This page was not yet optimized for use on mobile devices.
Fortanix DSM Appliance
Certificate details
| Certificate ID | #5555 |
|---|---|
| Status | active |
| Validation dates | 19.10.2026 |
| Sunset date | 18-10-2031 |
| Standard | FIPS 140-3 |
| Security level | 3 |
| Type | Hardware |
| Embodiment | MultiChipStand |
| Caveat | When utilizing a Trusted Channel as specified in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | Fortanix DSM Appliance is the ideal building block for implementing Fortanix DSM in a private cloud or as a managed service. With DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, tokens, or any blob of data. |
| Vendor | Fortanix, Inc. http://www.fortanix.com |
| Lab | Acumen Security |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-256, AES, AES-, CAST, HMAC, CMACAsymmetric Algorithms
RSA-2048, ECDH, ECDSA, EdDSA, ECC, DHE, Diffie-Hellman, DHPost-quantum Algorithms
LMS, HSSHash functions
SHA-1, SHA1, SHA-256, SHA-512, SHA256, SHA512, SHA3-224, SHA3-384, SHA3-512, SHA3-256, SHA3, PBKDF, PBKDF2Schemes
MAC, Key AgreementProtocols
TLS v1.2, TLS v1.3, TLS, TLS 1.3, TLS 1.2Randomness
DRBG, RNG, RBGElliptic Curves
P-224, P-256, P-384, P-521, P-192Block cipher modes
ECB, CBC, CTR, OFB, GCM, CCMTrusted Execution Environments
PSP, SSCSecurity level
Level 3, Level 1Side-channel analysis
physical probing, malfunctionStandards
FIPS 140-3, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 186-4, FIPS 180-4, FIPS 202, FIPS186-2, FIPS1, FIPS 140, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38G, SP 800-38D, SP 800-38F, SP 800-90B, SP 800-90A, SP 800-56A, SP 800-108, SP 800-56B, SP 800-208, SP 800-132, SP 800-135, SP 800-52, NIST SP 800-63B, SP 800-140F, SP 800-57, PKCS 1, PKCS1, RFC7627, RFC 5288, RFC 8446, RFC 5246, RFC7, RFC 7627, ISO/IEC 19790:2012Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5555,
"dgst": "c1f330d0aff31c1c",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"RSA Signature PrimitiveA5344",
"KTS-IFCA5344",
"Safe Primes Key GenerationA5344",
"#A5345",
"#A5344",
"EDDSA KeyGenA5344",
"SHA2-224A5344",
"AES-CBCA5344",
"AES-GCMA5344",
"RSA SigVer (FIPS186-2)A5344",
"ECDSA SigVer (FIPS186-5)A5344",
"HMAC-SHA2-256A5344",
"ECDSA SigGen (FIPS186-5)A5344",
"Safe Primes Key VerificationA5344",
"EDDSA SigGenA5344",
"AES-ECBA5344",
"KAS-FFC-SSC Sp800-56Ar3A5344",
"SHA3-224A5344",
"AES-CTRA5344",
"SHAKE-256A5344",
"RSA Decryption Primitive Sp800-56Br2A5344",
"HMAC-SHA-1A5344",
"TLS v1.2 KDF RFC7627A5344",
"ECDSA KeyGen (FIPS186-5)A5344",
"HMAC-SHA2-512A5344",
"KAS-ECC-SSC Sp800-56Ar3A5344",
"SHA2-256A5345",
"AES-OFBA5344",
"HMAC-SHA2-384A5344",
"ECDSA KeyVer (FIPS186-5)A5344",
"PBKDFA5344",
"LMS SigVerA5344",
"TLS v1.3 KDFA5344",
"SHA3-384A5344",
"EDDSA SigVerA5344",
"AES-KWA5344",
"SHA3-512A5344",
"RSA KeyGen (FIPS186-5)A5344",
"RSA SigGen (FIPS186-5)A5344",
"SHAKE-128A5344",
"AES-CCMA5344",
"SHA2-384A5344",
"#A5244",
"AES-KWPA5344",
"LMS SigGenA5344",
"AES-CFB128A5344",
"LMS KeyGenA5344",
"AES-FF1A5344",
"Counter DRBGA5344",
"RSA SigVer (FIPS186-5)A5344",
"AES-CMACA5344",
"HMAC-SHA2-224A5344",
"Conditioning Component AES-CBC-MAC SP800-90BA5245",
"SHA3-256A5344",
"SHA2-512A5344",
"SHA-1A5344",
"#A5245",
"KDF SP800-108A5344"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A5344",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A5344",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5244",
"properties": "Direction - Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5245",
"properties": "Direction - Encrypt Key Length - 128",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-FF1",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38G"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A5344",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "Conditioning Component AES-CBC- MAC SP800-90B",
"cavpCertName": "A5244",
"properties": "Key Length - 128",
"reference": "SP 800-90B"
},
{
"algorithm": "Conditioning Component AES-CBC- MAC SP800-90B",
"cavpCertName": "A5245",
"properties": "Key Length - 128",
"reference": "SP 800-90B"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A5344",
"properties": "Prediction Resistance - No, Yes Mode - AES-256 Derivation Function Enabled - Yes",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A5344",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A5344",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A5344",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA3-224, SHA3- 256, SHA3-384, SHA3-512 Component - No, Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A5344",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256,",
"reference": "FIPS 186-5"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "SHA2-384, SHA2-512, SHA3-224, SHA3- 256, SHA3-384, SHA3-512",
"reference": ""
},
{
"algorithm": "EDDSA KeyGen",
"cavpCertName": "A5344",
"properties": "Curve - ED-25519",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A5344",
"properties": "Curve - ED-25519 PreHash - No, Yes Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A5344",
"properties": "Curve - ED-25519 PreHash - No Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A5344",
"properties": "Key Length - Key Length: 112-8192 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A5344",
"properties": "Key Length - Key Length: 112-8192 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A5344",
"properties": "Key Length - Key Length: 112-8192 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A5344",
"properties": "Key Length - Key Length: 112-8192 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A5344",
"properties": "Key Length - Key Length: 112-8192 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A5344",
"properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder onePassDh - KAS Role - initiator, responder staticUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800- 56Ar3",
"cavpCertName": "A5344",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192 Scheme - dhEphem - KAS Role - initiator, responder dhOneFlow - KAS Role - initiator, responder dhStatic -",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A5344",
"properties": "KAS Role - initiator, responder KDF Mode - Feedback Supported Lengths - Supported Lengths: 256",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KTS-IFC",
"cavpCertName": "A5344",
"properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Key Length - 1024",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "LMS KeyGen",
"cavpCertName": "A5344",
"properties": "-",
"reference": "SP 800-208"
},
{
"algorithm": "LMS SigGen",
"cavpCertName": "A5344",
"properties": "-",
"reference": "SP 800-208"
},
{
"algorithm": "LMS SigVer",
"cavpCertName": "A5344",
"properties": "-",
"reference": "SP 800-208"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A5344",
"properties": "Iteration Count - Iteration Count: 100000 Password Length - Password Length: 8- 128 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA Decryption Primitive Sp800-56Br2 (CVL)",
"cavpCertName": "A5344",
"properties": "Modulo - 2048, 3072, 4096",
"reference": "SP 800-56B Rev. 2"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A5344",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096, 8192 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A5344",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA Signature Primitive (CVL)",
"cavpCertName": "A5344",
"properties": "Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 2)",
"cavpCertName": "A5344",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186- 5)",
"cavpCertName": "A5344",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A5344",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A5344",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A5345",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A5344",
"properties": "Message Length - Message Length: 0- 65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A5344",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A5344",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A5344",
"properties": "Hash Algorithm - SHA2-256, SHA2-384",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A5344",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Zeroizatio n command to wipe all SSPs",
"indicator": "[IND_1] The module\u0027s CLI provides indicators in the form of",
"inputs": "CLI command",
"name": "Zeroization (Perform Zeroisation)",
"outputs": "CLI status",
"rolesSspAccess": "Console User - Personalizat ion Key: Z - Firmware update key: Z",
"secFunImpl": "None"
},
{
"description": "Descripti",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "human- readable outputs, with success indicators being output to the \u0027stdout\u0027 output stream and error indicators being output to the \u0027stderr\u0027 output stream",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- Plugin signing key: Z - Persisted Sealing Key: Z - Cluster Master Key: Z - System key: Z - Account Wrapping key: Z - Account key: Z - Database Wrapping key: Z - Cipher State Wrapping key: Z - Symmetric key: Z - HMAC key: Z - RSA private key for Digital Signatures: Z - RSA private key for Key Encapsulati on Operations: Z - RSA public key for Key Encapsulati on Operations: Z - Cluster RSA private key for TLS: Z",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- ECDSA random number \"k\": Z - Cluster RSA public key for TLS: Z - LMS seed: Z - TLS KDF internal state: Z - TLS integrity key: Z - TLS encryption key: Z - TLS pre- master secret: Z - TLS extended master secret: Z - SP 800- 108 KDF internal state: Z - User password : Z - API key: Z - AWS Secret Access Key: Z - Bearer token: Z - Public key of an outside entity/server (CA): Z - RSA Public key of external Application:",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Access Z - User 2FA device public key: Z - JWT Public key of external Application / CA: Z - RSA public key for Digital Signatures: Z - User Key: Z - Console User Key: Z - User Salt: Z - Console User Salt: Z - CTR_DRBG Seed: Z - CTR_DRBG entropy input: Z - CTR_DRBG V: Z - CTR_DRBG Key: Z - ECDSA private key: Z - ECDSA Public key: Z - EDDSA private key: Z - EDDSA public key: Z - LMS private key: Z",
