{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "c1f330d0aff31c1c", "cert_id": 5555, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Fortanix DSM Appliance", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-19", "validation_type": "Initial", "lab": "Acumen Security"}], "vendor_url": "http://www.fortanix.com", "vendor": "Fortanix, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 3, "caveat": "When utilizing a Trusted Channel as specified in the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Operational environment: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Fortanix DSM Appliance is the ideal building block for implementing Fortanix DSM in a private cloud or as a managed service. With DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, tokens, or any blob of data.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-18", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {"Cert": {"#1": 2, "#5": 2, "#2": 2, "#3": 1}}, "fips_security_level": {"Level": {"Level 3": 1, "Level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 4, "HMAC -SHA- 1": 1, "HMAC SHA1": 1, "HMAC SHA256": 1, "HMAC SHA512": 1, "SHA2-224": 3, "SHA2-256": 18, "SHA2-384": 7, "SHA2-512": 8, "SHA3-224": 3, "SHA3- 256": 2, "SHA3-384": 3, "SHA3-512": 4, "SHA-1": 8, "SHA3-256": 2, "SHA-256": 6, "SHA-512": 1, "SHA1": 2, "SHA2- 256": 2, "SHA256": 2, "SHA2- 512": 3, "SHA512": 2, "SHA3": 3, "- PKCS 1": 1, "PKCS1": 4, "AES-256": 3, "AES 256": 4, "AES 128": 1, "AES - 128, 192": 1, "PKCS 1": 1}}, "vendor": {}, "eval_facility": {}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 3, "AES": 82, "AES-": 7}, "CAST": {"CAST": 44}}, "constructions": {"MAC": {"HMAC": 43, "CMAC": 13}}}, "asymmetric_crypto": {"RSA": {"RSA-2048": 2}, "ECC": {"ECDH": {"ECDH": 6}, "ECDSA": {"ECDSA": 68}, "EdDSA": {"EdDSA": 2}, "ECC": {"ECC": 2}}, "FF": {"DH": {"DHE": 1, "Diffie-Hellman": 2, "DH": 8}}}, "pq_crypto": {"LMS": {"LMS": 54, "HSS": 8}}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 8, "SHA1": 2}, "SHA2": {"SHA-256": 6, "SHA-512": 1, "SHA256": 2, "SHA512": 2}, "SHA3": {"SHA3-224": 3, "SHA3-384": 3, "SHA3-512": 4, "SHA3-256": 2, "SHA3": 3}}, "PBKDF": {"PBKDF": 18, "PBKDF2": 1}}, "crypto_scheme": {"MAC": {"MAC": 7}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {"TLS": {"TLS": {"TLS v1.2": 6, "TLS v1.3": 5, "TLS": 137, "TLS 1.3": 3, "TLS 1.2": 2}}}, "randomness": {"PRNG": {"DRBG": 71}, "RNG": {"RNG": 2, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 6}, "CBC": {"CBC": 6}, "CTR": {"CTR": 3}, "OFB": {"OFB": 6}, "GCM": {"GCM": 16}, "CCM": {"CCM": 10}}, "ecc_curve": {"NIST": {"P-224": 24, "P-256": 36, "P-384": 28, "P-521": 30, "P-192": 4}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"physical probing": 1}, "FI": {"malfunction": 1}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 14}, "IBM": {"SSC": 14}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 20, "FIPS186-5": 15, "FIPS 186-5": 10, "FIPS 198-1": 5, "FIPS 186-4": 2, "FIPS 180-4": 6, "FIPS 202": 6, "FIPS186-2": 1, "FIPS1": 2, "FIPS 140": 1}, "NIST": {"SP 800-38A": 7, "SP 800-38C": 1, "SP 800-38B": 1, "SP 800-38G": 2, "SP 800-38D": 1, "SP 800-38F": 2, "SP 800-90B": 3, "SP 800-90A": 2, "SP 800-56A": 4, "SP 800-108": 3, "SP 800-56B": 2, "SP 800-208": 3, "SP 800-132": 2, "SP 800-135": 2, "SP 800-52": 1, "NIST SP 800-63B": 1, "SP 800-140F": 1, "SP 800-57": 1}, "PKCS": {"PKCS 1": 1, "PKCS1": 2}, "RFC": {"RFC7627": 2, "RFC 5288": 1, "RFC 8446": 4, "RFC 5246": 1, "RFC7": 1, "RFC 7627": 1}, "ISO": {"ISO/IEC 19790:2012": 4}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1732994, "pdf_is_encrypted": false, "pdf_number_of_pages": 111, "/Author": "Hawes, David J. (Fed)", "/CreationDate": "D:20261016064119-04'00'", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "ac9648ad-0d87-4d51-8f5e-e34621e08d97", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-10-16T10:37:51Z", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1", "/ModDate": "D:20261016064119-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://support.fortanix.com/apidocs", "https://cmuf-workspace.org/Products/Projects/Messages.aspx?prjID=3&id=211#comments", "https://csrc.nist.gov/news/2022/nist-transitioning-away-from-sha-1-for-all-apps"]}}, "module_algorithms": {"_type": "Set", "elements": ["RSA Signature PrimitiveA5344", "KTS-IFCA5344", "Safe Primes Key GenerationA5344", "EDDSA KeyGenA5344", "SHA2-224A5344", "AES-CBCA5344", "AES-GCMA5344", "RSA SigVer (FIPS186-2)A5344", "ECDSA SigVer (FIPS186-5)A5344", "HMAC-SHA2-256A5344", "ECDSA SigGen (FIPS186-5)A5344", "Safe Primes Key VerificationA5344", "EDDSA SigGenA5344", "AES-ECBA5344", "KAS-FFC-SSC Sp800-56Ar3A5344", "SHA3-224A5344", "AES-CTRA5344", "SHAKE-256A5344", "RSA Decryption Primitive Sp800-56Br2A5344", "HMAC-SHA-1A5344", "TLS v1.2 KDF RFC7627A5344", "ECDSA KeyGen (FIPS186-5)A5344", "HMAC-SHA2-512A5344", "KAS-ECC-SSC Sp800-56Ar3A5344", "SHA2-256A5345", "AES-OFBA5344", "HMAC-SHA2-384A5344", "ECDSA KeyVer (FIPS186-5)A5344", "PBKDFA5344", "LMS SigVerA5344", "TLS v1.3 KDFA5344", "SHA3-384A5344", "EDDSA SigVerA5344", "AES-KWA5344", "SHA3-512A5344", "RSA KeyGen (FIPS186-5)A5344", "RSA SigGen (FIPS186-5)A5344", "SHAKE-128A5344", "AES-CCMA5344", "SHA2-384A5344", "AES-KWPA5344", "LMS SigGenA5344", "AES-CFB128A5344", "LMS KeyGenA5344", "AES-FF1A5344", "Counter DRBGA5344", "RSA SigVer (FIPS186-5)A5344", "AES-CMACA5344", "HMAC-SHA2-224A5344", "Conditioning Component AES-CBC-MAC SP800-90BA5245", "SHA3-256A5344", "SHA2-512A5344", "SHA-1A5344", "KDF SP800-108A5344"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A5345", "#A5245", "#A5344", "#A5244"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "3"}, {"section": "2", "title": "Cryptographic module specification", "level": "3"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "3"}, {"section": "4", "title": "Roles, services, and authentication", "level": "3"}, {"section": "5", "title": "Software/Firmware security", "level": "3"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "3"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "3"}, {"section": "10", "title": "Self-tests", "level": "3"}, {"section": "11", "title": "Life-cycle assurance", "level": "3"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "3"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "FX220 0-II- TN-F", "hwVersion": "FX2200 -II-TN-F", "fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=", "processors": "Intel(R) Xeon(R) E-2176G CPU (Coffee Lake) @ 3.70GHz", "features": "The FX2200- II-TN-F unit is built with copper"}, {"modelPartNum": "FX220 0-II- SXN-F", "hwVersion": "FX2200 -II-SXN- F", "fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=", "processors": "Intel(R) Xeon(R) E-2176G CPU", "features": "FX2200- II-SXN-F unit is"}, {"modelPartNum": "", "hwVersion": "", "fwVersion": "", "processors": "(Coffee Lake) @ 3.70GHz", "features": "built with fiber"}, {"modelPartNum": "FX340 0-T", "hwVersion": "FX3400 -T", "fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=", "processors": "Intel(R) Xeon(R) Silver 4410T CPU (Sapphire Rapids) @ 2.00 GHz", "features": "The FX3400- T unit has copper connectiv ity"}, {"modelPartNum": "FX340 