This page was not yet optimized for use on mobile devices.

Geotab Cryptographic Module

Certificate #4875

Webpage information ?

Status	active
Validation dates	13.11.2024
Sunset date	12-11-2026
Standard	FIPS 140-3
Security level	1
Type	Firmware
Embodiment	Single Chip
Caveat	Interim Validation. When installed, initialized and configured as specified in Section 11 of the Security Policy
Exceptions	Non-invasive security: N/A Mitigation of other attacks: N/A Documentation requirements: N/A Cryptographic module security policy: N/A
Description	Geotab Cryptographic Module provides a library of functions to perform general purpose cryptographic services.
Version (Firmware)	1.0
Tested configurations	NXP S32K148 with an ARM Cortex M4F ST STM32H7 with an ARM Cortex M7
Vendor	Geotab Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES, AES-256, HMAC

Asymmetric Algorithms

RSA 2048, RSA-2048

Randomness

DRBG, RBG

Block cipher modes

CBC

Vendor

NXP

Security level

Level 1

Certification process

out of scope, in this section will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 12. Mitigation of Other Attacks The module does not claim to mitigate any

Standards

FIPS 140-3, FIPS 198-1, FIPS 186-4, FIPS 180-4, FIPS 186-2, SP 800-90B, PKCS #1, ISO/IEC 24759

File metadata

Modification date	D:20241107115617--05'00
Pages	26
Producer	Skia/PDF m132 Google Docs Renderer

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

18.11.2024 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4875,
  "dgst": "b9c3928bde572ec9",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CBCA4203",
        "RSA SigVer (FIPS186-4)A4203",
        "HMAC-SHA2-256A4203",
        "SHA2-256A4203",
        "HMAC DRBGA4203"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "RSA": {
          "RSA 2048": 2,
          "RSA-2048": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "in this section will result in the module operating in a non-compliant state, which is considered out of scope of this validation. 12. Mitigation of Other Attacks The module does not claim to mitigate any": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 256": 2,
          "AES-256": 4,
          "PKCS #1": 4,
          "RSA 2048": 2,
          "SHA 256": 1,
          "SHA2-256": 8
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 40
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 2,
          "FIPS 180-4": 1,
          "FIPS 186-2": 1,
          "FIPS 186-4": 1,
          "FIPS 198-1": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS #1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8,
            "AES-256": 4
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 30
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "NXP": {
          "NXP": 4
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/ModDate": "D:20241107115617--05\u002700",
      "/Producer": "Skia/PDF m132 Google Docs Renderer",
      "/Title": "",
      "pdf_file_size_bytes": 461771,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/86",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36813"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 26
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "08f50c8514a2297d93584b132f514883eebbe9633955c684516a3f24cc54fad3",
    "policy_txt_hash": "ee687cbd6ff503ced63ae896b71c9c69b77a7d5ee032e1d13603af4533bad011"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim Validation. When installed, initialized and configured as specified in Section 11 of the Security Policy",
    "certificate_pdf_url": null,
    "date_sunset": "2026-11-12",
    "description": "Geotab Cryptographic Module provides a library of functions to perform general purpose cryptographic services.",
    "embodiment": "Single Chip",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": "1.0",
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Geotab Cryptographic Module",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": [
      "NXP S32K148 with an ARM Cortex M4F",
      "ST STM32H7 with an ARM Cortex M7"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-11-13",
        "lab": "LEIDOS CSTL",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Geotab Inc.",
    "vendor_url": "http://www.geotab.com"
  }
}