"secFunImpl": "Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- LMS public key: Z - ECCDH private key : Z - ECCDH public key: Z - FFCDH private key: Z - FFCDH public key: Z",
"secFunImpl": ""
},
{
"description": "TLS for REST API and Web GUI",
"indicator": "[IND_2] The module\u0027s REST API and Web GUI provide indicators in the form of HTTP status codes. An HTTP status code of 2xx is indicative of success, while 4xx and 5xx status codes indicate errors. The HTTP status codes are also delivered alongside human- readable outputs. Full",
"inputs": "API and GUI requests",
"name": "TLS (Perform approved security functions)",
"outputs": "API and GUI respons es",
"rolesSspAccess": "System Administrato r - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key",
"secFunImpl": "AES-Auth DRBG ECDSA- AsymKeyP air-KeyGen ECDSA- AsymKeyP air- PubKeyVal ECDSA- DigSig- SigGen ECDSA- DigSig- SigVer HMAC KAS-ECC- SSC KAS-FFC- SSC RSA- DigSig- SigGen RSA- DigSig- SigVer SafePrimes - AsymKeyP air-KeyGen SafePrimes - AsymKeyP air-KeyVer SHA TLS-KAS- 135KDF"
},
{
"description": "Descripti",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "on",
"indicator": "details of this indicator can be found in the Fortanix DSM REST API specificati on [API]",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z System Operator - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z",
"secFunImpl": "TLS-KAS- Full ENT-Cond ENT-ESV RSA- DigSig- SigVer (Legacy)"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Account Administrato r - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "private key: G,E,Z - FFCDH public key: G,E,Z Account Member - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application:",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Account Auditor - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Group Administrato r - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Group Auditor - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public",
"secFunImpl": "Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Application - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z",
"secFunImpl": "Functions"
},
{
"description": "Update the module firmware",
"indicator": "IND_2",
"inputs": "New firmware image (via API)",
"name": "Firmware update (Perform approved security functions)",
"outputs": "API respons e",
"rolesSspAccess": "System Administrato r - Firmware update key: R,E",
"secFunImpl": "ECDSA- DigSig- SigVer SHA"
},
{
"description": "Load certified plugins",
"indicator": "IND_2",
"inputs": "Signed plugin (via API)",
"name": "Plugin load (Perform approved security functions)",
"outputs": "API respons e",
"rolesSspAccess": "Account Administrato r - Plugin signing key: R,E Account Member - Plugin signing key: R,E",
"secFunImpl": "ECDSA- DigSig- SigVer RSA- DigSig- SigVer SHA RSA- DigSig- SigVer (Legacy)"
},
{
"description": "Initializatio n and configurati on of module including setup of network, IPMI, DNS and NTP. Account managem ent including users, groups, security objects and apps",
"indicator": "IND_1, IND_2",
"inputs": "CLI commands, API and GUI requests",
"name": "Module Configuration (Perform approved security functions)",
"outputs": "CLI, API, and GUI respons es",
"rolesSspAccess": "System Administrato r - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W System Operator - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System",
"secFunImpl": "AES- UnAuth DRBG HMAC PBKDF RSA- AsymKeyP air-KeyGen SHA ENT-Cond ENT-ESV"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Account Administrato r - User password : W - Plugin signing key: W - Public key of an outside entity/server (CA): W - API key: G,R - User 2FA device public key: W - JWT Public key of external Application / CA: W - AWS Secret Access Key: G,W - Cluster Master Key: R,E - System key: G,R,W,E - Account Wrapping key:",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "G,R,W,E - Account key: G,R,W,E - Database Wrapping key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Account Member - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - Public key of an outside entity/server (CA): W - API key: G,R - JWT Public key of external Application / CA: W",
"secFunImpl": "Functions"
},
{
"description": "Descripti",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access - AWS Secret Access Key: G,W - Account Wrapping key: G,R,W,E - Account key: G,R,W,E - Database Wrapping key: G,R,W,E - User Key: W - User Salt: W Account Auditor - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Group Administrato r - User password : W",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access - Public key of an outside entity/server (CA): W - API key: G,R - User 2FA device public key: W - JWT Public key of external Application / CA: W - AWS Secret Access Key: G,W - Cluster Master Key: R,E - System key: G,R,W,E - Account Wrapping key: G,R,W,E - Account key: G,R,W,E - Database Wrapping key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Group Auditor - User",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Console User - User password : W - Cluster RSA private key for TLS: G,W - Personalizat ion Key: G,E - System key: G,R,W,E - Persisted Sealing Key: G,E - User Key: W - User Salt: W - Cluster RSA public key for TLS: G,W",
"secFunImpl": "Functions"
},
{
"description": "Fetch output",
"indicator": "IND_2",
"inputs": "None",
"name": "Random Number",
"outputs": "Random bits",
"rolesSspAccess": "System Administrato",
"secFunImpl": "AES- UnAuth"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "from module DRBG",
"indicator": "",
"inputs": "",
"name": "Generation (Perform approved security functions)",
"outputs": "s",
"rolesSspAccess": "r - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E System Operator - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Account Administrato r - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG",
"secFunImpl": "DRBG ENT-Cond ENT-ESV"
},
{
"description": "Descripti",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "V: G,R,W,E - CTR_DRBG Key: G,R,W,E Account Member - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Account Auditor - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Group Administrato r - CTR_DRBG entropy input: G,R,W,E",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Group Auditor - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Application - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E",
"secFunImpl": "Functions"
},
{
"description": "Generate symmetric and/or",
"indicator": "IND_2",
"inputs": "API request",
"name": "Create/Gener ate key (Perform",
"outputs": "Key ID",
"rolesSspAccess": "Account Administrato r",
"secFunImpl": "AES- UnAuth DRBG"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "asymmetri c keys",
"indicator": "",
"inputs": "",
"name": "approved security functions)",
"outputs": "s",
"rolesSspAccess": "- CTR_DRBG entropy input: G,R,W,E - HMAC key: G - RSA private key for Digital Signatures: G - RSA private key for Key Encapsulati on Operations: G - RSA public key for Key Encapsulati on Operations: G - ECDSA private key: G - LMS seed: G,Z - LMS private key: G - Database Wrapping key: E - Symmetric key: G - RSA public key for Digital Signatures: G - CTR_DRBG Seed: G,R,W,E - CTR_DRBG",
"secFunImpl": "ECDSA- AsymKeyP air-KeyGen EDDSA- AsymKeyP air-KeyGen LMS- AsymKeyP air-KeyGen RSA- AsymKeyP air-KeyGen SHA-SIMD ENT-Cond ENT-ESV"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "V: G,R,W,E - CTR_DRBG Key: G,R,W,E - ECDSA Public key: G - LMS public key: G - EDDSA private key: G - EDDSA public key: G Group Administrato r - CTR_DRBG entropy input: G,R,W,E - HMAC key: G - RSA private key for Digital Signatures: G - RSA private key for Key Encapsulati on Operations: G - RSA public key for Key Encapsulati on Operations: G - ECDSA private key: G - LMS seed: G,Z",
"secFunImpl": "Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- LMS private key: G - Database Wrapping key: E - Symmetric key: G - RSA public key for Digital Signatures: G - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - ECDSA Public key: G - EDDSA private key: G - EDDSA public key: G - LMS public key: G Application - CTR_DRBG entropy input: G,R,W,E - HMAC key: G - RSA private key for Digital Signatures: G - RSA",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "private key for Key Encapsulati on Operations: G - RSA public key for Key Encapsulati on Operations: G - ECDSA private key: G - LMS seed: G,Z - LMS private key: G - Database Wrapping key: E - Symmetric key: G - RSA public key for Digital Signatures: G - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - ECDSA Public key: G - EDDSA private key: G - EDDSA public key:",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access G",
"secFunImpl": "Security Functions"
},
{
"description": "Symmetric and/or asymmetri c encryption and/or decryption of data",
"indicator": "IND_2",
"inputs": "Key ID, IV, Plaintext or Ciphertext",
"name": "Encrypt/Decr ypt (Perform approved security functions)",
"outputs": "Cipherte xt or Plaintex t, IV",
"rolesSspAccess": "- LMS public key: G Application - RSA private key for Key Encapsulati on Operations: E - Cipher State Wrapping key: G,E - SP 800- 108 KDF internal state: R,W - Account key: E - Database Wrapping key: E - Symmetric key: E - RSA public key for Key Encapsulati on Operations: E",
"secFunImpl": "AES-Auth AES- UnAuth AES-KTS- Wrap-API"
},
{
"description": "Create and/or verify digital signatures",
"indicator": "IND_2",
"inputs": "Key ID, Hash, Data",
"name": "Sign/Verify (Perform approved security functions)",
"outputs": "Signatur e",
"rolesSspAccess": "Application - RSA private key for Digital Signatures: E - ECDSA private key: E - ECDSA Public key: E - ECDSA random number \"k\": G,E,Z - Database",