0-F", "hwVersion": "FX3400 -F", "fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=", "processors": "Intel(R) Xeon(R) Silver 4410T CPU (Sapphire Rapids) @ 2.00 GHz", "features": "FX3400- F unit has both copper and fiber"}, {"modelPartNum": "FX350 0-T", "hwVersion": "FX3500 -T", "fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=", "processors": "Intel(R) Xeon(R) Gold 6421N CPU (Sapphire Rapids) @ 1.80GHz", "features": "The FX3500- T unit has copper connectiv ity"}, {"modelPartNum": "FX350 0-F", "hwVersion": "FX3500 -F", "fwVersion": "4.28.2471 with plugin digest Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGY P11MlFY=", "processors": "Intel(R) Xeon(R) Gold 6421N CPU (Sapphire Rapids) @ 1.80GHz", "features": "FX3500- F unit has both copper and fiber"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "Approve d Mode", "description": "Invoke the \"system version\" CLI command provided by the \"Get status\" service. Verify that the versions match with the validated version, and the value of the \"fips_level\" attribute is 3", "type": "Approve d", "statusIndicator": "API Version: \"v1-20170718\" Server Mode: \"Sgx\" FIPS Level: 3 Plugin Digest: \"Xfbg4nYTWdMKgnUFjimfzAOBU0VF9Vz0PkGYP11MlF Y=\" Hardware Name: Fortanix DSM Appliance Hardware Version: [FX2200-II-T/F, FX3400-T/F, FX3500-T/F] Firmware Name: Data Security Manager Firmware Version: 4.28.2471"}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CCM", "cavpCertName": "A5344", "properties": "Key Length - 128, 192, 256", "reference": "SP 800-38C"}, {"algorithm": "AES-CFB128", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CMAC", "cavpCertName": "A5344", "properties": "Direction - Generation, Verification Key Length - 128, 192, 256", "reference": "SP 800-38B"}, {"algorithm": "AES-CTR", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A5244", "properties": "Direction - Encrypt Key Length - 128", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A5245", "properties": "Direction - Encrypt Key Length - 128", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-FF1", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38G"}, {"algorithm": "AES-GCM", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt IV Generation - Internal IV Generation Mode - 8.2.1 Key Length - 128, 192, 256", "reference": "SP 800-38D"}, {"algorithm": "AES-KW", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38F"}, {"algorithm": "AES-KWP", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38F"}, {"algorithm": "AES-OFB", "cavpCertName": "A5344", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256", "reference": "SP 800-38A"}, {"algorithm": "Conditioning Component AES-CBC- MAC SP800-90B", "cavpCertName": "A5244", "properties": "Key Length - 128", "reference": "SP 800-90B"}, {"algorithm": "Conditioning Component AES-CBC- MAC SP800-90B", "cavpCertName": "A5245", "properties": "Key Length - 128", "reference": "SP 800-90B"}, {"algorithm": "Counter DRBG", "cavpCertName": "A5344", "properties": "Prediction Resistance - No, Yes Mode - AES-256 Derivation Function Enabled - Yes", "reference": "SP 800-90A Rev. 1"}, {"algorithm": "ECDSA KeyGen (FIPS186-5)", "cavpCertName": "A5344", "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA KeyVer (FIPS186-5)", "cavpCertName": "A5344", "properties": "Curve - P-224, P-256, P-384, P-521", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigGen (FIPS186-5)", "cavpCertName": "A5344", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA3-224, SHA3- 256, SHA3-384, SHA3-512 Component - No, Yes", "reference": "FIPS 186-5"}, {"algorithm": "ECDSA SigVer (FIPS186-5)", "cavpCertName": "A5344", "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256,", "reference": "FIPS 186-5"}, {"algorithm": "", "cavpCertName": "", "properties": "SHA2-384, SHA2-512, SHA3-224, SHA3- 256, SHA3-384, SHA3-512", "reference": ""}, {"algorithm": "EDDSA KeyGen", "cavpCertName": "A5344", "properties": "Curve - ED-25519", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigGen", "cavpCertName": "A5344", "properties": "Curve - ED-25519 PreHash - No, Yes Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "EDDSA SigVer", "cavpCertName": "A5344", "properties": "Curve - ED-25519 PreHash - No Pure - Yes", "reference": "FIPS 186-5"}, {"algorithm": "HMAC-SHA-1", "cavpCertName": "A5344", "properties": "Key Length - Key Length: 112-8192 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-224", "cavpCertName": "A5344", "properties": "Key Length - Key Length: 112-8192 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A5344", "properties": "Key Length - Key Length: 112-8192 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-384", "cavpCertName": "A5344", "properties": "Key Length - Key Length: 112-8192 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-512", "cavpCertName": "A5344", "properties": "Key Length - Key Length: 112-8192 Increment 8", "reference": "FIPS 198-1"}, {"algorithm": "KAS-ECC-SSC Sp800- 56Ar3", "cavpCertName": "A5344", "properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder onePassDh - KAS Role - initiator, responder staticUnified - KAS Role - initiator, responder", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KAS-FFC-SSC Sp800- 56Ar3", "cavpCertName": "A5344", "properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192 Scheme - dhEphem - KAS Role - initiator, responder dhOneFlow - KAS Role - initiator, responder dhStatic -", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "KDF SP800-108", "cavpCertName": "A5344", "properties": "KAS Role - initiator, responder KDF Mode - Feedback Supported Lengths - Supported Lengths: 256", "reference": "SP 800-108 Rev. 1"}, {"algorithm": "KTS-IFC", "cavpCertName": "A5344", "properties": "Modulo - 2048, 3072, 4096, 6144, 8192 Key Generation Methods - rsakpg1-basic Scheme - KTS-OAEP-basic - KAS Role - initiator, responder Key Transport Method - Key Length - 1024", "reference": "SP 800-56B Rev. 2"}, {"algorithm": "LMS KeyGen", "cavpCertName": "A5344", "properties": "-", "reference": "SP 800-208"}, {"algorithm": "LMS SigGen", "cavpCertName": "A5344", "properties": "-", "reference": "SP 800-208"}, {"algorithm": "LMS SigVer", "cavpCertName": "A5344", "properties": "-", "reference": "SP 800-208"}, {"algorithm": "PBKDF", "cavpCertName": "A5344", "properties": "Iteration Count - Iteration Count: 100000 Password Length - Password Length: 8- 128 Increment 8", "reference": "SP 800-132"}, {"algorithm": "RSA Decryption Primitive Sp800-56Br2 (CVL)", "cavpCertName": "A5344", "properties": "Modulo - 2048, 3072, 4096", "reference": "SP 800-56B Rev. 2"}, {"algorithm": "RSA KeyGen (FIPS186-5)", "cavpCertName": "A5344", "properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096, 8192 Primality Tests - 2powSecStr Private Key Format - standard", "reference": "FIPS 186-5"}, {"algorithm": "RSA SigGen (FIPS186-5)", "cavpCertName": "A5344", "properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss", "reference": "FIPS 186-5"}, {"algorithm": "RSA Signature Primitive (CVL)", "cavpCertName": "A5344", "properties": "Modulo - 2048, 3072, 4096", "reference": "FIPS 186-4"}, {"algorithm": "RSA SigVer (FIPS186- 