithm": "AES-OFB", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A7573", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "Counter DRBG", "cavpCertName": "A7573", "properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0-256 Increment 256 Entropy Input - Entropy Input: 128-256 Increment 128, Entropy Input: 256-512 Increment 128 Nonce - Nonce: 128 Personalization String Length - Personalization String Length: 0-128 Increment 128, Personalization String Length: 0-256 Increment 256 Returned Bits - 256", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "DSA KeyGen (FIPS186-4)", "cavpCertName": "A7573", "properties": "L - 2048 N - 224, 256", "reference": "FIPS 186-4"}, {"algorithm": "DSA PQGGen (FIPS186-4)", "cavpCertName": "A7573", "properties": "P/Q Generation Methods - Probable G Generation Methods - Unverifiable L - 2048 N - 224, 256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-4"}, {"algorithm": "DSA SigVer (FIPS186-4)", "cavpCertName": "A7573", "properties": "L - 1024, 2048, 3072 N - 160, 224, 256 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA KeyGen (FIPS186-5)", "cavpCertName": "A7573", "properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P- 384, P-521 Secret Generation Mode - testing candidates", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA KeyVer (FIPS186-4)", "cavpCertName": "A7573", "properties": "Curve - B-163, K-163, P-192", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA KeyVer (FIPS186-5)", "cavpCertName": "A7573", "properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P- 384, P-521", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186-5)", "cavpCertName": "A7573", "properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P- 384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186-4)", "cavpCertName": "A7573", "properties": "Curve - B-163, B-233, B-283, B-409, B-571, K-163, K-233, K-283, K-409, K-571, P-192, P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-4"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A7573", "properties": "Curve - B-233, B-283, B-409, B-571, K-233, K-283, K-409, K-571, P-224, P-256, P- 384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512", "reference": "FIPS 186-5"}, {"algorithm": "HMAC-SHA-1", "cavpCertName": "A7573", "properties": "MAC - MAC: 160 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-224", "cavpCertName": "A7573", "properties": "MAC - MAC: 224 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A7573", "properties": "MAC - MAC: 256 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-384", "cavpCertName": "A7573", "properties": "MAC - MAC: 384 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-512", "cavpCertName": "A7573", "properties": "MAC - MAC: 512 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-224", "cavpCertName": "A7573", "properties": "MAC - MAC: 224 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-256", "cavpCertName": "A7573", "properties": "MAC - MAC: 256 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-384", "cavpCertName": "A7573", "properties": "MAC - MAC: 384 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-512", "cavpCertName": "A7573", "properties": "MAC - MAC: 512 Key Length - Key Length: 8-524288 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "KAS-ECC-SSC Sp800-56Ar3", "cavpCertName": "A7573", "properties": "Domain Parameter Generation Methods - B-233, B-283, B-409, B-571, K-233, K- 283, K-409, K-571, P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KAS-FFC-SSC Sp800-56Ar3", "cavpCertName": "A7573", "properties": "Domain Parameter Generation Methods - FB, FC Scheme - dhEphem - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "PBKDF", "cavpCertName": "A7573", "properties": "Iteration Count - Iteration Count: 10-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA3- 224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8", "reference": "SP 800-132"}, {"algorithm": "RSA KeyGen (FIPS186-5)", "cavpCertName": "A7573", "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096 p mod 8 - 1 Primality Tests - 2powSecStr q mod 8 - 1 Fixed Public Exponent - 010001 Info Generated By Server - No Private Key Format - standard Public Exponent Mode - fixed", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A7573", "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-4)", "cavpCertName": "A7573", "properties": "Signature Type - ANSI X9.31, PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Fixed Fixed Public Exponent - 010001", "reference": "FIPS 186-4"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A7573", "properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Fixed Public