"secFunImpl": "DRBG ECDSA- DigSig- SigGen ECDSA- DigSig- SigVer EDDSA- DigSig- SigGen EDDSA- DigSig- SigVer LMS- DigSig- SigGen LMS-"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Wrapping key: E - RSA public key for Digital Signatures: E - EDDSA public key: E - EDDSA private key: E - LMS private key: E - LMS public key: E",
"secFunImpl": "DigSig- SigVer RSA- DigSig- SigGen RSA- DigSig- SigVer RSA- DigSig- SigVer (Legacy)"
},
{
"description": "Wrap and/or unwrap SSPs",
"indicator": "IND_2",
"inputs": "Key IDs, Wrapped Key, IV",
"name": "Wrap/Unwrap (Perform approved security functions)",
"outputs": "Key ID, Wrappe d Key, IV",
"rolesSspAccess": "Account Administrato r - Database Wrapping key: E - Symmetric key: R,W,E - HMAC key: R,W - RSA private key for Digital Signatures: R,W - RSA private key for Key Encapsulati on Operations: R,W,E - ECDSA private key: R,W - EDDSA private key: R,W - LMS private key: W - RSA public",
"secFunImpl": "AES-Auth AES-KTS- Wrap-API RSA-KTS- Wrap"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "key for Digital Signatures: R,W - RSA public key for Key Encapsulati on Operations: R,W,E - EDDSA public key: R,W - ECDSA Public key: R,W - LMS public key: W Group Administrato r - Database Wrapping key: E - Symmetric key: R,W,E - HMAC key: R,W - RSA private key for Digital Signatures: R,W - RSA private key for Key Encapsulati on Operations: R,W,E - ECDSA private key: R,W - EDDSA private key: R,W - LMS private key: W",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "- RSA public key for Digital Signatures: R,W - RSA public key for Key Encapsulati on Operations: R,W,E - ECDSA Public key: R,W - EDDSA public key: R,W - LMS public key: W Application - Database Wrapping key: E - Symmetric key: R,W,E - HMAC key: R,W - RSA private key for Digital Signatures: R,W - RSA private key for Key Encapsulati on Operations: R,W,E - ECDSA private key: R,W - EDDSA private key: R,W - LMS private key: W - RSA public",
"secFunImpl": "Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "key for Digital Signatures: R,W - RSA public key for Key Encapsulati on Operations: R,W,E - ECDSA Public key: R,W - EDDSA public key: R,W - LMS public key: W",
"secFunImpl": ""
},
{
"description": "Calculate CMAC or HMAC digest of data",
"indicator": "IND_2",
"inputs": "Key ID, Data",
"name": "MAC (Perform approved security functions)",
"outputs": "MAC",
"rolesSspAccess": "Application - Database Wrapping key: E - HMAC key: E - Symmetric key: E",
"secFunImpl": "CMAC HMAC SHA"
},
{
"description": "Calculate hash digest of data",
"indicator": "IND_2",
"inputs": "Data",
"name": "Digest (Perform approved security functions)",
"outputs": "Digest",
"rolesSspAccess": "Application",
"secFunImpl": "SHA"
},
{
"description": "Import a key via TLS",
"indicator": "IND_2",
"inputs": "Key",
"name": "Import Key (Perform approved security functions)",
"outputs": "Key ID",
"rolesSspAccess": "Account Administrato r - Database Wrapping key: E - HMAC key: W - RSA private key for Digital Signatures: W - RSA private key for Key Encapsulati",
"secFunImpl": "AES-Auth AES-KTS- Wrap-TLS"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "on Operations: W - ECDSA private key: W - EDDSA private key: W - TLS encryption key: G,E,Z - Symmetric key: W - LMS private key: W - RSA public key for Digital Signatures: W - RSA public key for Key Encapsulati on Operations: W - ECDSA Public key: W - EDDSA public key: W - LMS public key: W Group Administrato r - Database Wrapping key: E - HMAC key: W - RSA private key for Digital Signatures: W",
"secFunImpl": ""
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access - RSA private key for Key Encapsulati on Operations: W - ECDSA private key: W - EDDSA private key: W - TLS encryption key: G,E,Z - Symmetric key: W - LMS private key: W - RSA public key for Digital Signatures: W - RSA public key for Key Encapsulati on Operations: W - ECDSA Public key: W - EDDSA public key: W - LMS public key: W Application - Database Wrapping key: E - HMAC key: W - RSA private key for Digital",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Signatures: W - RSA private key for Key Encapsulati on Operations: W - ECDSA private key: W - EDDSA private key: W - TLS encryption key: G,E,Z - Symmetric key: W - LMS private key: W - RSA public key for Digital Signatures: W - RSA public key for Key Encapsulati on Operations: W - ECDSA Public key: W - EDDSA public key: W - LMS public key: W",
"secFunImpl": "Functions"
},
{
"description": "Export Key via TLS",
"indicator": "IND_2",
"inputs": "Key ID",
"name": "Export Key (Perform approved security functions)",
"outputs": "Key",
"rolesSspAccess": "Account Administrato r - Database Wrapping key: E - HMAC key:",
"secFunImpl": "AES-Auth AES-KTS- Wrap-TLS"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access R - RSA private key for Digital Signatures: R - RSA private key for Key Encapsulati on Operations: R - ECDSA private key: R - EDDSA private key: R - TLS encryption key: G,E,Z - Symmetric key: R - RSA public key for Digital Signatures: R - RSA public key for Key Encapsulati on Operations: R - ECDSA Public key: R - EDDSA public key: R Group Administrato r - Database Wrapping key: E - HMAC key: R",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "Access - RSA private key for Digital Signatures: R - RSA private key for Key Encapsulati on Operations: R - ECDSA private key: R - EDDSA private key: R - TLS encryption key: G,E,Z - Symmetric key: R - RSA public key for Digital Signatures: R - RSA public key for Key Encapsulati on Operations: R - ECDSA Public key: R - EDDSA public key: R Application - Database Wrapping key: E - HMAC key: R - RSA private key for Digital",
"secFunImpl": "Functions"
},
{
"description": "Descripti on",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output s",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Signatures: R - RSA private key for Key Encapsulati on Operations: R - ECDSA private key: R - EDDSA private key: R - TLS encryption key: G,E,Z - Symmetric key: R - RSA public key for Digital Signatures: R - RSA public key for Key Encapsulati on Operations: R - ECDSA Public key: R - EDDSA public key: R",
"secFunImpl": "Functions"
},
{
"description": "Execute the module\u0027s pre- operationa l and conditional self-tests",
"indicator": "IND_1",
"inputs": "CLI commands",
"name": "Run self-tests (Perform self- tests)",
"outputs": "CLI Status",
"rolesSspAccess": "Console User",
"secFunImpl": "AES-Auth AES- UnAuth DRBG ECDSA- DigSig- SigGen ECDSA- DigSig- SigVer EDDSA- DigSig-"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "SigGen EDDSA- DigSig- SigVer HMAC KAS-ECC- SSC KAS-FFC- SSC KBKDF RSA-KTS- Wrap LMS- AsymKeyP air-KeyGen LMS- DigSig- SigGen LMS- DigSig- SigVer PBKDF RSA- DigSig- SigGen RSA- DigSig- SigVer SHA SHA-SIMD XOF TLS-KAS- 135KDF ENT-Cond ENT-ESV RSA- DigSig- SigVer (Legacy)"
},
{
"description": "Query the status and version informatio n of the module",
"indicator": "IND_1, IND_2",
"inputs": "CLI commands, API and GUI requests",
"name": "Get status (Show Status)",
"outputs": "CLI, API, and GUI respons es",
"rolesSspAccess": "System Administrato r System Operator Account Administrato r Account Member",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Account Auditor Group Administrato r Group Auditor Application Console User",
"secFunImpl": ""
},
{
"description": "Authentica te with the module",
"indicator": "IND_1, IND_2",
"inputs": "Authenticati on material",
"name": "Authenticatio n (Perform approved security functions)",
"outputs": "CLI, API, and GUI respons es",
"rolesSspAccess": "System Administrato r - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W System Operator - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Account Administrato r - User password : W - Bearer token: W - User 2FA device",
"secFunImpl": "AES-Auth ECDSA- DigSig- SigVer HMAC PBKDF RSA- DigSig- SigVer SHA RSA- DigSig- SigVer (Legacy)"
},
{
"description": "Descripti",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Output",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "on",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "s",
"rolesSspAccess": "public key: E - User Key: W - User Salt: W Account Member - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Account Auditor - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Group Administrato r - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Group",
"secFunImpl": "Functions"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Auditor - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Application - API key: W - AWS Secret Access Key: W - Public key of an outside entity/server (CA): E - RSA Public key of external Application: E - JWT Public key of external Application / CA: E - Bearer token: W Console User - Console User Password : W - Console User Salt: W - Console User Key: W",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [
{
"description": "Memorized Secret",
"mechanism": "Username and Password",
"name": "Username and Password",
"perMinute": "The module only allows at the most 100 failed password-based authentication attempts in a minute. Given the total number of possible permutations (as shown above), the probability of a random attempt in one-minute period to be correct will be 100 / 6,634,204,312,890,625 . Therefore, the probability of guessing a password in a one- minute period is significantly less than one in 100,000.",
"strength": "The minimum password length is 8 characters. For a user who just meets the minimum password length, each of the eight characters will have at least 95 possible characters if we consider just the printable ASCII characters, although module supports UTF- 8 characters for password and the number of possible characters with UTF-8 is much higher. Total number of password permutations with eight characters is 95^8 = 6,634,204,312,890,625 . Therefore, the probability of guessing a password with a single random guess is significantly less than one in 1,000,000."