2)", "cavpCertName": "A5344", "properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096", "reference": "FIPS 186-4"}, {"algorithm": "RSA SigVer (FIPS186- 5)", "cavpCertName": "A5344", "properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss", "reference": "FIPS 186-5"}, {"algorithm": "Safe Primes Key Generation", "cavpCertName": "A5344", "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "Safe Primes Key Verification", "cavpCertName": "A5344", "properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192", "reference": "SP 800-56A Rev. 3"}, {"algorithm": "SHA-1", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-224", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-256", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-256", "cavpCertName": "A5345", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-512", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA3-224", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-256", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-384", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-512", "cavpCertName": "A5344", "properties": "Message Length - Message Length: 0- 65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-128", "cavpCertName": "A5344", "properties": "Output Length - Output Length: 16-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-256", "cavpCertName": "A5344", "properties": "Output Length - Output Length: 16-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "TLS v1.2 KDF RFC7627 (CVL)", "cavpCertName": "A5344", "properties": "Hash Algorithm - SHA2-256, SHA2-384", "reference": "SP 800-135 Rev. 1"}, {"algorithm": "TLS v1.3 KDF (CVL)", "cavpCertName": "A5344", "properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE", "reference": "SP 800-135 Rev. 1"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "CKG", "algoPropList": "Key Type:Symmetric and Asymmetric", "implName": "N/A", "reference": "NIST SP800-133rev2 Section 4 Scenario 1"}]}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": false, "entries": []}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "Networking Ports", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "Encrypted Input / Request payload of API, which can include SSPs and data; Encrypted Output / Response payload of API, which can include SSPs and data; Encrypted API calls; Encrypted API status information and return status codes provided by API"}, {"physicalPort": "IPMI Port", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "Plaintext Input / Request payload of CLI, which can include SSPs; Plaintext Output / Response payload of CLI, which can include PSPs; CLI calls; CLI returning status information and return status codes provided by CLI This port is primarily used for Chassis management"}, {"physicalPort": "VGA Port", "logicalInterface": "Data Output Status Output", "data": "Plaintext Output / Response payload of CLI, which can include PSPs; CLI returning status information and return status codes provided by CLI"}, {"physicalPort": "Serial Port", "logicalInterface": "Data Input Data Output Control Input Status Output", "data": "Plaintext Input / Request payload of CLI, which can include SSPs; Plaintext Output / Response payload of CLI, which can include PSPs; CLI calls; CLI returning status information and return status codes provided by CLI"}, {"physicalPort": "USB Ports", "logicalInterface": "Data Input Control Input Power", "data": "Plaintext Input / Request payload of CLI via Keyboard, which can include SSPs; CLI calls via Keyboard; Power Output for connected devices"}, {"physicalPort": "Power Receptacle", "logicalInterface": "Power", "data": "Power"}, {"physicalPort": "Network Link LEDs", "logicalInterface": "Status Output", "data": "Status output via LEDs (Green); Blinking: Indicates that link is up and there is link activity; Steady On: Indicates that link is up but there is no link activity; Off: Powered off when the unit is off"}, {"physicalPort": "Hard Disk Activity LED", "logicalInterface": "Status Output", "data": "Status output via LEDs (Amber); Off: Indicates the system is not on; Blinking amber: Indicates there is disk activity"}, {"physicalPort": "Power Supply Failure Indicator LED", "logicalInterface": "Status Output", "data": "Status output via LEDs (Blue); Off: Indicates the system is not on; Blue: Indicates the system is healthy and operating fine"}, {"physicalPort": "Power Button", "logicalInterface": "Control Input", "data": "Manual Control for Power"}, {"physicalPort": "ID Button", "logicalInterface": "Control Input", "data": "Manual Control for Self-Identification"}, {"physicalPort": "Reset Button", "logicalInterface": "Control Input", "data": "Manual Control for Reset"}, {"physicalPort": "Front panel display LED", "logicalInterface": "Status Output", "data": "Self-Identification"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": true, "entries": [{"name": "Username and Password", "description": "Memorized Secret", "mechanism": "Username and Password", "strength": "The minimum password length is 8 characters. For a user who just meets the minimum password length, each of the eight characters will have at least 95 possible characters if we consider just the printable ASCII characters, although module supports UTF- 8 characters for password and the number of possible characters with UTF-8 is much higher. Total number of password permutations with eight characters is 95^8 = 6,634,204,312,890,625 . Therefore, the probability of guessing a password with a single random guess is significantly less than one in 1,000,000.", "perMinute": "The module only allows at the most 100 failed password-based authentication attempts in a minute. Given the total number of possible permutations (as shown above), the probability of a random attempt in one-minute period to be correct will be 100 / 6,634,204,312,890,625 . Therefore, the probability of guessing a password in a one- minute period is significantly less than one in 100,000."}, {"name": "API Key", "description": "Memorized Secret", "mechanism": "DRBG is used to generate the API keys. Authenticatio n is done over TLS (AES-KTS- Wrap-TLS)", "strength": "An application authenticates using an API key which contains application ID and application secret. App secret is 16 - 64 bytes random data. Total number of permutations for app", "perMinute": "The module only allows at the most 100 authentication attempts in a minute. Given the total number of possible permutations (as shown above), the probability of a random"}, {"name": "", "description": "", "mechanism": "", "strength": "secret will be 2^128 in the worst case. Therefore, the probability of guessing an application's secret is significantly less than one in 1,000,000.", "perMinute": "attempt in one-minute period to be correct will be 100 / (2^128). Therefore, the probability of guessing an app secret in a one- minute period is significantly less than one in 100,000."