Geotab Cryptographic Module

Certificate details

Certificate ID #4875
Status active
Validation dates 13.11.2024
Sunset date 12-11-2029
Standard FIPS 140-3
Security level 1
Type Firmware
Embodiment Single Chip
Caveat Interim Validation. When installed, initialized and configured as specified in Section 11 of the Security Policy
Exceptions
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description Geotab Cryptographic Module provides a library of functions to perform general purpose cryptographic services.
Version (Firmware) 1.0
Tested configurations
  • NXP S32K148 with an ARM Cortex M4F
  • ST STM32H7 with an ARM Cortex M7
Vendor Geotab Inc. http://www.geotab.com
Lab Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms
  • AES-CBCA4203
  • HMAC DRBGA4203
  • HMAC-SHA2-256A4203
  • RSA SigVer (FIPS186-4)A4203
  • SHA2-256A4203
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, HMAC
Asymmetric Algorithms
RSA 2048, RSA-2048
Randomness
DRBG, RBG
Block cipher modes
CBC

Vendor
NXP

Security level
Level 1
Certification process
out of scope, in this section will result in the module operating in a non-compliant state, which is considered out of scope of this validation

Modification date D:20241107115617--05'00
Pages 26
Producer Skia/PDF m132 Google Docs Renderer

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4875,
  "dgst": "b9c3928bde572ec9",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC DRBGA4203",
        "HMAC-SHA2-256A4203",
        "#A4203",
        "RSA SigVer (FIPS186-4)A4203",
        "SHA2-256A4203",
        "AES-CBCA4203"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "1.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 44,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "RSA": {
          "RSA 2048": 2,
          "RSA-2048": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "in this section will result in the module operating in a non-compliant state, which is considered out of scope of this validation": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 256": 2,
          "AES-256": 4,
          "PKCS #1": 4,
          "RSA 2048": 2,
          "SHA 256": 1,
          "SHA2-256": 8
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {},
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 43
        },
        "RNG": {
          "RBG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 2,
          "FIPS 180-4": 1,
          "FIPS 186-2": 1,
          "FIPS 186-4": 1,
          "FIPS 198-1": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS #1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8,
            "AES-256": 4
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 31
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "NXP": {
          "NXP": 4
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC DRBGA4203",
        "HMAC-SHA2-256A4203",
        "RSA SigVer (FIPS186-4)A4203",
        "SHA2-256A4203",
        "AES-CBCA4203"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4203"
      ]
    },
    "policy_metadata": {
      "/ModDate": "D:20241107115617--05\u002700",
      "/Producer": "Skia/PDF m132 Google Docs Renderer",
      "/Title": "",
      "pdf_file_size_bytes": 461771,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36813",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/86"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 26
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "74fef5dd55264ab002bb3610bcbb36cbfdf19f79cbe433ee8c9c81f7c533375b",
      "source_hash": "08f50c8514a2297d93584b132f514883eebbe9633955c684516a3f24cc54fad3",
      "txt_hash": "785b5730c502c03f6f33afa839de6471035e0f1052167c8ea3eb3da1211f98a6"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim Validation. When installed, initialized and configured as specified in Section 11 of the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2024_021224_0125.pdf",
    "date_sunset": "2029-11-12",
    "description": "Geotab Cryptographic Module provides a library of functions to perform general purpose cryptographic services.",
    "embodiment": "Single Chip",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": "1.0",
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Geotab Cryptographic Module",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": [
      "NXP S32K148 with an ARM Cortex M4F",
      "ST STM32H7 with an ARM Cortex M7"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-11-13",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Geotab Inc.",
    "vendor_url": "http://www.geotab.com"
  }
}