},
{
"description": "Memorized Secret",
"mechanism": "DRBG is used to generate the API keys. Authenticatio n is done over TLS (AES-KTS- Wrap-TLS)",
"name": "API Key",
"perMinute": "The module only allows at the most 100 authentication attempts in a minute. Given the total number of possible permutations (as shown above), the probability of a random",
"strength": "An application authenticates using an API key which contains application ID and application secret. App secret is 16 - 64 bytes random data. Total number of permutations for app"
},
{
"description": "",
"mechanism": "",
"name": "",
"perMinute": "attempt in one-minute period to be correct will be 100 / (2^128). Therefore, the probability of guessing an app secret in a one- minute period is significantly less than one in 100,000.",
"strength": "secret will be 2^128 in the worst case. Therefore, the probability of guessing an application\u0027s secret is significantly less than one in 1,000,000."
},
{
"description": "Multi-Factor Crypto Firmware",
"mechanism": "ECDSA- DigSig- SigVer (P- 256) is used to verify signatures",
"name": "User 2FA device public key",
"perMinute": "The module only allows at the most 100 authentication attempts in a minute. Given the total number of possible permutations (as shown above), the probability of a random attempt in one-minute period to be correct will be 100 / (95^8 * 2^128). Therefore, the probability of guessing a valid password and 2FA signature in a one-minute period is significantly less than one in 100,000. Therefore, this mechanism of additional 2FA also far exceeds the FIPS 140- 3 requirements.",
"strength": "The module allows users to use a second factor authentication mechanism in addition to username and password. The strength of this combination mechanism relies upon the strength of the User password mechanism (described earlier) combined with the strength of two factor authentication. This mechanism adds more strength to the password mechanism which already far exceeds the FIPS 140- 3 requirements. U2F signature verification uses U2F device\u0027s public key which is an EC P-256 key. The security strength of this key is 128 bits. So, the probability of a random success will be 1 in 2^128. Probability of this combined scheme = (Probability of guessing username and password) * (Probability from signature verification scheme), which is 1 / (95^8) * 1 / (2^128). Therefore, the probability of guessing"
},
{
"description": "",
"mechanism": "",
"name": "",
"perMinute": "",
"strength": "a password is significantly less than one in 1,000,000."
},
{
"description": "Single- Factor Crypto Firmware",
"mechanism": "RSA-DigSig- SigVer is used to verify signatures",
"name": "RSA Public key of external Application",
"perMinute": "Using this mechanism, one can make very few attempts in a one- minute period. Each attempt will require the module to check the signature on the certificate using approved signature algorithm and establishing TLS session with this certificate. On average only one attempt can be made in a second. Therefore, at the most 60 attempts can be made in a one-minute period. Therefore, the probability of guessing a 2048-bit private key and succeeding in a one-minute period is 60 / (2^112) which is significantly less than one in 100,000.",
"strength": "The strength of this mechanism is based on the size of the private key space. The module relies upon minimum RSA 2048-bit keys. This provides an encryption strength of 112 bits, so the probability of a random success will be 1 in 2^112, which is significantly less than one in 1,000,000."
},
{
"description": "Memorized Secret",
"mechanism": "DRBG is used to generate the Bearer token. Authenticatio n is done over TLS (AES-KTS- Wrap-TLS)",
"name": "Bearer token",
"perMinute": "Each authentication attempt takes approximately 12ms or more. Therefore, a user could try at most 5,000 attempts in a minute. Given the total number of possible permutations (as shown above), the probability a random attempt in one-minute period to be correct will be 5000 / (2^512). Therefore, the probability of guessing a password in a one- minute period is significantly less than one in 100,000.",
"strength": "This authentication mechanism builds upon other authentication mechanisms, and it maps to the original authentication credentials that were used to establish an authenticated session. The bearer token is a base64 encoded random 64 bytes data which is generated using approved DRBG in DSM. Total number of permutations is 2^512. Therefore, the probability of guessing the token is 1 /"
},
{
"description": "",
"mechanism": "",
"name": "",
"perMinute": "",
"strength": "(2^512), which is significantly less than one in 1,000,000."
},
{
"description": "Single- Factor Crypto Firmware",
"mechanism": "RSA-DigSig- SigVer is used to verify signatures",
"name": "Public key of an outside entity/serve r (CA)",
"perMinute": "Each attempt will require the module to check the signature on the certificate using approved signature algorithm and establishing TLS session with this certificate. Each attempt takes 100ms or more. Therefore, at the most 600 attempts can be made in a one- minute period. Therefore, the probability of guessing a 2048-bit private key and succeeding in a one-minute period is 600 / (2^112) which is significantly less than one in 100,000.",
"strength": "The strength of this mechanism is based on the size of the private key space. The module relies upon RSA 2048-bit node keys. This provides an encryption strength of 112 bits, so the probability of a random success will be 1 in 2^112, which is significantly less than one in 1,000,000."
},
{
"description": "Single- Factor Crypto Firmware",
"mechanism": "ECDSA- DigSig- SigVer or RSA-DigSig- SigVer is used to verify signatures",
"name": "JWT Public key of external application",
"perMinute": "Each attempt will require the module to check the signature on the token using approved signature algorithm and establishing the associated TLS session with the client. Each attempt takes 100ms or more. Therefore, at the most 600 attempts can be made in a one-minute period. Therefore, the probability of guessing a 2048-bit private key and succeeding in a one-minute period is 600 / (2^112) which is significantly less than one in 100,000.",
"strength": "The strength of this mechanism is based on the size of the private key space. The module relies upon minimum RSA 2048-bit keys. This provides an encryption strength of 112 bits, so the probability of a random success will be 1 in 2^112, which is significantly less than one in 1,000,000."
},
{
"description": "Single- Factor Crypto Firmware",
"mechanism": "HMAC is used to verify authenticatio n",
"name": "AWS Signature Version 4",
"perMinute": "Each attempt will require the module to check the authentication code on the request using approved HMAC algorithm and establishing the associated TLS session with the client. Each attempt takes 100ms or more. Therefore, at the most 600 attempts can be made in a one-minute period. Therefore, the probability of guessing a 32-byte secret key and succeeding in a one-minute period is 600 / (2^256) which is significantly less than one in 100,000.",
"strength": "The strength of this mechanism is based on the size of the secret key space. The module relies upon 32- byte (256-bit) HMAC keys. This provides security strength of 256 bits, so the probability of a random success will be 1 in 2^256, which is significantly less than one in 1,000,000."