}, {"name": "User 2FA device public key", "description": "Multi-Factor Crypto Firmware", "mechanism": "ECDSA- DigSig- SigVer (P- 256) is used to verify signatures", "strength": "The module allows users to use a second factor authentication mechanism in addition to username and password. The strength of this combination mechanism relies upon the strength of the User password mechanism (described earlier) combined with the strength of two factor authentication. This mechanism adds more strength to the password mechanism which already far exceeds the FIPS 140- 3 requirements. U2F signature verification uses U2F device's public key which is an EC P-256 key. The security strength of this key is 128 bits. So, the probability of a random success will be 1 in 2^128. Probability of this combined scheme = (Probability of guessing username and password) * (Probability from signature verification scheme), which is 1 / (95^8) * 1 / (2^128). Therefore, the probability of guessing", "perMinute": "The module only allows at the most 100 authentication attempts in a minute. Given the total number of possible permutations (as shown above), the probability of a random attempt in one-minute period to be correct will be 100 / (95^8 * 2^128). Therefore, the probability of guessing a valid password and 2FA signature in a one-minute period is significantly less than one in 100,000. Therefore, this mechanism of additional 2FA also far exceeds the FIPS 140- 3 requirements."}, {"name": "", "description": "", "mechanism": "", "strength": "a password is significantly less than one in 1,000,000.", "perMinute": ""}, {"name": "RSA Public key of external Application", "description": "Single- Factor Crypto Firmware", "mechanism": "RSA-DigSig- SigVer is used to verify signatures", "strength": "The strength of this mechanism is based on the size of the private key space. The module relies upon minimum RSA 2048-bit keys. This provides an encryption strength of 112 bits, so the probability of a random success will be 1 in 2^112, which is significantly less than one in 1,000,000.", "perMinute": "Using this mechanism, one can make very few attempts in a one- minute period. Each attempt will require the module to check the signature on the certificate using approved signature algorithm and establishing TLS session with this certificate. On average only one attempt can be made in a second. Therefore, at the most 60 attempts can be made in a one-minute period. Therefore, the probability of guessing a 2048-bit private key and succeeding in a one-minute period is 60 / (2^112) which is significantly less than one in 100,000."}, {"name": "Bearer token", "description": "Memorized Secret", "mechanism": "DRBG is used to generate the Bearer token. Authenticatio n is done over TLS (AES-KTS- Wrap-TLS)", "strength": "This authentication mechanism builds upon other authentication mechanisms, and it maps to the original authentication credentials that were used to establish an authenticated session. The bearer token is a base64 encoded random 64 bytes data which is generated using approved DRBG in DSM. Total number of permutations is 2^512. Therefore, the probability of guessing the token is 1 /", "perMinute": "Each authentication attempt takes approximately 12ms or more. Therefore, a user could try at most 5,000 attempts in a minute. Given the total number of possible permutations (as shown above), the probability a random attempt in one-minute period to be correct will be 5000 / (2^512). Therefore, the probability of guessing a password in a one- minute period is significantly less than one in 100,000."}, {"name": "", "description": "", "mechanism": "", "strength": "(2^512), which is significantly less than one in 1,000,000.", "perMinute": ""}, {"name": "Public key of an outside entity/serve r (CA)", "description": "Single- Factor Crypto Firmware", "mechanism": "RSA-DigSig- SigVer is used to verify signatures", "strength": "The strength of this mechanism is based on the size of the private key space. The module relies upon RSA 2048-bit node keys. This provides an encryption strength of 112 bits, so the probability of a random success will be 1 in 2^112, which is significantly less than one in 1,000,000.", "perMinute": "Each attempt will require the module to check the signature on the certificate using approved signature algorithm and establishing TLS session with this certificate. Each attempt takes 100ms or more. Therefore, at the most 600 attempts can be made in a one- minute period. Therefore, the probability of guessing a 2048-bit private key and succeeding in a one-minute period is 600 / (2^112) which is significantly less than one in 100,000."}, {"name": "JWT Public key of external application", "description": "Single- Factor Crypto Firmware", "mechanism": "ECDSA- DigSig- SigVer or RSA-DigSig- SigVer is used to verify signatures", "strength": "The strength of this mechanism is based on the size of the private key space. The module relies upon minimum RSA 2048-bit keys. This provides an encryption strength of 112 bits, so the probability of a random success will be 1 in 2^112, which is significantly less than one in 1,000,000.", "perMinute": "Each attempt will require the module to check the signature on the token using approved signature algorithm and establishing the associated TLS session with the client. Each attempt takes 100ms or more. Therefore, at the most 600 attempts can be made in a one-minute period. Therefore, the probability of guessing a 2048-bit private key and succeeding in a one-minute period is 600 / (2^112) which is significantly less than one in 100,000."}, {"name": "AWS Signature Version 4", "description": "Single- Factor Crypto Firmware", "mechanism": "HMAC is used to verify authenticatio n", "strength": "The strength of this mechanism is based on the size of the secret key space. The module relies upon 32- byte (256-bit) HMAC keys. This provides security strength of 256 bits, so the probability of a random success will be 1 in 2^256, which is significantly less than one in 1,000,000.", "perMinute": "Each attempt will require the module to check the authentication code on the request using approved HMAC algorithm and establishing the associated TLS session with the client. Each attempt takes 100ms or more. Therefore, at the most 600 attempts can be made in a one-minute period. Therefore, the probability of guessing a 32-byte secret key and succeeding in a one-minute period is 600 / (2^256) which is significantly less than one in 100,000."