Exponent - 010001 Public Exponent Mode - fixed", "reference": "FIPS 186-5"}, {"algorithm": "SHA-1", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-224", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-256", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-512", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 180-4"}, {"algorithm": "SHA3-224", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 202"}, {"algorithm": "SHA3-256", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 202"}, {"algorithm": "SHA3-384", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 202"}, {"algorithm": "SHA3-512", "cavpCertName": "A7573", "properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1", "reference": "FIPS 202"}, {"algorithm": "SHAKE-128", "cavpCertName": "A7573", "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-1024 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-256", "cavpCertName": "A7573", "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-1024 Increment 8", "reference": "FIPS 202"}, {"algorithm": "TDES-CBC", "cavpCertName": "A7573", "properties": "Direction - Decrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-CFB1", "cavpCertName": "A7573", "properties": "Direction - Decrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-CFB64", "cavpCertName": "A7573", "properties": "Direction - Decrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-CFB8", "cavpCertName": "A7573", "properties": "Direction - Decrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-CMAC", "cavpCertName": "A7573", "properties": "Direction - Verification Keying Option - 1, 2 MAC Length - MAC Length: 32-64 Increment 8 Message Length - Message Length: 0-65536 Increment 8", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-ECB", "cavpCertName": "A7573", "properties": "Direction - Decrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-OFB", "cavpCertName": "A7573", "properties": "Direction - Decrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TLS v1.2 KDF RFC7627 (CVL)", "cavpCertName": "A7573", "properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512 Key Block Length - Key Block Length: 1024", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "TLS v1.3 KDF (CVL)", "cavpCertName": "A7572", "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE", "reference": "SP 800-135 Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG Section 4", "algoPropList": "Key Type:Asymmetric", "implName": "N/A", "reference": "SP 800-133 Rev. 2 Section 4 Example 1"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES-GCM (non-compliant)", "use": "Authenticated encryption/decryption"}, {"name": "AES-OCB", "use": "Authenticated encryption/decryption"}, {"name": "ANSI X9.31 RNG (with 128-bit AES core)", "use": "Random number generation"}, {"name": "ARIA", "use": "Encryption/decryption"}, {"name": "Blake2", "use": "Encryption/decryption"}, {"name": "Blowfish", "use": "Encryption/decryption"}, {"name": "Camellia", "use": "Encryption/decryption"}, {"name": "CAST", "use": "Encryption/decryption"}, {"name": "CAST5", "use": "Encryption/decryption"}, {"name": "ChaCha20", "use": "Encryption/decryption"}, {"name": "DES", "use": "Encryption/decryption"}, {"name": "Hash DRBG", "use": "Random bit generation"}, {"name": "HMAC DRBG", "use": "Random bit generation"}, {"name": "DSA SigGen", "use": "Digital signature generation"}, {"name": "DH (non-compliant)", "use": "Shared secret computation; key pair generation"}, {"name": "DSA KeyGen (non-compliant)", "use": "Key pair generation"}, {"name": "DSA SigVer (non-compliant)", "use": "Digital signature verification"}, {"name": "ECDH (non-compliant)", "use": "Shared secret computation; key pair generation"}, {"name": "ECDSA KeyGen (non-compliant)", "use": "Key pair generation"}, {"name": "ECDSA SigGen (non-compliant)", "use": "Digital signature generation"}, {"name": "ECDSA SigVer (non-compliant)", "use": "Digital signature verification"}, {"name": "EdDSA KeyGen", "use": "Key pair generation"}, {"name": "EdDSA SigGen", "use": "Digital signature generation"}, {"name": "EdDSA SigVer", "use": "Digital signature verification"}, {"name": "IDEA", "use": "Encryption/decryption"}, {"name": "TLS v1.0/v1.1 KDF", "use": "Key derivation"}, {"name": "HKDF", "use": "Key derivation"}, {"name": "KBKDF", "use": "Key derivation"}, {"name": "MD2", "use": "Message digest"}, {"name": "MD4", "use": "Message digest"}, {"name": "MD5", "use": "Message digest"}, {"name": "Poly1305", "use": "Message authentication code"}, {"name": "RC2", "use": "Encryption/decryption"}, {"name": "RC4", "use": "Encryption/decryption"}, {"name": "RC5", "use": "Encryption/decryption"}, {"name": "RIPEMD", "use": "Message