}
],
"found": true,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES Encryp t",
"condition": "Power On Crypto Library Load",
"details": "Encrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"AES self test failed\"",
"testMethod": "KAT",
"testProps": "128-bit key size in ECB, CBC, CFB128, OFB, and CTR Modes 192-bit key size in ECB, CBC, CFB128, and OFB Modes 256-bit key size in ECB, CBC, CFB128, and OFB Modes",
"type": "CAS T"
},
{
"algorithmOrTest": "AES Decry pt",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"AES self test failed\"",
"testMethod": "KAT",
"testProps": "128-bit key size in ECB, CBC, CFB128, OFB, and CTR Modes 192-bit key size in ECB, CBC, CFB128, and OFB Modes 256-bit key size in ECB, CBC, CFB128, and OFB Modes",
"type": "CAS T"
},
{
"algorithmOrTest": "AES GCM Encryp t",
"condition": "Power On Crypto Library Load",
"details": "Encrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"GCM self test failed\"",
"testMethod": "KAT",
"testProps": "AES GCM 128- bit, 192-bit, and 256-bit key size",
"type": "CAS T"
},
{
"algorithmOrTest": "AES GCM Decry pt",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"GCM self test failed\"",
"testMethod": "KAT",
"testProps": "AES GCM 128- bit, 192-bit, and 256-bit key size",
"type": "CAS T"
},
{
"algorithmOrTest": "AES CCM Encryp t",
"condition": "Power On Crypto Library Load",
"details": "Encrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CCM self test failed\"",
"testMethod": "KAT",
"testProps": "AES CCM 128- bit key size AES CCM CAST (encryption and decryption)",
"type": "CAS T"
},
{
"algorithmOrTest": "AES CCM Decry pt",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CCM self test failed\"",
"testMethod": "KAT",
"testProps": "AES CCM 128- bit key size AES CCM CAST (encryption and decryption)",
"type": "CAS T"
},
{
"algorithmOrTest": "AES Key Wrap",
"condition": "Power On Crypto Library Load",
"details": "Encrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KW/KWP self test failed\"",
"testMethod": "KAT",
"testProps": "AES-KW and AES-KWP 128- bit, 192-bit, 256-bit key sizes",
"type": "CAS T"
},
{
"algorithmOrTest": "AES Key Unwra p",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KW/KWP self test failed\"",
"testMethod": "KAT",
"testProps": "AES-KW and AES-KWP 128- bit, 192-bit, 256-bit key sizes",
"type": "CAS T"
},
{
"algorithmOrTest": "AES CMAC Encryp t",
"condition": "Power On Crypto Library Load",
"details": "Encrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CMAC self test failed\"",
"testMethod": "KAT",
"testProps": "AES CMAC 128-bit, 192-bit, 256-bit key sizes",
"type": "CAS T"
},
{
"algorithmOrTest": "AES CMAC Decry pt",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CMAC self test failed\"",
"testMethod": "KAT",
"testProps": "AES CMAC 128-bit, 192-bit, 256-bit key sizes",
"type": "CAS T"
},
{
"algorithmOrTest": "AES FF1 Encryp t",
"condition": "Power On Crypto Library Load",
"details": "Encrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"FF1 self test failed\"",
"testMethod": "KAT",
"testProps": "AES FF1 128- bit key size Radix 36",
"type": "CAS T"
},
{
"algorithmOrTest": "AES FF1 Decry pt",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"FF1 self test failed\"",
"testMethod": "KAT",
"testProps": "AES FF1 128- bit key size Radix 36",
"type": "CAS T"
},
{
"algorithmOrTest": "Count er DRBG (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Generate",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CTR DRBG self test failed\"",
"testMethod": "KAT",
"testProps": "Counter DRBG with AES-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDS A SigGe n (FIPS1 86-5) (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Sign",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"ECDSA self test failed\"",
"testMethod": "KAT",
"testProps": "P-224 curve, SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "ECDS A SigVer (FIPS1 86-5) (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Verify",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"ECDSA self test failed\"",
"testMethod": "KAT",
"testProps": "P-224 curve, SHA2-256",
"type": "CAS T"
},
{
"algorithmOrTest": "EDDS A SigGe n (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Sign",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"EdDSA self test failed\"",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAS T"
},
{
"algorithmOrTest": "EDDS A SigVer (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Verify",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"EdDSA self test failed\"",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC -SHA- 1 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Message Authentic ation",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HMAC SHA1 self test failed\"",
"testMethod": "KAT",
"testProps": "128-bit key size",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC - SHA2- 256 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Message Authentic ation",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HMAC SHA256 self test failed\"",
"testMethod": "KAT",
"testProps": "128-bit key size",
"type": "CAS T"
},
{
"algorithmOrTest": "HMAC - SHA2- 512",
"condition": "Power On Crypto Library Load",
"details": "Message Authentic ation",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HMAC SHA512 self test failed\"",
"testMethod": "KAT",
"testProps": "2048-bit key size",
"type": "CAS T"
},
{
"algorithmOrTest": "(A534 4)",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "KAS- ECC- SSC Sp800 -56Ar3 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Shared Secret \"Z\" Computa tion\"",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KAS ECC Primitive Z self test failed\"",
"testMethod": "KAT",
"testProps": "P-224 Curve",
"type": "CAS T"
},
{
"algorithmOrTest": "KAS- FFC- SSC Sp800 -56Ar3 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Shared Secret \"Z\" Computa tion",
"indicator": "Success: \"ffdhe_crypto_algo_self_tes t passed\" Error: \"assertion failed: \u0027(left == right)\u0027\"",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAS T"
},
{
"algorithmOrTest": "KDF SP800 -108 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Key Derivatio n",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KDF108 self test failed\"",
"testMethod": "KAT",
"testProps": "256-bit key size Feedback mode KDF with HMAC-SHA2- 256",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA Decry ption Primiti ve Sp800 -56Br2 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Decrypt",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"RSA DP self test failed\"",
"testMethod": "KAT",
"testProps": "2048-bit key size SHA-256",
"type": "CAS T"
},
{
"algorithmOrTest": "SP 800- 132 KDF",
"condition": "Power On Crypto Library Load",
"details": "Key Derivatio n",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"PBKDF2 with HMAC- SHA2-512 self test failed\"",
"testMethod": "KAT",
"testProps": "2 iterations 256-bit key size HMAC SHA2- 512",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigGe n",
"condition": "Power On Crypto Library Load",
"details": "Sign",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"RSA self test failed\"",
"testMethod": "KAT",
"testProps": "2048-bit key size, SHA2-256 PKCS1 v1.5",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA SigVer",
"condition": "Power On Crypto Library Load",
"details": "Verify",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"RSA self test failed\"",
"testMethod": "KAT",
"testProps": "2048-bit key size, SHA2-256 PKCS1 v1.5",
"type": "CAS T"
},
{
"algorithmOrTest": "SHA-1 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Hash",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA1 self test failed\"",
"testMethod": "KAT",
"testProps": "",
"type": "CAS T"
},
{
"algorithmOrTest": "SHA2- 256 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Hash",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA256 self test failed\"",
"testMethod": "KAT",
"testProps": "",
"type": "CAS T"
},
{
"algorithmOrTest": "SHA2- 512 (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Hash",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA512 self test failed\"",
"testMethod": "KAT",
"testProps": "",
"type": "CAS T"
},
{
"algorithmOrTest": "SHA3",
"condition": "Power On Crypto Library Load",
"details": "Hash",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA3 self test failed\"",
"testMethod": "KAT",
"testProps": "SHA3-224 SHA3-256 SHA3-384 SHA3-512",
"type": "CAS T"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7 627 (A534",
