{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "b996521be9c996db", "cert_id": 5549, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Motorola P25 KVL 7000 HSM", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-09", "validation_type": "Initial", "lab": "Leidos Accredited Testing & Evaluation (AT&E) Lab"}], "vendor_url": "http://www.motorolasolutions.com", "vendor": "Motorola Solutions Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 2, "caveat": "When installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs", "exceptions": ["Roles, services, and authentication: Level 3", "Software/Firmware security: Level 3", "Operational environment: N/A", "Physical security: Level 3", "Non-invasive security: N/A", "Life-cycle assurance: Level 3", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "The Module generates, loads and manages encryption and authentication keys securely into communication products directly from the palm of your hand. The KVL 7000 integrates with the Key Management Facility (KMF) by provisioning radios and consoles for centralized key management.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-08", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 3": 3, "Level 2": 7, "level 2": 1, "level 3": 3}}, "fips_certlike": {"Certlike": {"SHA2-384": 4, "SHA2-256": 9, "SHA2": 8, "SHS 817": 4, "SHA2- 256": 3, "SHA2- 384": 1, "AES128": 1, "AES256": 1, "AES-256": 47, "AES-128": 30}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 9, "AES128": 1, "AES256": 1, "AES-": 13, "AES-256": 46, "AES-128": 30}, "CAST": {"CAST": 77}}}, "asymmetric_crypto": {"RSA": {"RSA-2048": 3}, "ECC": {"ECDSA": {"ECDSA": 10}, "ECC": {"ECC": 3}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA2": {"SHA2": 8}}}, "crypto_scheme": {}, "crypto_protocol": {}, "randomness": {"PRNG": {"DRBG": 58}, "RNG": {"RNG": 15, "RBG": 3}}, "cipher_mode": {"ECB": {"ECB": 9}, "CBC": {"CBC": 7}, "CTR": {"CTR": 9}, "CFB": {"CFB": 1}, "OFB": {"OFB": 8}, "GCM": {"GCM": 14}}, "ecc_curve": {"NIST": {"P-384": 6}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 4}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 8, "FIPS186-5": 6, "FIPS 186-5": 2, "FIPS 180-4": 2, "FIPS18": 2, "FIPS140-3": 1, "FIPS PUB 140-3": 1}, "NIST": {"SP 800-38A": 2, "SP 800-38D": 2, "SP 800-38F": 1, "SP 800-90A": 1}, "ISO": {"ISO/IEC 19790": 2, "ISO/IEC 24759": 2}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 957040, "pdf_is_encrypted": false, "pdf_number_of_pages": 44, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20261006071329-04'00'", "/ModDate": "D:20261006071329-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules"]}}, "module_algorithms": {"_type": "Set", "elements": ["AES-ECBA7819", "AES-CFB8A7819", "AES-CBCA7819", "SHA2-256SHS 817", "SHA2-384A8090", "AES-GMACA7819", "RSA SigVer (FIPS186-5)A5253", "AES-GCMA7819", "AES-CTRA7818", "AES-OFBA7819", "AES-KWA8087", "AES-CFB128A7818", "Counter DRBGA8088", "ECDSA SigVer (FIPS186-5)A8089"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A8087", "#A7817", "#A7819", "#A8088", "#A8089", "#A7818", "#A8090", "#A5253"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "2"}, {"section": "2", "title": "Cryptographic module specification", "level": "2"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "2"}, {"section": "4", "title": "Roles, services, and authentication", "level": "3"}, {"section": "5", "title": "Software/Firmware security", "level": "3"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "3"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "2"}, {"section": "10", "title": "Self-tests", "level": "2"}, {"section": "11", "title": "Life-cycle assurance", "level": "3"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "2"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "5185912T05", "hwVersion": "5185912", "fwVersion": "R70.01.01", "processors": "MACE #5185912 family", "features": ""}, {"modelPartNum": "Algorithm*", "hwVersion": "Algorithm FW Version", "fwVersion": "Base FW Version", "processors": "Cert. #", "features": ""}, {"modelPartNum": "AES128", "hwVersion": "R01.00.06", "fwVersion": "R70.01.01", "processors": "A7817", "features": ""}, {"modelPartNum": "AES256", "hwVersion": "R01.00.09", "fwVersion": "R70.01.01", "processors": "A7818", "features": ""}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": false, "entries": []}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC, AES-CFB128, AES-CFB8, AES-CTR, AES- ECB, AES-OFB", "cavpCertName": "A7818, A7819", "properties": "Direction - Decrypt, Encrypt