digest"}, {"name": "RMD160", "use": "Message digest"}, {"name": "RSA KeyGen (non-compliant)", "use": "Key pair generation"}, {"name": "RSA SigGen (non-compliant)", "use": "Digital signature generation"}, {"name": "RSA SigVer (non-compliant)", "use": "Digital signature verification"}, {"name": "RSA encrypt/decrypt", "use": "Asymmetric encryption/decryption"}, {"name": "SEED", "use": "Encryption/decryption"}, {"name": "SHA-1 (non-compliant)", "use": "Signature generation for TLS v1.0/v1.1"}, {"name": "SM2", "use": "Digital signature generation; digital signature verification"}, {"name": "SM3", "use": "Message digest"}, {"name": "SM4", "use": "Encryption/decryption"}, {"name": "TDES (non-compliant)", "use": "Encryption/decryption; MAC generation"}, {"name": "Whirlpool", "use": "Message digest"}]}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "N/A", "logicalInterface": "Data Input", "data": "Logical interface is defined as API input arguments that provide input data for processing. This includes data to be encrypted, decrypted, signed, verified, and hashed, keys to be used in cryptographic services, random seed material for the DRBG of the module, keying material used as input to key establishment services, and intermediate data required for services."}, {"physicalPort": "N/A", "logicalInterface": "Data Output", "data": "Logical interface is defined as API output arguments that return generated or processed data back to the caller. This includes data that has been encrypted/decrypted/verified, digital signatures, hashes, random values generated by the DRBG of the module, keys established using key establishment methods of the module, and key components/intermediate data/traffic (client and server data and messages)."}, {"physicalPort": "N/A", "logicalInterface": "Control Input", "data": "Logical interface is defined as API input arguments that are used to initialize and control the operation of the module. This includes API commands invoking cryptographic services, modes, key sizes, etc. used with cryptographic services."}, {"physicalPort": "N/A", "logicalInterface": "Control Output", "data": "N/A, the module does not implement a Control Output interface."}, {"physicalPort": "N/A", "logicalInterface": "Status Output", "data": "Logical interface is defined as API call return values. This includes status information regarding the module or invoked service/operation."}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Crypto Officer", "type": "Role", "operatorType": "CO", "authMethodList": ""}, {"name": "User", "type": "Role", "operatorType": "User", "authMethodList": ""}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Show Status", "description": "Returns the status of the module.", "indicator": "N/A", "inputs": "API call parameters", "outputs": "Current operational status", "secFunImpl": "", "rolesSspAccess": "Crypto Officer"}, {"name": "Perform self- tests on- demand", "description": "Performs pre- operational self-tests by unloading and then re- initializing the module or by invoking API.", "indicator": "N/A", "inputs": "Re- instantiate module; API call parameters", "outputs": "Status", "secFunImpl": "", "rolesSspAccess": "Crypto Officer"}, {"name": "Zeroize", "description": "Zeroizes and de-allocates memory containing sensitive data.", "indicator": "N/A", "inputs": "Restart calling application; reboot or power-cycle host platform", "outputs": "None Crypto Officer - AES key: Z - AES CCM key: Z - AES GCM", "secFunImpl": "", "rolesSspAccess": ""}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Passphrase: Z - AES GCM IV: Z - DRBG entropy input: Z - DRBG seed: Z - DRBG 'V' value: Z - DRBG 'Key' value: Z"}, {"name": "Show versioning information", "description": "Returns module versioning information.", "indicator": "N/A", "inputs": "API call parameters", "outputs": "Module name, version", "secFunImpl": "", "rolesSspAccess": "Crypto Officer"}, {"name": "Perform symmetric encryption", "description": "Encrypts data using an approved mode of AES.", "indicator": "EVP_cipher_get_service_indicator( )", "inputs": "API call parameters, key, plaintext", "outputs": "Status, ciphertext", "secFunImpl": "AES for Symmetric Encryption AES-XTS for Symmetric Encryption", "rolesSspAccess": "User - AES key: W,E - AES XTS key: W,E"}, {"name": "Perform symmetric decryption", "description": "Decrypts data using an approved ode of AES.", "indicator": "EVP_cipher_get_service_indicator( )", "inputs": "API call parameters, key, ciphertext", "outputs": "Status, plaintext", "secFunImpl": "AES for Symmetric Decryption AES-XTS for Symmetric