"condition": "Power On Crypto Library Load",
"details": "Key Derivatio n",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"TLS 1.2 KDF self test failed\"",
"testMethod": "KAT",
"testProps": "RFC 7627 SHA-256 SHA- 384",
"type": "CAS T"
},
{
"algorithmOrTest": "4) TLS v1.3 KDF (A534 4)",
"condition": "Power On Crypto Library Load",
"details": "Key Derivatio n",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"TLS 1.3 self test failed\"",
"testMethod": "KAT",
"testProps": "RFC 8446 SHA-256 SHA- 384",
"type": "CAS T"
},
{
"algorithmOrTest": "ENT (P)",
"condition": "Upon entropy source (RDSE ED) access",
"details": "Entropy Gatherin g",
"indicator": "Success: 0 Error: \"FIPS conditional test failure: Error in cryptographic operation - RNG failed\"",
"testMethod": "Develo per- Define d CHT per SP 800- 90B section 4.5",
"testProps": "Bit Pattern Counting using Six (6) Different Bit Patterns in Sliding Window",
"type": "CAS T"
},
{
"algorithmOrTest": "DRBG",
"condition": "Upon DRBG access",
"details": "Instantiat e, Generate , Reseed",
"indicator": "Success: 0 Error: \"FIPS conditional test failure: Error in cryptographic operation - RNG failed\"",
"testMethod": "CRNG T",
"testProps": "Counter DRBG with AES-256",
"type": "CAS T"
},
{
"algorithmOrTest": "EDDS A",
"condition": "Upon EDDS",
"details": "Sign, Verify",
"indicator": "Success: Ok Error: \"FIPS conditional test failure:",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "Algori thm or Test",
"condition": "Condit ions A key pair generat",
"details": "Details",
"indicator": "Indicator Pairwise consistency test failed. Sign / Verify test failed.\"",
"testMethod": "Test Metho d",
"testProps": "Test Properties",
"type": "Test Typ e"
},
{
"algorithmOrTest": "ECDH and DH (PCT)",
"condition": "ion Upon (EC)D H key pair generat ion and import",
"details": "Key Agreeme nt",
"indicator": "Success: Ok Error: \"FipsCheckError::General( FFDHE Pairwise Consistency Test: failed)\" / \"FipsCheckError::Mbedtls( EcpInvalidKey)\"",
"testMethod": "PCT",
"testProps": "KAS-ECC, KAS-FFC",
"type": "PCT"
},
{
"algorithmOrTest": "ECDH and DH (CAST )",
"condition": "Upon (EC)D H key pair generat ion and",
"details": "Key Agreeme nt",
"indicator": "Success: Ok Error: \"FipsCheckError::General( FFDHE Full Public-Key Validity: failed)\" / \"FipsCheckError::Mbedtls( EcpInvalidKey)\"",
"testMethod": "Full Public- Key Validity",
"testProps": "KAS-ECC, KAS-FFC",
"type": "CAS T"
},
{
"algorithmOrTest": "RSA (PCT)",
"condition": "import Upon RSA key pair generat ion",
"details": "Sign, Verify, Encrypt, Decrypt",
"indicator": "Success: Ok Error: \"FIPS conditional test failure: Pairwise consistency test failed. Sign / Verify test failed.\" / \"FIPS conditional test failure: Pairwise consistency test failed. Encryption / Decryption test failed.\"",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "Firmw are Load Test",
"condition": "Upon Firmwa re Load",
"details": "Verify",
"indicator": "Success: Ok Error: \"Firmware verification failed.\"",
"testMethod": "Digital Signat ure Verific ation",
"testProps": "ECDSA P-256 SHA2-256",
"type": "SW/ FW Load"
},
{
"algorithmOrTest": "Plugin Load Test",
"condition": "Upon plugin Load",
"details": "Verify",
"indicator": "Success: Ok Error: \"failed to verify plugin code signature\"",
"testMethod": "Digital Signat ure",
"testProps": "RSA (2048 - 4096) ECDSA (P-256, P-384, or P-521)",
"type": "SW/ FW Load"
},
{
"algorithmOrTest": "ECDS A",
"condition": "Upon ECDS A key pair generat ion",
"details": "Sign, Verify",
"indicator": "Success: Ok Error: \"FIPS conditional test failure: Pairwise consistency test failed. Sign / Verify test failed.\"",
"testMethod": "PCT",
"testProps": "SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "LMS and HSS KeyGe n",
"condition": "Power On Crypto Library Load",
"details": "Sign, Verify",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HSS self test failed\"",
"testMethod": "KAT",
"testProps": "HSS, One Level LMS_SHA256_ M24_H5",
"type": "CAS T"
},
{
"algorithmOrTest": "LMS SigGe n",
"condition": "Power On Crypto Library Load",
"details": "Sign",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HSS self test failed\"",
"testMethod": "KAT",
"testProps": "HSS, One Level LMS_SHA256_ M24_H5",
"type": "CAS T"
},
{
"algorithmOrTest": "LMS SigVer",
"condition": "Power On Crypto Library Load",
"details": "Verify",
"indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HSS self test failed\"",
"testMethod": "KAT",
"testProps": "HSS, One Level LMS_SHA256_ M24_H5",
"type": "CAS T"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Cryptographic Algorithm Self-Test (CAST) failure Integrity Test failure",
"description": "Unrecoverable errors that indicate an equipment malfunction that may require maintenance, service, or repair of the cryptographic module",
"indicator": "A status message is output to the logs indicating which self-test failed",
"name": "Hard Error State",
"recoveryMethod": "Power Cycle"
},
{
"conditions": "Firmware Load Test failure Plugin Load Test failure Public Key",
"description": "Recoverable errors that indicate a transient error, such as an operator",
"indicator": "A status code is output to the operator",
"name": "Soft Error State",
"recoveryMethod": "Automatic"
},
{
"conditions": "Checks on externally- provided public keys failure",
"description": "providing invalid inputs to a function",
"indicator": "indicating that the operation failed",
"name": "",
"recoveryMethod": ""
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [
{
"inspectFreq": "At least monthly",
"inspectGuidance": "The DSM appliance enclosure should be periodically checked by the Crypto Officer for evidence of tampering damage to the two (FX2200\u0027s) or six (FX3400\u0027s and FX3500\u0027s) tamper-evident labels and any physical damage to the enclosure material. The frequency of a physical inspection depends upon the information being protected and the environment in which the unit is located. At a minimum, it would be expected that a physical inspection would be made by the Crypto Officer at least monthly. The tamper evident labels are applied at the Fortanix manufacturing facility, are serialized, and are not available for order or replacement from Fortanix. The labels are designed and intended to stay intact for the entire life of the module.",
"mechanism": "Tamper-Evident Seals"
},
{
"inspectFreq": "At least monthly",
"inspectGuidance": "The DSM appliance enclosure should be periodically checked by the Crypto Officer for evidence of tampering",
"mechanism": "Strong Enclosure"
},
{
"inspectFreq": "",
"inspectGuidance": "damage to the three tamper-evident labels and any physical damage to the enclosure material. The frequency of a physical inspection depends upon the information being protected and the environment in which the unit is located. At a minimum, it would be expected that a physical inspection would be made by the Crypto Officer at least monthly.",
"mechanism": ""
},
{
"inspectFreq": "Never",
"inspectGuidance": "This is internal to the module\u0027s enclosure and can\u0027t be inspected without triggering zeroization.",
"mechanism": "Tamper Response and Zeroization Circuitry"
}
],
"found": true,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Invoke the \"system version\" CLI command provided by the \"Get status\" service. Verify that the versions match with the validated version, and the value of the \"fips_level\" attribute is 3",
"name": "Approve d Mode",
"statusIndicator": "API Version: \"v1-20170718\" Server Mode: \"Sgx\" FIPS Level: 3 Plugin Digest: \"Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGYP11MlF Y=\" Hardware Name: Fortanix DSM Appliance Hardware Version: [FX2200-II-T/F, FX3400-T/F, FX3500-T/F] Firmware Name: Data Security Manager Firmware Version: 4.28.2471",
"type": "Approve d"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [],
"found": false,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "Encrypted Input / Request payload of API, which can include SSPs and data; Encrypted Output / Response payload of API, which can include SSPs and data; Encrypted API calls; Encrypted API status information and return status codes provided by API",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "Networking Ports"
},
{
"data": "Plaintext Input / Request payload of CLI, which can include SSPs; Plaintext Output / Response payload of CLI, which can include PSPs; CLI calls; CLI returning status information and return status codes provided by CLI This port is primarily used for Chassis management",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "IPMI Port"