Key Length - 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC, AES-CTR, AES- ECB, AES-OFB", "cavpCertName": "A7817", "properties": "Direction - Decrypt, Encrypt Key Length - 128", "reference": "SP 800-38A"}, {"algorithm": "AES-GCM, AES-GMAC", "cavpCertName": "A7817", "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128", "reference": "SP 800-38D"}, {"algorithm": "AES-GCM, AES-GMAC", "cavpCertName": "A7818, A7819", "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1, 8.2.2 Key Length - 256", "reference": "SP 800-38D"}, {"algorithm": "AES-KW", "cavpCertName": "A8087", "properties": "Direction - Decrypt, Encrypt Key Length - 256", "reference": "SP 800-38F"}, {"algorithm": "Counter DRBG", "cavpCertName": "A8088", "properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 256, 1024 Nonce - Nonce: 128, 512 Personalization String Length - Personalization String Length: 256, 512 Returned Bits - 128", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A8089", "properties": "Curve - P-384 Hash Algorithm - SHA2-384", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigVer (FIPS186-5)", "cavpCertName": "A5253", "properties": "Modulo - 2048 Signature Type - pkcs1v1.5", "reference": "FIPS 186-5"}, {"algorithm": "SHA2-256", "cavpCertName": "SHS 817", "properties": "Message Length - Message Length: 0-51200 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-256, SHA2-384", "cavpCertName": "A8090", "properties": "Message Length - Message Length: 8-2048 Increment 8", "reference": "FIPS 180-4"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG", "algoPropList": "Key Type :AES 128 Symmetric Key Type :AES 256 Symmetric", "implName": "N/A", "reference": "SP800-133rev2 Section4, example 1 and IG D.H"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "Synchronous Serial Interface (SSI)", "logicalInterface": "Data Input Data Output", "data": "This is the interface to the KVL 7000 Host Application. All SSPs exchanged over this interface are always encrypted."}, {"physicalPort": "", "logicalInterface": "Control Input Status Output", "data": ""}, {"physicalPort": "KYLD (Keyload) Interface", "logicalInterface": "Data Input Data Output Control Input", "data": "This is the interface to external devices. All SSPs exchanged over this interface are either encrypted or in plaintext when operating in approved mode."}, {"physicalPort": "Clock", "logicalInterface": "Control Input", "data": "Clock input."}, {"physicalPort": "Power", "logicalInterface": "Power", "data": "This interface powers all circuitry."}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "AM", "description": "Identity-based. The password length is a minimum of 15 characters using any combination of ASCII printable characters and is padded to a 30-byte long hexadecimal number. After authenticating, the KVL user may change it any time through the SSI Port.", "mechanism": "SHA2-256 (A8090)", "strength": "Since the password length is a minimum of 15 characters using any combination of ASCII printable characters and is padded to a 30- byte long hexadecimal number; the probability of a successful random attempt is 1 in 95^15", "perMinute": "The Module limits the number of consecutive failed authentication attempts to a configurable number (Minimum 3, maximum 20). Upon exceeding the maximum number of login attempts, the module can be configured to either lock the device from further login attempts for a specified amount of time (configurable by the CO between 1- 30 minutes), or execute the Factory Reset service. The minimum probability of a successful random attempt during a one-"}, {"name": "", "description": "", "mechanism": "", "strength": "", "perMinute": "minute period is 20 in 95^15"}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Crypto Officer", "type": "Identity", "operatorType": "CO", "authMethodList": "AM"}, {"name": "User", "type": "Identity", "operatorType": "User", "authMethodList": "AM"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Change CO Passwor d", "description": "Change current Crypto- Officer password.", "indicator": "Succes s or Fail", "inputs": "Password", "outputs": "Successful change the password will allow access to the services allowed for CO role.", "secFunImpl": "Common- SHA2 KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - CO PWD (AM): W,E,Z - IEK: E,Z - KPK: Z - PWD Hash: G,E,Z"}, {"name": "Change User Passwor d", "description": "Change current User password.", "indicator": "Succes s or Fail", "inputs": "Password", "outputs": "Successful change