Decryption TDES for Symmetric Decryption (legacy)", "rolesSspAccess": "User - AES key: W,E - AES XTS key: W,E - TDES key: W,E"}, {"name": "Generate symmetric digest", "description": "Generates symmetric digest.", "indicator": "For CMAC: CMAC_get_service_indicator() For GMAC: EVP_cipher_get_service_indicator( )", "inputs": "API call parameters, key, plaintext", "outputs": "Status, digest", "secFunImpl": "AES- CMAC/GMAC for Message Authenticatio n", "rolesSspAccess": "User - AES CMAC key: W,E - AES GMAC key: W,E"}, {"name": "Verify symmetric digest", "description": "Verifies symmetric digest.", "indicator": "For CMAC: CMAC_get_service_indicator() For GMAC: EVP_cipher_get_service_indicator( )", "inputs": "API call parameters, digest", "outputs": "Status", "secFunImpl": "AES- CMAC/GMAC for Message Authenticatio n TDES-CMAC for Message Authenticatio n (legacy)", "rolesSspAccess": "User - AES CMAC key: W,E - AES GMAC key: W,E - TDES CMAC key: W,E"}, {"name": "Perform authenticate d symmetric encryption", "description": "Encrypts data using AES- GCM or AES- CCM.", "indicator": "EVP_cipher_get_service_indicator( )", "inputs": "API call parameters, key, plaintext", "outputs": "Status, ciphertext", "secFunImpl": "AES for Authenticated Symmetric Encryption", "rolesSspAccess": "User - AES key: W,E - AES CCM key: W,E - AES GCM key: W,E"}, {"name": "Perform authenticate d symmetric decryption", "description": "Decrypts data using AES- GCM or AES- CCM.", "indicator": "EVP_cipher_get_service_indicator( )", "inputs": "API call parameters, key, ciphertext", "outputs": "Status, plaintext", "secFunImpl": "AES for Authenticated Symmetric Decryption", "rolesSspAccess": "User - AES key: W,E - AES CCM key: W,E - AES GCM key: W,E"}, {"name": "Generate random number", "description": "Generates random bits using DRBG.", "indicator": "DRBG_get_service_indicator()", "inputs": "API call parameters", "outputs": "Status, random bits", "secFunImpl": "DRBG", "rolesSspAccess": "User - DRBG entropy input: W,E - DRBG seed: G,E - DRBG 'V' value: G,E - DRBG 'Key' value: G,E"}, {"name": "Perform keyed hash operation", "description": "Computes a message authenticatio n code.", "indicator": "HMAC_get_service_indicator()", "inputs": "API call parameters, key, message", "outputs": "Status, MAC", "secFunImpl": "HMAC for Message Authenticatio n", "rolesSspAccess": "User - HMAC key: W,E"}, {"name": "Perform hash operation", "description": "Computes a message digest.", "indicator": "EVP_Digest_get_service_indicator( )", "inputs": "API call parameters, message", "outputs": "Status, hash", "secFunImpl": "SHA/SHAKE for Message Digest", "rolesSspAccess": "User"}, {"name": "Generate DSA domain parameters", "description": "Generates FIPS-186-4 domain parameters to be used for KAS-FFC-SSC.", "indicator": "DSA_get_service_indicator()", "inputs": "API call, parameters", "outputs": "Status, domain parameters", "secFunImpl": "DSA for Domain Parameter Generation", "rolesSspAccess": "User"}, {"name": "Verify domain parameters", "description": "Verify DSA domain parameters.", "indicator": "DSA_get_service_indicator()", "inputs": "API call parameters", "outputs": "Status", "secFunImpl": "DSA for Domain Parameter Verification (legacy)", "rolesSspAccess": "User"}, {"name": "Generate asymmetric key pair", "description": "Generates a public/private key pair.", "indicator": "For RSA: RSA_key_get_service_indicator() For ECDSA: EC_key_get_service_indicator()", "inputs": "API call parameters", "outputs": "Status, key pair", "secFunImpl": "ECDSA for Key Generation RSA for Key Generation", "rolesSspAccess": "User - ECDSA private key: G - ECDSA public key: G - RSA private key: G - RSA public key: G - DRBG entropy input: W,E - DRBG seed: G,E - DRBG 'V' value: G,E - DRBG 'Key' value:"}, {"name": "Verify ECDSA public key", "description": "Verifies an ECDSA public key.", "indicator": "EC_key_get_service_indicator()", "inputs": "API call parameters, key", "outputs": "Status", "secFunImpl": "ECDSA for Key Verification ECDSA for Key Verification", "rolesSspAccess": "G,E User - ECDSA public key: W"}, {"name": "Generate digital signature", "description": "Generates a digital signature.", "indicator": "EVP_Digest_get_service_indicator( )", "inputs": "API call parameters, key, message", "outputs": "Status, signature", "secFunImpl": "(legacy) ECDSA for Signature Generation RSA for Signature Generation", "rolesSspAccess": "User - ECDSA private key: W,E - RSA private key: W,E"}, {"name": "Verify digital signature", "description": "Verifies a digital signature.", "indicator": "EVP_Digest_get_service_indicator( )", "inputs": "API call