},
{
"data": "Plaintext Output / Response payload of CLI, which can include PSPs; CLI returning status information and return status codes provided by CLI",
"logicalInterface": "Data Output Status Output",
"physicalPort": "VGA Port"
},
{
"data": "Plaintext Input / Request payload of CLI, which can include SSPs; Plaintext Output / Response payload of CLI, which can include PSPs; CLI calls; CLI returning status information and return status codes provided by CLI",
"logicalInterface": "Data Input Data Output Control Input Status Output",
"physicalPort": "Serial Port"
},
{
"data": "Plaintext Input / Request payload of CLI via Keyboard, which can include SSPs; CLI calls via Keyboard; Power Output for connected devices",
"logicalInterface": "Data Input Control Input Power",
"physicalPort": "USB Ports"
},
{
"data": "Power",
"logicalInterface": "Power",
"physicalPort": "Power Receptacle"
},
{
"data": "Status output via LEDs (Green); Blinking: Indicates that link is up and there is link activity; Steady On: Indicates that link is up but there is no link activity; Off: Powered off when the unit is off",
"logicalInterface": "Status Output",
"physicalPort": "Network Link LEDs"
},
{
"data": "Status output via LEDs (Amber); Off: Indicates the system is not on; Blinking amber: Indicates there is disk activity",
"logicalInterface": "Status Output",
"physicalPort": "Hard Disk Activity LED"
},
{
"data": "Status output via LEDs (Blue); Off: Indicates the system is not on; Blue: Indicates the system is healthy and operating fine",
"logicalInterface": "Status Output",
"physicalPort": "Power Supply Failure Indicator LED"
},
{
"data": "Manual Control for Power",
"logicalInterface": "Control Input",
"physicalPort": "Power Button"
},
{
"data": "Manual Control for Self-Identification",
"logicalInterface": "Control Input",
"physicalPort": "ID Button"
},
{
"data": "Manual Control for Reset",
"logicalInterface": "Control Input",
"physicalPort": "Reset Button"
},
{
"data": "Self-Identification",
"logicalInterface": "Status Output",
"physicalPort": "Front panel display LED"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "Username and Password User 2FA device public key Bearer token",
"name": "System Administrator",
"operatorType": "Crypto Officer",
"type": "Identity"
},
{
"authMethodList": "Username and Password User 2FA device public key Bearer token",
"name": "System Operator",
"operatorType": "Crypto Officer",
"type": "Identity"
},
{
"authMethodList": "Username and Password User 2FA device public",
"name": "Account Administrator",
"operatorType": "Crypto Officer, User",
"type": "Identity"
},
{
"authMethodList": "key Bearer token",
"name": "",
"operatorType": "",
"type": ""
},
{
"authMethodList": "Username and Password User 2FA device public key Bearer token",
"name": "Account Member",
"operatorType": "Crypto Officer, User",
"type": "Identity"
},
{
"authMethodList": "Username and Password User 2FA device public key Bearer token",
"name": "Account Auditor",
"operatorType": "Crypto Officer",
"type": "Identity"
},
{
"authMethodList": "Username and Password User 2FA device public key Bearer token",
"name": "Group Administrator",
"operatorType": "Crypto Officer, User",
"type": "Identity"
},
{
"authMethodList": "Username and Password User 2FA device public key Bearer token",
"name": "Group Auditor",
"operatorType": "Crypto Officer",
"type": "Identity"
},
{
"authMethodList": "API Key RSA Public key of external Application Bearer token Public key of an outside entity/server (CA) JWT Public key of external application AWS Signature Version 4",
"name": "Application",
"operatorType": "User",
"type": "Identity"
},
{
"authMethodList": "Username and Password",
"name": "Console User",
"operatorType": "Crypto Officer",
"type": "Identity"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "3",
"section": "1",
"title": "General"
},
{
"level": "3",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "3",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "3",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "3",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "N/A",
"section": "6",
"title": "Operational environment"
},
{
"level": "3",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "3",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "3",
"section": "10",
"title": "Self-tests"
},
{
"level": "3",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "3",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "Firmware Integrity Test",
"details": "MAC is calculated and verified over binary executables",
"indicator": "Success: \"Software Integrity test succeeded\" Error: \"Software integrity check failed\"",
"testMethod": "HMAC- SHA2-256",
"testProps": "256-bit key size",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "Key Store Integrity Test",
"details": "Checksum is calculated and verified over personalization key store binary",
"indicator": "Success: \"Software integrity check of personalization key store module succeeded\" Error:",
"testMethod": "16-bit Sum- of-bytes Checksum",
"testProps": "",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "",
"details": "",
"indicator": "\"Integrity check failed\"",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "Filesystem Integrity Test",
"details": "Checksum is calculated and verified over specific filesystems",
"indicator": "Success: \"no error found\" Error: \"checksum error\"",
"testMethod": "32-bit CRC32C Checksum",
"testProps": "",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "TLS Input",
"sfiAlgo": "",
"source": "Operator"
},
{
"dest": "Operator",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "TLS Output",
"sfiAlgo": "",
"source": "Module"
},
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "AES Wrapped Input",
"sfiAlgo": "AES-Auth",
"source": "Operator"
},
{
"dest": "Operator",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "AES Wrapped Output",
"sfiAlgo": "AES-KTS- Wrap-API",
"source": "Module"
},
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "RSA Wrapped Input",
"sfiAlgo": "RSA-KTS- Wrap",
"source": "Operator"
},
{
"dest": "Operator",
"distribution": "Automated",
"entry": "Electronic",
"format": "Encrypted",
"name": "RSA Wrapped Output",
"sfiAlgo": "RSA-KTS- Wrap",
"source": "Module"
},
{
"dest": "Module",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Plaintext Input",
"sfiAlgo": "",
"source": "Operator"
},
{
"dest": "Operator",
"distribution": "Automated",
"entry": "Electronic",
"format": "Plaintext",
"name": "Plaintext Output",
"sfiAlgo": "",
"source": "Module"
},
{
"dest": "Module",
"distribution": "Manual",
"entry": "Direct",
"format": "Plaintext",
"name": "CLI Input",
"sfiAlgo": "",
"source": "Operator"
},
{
"dest": "Module",
"distribution": "N/A",
"entry": "N/A",
"format": "Plaintext",
"name": "Factory",
"sfiAlgo": "",
"source": "Manufacturer"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Keys stored on the module\u0027s USB Key Store (the Personalization Key) are overwritten with zeroes upon execution of the zeroize command. Success is indicated via the message \"Zeroization successfully succeeded!\"",
"method": "Persistent Overwrite",
"operatorId": "CLI command for zeroization",
"rationale": "Overwriting with zeros is an acceptable form of zeroization per ISO/IEC 19790:2012 section 7.9.7. This is performed in a time (\u003c1 second) that is not sufficient to compromise plaintext SSPs."
},
{
"description": "SSPs stored persistently on the module\u0027s SSD are encrypted using AES- GCM that can be zeroized via overwrite. This renders the SSPs that were encrypted irretrievable",
"method": "Cryptographic",
"operatorId": "CLI command for zeroization",
"rationale": "Encrypted SSPs are considered \"protected\" per ISO/IEC 19790:2012 section 3.36, and thus direct zeroization is not required (section 7.9.7) This is performed in a time (\u003c1 second) that is not sufficient to compromise plaintext SSPs."
},
{
"description": "SSPs stored in the module\u0027s RAM are directly overwritten with zeroes when they are no longer needed",
"method": "Ephemeral Overwrite",
"operatorId": "Automatically performed when SSP is no longer needed",
"rationale": "Overwriting with zeros is an acceptable form of zeroization per ISO/IEC 19790:2012 section 7.9.7. This is performed in a time (\u003c100 ms) that is not"
},
{
"description": "",
"method": "",
"operatorId": "",
"rationale": "sufficient to compromise SSPs."