the password will allow access to the services allowed for User role.", "secFunImpl": "Common- SHA2 KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - IEK: E,Z - KPK: Z - PWD Hash: G,E,Z - User PWD (AM): W,E,Z"}, {"name": "Configur e and Query Target Device", "description": "Configure target device and retrieve key", "indicator": "Succes s or Fail", "inputs": "Command In", "outputs": "Target device information or failure", "secFunImpl": "A7819 Encryption A7819 Authenticat", "rolesSspAccess": "Crypto Officer - AES-GCM IV : G,E - BKK: E - DRBG"}, {"name": "", "description": "metadata and versions from the target device.", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "ed RNG", "rolesSspAccess": "Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E User - AES-GCM IV : G,E - BKK: E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E"}, {"name": "Configur e KVL", "description": "Configure the module.", "indicator": "Succes s or Fail", "inputs": "Configurati on parameters", "outputs": "Updated module configuratio n, or failure.", "secFunImpl": "Common- SHA2 KTS-GCM RNG", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - CO PWD (AM): W,E,Z - IEK: W,E,Z - KPK: G,Z - PWD Hash: G,E,Z - User PWD (AM): W,E,Z"}, {"name": "Decrypt", "description": "Decrypt Ciphertext data", "indicator": "Succes s or Fail", "inputs": "Ciphertext", "outputs": "Plaintext (success) or failure", "secFunImpl": "A7817 Authenticat ed A7817 Decryption A7818 Authenticat ed A7818 Decryption A7819 Authenticat ed A7819", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - KEK: W,E,Z - KPK: E - TEK: W,E,Z User - AES-GCM IV : E - KEK: W,E,Z - KPK: E - TEK: W,E,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "Decryption KTS-GCM", "rolesSspAccess": ""}, {"name": "Encrypt", "description": "Encrypt plaintext data", "indicator": "Succes s or Fail", "inputs": "Plaintext", "outputs": "Ciphertext (success) or failure", "secFunImpl": "A7817 Encryption A7817 Authenticat ed A7818 Encryption A7818 Authenticat ed A7819 Encryption A7819 Authenticat ed RNG KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : G,E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: W,E,Z - KPK: E - TEK: W,E,Z User - AES-GCM IV : G,E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: W,E,Z - KPK: E - TEK: W,E,Z"}, {"name": "Factory Reset", "description": "Reset the module to factory default", "indicator": "Succes s or Fail", "inputs": "Command In.", "outputs": "Success or Fail", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer - BKK: Z - CO PWD (AM): Z - IEK: Z - KPK: Z - PWD Hash: Z - User PWD (AM): Z Unauthenticat ed - BKK: Z - CO PWD (AM): Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- IEK: Z - KPK: Z - PWD Hash: Z - User PWD (AM): Z User - BKK: Z - CO PWD (AM): Z - IEK: Z - KPK: Z - PWD Hash: Z - User PWD (AM): Z"}, {"name": "Generat e Key", "description": "Generate TEK/KEK", "indicator": "Succes s or Fail", "inputs": "Command In", "outputs": "Encrypted keys (Success) or failure", "secFunImpl": "RNG KeyGen KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : G,E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: G,R - KPK: E - TEK: G,R User - AES-GCM IV : G,E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: G,R - KPK: E - TEK: G,R"}, {"name": "Generat e Random Number", "description": "Generate random number", "indicator": "Succes s or Fail", "inputs": "Command In", "outputs": "Random number or failure", "secFunImpl": "RNG Entropy", "rolesSspAccess": "Crypto Officer - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: G,E - DRBG- nonce: G,E Unauthenticat ed - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: G,E - DRBG- nonce: G,E User - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: G,E - DRBG-"}, {"name": "Key Check", "description": "Check the validity of a given key", "indicator": "Succes s or Fail", "inputs": "Encrypted key", "outputs": "Success or failure", "secFunImpl": "KTS-GCM", "rolesSspAccess": "nonce: G,E Crypto Officer - AES-GCM IV : E - KPK: E - KEK: W - TEK: W User - AES-GCM IV : E - KPK: E - KEK: W - TEK: W"}, {"name": "Key Sharing", "description": "Combinati on of receive", "indicator": "Succes s or Fail", "inputs": "Command In", "outputs": "Success or failure", "secFunImpl": "RNG KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : G,E"}, {"name": "", "description": "and transfer TEK/KEK between two KVLs.", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: R,W - KPK: E - TEK: R,W User - AES-GCM IV : G,E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: R,W - KPK: E - TEK: R,W"}, {"name": "Login CO", "description": "Validate current Crypto- Office passwords .", "indicator": "Succes s or Fail", "inputs": "Password", "outputs": "Successful authenticati on will allow access to the services allowed for CO role.", "secFunImpl": "Common- SHA2 KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - CO PWD (AM): W,E,Z - IEK: E,Z - KPK: Z - PWD Hash: G,E,Z"}, {"name": "Login User", "description": "Validate current User passwords .", "indicator": "Succes s or Fail", "inputs": "Password", "outputs": "Successful authenticati on will allow access to the services allowed for User role.", "secFunImpl": "Common- SHA2 KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - IEK: E,Z - KPK: Z - PWD Hash: G,E,Z - User PWD (AM): W,E,Z"}, {"name": "Module Info", "description": "Query module firmware, hardware version.", "indicator": "Succes s or Fail", "inputs": "Command In.", "outputs": "HSM Firmware version; Hardware information and FIPS status", "secFunImpl": "None", "rolesSspAccess": "Crypto Officer Unauthenticat ed User"}, {"name": "Power On", "description": "Power on the module", "indicator": "Succes s or Fail", "inputs": "N/A", "outputs": "Module is powered on", "secFunImpl": "SigVer1", "rolesSspAccess": "Unauthenticat ed - RSA FW-LD- Pub: E"}, {"name": "Program Update", "description": "Update the module firmware.", "indicator": "Succes s or Fail", "inputs": "Firmware image", "outputs": "The module is upgraded to new firmware", "secFunImpl": "SHA SigVer2", "rolesSspAccess": "Crypto Officer - CO PWD (AM): Z - ECC FW-LD- Pub: E - IEK: Z - KPK: Z - PWD Hash: Z - User PWD (AM): Z"}, {"name": "Receive Key", "description": "Receive TEK/KEK from KVL or KVL Host", "indicator": "Succes s or Fail", "inputs": "TEK/KEK", "outputs": "Encrypted keys (Success) or failure", "secFunImpl": "KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : E - IEK: E - KEK: W - KPK: E - TEK: W User - AES-GCM IV : E - IEK: E - KEK: W - KPK: E - TEK: W"}, {"name": "Store and Forward", "description": "Receive TEK/KEK from the KMF into the module (store), and then transfer them to the target device (forward).", "indicator": "Succes s or Fail", "inputs": "TEK/KEK", "outputs": "Encrypted TEK/KEK (Success) or failure", "secFunImpl": "A7819 Encryption RNG KTS-GCM KTS-KW", "rolesSspAccess": "Crypto Officer - BKK: E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: G,E"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- KEK: R,W - KPK: E - TEK: R,W User - BKK: E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: G,E - DRBG- nonce: G,E - KEK: R,W - KPK: E - TEK: R,W"}, {"name": "Transfer Key", "description": "Transfer keys to target device.", "indicator": "Succes s or Fail", "inputs": "TEK/KEK", "outputs": "Success or failure", "secFunImpl": "A7819 Encryption RNG KTS-GCM", "rolesSspAccess": "Crypto Officer - AES-GCM IV : G,E - BKK: E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E - KEK: R - KPK: E - TEK: R User - AES-GCM IV : G,E - BKK: E - DRBG Internal State - Key: G,E - DRBG Internal State - V: G,E - DRBG- EI/Seed: E - DRBG- nonce: E"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- KEK: R - KPK: E - TEK: R"}, {"name": "Zeroize Key", "description": "Zeroize keys in the target device", "indicator": "Succes s or Fail", "inputs": "Command In", "outputs": "Success or failure", "secFunImpl": "A7819 Authenticat ed A7819 Encryption RNG", "rolesSspAccess": "Crypto Officer - AES-GCM IV : G,E - BKK: E - DRBG Internal State - Key: E - DRBG Internal State - V: E - DRBG- EI/Seed: E - DRBG- nonce: E User - AES-GCM IV : G,E - BKK: E - DRBG Internal State - Key: E - DRBG Internal State - V: E - DRBG- EI/Seed: E - DRBG- nonce: E"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Covered with a hard-opaque epoxy coating that provides evidence of attempts to tamper with the KVL 7000 HSM (MACE)", "inspectFreq": "Periodically", "inspectGuidance": "Look for signs of tampering. Remove from service if tampering found."