}]}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "System Administrator", "type": "Identity", "operatorType": "Crypto Officer", "authMethodList": "Username and Password User 2FA device public key Bearer token"}, {"name": "System Operator", "type": "Identity", "operatorType": "Crypto Officer", "authMethodList": "Username and Password User 2FA device public key Bearer token"}, {"name": "Account Administrator", "type": "Identity", "operatorType": "Crypto Officer, User", "authMethodList": "Username and Password User 2FA device public"}, {"name": "", "type": "", "operatorType": "", "authMethodList": "key Bearer token"}, {"name": "Account Member", "type": "Identity", "operatorType": "Crypto Officer, User", "authMethodList": "Username and Password User 2FA device public key Bearer token"}, {"name": "Account Auditor", "type": "Identity", "operatorType": "Crypto Officer", "authMethodList": "Username and Password User 2FA device public key Bearer token"}, {"name": "Group Administrator", "type": "Identity", "operatorType": "Crypto Officer, User", "authMethodList": "Username and Password User 2FA device public key Bearer token"}, {"name": "Group Auditor", "type": "Identity", "operatorType": "Crypto Officer", "authMethodList": "Username and Password User 2FA device public key Bearer token"}, {"name": "Application", "type": "Identity", "operatorType": "User", "authMethodList": "API Key RSA Public key of external Application Bearer token Public key of an outside entity/server (CA) JWT Public key of external application AWS Signature Version 4"}, {"name": "Console User", "type": "Identity", "operatorType": "Crypto Officer", "authMethodList": "Username and Password"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "Zeroization (Perform Zeroisation)", "description": "Zeroizatio n command to wipe all SSPs", "indicator": "[IND_1] The module's CLI provides indicators in the form of", "inputs": "CLI command", "outputs": "CLI status", "secFunImpl": "None", "rolesSspAccess": "Console User - Personalizat ion Key: Z - Firmware update key: Z"}, {"name": "Name", "description": "Descripti", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security Functions", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "on", "indicator": "human- readable outputs, with success indicators being output to the 'stdout' output stream and error indicators being output to the 'stderr' output stream", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Plugin signing key: Z - Persisted Sealing Key: Z - Cluster Master Key: Z - System key: Z - Account Wrapping key: Z - Account key: Z - Database Wrapping key: Z - Cipher State Wrapping key: Z - Symmetric key: Z - HMAC key: Z - RSA private key for Digital Signatures: Z - RSA private key for Key Encapsulati on Operations: Z - RSA public key for Key Encapsulati on Operations: Z - Cluster RSA private key for TLS: Z"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "- ECDSA random number \"k\": Z - Cluster RSA public key for TLS: Z - LMS seed: Z - TLS KDF internal state: Z - TLS integrity key: Z - TLS encryption key: Z - TLS pre- master secret: Z - TLS extended master secret: Z - SP 800- 108 KDF internal state: Z - User password : Z - API key: Z - AWS Secret Access Key: Z - Bearer token: Z - Public key of an outside entity/server (CA): Z - RSA Public key of external Application:"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "Functions", "rolesSspAccess": "Access Z - User 2FA device public key: Z - JWT Public key of external Application / CA: Z - RSA public key for Digital Signatures: Z - User Key: Z - Console User Key: Z - User Salt: Z - Console User Salt: Z - CTR_DRBG Seed: Z - CTR_DRBG entropy input: Z - CTR_DRBG V: Z - CTR_DRBG Key: Z - ECDSA private key: Z - ECDSA Public key: Z - EDDSA private key: Z - EDDSA public key: Z - LMS private key: Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- LMS public key: Z - ECCDH private key : Z - ECCDH public key: Z - FFCDH private key: Z - FFCDH public key: Z"}, {"name": "TLS (Perform approved security functions)", "description": "TLS for REST API and Web GUI", "indicator": "[IND_2] The module's REST API and Web GUI provide indicators in the form of HTTP status codes. An HTTP status code of 2xx is indicative of success, while 4xx and 5xx status codes indicate errors. The HTTP status codes are also delivered alongside human- readable outputs. Full", "inputs": "API and GUI requests", "outputs": "API and GUI respons es", "secFunImpl": "AES-Auth DRBG ECDSA- AsymKeyP air-KeyGen ECDSA- AsymKeyP air- PubKeyVal ECDSA- DigSig- SigGen ECDSA- DigSig- SigVer HMAC KAS-ECC- SSC KAS-FFC- SSC RSA- DigSig- SigGen RSA- DigSig- SigVer SafePrimes - AsymKeyP air-KeyGen SafePrimes - AsymKeyP air-KeyVer SHA TLS-KAS- 135KDF", "rolesSspAccess": "System Administrato r - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key"}, {"name": "Name", "description": "Descripti", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security Functions", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "on", "indicator": "details of this indicator can be found in the Fortanix DSM REST API specificati on [API]", "inputs": "", "outputs": "s", "secFunImpl": "TLS-KAS- Full ENT-Cond ENT-ESV RSA- DigSig- SigVer (Legacy)", "rolesSspAccess": "of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z System Operator - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "- TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Account Administrato r - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "- TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "private key: G,E,Z - FFCDH public key: G,E,Z Account Member - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application:"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "Access R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Account Auditor - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "- ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Group Administrato r - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security Functions", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "", "rolesSspAccess": "- TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Group Auditor - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z Application - Cluster RSA private key for TLS: R,E - TLS KDF internal state: G,E,Z - TLS integrity key: G,E,Z - TLS encryption key: G,E,Z - TLS pre- master secret: G,E,Z - TLS extended master secret: G,E,Z - ECCDH"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "Functions", "rolesSspAccess": "private key : G,E,Z - ECCDH public key: G,E,Z - CTR_DRBG entropy input: G,R,W,E - Public key of an outside entity/server (CA): R,E - RSA Public key of external Application: R,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - Cluster RSA public key for TLS: R,E - FFCDH private key: G,E,Z - FFCDH public key: G,E,Z"}, {"name": "Firmware update (Perform approved security functions)", "description": "Update the module firmware", "indicator": "IND_2", "inputs": "New firmware image (via API)", "outputs": "API respons e", "secFunImpl": "ECDSA- DigSig- SigVer SHA", "rolesSspAccess": "System Administrato r - Firmware update key: R,E"}, {"name": "Plugin load (Perform approved security functions)", "description": "Load certified plugins", "indicator": "IND_2", "inputs": "Signed plugin (via API)", "outputs": "API respons e", "secFunImpl": "ECDSA- DigSig- SigVer RSA- DigSig- SigVer SHA RSA- DigSig- SigVer (Legacy)", "rolesSspAccess": "Account Administrato r - Plugin signing key: R,E Account Member - Plugin signing key: R,E"}, {"name": "Module Configuration (Perform approved security functions)", "description": "Initializatio n and configurati on of module including setup of network, IPMI, DNS and NTP. Account managem ent including users, groups, security objects and apps", "indicator": "IND_1, IND_2", "inputs": "CLI commands, API and GUI requests", "outputs": "CLI, API, and GUI respons es", "secFunImpl": "AES- UnAuth DRBG HMAC PBKDF RSA- AsymKeyP air-KeyGen SHA ENT-Cond ENT-ESV", "rolesSspAccess": "System