},
{
"description": "SSPs stored in the module\u0027s RAM",
"method": "Ephemeral Reboot",
"operatorId": "CLI command for zeroization Powering off, Power-cycling or rebooting the module wipes the contents of the module\u0027s RAM",
"rationale": "Overwriting with zeros is an acceptable form of zeroization per ISO/IEC 19790:2012 section 7.9.7. The module\u0027s input/output interfaces become unresponsive in \u003c1s during these processes, which as a whole can take around 5 minutes to complete. This is not a sufficient amount of time to compromise SSPs due to the physical security mechanisms in place."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "The module has an internal, battery-backed USB key store used for SSP storage (plaintext format)",
"name": "USB Key Store",
"persistance": "Static"
},
{
"description": "The module has multiple SSDs used for SSP and other data storage, both in encrypted and plaintext formats",
"name": "SSDs",
"persistance": "Static"
},
{
"description": "The module has RAM used for SSP and other data storage, both in encrypted and plaintext formats",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [
{
"features": "The FX2200- II-TN-F unit is built with copper",
"fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=",
"hwVersion": "FX2200 -II-TN-F",
"modelPartNum": "FX220 0-II- TN-F",
"processors": "Intel(R) Xeon(R) E-2176G CPU (Coffee Lake) @ 3.70GHz"
},
{
"features": "FX2200- II-SXN-F unit is",
"fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=",
"hwVersion": "FX2200 -II-SXN- F",
"modelPartNum": "FX220 0-II- SXN-F",
"processors": "Intel(R) Xeon(R) E-2176G CPU"
},
{
"features": "built with fiber",
"fwVersion": "",
"hwVersion": "",
"modelPartNum": "",
"processors": "(Coffee Lake) @ 3.70GHz"
},
{
"features": "The FX3400- T unit has copper connectiv ity",
"fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=",
"hwVersion": "FX3400 -T",
"modelPartNum": "FX340 0-T",
"processors": "Intel(R) Xeon(R) Silver 4410T CPU (Sapphire Rapids) @ 2.00 GHz"
},
{
"features": "FX3400- F unit has both copper and fiber",
"fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=",
"hwVersion": "FX3400 -F",
"modelPartNum": "FX340 0-F",
"processors": "Intel(R) Xeon(R) Silver 4410T CPU (Sapphire Rapids) @ 2.00 GHz"
},
{
"features": "The FX3500- T unit has copper connectiv ity",
"fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=",
"hwVersion": "FX3500 -T",
"modelPartNum": "FX350 0-T",
"processors": "Intel(R) Xeon(R) Gold 6421N CPU (Sapphire Rapids) @ 1.80GHz"
},
{
"features": "FX3500- F unit has both copper and fiber",
"fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=",
"hwVersion": "FX3500 -F",
"modelPartNum": "FX350 0-F",
"processors": "Intel(R) Xeon(R) Gold 6421N CPU (Sapphire Rapids) @ 1.80GHz"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Symmetric and Asymmetric",
"implName": "N/A",
"name": "CKG",
"reference": "NIST SP800-133rev2 Section 4 Scenario 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 6
},
"ECDSA": {
"ECDSA": 68
},
"EdDSA": {
"EdDSA": 2
}
},
"FF": {
"DH": {
"DH": 8,
"DHE": 1,
"Diffie-Hellman": 2
}
},
"RSA": {
"RSA-2048": 2
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 6
},
"CCM": {
"CCM": 10
},
"CTR": {
"CTR": 3
},
"ECB": {
"ECB": 6
},
"GCM": {
"GCM": 16
},
"OFB": {
"OFB": 6
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"TLS": {
"TLS": {
"TLS": 137,
"TLS 1.2": 2,
"TLS 1.3": 3,
"TLS v1.2": 6,
"TLS v1.3": 5
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 2
},
"MAC": {
"MAC": 7
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 4,
"P-224": 24,
"P-256": 36,
"P-384": 28,
"P-521": 30
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1": 2,
"#2": 2,
"#3": 1,
"#5": 2
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 1,
"AES - 128, 192": 1,
"AES 128": 1,
"AES 256": 4,
"AES-256": 3,
"HMAC -SHA- 1": 1,
"HMAC SHA1": 1,
"HMAC SHA256": 1,
"HMAC SHA512": 1,
"HMAC-SHA-1": 4,
"PKCS 1": 1,
"PKCS1": 4,
"SHA-1": 8,
"SHA-256": 6,
"SHA-512": 1,
"SHA1": 2,
"SHA2- 256": 2,
"SHA2- 512": 3,
"SHA2-224": 3,
"SHA2-256": 18,
"SHA2-384": 7,
"SHA2-512": 8,
"SHA256": 2,
"SHA3": 3,
"SHA3- 256": 2,
"SHA3-224": 3,
"SHA3-256": 2,
"SHA3-384": 3,
"SHA3-512": 4,
"SHA512": 2
}
},
"fips_security_level": {
"Level": {
"Level 1": 1,
"Level 3": 1
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 18,
"PBKDF2": 1
},
"SHA": {
"SHA1": {
"SHA-1": 8,
"SHA1": 2
},
"SHA2": {
"SHA-256": 6,
"SHA-512": 1,
"SHA256": 2,
"SHA512": 2
},
"SHA3": {
"SHA3": 3,
"SHA3-224": 3,
"SHA3-256": 2,
"SHA3-384": 3,
"SHA3-512": 4
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {
"LMS": {
"HSS": 8,
"LMS": 54
}
},
"randomness": {
"PRNG": {
"DRBG": 71
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {
"FI": {
"malfunction": 1
},
"SCA": {
"physical probing": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140": 1,
"FIPS 140-3": 20,
"FIPS 180-4": 6,
"FIPS 186-4": 2,
"FIPS 186-5": 10,
"FIPS 198-1": 5,
"FIPS 202": 6,
"FIPS1": 2,
"FIPS186-2": 1,
"FIPS186-5": 15
},
"ISO": {
"ISO/IEC 19790:2012": 4
},
"NIST": {
"NIST SP 800-63B": 1,
"SP 800-108": 3,
"SP 800-132": 2,
"SP 800-135": 2,
"SP 800-140F": 1,
"SP 800-208": 3,
"SP 800-38A": 7,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 1,
"SP 800-38F": 2,
"SP 800-38G": 2,
"SP 800-52": 1,
"SP 800-56A": 4,
"SP 800-56B": 2,
"SP 800-57": 1,
"SP 800-90A": 2,
"SP 800-90B": 3
},
"PKCS": {
"PKCS 1": 1,
"PKCS1": 2
},
"RFC": {
"RFC 5246": 1,
"RFC 5288": 1,
"RFC 7627": 1,
"RFC 8446": 4,
"RFC7": 1,
"RFC7627": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 82,
"AES-": 7,
"AES-256": 3
},
"CAST": {
"CAST": 44
}
},
"constructions": {
"MAC": {
"CMAC": 13,
"HMAC": 43
}
}
},
"tee_name": {
"AMD": {
"PSP": 14
},
"IBM": {
"SSC": 14
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"RSA Signature PrimitiveA5344",
"KTS-IFCA5344",
"Safe Primes Key GenerationA5344",
"EDDSA KeyGenA5344",
"SHA2-224A5344",
"AES-CBCA5344",
"AES-GCMA5344",
"RSA SigVer (FIPS186-2)A5344",
"ECDSA SigVer (FIPS186-5)A5344",
"HMAC-SHA2-256A5344",
"ECDSA SigGen (FIPS186-5)A5344",
"Safe Primes Key VerificationA5344",
"EDDSA SigGenA5344",
"AES-ECBA5344",
"KAS-FFC-SSC Sp800-56Ar3A5344",
"SHA3-224A5344",
"AES-CTRA5344",
"SHAKE-256A5344",
"RSA Decryption Primitive Sp800-56Br2A5344",
"HMAC-SHA-1A5344",
"TLS v1.2 KDF RFC7627A5344",
"ECDSA KeyGen (FIPS186-5)A5344",
"HMAC-SHA2-512A5344",
"KAS-ECC-SSC Sp800-56Ar3A5344",
"SHA2-256A5345",
"AES-OFBA5344",
"HMAC-SHA2-384A5344",
"ECDSA KeyVer (FIPS186-5)A5344",
"PBKDFA5344",
"LMS SigVerA5344",
"TLS v1.3 KDFA5344",
"SHA3-384A5344",
"EDDSA SigVerA5344",
"AES-KWA5344",
"SHA3-512A5344",
"RSA KeyGen (FIPS186-5)A5344",
"RSA SigGen (FIPS186-5)A5344",
"SHAKE-128A5344",
"AES-CCMA5344",
"SHA2-384A5344",
"AES-KWPA5344",
"LMS SigGenA5344",
"AES-CFB128A5344",
"LMS KeyGenA5344",
"AES-FF1A5344",
"Counter DRBGA5344",
"RSA SigVer (FIPS186-5)A5344",
"AES-CMACA5344",
"HMAC-SHA2-224A5344",
"Conditioning Component AES-CBC-MAC SP800-90BA5245",
"SHA3-256A5344",
"SHA2-512A5344",
"SHA-1A5344",
"KDF SP800-108A5344"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A5345",
"#A5245",
"#A5344",
"#A5244"
]
},
"policy_metadata": {
"/Author": "Hawes, David J. (Fed)",
"/CreationDate": "D:20261016064119-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "ac9648ad-0d87-4d51-8f5e-e34621e08d97",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-10-16T10:37:51Z",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1",
"/ModDate": "D:20261016064119-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1732994,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://support.fortanix.com/apidocs",
"https://cmuf-workspace.org/Products/Projects/Messages.aspx?prjID=3\u0026id=211#comments",
"https://csrc.nist.gov/news/2022/nist-transitioning-away-from-sha-1-for-all-apps"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 111
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "b5f1251fb050d232d28fc6a7d559053b0bf46f9c3570bb3cba410d36dfba84b1",
"source_hash": "685364e0a5c51e735feca902e4cf9844693c330a735d0c372d6852143ff7bfc9",
"txt_hash": "07867b0d0885701b248ea92984543db6596362940cae28994e939c97982fda0c"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When utilizing a Trusted Channel as specified in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": null,
"date_sunset": "2031-10-18",
"description": "Fortanix DSM Appliance is the ideal building block for implementing Fortanix DSM in a private cloud or as a managed service. With DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, tokens, or any blob of data.",
"embodiment": "MultiChipStand",
"exceptions": [
"Operational environment: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 3,
"mentioned_certs": {},
"module_name": "Fortanix DSM Appliance",
"module_type": "Hardware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-10-19",
"lab": "Acumen Security",
"validation_type": "Initial"
}
],
"vendor": "Fortanix, Inc.",
"vendor_url": "http://www.fortanix.com"
}
}