parameters, key, signature, message", "outputs": "Status", "secFunImpl": "DSA for Signature Verification (legacy) ECDSA for Signature Verification ECDSA for Signature Verification (legacy) RSA for Signature Verification RSA for Signature Verification (legacy)", "rolesSspAccess": "User - DSA public key: W,E - ECDSA public key: W,E - RSA public key: W,E"}, {"name": "Compute shared secret", "description": "Computes DH/ECDH shared secret.", "indicator": "For DH parameter & key generation: DSA_get_service_indicator() For KAS-FFC-SSC: DH_compute_key() For KAS-ECC-SSC: EC_key_get_service_indicator()", "inputs": "API call parameters", "outputs": "Status, shared secret", "secFunImpl": "DH Shared Secret Computation ECDH Shared Secret Computation", "rolesSspAccess": "User - DH private component : G,E - DH public component : G,W,E - DH shared secret: G,R - ECDH private component : G,E - ECDH public component : G,W,E - ECDH shared secret: G,R"}, {"name": "Derive key via SP 800-135 Rev. 1 KDF", "description": "Derives keying material via TLS v1.2 or TLS v1.3 KDF.", "indicator": "For TLS v1.2 KDF: TLSKDF_get_service_indicator() For TLS v1.3 KDF: TLS1_3_kdf_get_service_indicator( )", "inputs": "API call parameters", "outputs": "Status, derived keying material", "secFunImpl": "TLSv1.2-KDF TLSv1.3-KDF", "rolesSspAccess": "User - DH shared secret: W,E - ECDH shared secret: W,E - TLS pre- master secret: G,R - AES key: G,R - AES CCM key: G,R - AES GCM key: G,R - AES XTS key: G,R - AES CMAC key: G,R - AES GMAC key: G,R - HMAC key: G,R"}, {"name": "Derive key via PBKDF2", "description": "Derives keying material from PBKDF2.", "indicator": "PBKDF_get_service_indicator()", "inputs": "API call parameters, password", "outputs": "Status, derived keying material", "secFunImpl": "PBKDF", "rolesSspAccess": "User - Passphrase: W,E - AES key: G,R - AES CCM key: G,R - AES GCM key: G,R - AES XTS key: G,R - AES CMAC key: G,R - AES GMAC key: G,R - TDES key: G,R - TDES CMAC key: G,R - HMAC key: G,R"}, {"name": "Establish TLS connection", "description": "Establishes a TLS session. Please refer to Section 11.3 for a list of approved TLS cipher suites.", "indicator": "For KAS-ECC-SSC: EC_key_get_service_indicator() For cipher: EVP_cipher_get_service_indicator( ) For message authentication: HMAC_get_service_indicator() For ECDSA certificate verification: EC_key_get_service_indicator() For RSA certificate verification: RSA_key_get_service_indicator() For TLS v1.2 KDF: TLSKDF_get_service_indicator() For TLS v1.3 KDF: TLS1_3_kdf_get_service_indicator( )", "inputs": "API call parameters, TLS configuration , TLS keys", "outputs": "Status, TLS connection informatio n", "secFunImpl": "ECDH Shared Secret Computation TLSv1.2-KDF TLSv1.3-KDF AES for Authenticated Symmetric Encryption AES for Authenticated Symmetric Decryption AES for Symmetric Encryption AES for Symmetric Decryption HMAC for Message Authenticatio n ECDSA for Signature Generation ECDSA for Signature Verification ECDSA for Signature Verification (legacy) RSA for Signature Generation RSA for Signature Verification RSA for Signature Verification (legacy)", "rolesSspAccess": "User - ECDH private component : G,E - ECDH public component : G,R,E - ECDH shared secret: G,E - TLS pre- master secret: G,E - TLS master secret: G,E - AES key: G,E - AES CCM key: G,E - AES GCM key: G,E - HMAC key: G,E - ECDSA private key: W,E - ECDSA public key: R,W,E - RSA private key: W,E - RSA public key: R,W,E"}, {"name": "Certificate Management", "description": "Performs certificate management services.", "indicator": "For ECDSA certificate verification: EC_key_get_service_indicator() For RSA certificate verification: RSA_key_get_service_indicator() For cipher: EVP_cipher_get_service_indicator( ) For hash: EVP_Digest_get_service_indicator( )", "inputs": "AES key, API call parameters, private keys, public keys, certificates, certificate data", "outputs": "Status", "secFunImpl": "AES for Symmetric Encryption AES for Symmetric Decryption AES for Authenticated Symmetric Encryption AES for Authenticated Symmetric Decryption ECDSA for Signature Generation ECDSA for Signature Verification ECDSA for Signature Verification (legacy) RSA for Signature Generation RSA for Signature Verification RSA for Signature Verification (legacy)", "rolesSspAccess": "User - AES key: W,E - AES CCM key: W,E - AES GCM key: W,E - ECDSA private key: R,W,E - ECDSA public key: R,W,E - RSA private key: R,W,E - RSA public key: R,W,E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": true, "entries": [{"name": "Perform data encryption (non-compliant)", "description": "Perform symmetric data encryption", "alg_accessed": "ARIA Blake2 