Administrato r - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W System Operator - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Account Administrato r - User password : W - Plugin signing key: W - Public key of an outside entity/server (CA): W - API key: G,R - User 2FA device public key: W - JWT Public key of external Application / CA: W - AWS Secret Access Key: G,W - Cluster Master Key: R,E - System key: G,R,W,E - Account Wrapping key:"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "G,R,W,E - Account key: G,R,W,E - Database Wrapping key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Account Member - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - Public key of an outside entity/server (CA): W - API key: G,R - JWT Public key of external Application / CA: W"}, {"name": "Name", "description": "Descripti", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "on", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "Access - AWS Secret Access Key: G,W - Account Wrapping key: G,R,W,E - Account key: G,R,W,E - Database Wrapping key: G,R,W,E - User Key: W - User Salt: W Account Auditor - User password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Group Administrato r - User password : W"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "Access - Public key of an outside entity/server (CA): W - API key: G,R - User 2FA device public key: W - JWT Public key of external Application / CA: W - AWS Secret Access Key: G,W - Cluster Master Key: R,E - System key: G,R,W,E - Account Wrapping key: G,R,W,E - Account key: G,R,W,E - Database Wrapping key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Group Auditor - User"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "password : W - User 2FA device public key: W - Cluster Master Key: R,E - System key: G,R,W,E - SP 800- 108 KDF internal state: R,W,E,Z - User Key: W - User Salt: W Console User - User password : W - Cluster RSA private key for TLS: G,W - Personalizat ion Key: G,E - System key: G,R,W,E - Persisted Sealing Key: G,E - User Key: W - User Salt: W - Cluster RSA public key for TLS: G,W"}, {"name": "Random Number", "description": "Fetch output", "indicator": "IND_2", "inputs": "None", "outputs": "Random bits", "secFunImpl": "AES- UnAuth", "rolesSspAccess": "System Administrato"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security Functions", "rolesSspAccess": "SSP Access"}, {"name": "Generation (Perform approved security functions)", "description": "from module DRBG", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "DRBG ENT-Cond ENT-ESV", "rolesSspAccess": "r - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E System Operator - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Account Administrato r - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG"}, {"name": "Name", "description": "Descripti", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "on", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "V: G,R,W,E - CTR_DRBG Key: G,R,W,E Account Member - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Account Auditor - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Group Administrato r - CTR_DRBG entropy input: G,R,W,E"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "- CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Group Auditor - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E Application - CTR_DRBG entropy input: G,R,W,E - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E"}, {"name": "Create/Gener ate key (Perform", "description": "Generate symmetric and/or", "indicator": "IND_2", "inputs": "API request", "outputs": "Key ID", "secFunImpl": "AES- UnAuth DRBG", "rolesSspAccess": "Account Administrato r"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security Functions", "rolesSspAccess": "SSP Access"}, {"name": "approved security functions)", "description": "asymmetri c keys", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "ECDSA- AsymKeyP air-KeyGen EDDSA- AsymKeyP air-KeyGen LMS- AsymKeyP air-KeyGen RSA- AsymKeyP air-KeyGen SHA-SIMD ENT-Cond ENT-ESV", "rolesSspAccess": "- CTR_DRBG entropy input: G,R,W,E - HMAC key: G - RSA private key for Digital Signatures: G - RSA private key for Key Encapsulati on Operations: G - RSA public key for Key Encapsulati on Operations: G - ECDSA private key: G - LMS seed: G,Z - LMS private key: G - Database Wrapping key: E - Symmetric key: G - RSA public key for Digital Signatures: G - CTR_DRBG Seed: G,R,W,E - CTR_DRBG"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "V: G,R,W,E - CTR_DRBG Key: G,R,W,E - ECDSA Public key: G - LMS public key: G - EDDSA private key: G - EDDSA public key: G Group Administrato r - CTR_DRBG entropy input: G,R,W,E - HMAC key: G - RSA private key for Digital Signatures: G - RSA private key for Key Encapsulati on Operations: G - RSA public key for Key Encapsulati on Operations: G - ECDSA private key: G - LMS seed: G,Z"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- LMS private key: G - Database Wrapping key: E - Symmetric key: G - RSA public key for Digital Signatures: G - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - ECDSA Public key: G - EDDSA private key: G - EDDSA public key: G - LMS public key: G Application - CTR_DRBG entropy input: G,R,W,E - HMAC key: G - RSA private key for Digital Signatures: G - RSA"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "private key for Key Encapsulati on Operations: G - RSA public key for Key Encapsulati on Operations: G - ECDSA private key: G - LMS seed: G,Z - LMS private key: G - Database Wrapping key: E - Symmetric key: G - RSA public key for Digital Signatures: G - CTR_DRBG Seed: G,R,W,E - CTR_DRBG V: G,R,W,E - CTR_DRBG Key: G,R,W,E - ECDSA Public key: G - EDDSA private key: G - EDDSA public key:"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security Functions", "rolesSspAccess": "SSP Access G"}, {"name": "Encrypt/Decr ypt (Perform approved security functions)", "description": "Symmetric and/or asymmetri c encryption and/or decryption of data", "indicator": "IND_2", "inputs": "Key ID, IV, Plaintext or Ciphertext", "outputs": "Cipherte xt or Plaintex t, IV", "secFunImpl": "AES-Auth AES- UnAuth AES-KTS- Wrap-API", "rolesSspAccess": "- LMS public key: G Application - RSA private key for Key Encapsulati on Operations: E - Cipher State Wrapping key: G,E - SP 800- 108 KDF internal state: R,W - Account key: E - Database Wrapping key: E - Symmetric key: E - RSA public key for Key Encapsulati on Operations: E"}, {"name": "Sign/Verify (Perform approved security functions)", "description": "Create and/or verify digital signatures", "indicator": "IND_2", "inputs": "Key ID, Hash, Data", "outputs": "Signatur e", "secFunImpl": "DRBG ECDSA- DigSig- SigGen ECDSA- DigSig- SigVer EDDSA- DigSig- SigGen EDDSA- DigSig- SigVer LMS- DigSig- SigGen LMS-", "rolesSspAccess": "Application - RSA private key for Digital Signatures: E - ECDSA private key: E - ECDSA Public key: E - ECDSA random number \"k\": G,E,Z - Database"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "DigSig- SigVer RSA- DigSig- SigGen RSA- DigSig- SigVer RSA- DigSig- SigVer (Legacy)", "rolesSspAccess": "Wrapping