}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "Flash Memory (S2)", "description": "Stored in the flash in plaintext, associated by memory location (pointer).", "persistance": "Static"}, {"name": "System Memory (S1)", "description": "Stored in the volatile memory (RAM).", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Input encrypted on KPK (I2)", "source": "Flash Memory (S2)", "dest": "Host Software (outside)", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS-GCM"}, {"name": "Input encrypted on the IEK (I1)", "source": "Host Software (outside)", "dest": "Flash Memory (S2)", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS-GCM"}, {"name": "Input in plaintext (I3)", "source": "Another KVL (outside)", "dest": "Flash Memory (S2)", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Output encrypted on BKK (O1)", "source": "Flash Memory (S2)", "dest": "Target device (outside)", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS-GCM"}, {"name": "Output encrypted on BKK (O2)", "source": "Flash Memory (S2)", "dest": "Target device (outside)", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "A7819 Encryption"}, {"name": "Output encrypted on KPK (O3)", "source": "Flash Memory (S2)", "dest": "KVL Host (outside)", "format": "Encrypted", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": "KTS-GCM"}, {"name": "Output in plaintext (O4)", "source": "Flash Memory (S2)", "dest": "Target device (outside)", "format": "Plaintext", "distribution": "Manual", "entry": "Electronic", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Z1", "description": "Zeroized by module power cycle or hard reset.", "rationale": "SSPs in volatile memory zeroized.", "operatorId": "Yes"}, {"method": "Z2", "description": "Zeroized by the \"Program Update\" service.", "rationale": "SSPs zeroized upon loading of new firmware.", "operatorId": "Yes"}, {"method": "Z3", "description": "Zeroized by the \"Configure KVL\" service.", "rationale": "CO zeroizes the module when configuring into an Approved mode.", "operatorId": "Yes"}, {"method": "Z4", "description": "Zeroized by the \"Login CO Password\" service.", "rationale": "CO password zeroized after too many failed login attempts.", "operatorId": "Yes"}, {"method": "Z5", "description": "Zeroized by the \"Change CO Password\" service.", "rationale": "CO password zeroized after too many failed attempts.", "operatorId": "Yes"}, {"method": "Z6", "description": "Zeroized by the \"Login User Password\" service.", "rationale": "User password zeroized after too many failed login attempts.", "operatorId": "Yes"}, {"method": "Z7", "description": "Zeroized by the \"Change User Password\" service.", "rationale": "User password zeroized after too many failed attempts.", "operatorId": "Yes"}, {"method": "Z8", "description": "Zeroized by the \"Factory Reset\" service.", "rationale": "CO or User performs factory reset of the module.", "operatorId": "Yes"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "Firmware integrity", "testProps": "RSA-2048 (Cert. #A5253),SHA2- 256 (Cert. #SHS817)", "testMethod": "KAT", "type": "SW/FW Integrity", "indicator": "Success or ES2 on failure", "details": "A digital signature is generated over the Boot Block, Base firmware, and all Drop-In Algorithms when it is built using RSA-2048 (Cert. # #A5253) SHA2-256 (Cert. #SHS817), and is stored with the code upon download into the Module."}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-128 AES- CBC Decrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- CBC Encrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- CTR Decrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES-", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "CTR Encrypt", "testProps": "", "testMethod": "", "type": "", "indicator": "ES1 on failure", "details": "", "condition": ""}, {"algorithmOrTest": "AES-128 AES- ECB Decrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- ECB Encrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- GCM Decrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- GCM Encrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- OFB Decrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-128 AES- OFB Encrypt", "testProps": "AES-128", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- CBC Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- CBC Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- CTR Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- CTR Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- ECB Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- ECB Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- GCM Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- GCM Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- OFB Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-256 AES- OFB Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-Key Unwrap", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES-Key Wrap", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- CBC Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- CBC Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- CFB8 Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES-", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "CFB8 Encrypt", "testProps": "", "testMethod": "", "type": "", "indicator": "", "details": "", "condition": ""}, {"algorithmOrTest": "AES256- Internal AES- ECB Decrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- ECB Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- GCM Decrypti on", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- GCM Encrypt", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- OFB Decrypti on", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Decrypt", "condition": "Bootup"}, {"algorithmOrTest": "AES256- Internal AES- OFB Encrypti on", "testProps": "AES-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Encrypt", "condition": "Bootup"}, {"algorithmOrTest": "Counter DRBG (A8088)", "testProps": "AES-256 CTR", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "SP 800-90Arev1 Instantiate/Generate/Re seed Known Answer Tests", "condition": "Bootup"}, {"algorithmOrTest": "ECDSA SigVer (FIPS18 6-5)", "testProps": "ECDSA P- 384 SigVer", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Verify", "condition": "Bootup"}, {"algorithmOrTest": "Entropy E132 - Start-up", "testProps": "Start-up RCT and APT", "testMethod": "Fault Detecti on", "type": "Critical Functio n", "indicator": "Succes s or ES3 on failure", "details": "An RCT and APT as specified in [90B] section 4.4 are executed", "condition": "Bootup"}, {"algorithmOrTest": "RCT and APT", "testProps": "", "testMethod": "", "type": "", "indicator": "", "details": "before generation of the DRBG entropy input", "condition": ""}, {"algorithmOrTest": "Firmwar e Load", "testProps": "ECDSA P- 384 SigVer/SHA 2-384", "testMethod": "KAT", "type": "SW/F W Load", "indicator": "Succes s or ES2 on failure", "details": "Verify the image by ECDSA P-384 upon download into the module.", "condition": "loading a new firmware image"}, {"algorithmOrTest": "RSA SigVer (FIPS18 6-5)", "testProps": "RSA-2048 SigVer", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES2 on failure", "details": "Verify", "condition": "Bootup"}, {"algorithmOrTest": "SHA2- 256 (A8090)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Hash", "condition": "Bootup"}, {"algorithmOrTest": "SHA2- 256 (SHS 817)", "testProps": "SHA2-256", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES2 on failure", "details": "Hash", "condition": "Bootup"}, {"algorithmOrTest": "SHA2- 384 (A8090)", "testProps": "SHA2-384", "testMethod": "KAT", "type": "CAST", "indicator": "Succes s or ES1 on failure", "details": "Hash", "condition": "Bootup"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "ES1", "description": "The Module fails a KAT.", "conditions": "The Module enters the critical error state, stores the status in non-volatile memory, and halts all further operations by entering an infinite loop.", "recoveryMethod": "Reboot or power cycle the Module.", "indicator": "The Module will not respond to any requests."}, {"name": "ES2", "description": "The Module fails a firmware loading during program upgrade and/or firmware integrity pre-operational self- test.", "conditions": "Following a firmware signature validation failure, the Module ceases normal operations and transitions to flash programming mode.", "recoveryMethod": "Reboot or power cycle the module or re-flashing a new image.", "indicator": "The Module will not respond to any requests."}, {"name": "ES3", "description": "The Module fails to acquire Entropy.", "conditions": "The Module enters the Fatal Error state.", "recoveryMethod": "Automatic", "indicator": "The Module stores the status into the internal flash memory and resets to attempt recovery."}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["#A8087", "#A7817", "SHA2-384A8090", "#A8089", "AES-CFB128A7818", "#A5253", "AES-CBCA7819", "AES-GMACA7819", "#A8088", "AES-ECBA7819", "#A7819", "AES-GCMA7819", "AES-OFBA7819", "Counter DRBGA8088", "#A8090", "ECDSA SigVer (FIPS186-5)A8089", "AES-CFB8A7819", "SHA2-256SHS 817", "RSA SigVer (FIPS186-5)A5253", "AES-CTRA7818", "AES-KWA8087", "#A7818"]}, "extracted_versions": {"_type": "Set", "elements": ["7000"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "82b835429f18e74f96dfc753dd12f4f372aeb2d203d2f260c7f4352028432803", "txt_hash": "410b10ce5c4f6ea564e3c6649a1345ee0cd71bb76dbec4a36c690cffe3de5dd3", "json_hash": "1a9b2eda2c0d4be38d710f4f8e4af612a20c13d441033230ed7c3dcb9287629b"}}}