Blowfish Camellia CAST CAST5 ChaCha20 DES IDEA RC2 RC4 RC5 SEED SM4", "role": "User"}, {"name": "Perform data decryption (non-compliant)", "description": "Perform symmetric data decryption", "alg_accessed": "TDES (non-compliant) ARIA Blake2 Blowfish Camellia CAST CAST5 ChaCha20 DES IDEA RC2 RC4 RC5 SEED", "role": "User"}, {"name": "Perform MAC operations (non-compliant)", "description": "Perform message authentication operations", "alg_accessed": "SM4 TDES (non-compliant) Poly1305 TDES (non-compliant)", "role": "User"}, {"name": "Perform hash operation (non-compliant)", "description": "Perform hash operation", "alg_accessed": "MD2 MD4 MD5 RIPEMD RMD160 SHA-1 (non-compliant) SM3 Whirlpool", "role": "User"}, {"name": "Perform digital signature functions (non- compliant)", "description": "Perform digital signature functions", "alg_accessed": "DSA SigGen DSA SigVer (non-compliant) ECDSA SigGen (non-compliant) ECDSA SigVer (non-compliant) EdDSA SigGen EdDSA SigVer RSA SigGen (non-compliant) RSA SigVer (non-compliant) SM2", "role": "User"}, {"name": "Perform asymmetric encryption", "description": "Perform asymmetric encryption", "alg_accessed": "RSA encrypt/decrypt", "role": "User"}, {"name": "Perform asymmetric decryption", "description": "Perform asymmetric decryption functions", "alg_accessed": "RSA encrypt/decrypt", "role": "User"}, {"name": "Perform key derivation functions (non-compliant)", "description": "Perform key derivation functions", "alg_accessed": "TLS v1.0/v1.1 KDF HKDF KBKDF", "role": "User"}, {"name": "Perform authenticated encryption/decryption (non-compliant)", "description": "Perform authenticated encryption/decryption", "alg_accessed": "AES-GCM (non-compliant) AES-OCB", "role": "User"}, {"name": "Perform random number generation (non- compliant)", "description": "Perform random number generation", "alg_accessed": "ANSI X9.31 RNG (with 128-bit AES core) Hash DRBG HMAC DRBG", "role": "User"}, {"name": "Perform key pair generation (non-compliant)", "description": "Perform key pair generation", "alg_accessed": "DH (non-compliant) DSA KeyGen (non-compliant) ECDH (non-compliant) ECDSA KeyGen (non-compliant) EdDSA KeyGen RSA KeyGen (non-compliant)", "role": "User"}, {"name": "Shared secret computation (non-compliant)", "description": "Perform shared secret computation", "alg_accessed": "DH (non-compliant) ECDH (non-compliant)", "role": "User"}]}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": false, "entries": []}, "storage_areas": {"section": 9, "subsection": 1, "found": false, "entries": []}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Imported in plaintext via API parameter", "source": "External", "dest": "RAM", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Exported in plaintext via API parameter", "source": "RAM", "dest": "External", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "OpenSSL_cleanse()", "description": "The OpenSSL_cleanse() function zeroizes SSPs.", "rationale": "The OpenSSL_cleanse() function zeroizes SSPs, yielding them irretrievable.", "operatorId": "The operator calls the OpenSSL_cleanse() function. The successful completion of the procedural zeroization suffices as the implicit indicator that zeroization has completed."}, {"method": "Reboot/Power cycle", "description": "The host device is rebooted or power cycled, which zeroizes the SSPs.", "rationale": "Rebooting or power cycling the host device clears RAM, yielding the SSPs irretrievable.", "operatorId": "The operator reboots or power cycles the host device."}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "HMAC-SHA2- 256 #1", "testProps": "SHA2-256", "testMethod": "Software Integrity Test", "type": "SW/FW Integrity", "indicator": "Internal flag; subsequent requests return failure indicator", "details": "Software integrity test for libcrypto. Performed automatically without operator action"}, {"algorithmOrTest": "HMAC-SHA2- 256 #2", "testProps": "SHA2-256", "testMethod": "Software Integrity Test", "type": "SW/FW Integrity", "indicator": "Internal flag; subsequent requests return failure indicator", "details": "Software integrity test for libssl. Performed automatically without operator action"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-ECB #1", "testProps": "128-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Encrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-ECB #2", "testProps": "128-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Decrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 #1", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Encrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 #2", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Decrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 #3", "testProps": "512-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Encrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 #4", "testProps": "512-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Decrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CCM #1", "testProps": "192-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Encrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CCM #2", "testProps": "192-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Decrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-GCM #1", "testProps": "128-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Encrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-GCM #2", "testProps": "128-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Decrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CMAC #1", "testProps": "128-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Generate", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CMAC #2", "testProps": "128-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CMAC #3", "testProps": "192-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Generate", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CMAC #4", "testProps": "192-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CMAC #5", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Generate", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "AES-CMAC #6", "testProps": "256-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "TDES-ECB", "testProps": "3-Key", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Decrypt", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "TDES-CMAC", "testProps": "3-Key", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "Counter DRBG #1", "testProps": "AES-128-CTR, with derivation function", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Generate/Instantiate/Reseed", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "Counter DRBG #2", "testProps": "AES-192-CTR, with derivation function", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Generate/Instantiate/Reseed", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "Counter DRBG #3", "testProps": "AES-256-CTR, with derivation function", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Generate/Instantiate/Reseed", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "DSA SigVer (FIPS186-4)", "testProps": "2048-bit; SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "ECDSA SigGen (FIPS186-5) #1", "testProps": "P-224; SHA2- 256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Sign", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "ECDSA SigVer (FIPS186-5) #1", "testProps": "P-224; SHA2- 256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "ECDSA SigGen (FIPS186-5) #2", "testProps": "K-233; SHA2- 256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Sign", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "ECDSA SigVer (FIPS186-5) #2", "testProps": "K-233; SHA2- 256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "RSA SigGen (FIPS186-5)", "testProps": "2048-bit; SHA2-256; PKCS#1.5 scheme", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Sign", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "RSA SigVer (FIPS186-5)", "testProps": "2048-bit; SHA2-256; PKCS#1.5 scheme", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Verify", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "HMAC-SHA-1", "testProps": "SHA-1", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hashed Message", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "HMAC-SHA2- 224", "testProps": "SHA2-224", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hashed Message", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "HMAC-SHA2- 256", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hashed Message", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "HMAC-SHA2- 384", "testProps": "SHA2-384", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hashed Message", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "HMAC-SHA2- 512", "testProps": "SHA2-512", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hashed Message", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "SHA-1", "testProps": "SHA-1", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hash", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "SHA2-224", "testProps": "SHA2-224", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hash", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "SHA2-256", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hash", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "SHA2-384", "testProps": "SHA2-384", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hash", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "SHA2-512", "testProps": "SHA2-512", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hash", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "SHA3-256", "testProps": "SHA3-256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Hash", "condition": "Before completing the software integrity tests."