key: E - RSA public key for Digital Signatures: E - EDDSA public key: E - EDDSA private key: E - LMS private key: E - LMS public key: E"}, {"name": "Wrap/Unwrap (Perform approved security functions)", "description": "Wrap and/or unwrap SSPs", "indicator": "IND_2", "inputs": "Key IDs, Wrapped Key, IV", "outputs": "Key ID, Wrappe d Key, IV", "secFunImpl": "AES-Auth AES-KTS- Wrap-API RSA-KTS- Wrap", "rolesSspAccess": "Account Administrato r - Database Wrapping key: E - Symmetric key: R,W,E - HMAC key: R,W - RSA private key for Digital Signatures: R,W - RSA private key for Key Encapsulati on Operations: R,W,E - ECDSA private key: R,W - EDDSA private key: R,W - LMS private key: W - RSA public"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "key for Digital Signatures: R,W - RSA public key for Key Encapsulati on Operations: R,W,E - EDDSA public key: R,W - ECDSA Public key: R,W - LMS public key: W Group Administrato r - Database Wrapping key: E - Symmetric key: R,W,E - HMAC key: R,W - RSA private key for Digital Signatures: R,W - RSA private key for Key Encapsulati on Operations: R,W,E - ECDSA private key: R,W - EDDSA private key: R,W - LMS private key: W"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "- RSA public key for Digital Signatures: R,W - RSA public key for Key Encapsulati on Operations: R,W,E - ECDSA Public key: R,W - EDDSA public key: R,W - LMS public key: W Application - Database Wrapping key: E - Symmetric key: R,W,E - HMAC key: R,W - RSA private key for Digital Signatures: R,W - RSA private key for Key Encapsulati on Operations: R,W,E - ECDSA private key: R,W - EDDSA private key: R,W - LMS private key: W - RSA public"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "key for Digital Signatures: R,W - RSA public key for Key Encapsulati on Operations: R,W,E - ECDSA Public key: R,W - EDDSA public key: R,W - LMS public key: W"}, {"name": "MAC (Perform approved security functions)", "description": "Calculate CMAC or HMAC digest of data", "indicator": "IND_2", "inputs": "Key ID, Data", "outputs": "MAC", "secFunImpl": "CMAC HMAC SHA", "rolesSspAccess": "Application - Database Wrapping key: E - HMAC key: E - Symmetric key: E"}, {"name": "Digest (Perform approved security functions)", "description": "Calculate hash digest of data", "indicator": "IND_2", "inputs": "Data", "outputs": "Digest", "secFunImpl": "SHA", "rolesSspAccess": "Application"}, {"name": "Import Key (Perform approved security functions)", "description": "Import a key via TLS", "indicator": "IND_2", "inputs": "Key", "outputs": "Key ID", "secFunImpl": "AES-Auth AES-KTS- Wrap-TLS", "rolesSspAccess": "Account Administrato r - Database Wrapping key: E - HMAC key: W - RSA private key for Digital Signatures: W - RSA private key for Key Encapsulati"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "on Operations: W - ECDSA private key: W - EDDSA private key: W - TLS encryption key: G,E,Z - Symmetric key: W - LMS private key: W - RSA public key for Digital Signatures: W - RSA public key for Key Encapsulati on Operations: W - ECDSA Public key: W - EDDSA public key: W - LMS public key: W Group Administrato r - Database Wrapping key: E - HMAC key: W - RSA private key for Digital Signatures: W"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "Access - RSA private key for Key Encapsulati on Operations: W - ECDSA private key: W - EDDSA private key: W - TLS encryption key: G,E,Z - Symmetric key: W - LMS private key: W - RSA public key for Digital Signatures: W - RSA public key for Key Encapsulati on Operations: W - ECDSA Public key: W - EDDSA public key: W - LMS public key: W Application - Database Wrapping key: E - HMAC key: W - RSA private key for Digital"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "Functions", "rolesSspAccess": "Signatures: W - RSA private key for Key Encapsulati on Operations: W - ECDSA private key: W - EDDSA private key: W - TLS encryption key: G,E,Z - Symmetric key: W - LMS private key: W - RSA public key for Digital Signatures: W - RSA public key for Key Encapsulati on Operations: W - ECDSA Public key: W - EDDSA public key: W - LMS public key: W"}, {"name": "Export Key (Perform approved security functions)", "description": "Export Key via TLS", "indicator": "IND_2", "inputs": "Key ID", "outputs": "Key", "secFunImpl": "AES-Auth AES-KTS- Wrap-TLS", "rolesSspAccess": "Account Administrato r - Database Wrapping key: E - HMAC key:"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "Access R - RSA private key for Digital Signatures: R - RSA private key for Key Encapsulati on Operations: R - ECDSA private key: R - EDDSA private key: R - TLS encryption key: G,E,Z - Symmetric key: R - RSA public key for Digital Signatures: R - RSA public key for Key Encapsulati on Operations: R - ECDSA Public key: R - EDDSA public key: R Group Administrato r - Database Wrapping key: E - HMAC key: R"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "Access - RSA private key for Digital Signatures: R - RSA private key for Key Encapsulati on Operations: R - ECDSA private key: R - EDDSA private key: R - TLS encryption key: G,E,Z - Symmetric key: R - RSA public key for Digital Signatures: R - RSA public key for Key Encapsulati on Operations: R - ECDSA Public key: R - EDDSA public key: R Application - Database Wrapping key: E - HMAC key: R - RSA private key for Digital"}, {"name": "Name", "description": "Descripti on", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output s", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "Functions", "rolesSspAccess": "Signatures: R - RSA private key for Key Encapsulati on Operations: R - ECDSA private key: R - EDDSA private key: R - TLS encryption key: G,E,Z - Symmetric key: R - RSA public key for Digital Signatures: R - RSA public key for Key Encapsulati on Operations: R - ECDSA Public key: R - EDDSA public key: R"}, {"name": "Run self-tests (Perform self- tests)", "description": "Execute the module's pre- operationa l and conditional self-tests", "indicator": "IND_1", "inputs": "CLI commands", "outputs": "CLI Status", "secFunImpl": "AES-Auth AES- UnAuth DRBG ECDSA- DigSig- SigGen ECDSA- DigSig- SigVer EDDSA- DigSig-", "rolesSspAccess": "Console User"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "SigGen EDDSA- DigSig- SigVer HMAC KAS-ECC- SSC KAS-FFC- SSC KBKDF RSA-KTS- Wrap LMS- AsymKeyP air-KeyGen LMS- DigSig- SigGen LMS- DigSig- SigVer PBKDF RSA- DigSig- SigGen RSA- DigSig- SigVer SHA SHA-SIMD XOF TLS-KAS- 135KDF ENT-Cond ENT-ESV RSA- DigSig- SigVer (Legacy)", "rolesSspAccess": ""}, {"name": "Get status (Show Status)", "description": "Query the status and version informatio n of the module", "indicator": "IND_1, IND_2", "inputs": "CLI commands, API and GUI requests", "outputs": "CLI, API, and GUI respons es", "secFunImpl": "None", "rolesSspAccess": "System Administrato r System Operator Account Administrato r Account Member"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Account Auditor Group Administrato r Group Auditor Application Console User"}, {"name": "Authenticatio n (Perform approved security functions)", "description": "Authentica te with the module", "indicator": "IND_1, IND_2", "inputs": "Authenticati