}, {"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3", "testProps": "P-224", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Shared Secret Computation", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3", "testProps": "2048-bit", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Shared Secret Computation", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "PBKDF", "testProps": "SHA2-256; 5 iterations", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Derive", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "TLS v1.2 KDF RFC7627", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Derive", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "TLS v1.3 KDF", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Derive", "condition": "After successfully completing the software integrity tests."}, {"algorithmOrTest": "DSA KeyGen (FIPS186-4)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Sign/Verify", "condition": "When the requested service requires the generation of a DH key pair."}, {"algorithmOrTest": "ECDSA KeyGen (FIPS186-5)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Sign/Verify", "condition": "When the requested service requires the generation of an ECDH/ECDSA key pair."}, {"algorithmOrTest": "RSA KeyGen (FIPS186-5)", "testProps": "-", "testMethod": "PCT", "type": "PCT", "indicator": "An integer value indicating success (1) or failure (0) of the self-test procedure call.", "details": "Sign/Verify", "condition": "When the requested service requires the generation of an RSA key pair."}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Critical Error", "description": "Upon test failure, the module immediately terminates the calling application's API call with a returned error code and sets an internal flag, signaling the error condition. For any subsequent request made by the calling application for cryptographic services, the module will return a failure indicator, thereby disabling all access to its cryptographic functions, sensitive security parameters (SSPs), and data output services while the error condition persists.", "conditions": "If any of the pre- operational integrity tests fail. If any of the conditional self-tests fail.", "recoveryMethod": "The module must be re- instantiated by the calling application. The Crypto Officer should contact Sunhillo Corporation if errors persist after re- instantiation.", "indicator": "Returns error code and sets an internal flag. Subsequent requests return failure indicator."}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["AES-OFBA7573", "#A7573", "SHA3-512A7573", "HMAC-SHA3-512A7573", "SHAKE-256A7573", "AES-CFB8A7573", "SHA3-224A7573", "TDES-CFB1A7573", "RSA SigVer (FIPS186-4)A7573", "AES-GCMA7573", "AES-KWA7573", "KAS-FFC-SSC Sp800-56Ar3A7573", "TLS v1.2 KDF RFC7627A7573", "ECDSA KeyVer (FIPS186-5)A7573", "SHA2-256A7573", "HMAC-SHA2-224A7573", "AES-CMACA7573", "HMAC-SHA2-512A7573", "SHA3-384A7573", "TDES-ECBA7573", "AES-XTS Testing Revision 2.0A7573", "AES-ECBA7573", "HMAC-SHA3-224A7573", "DSA KeyGen (FIPS186-4)A7573", "HMAC-SHA-1A7573", "DSA SigVer (FIPS186-4)A7573", "AES-CBCA7573", "KAS-ECC-SSC Sp800-56Ar3A7573", "RSA SigGen (FIPS186-5)A7573", "AES-CFB1A7573", "AES-CFB128A7573", "TDES-CBCA7573", "ECDSA SigVer (FIPS186-4)A7573", "TDES-CFB64A7573", "HMAC-SHA2-256A7573", "ECDSA KeyGen (FIPS186-5)A7573", "HMAC-SHA3-256A7573", "PBKDFA7573", "AES-CCMA7573", "#A7572", "AES-GMACA7573", "ECDSA SigGen (FIPS186-5)A7573", "HMAC-SHA3-384A7573", "TDES-CMACA7573", "DSA PQGGen (FIPS186-4)A7573", "ECDSA SigVer (FIPS186-5)A7573", "Counter DRBGA7573", "RSA SigVer (FIPS186-5)A7573", "SHA3-256A7573", "TLS v1.3 KDFA7572", "ECDSA KeyVer (FIPS186-4)A7573", "SHA2-384A7573", "AES-CTRA7573", "SHA-1A7573", "SHA2-224A7573", "RSA KeyGen (FIPS186-5)A7573", "TDES-CFB8A7573", "SHAKE-128A7573", "AES-KWPA7573", "TDES-OFBA7573", "HMAC-SHA2-384A7573", "SHA2-512A7573"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "0c7d29a015b4f8e86f5f182d3090efebc9e7523c31a31815964fbb02e8742258", "txt_hash": "df536616e784dc3ffd3d64f8967915e4c8ba8028e0c37476f809bd15a820577c", "json_hash": "3367f014b7864d8030670518f233260f056e35a7f32ae5ca4f1dc6e4d01e1064"}}}