on material", "outputs": "CLI, API, and GUI respons es", "secFunImpl": "AES-Auth ECDSA- DigSig- SigVer HMAC PBKDF RSA- DigSig- SigVer SHA RSA- DigSig- SigVer (Legacy)", "rolesSspAccess": "System Administrato r - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W System Operator - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Account Administrato r - User password : W - Bearer token: W - User 2FA device"}, {"name": "Name", "description": "Descripti", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Output", "secFunImpl": "Security", "rolesSspAccess": "SSP Access"}, {"name": "", "description": "on", "indicator": "", "inputs": "", "outputs": "s", "secFunImpl": "Functions", "rolesSspAccess": "public key: E - User Key: W - User Salt: W Account Member - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Account Auditor - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Group Administrato r - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Group"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "Auditor - User password : W - Bearer token: W - User 2FA device public key: E - User Key: W - User Salt: W Application - API key: W - AWS Secret Access Key: W - Public key of an outside entity/server (CA): E - RSA Public key of external Application: E - JWT Public key of external Application / CA: E - Bearer token: W Console User - Console User Password : W - Console User Salt: W - Console User Key: W"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": false, "entries": []}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Tamper-Evident Seals", "inspectFreq": "At least monthly", "inspectGuidance": "The DSM appliance enclosure should be periodically checked by the Crypto Officer for evidence of tampering damage to the two (FX2200's) or six (FX3400's and FX3500's) tamper-evident labels and any physical damage to the enclosure material. The frequency of a physical inspection depends upon the information being protected and the environment in which the unit is located. At a minimum, it would be expected that a physical inspection would be made by the Crypto Officer at least monthly. The tamper evident labels are applied at the Fortanix manufacturing facility, are serialized, and are not available for order or replacement from Fortanix. The labels are designed and intended to stay intact for the entire life of the module."}, {"mechanism": "Strong Enclosure", "inspectFreq": "At least monthly", "inspectGuidance": "The DSM appliance enclosure should be periodically checked by the Crypto Officer for evidence of tampering"}, {"mechanism": "", "inspectFreq": "", "inspectGuidance": "damage to the three tamper-evident labels and any physical damage to the enclosure material. The frequency of a physical inspection depends upon the information being protected and the environment in which the unit is located. At a minimum, it would be expected that a physical inspection would be made by the Crypto Officer at least monthly."}, {"mechanism": "Tamper Response and Zeroization Circuitry", "inspectFreq": "Never", "inspectGuidance": "This is internal to the module's enclosure and can't be inspected without triggering zeroization."}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "USB Key Store", "description": "The module has an internal, battery-backed USB key store used for SSP storage (plaintext format)", "persistance": "Static"}, {"name": "SSDs", "description": "The module has multiple SSDs used for SSP and other data storage, both in encrypted and plaintext formats", "persistance": "Static"}, {"name": "RAM", "description": "The module has RAM used for SSP and other data storage, both in encrypted and plaintext formats", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "TLS Input", "source": "Operator", "dest": "Module", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": ""}, {"name": "TLS Output", "source": "Module", "dest": "Operator", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": ""}, {"name": "AES Wrapped Input", "source": "Operator", "dest": "Module", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "AES-Auth"}, {"name": "AES Wrapped Output", "source": "Module", "dest": "Operator", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "AES-KTS- Wrap-API"}, {"name": "RSA Wrapped Input", "source": "Operator", "dest": "Module", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "RSA-KTS- Wrap"}, {"name": "RSA Wrapped Output", "source": "Module", "dest": "Operator", "format": "Encrypted", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": "RSA-KTS- Wrap"}, {"name": "Plaintext Input", "source": "Operator", "dest": "Module", "format": "Plaintext", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": ""}, {"name": "Plaintext Output", "source": "Module", "dest": "Operator", "format": "Plaintext", "distribution": "Automated", "entry": "Electronic", "sfiAlgo": ""}, {"name": "CLI Input", "source": "Operator", "dest": "Module", "format": "Plaintext", "distribution": "Manual", "entry": "Direct", "sfiAlgo": ""}, {"name": "Factory", "source": "Manufacturer", "dest": "Module", "format": "Plaintext", "distribution": "N/A", "entry": "N/A", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Persistent Overwrite", "description": "Keys stored on the module's USB Key Store (the Personalization Key) are overwritten with zeroes upon execution of the zeroize command. Success is indicated via the message \"Zeroization successfully succeeded!\"", "rationale": "Overwriting with zeros is an acceptable form of zeroization per ISO/IEC 19790:2012 section 7.9.7. This is performed in a time (<1 second) that is not sufficient to compromise plaintext SSPs.", "operatorId": "CLI command for zeroization"}, {"method": "Cryptographic", "description": "SSPs stored persistently on the module's SSD are encrypted using AES- GCM that can be zeroized via overwrite. This renders the SSPs that were encrypted irretrievable", "rationale": "Encrypted SSPs are considered \"protected\" per ISO/IEC 19790:2012 section 3.36, and thus direct zeroization is not required (section 7.9.7) This is performed in a time (<1 second) that is not sufficient to compromise plaintext SSPs.", "operatorId": "CLI command for zeroization"}, {"method": "Ephemeral Overwrite", "description": "SSPs stored in the module's RAM are directly overwritten with zeroes when they are no longer needed", "rationale": "Overwriting with zeros is an acceptable form of zeroization per ISO/IEC 19790:2012 section 7.9.7. This is performed in a time (<100 ms) that is not", "operatorId": "Automatically performed when SSP is no longer needed"}, {"method": "", "description": "", "rationale": "sufficient to compromise SSPs.", "operatorId": ""}, {"method": "Ephemeral Reboot", "description": "SSPs stored in the module's RAM", "rationale": "Overwriting with zeros is an acceptable form of zeroization per ISO/IEC 19790:2012 section 7.9.7. The module's input/output interfaces become unresponsive in <1s during these processes, which as a whole can take around 5 minutes to complete. This is not a sufficient amount of time to compromise SSPs due to the physical security mechanisms in place.", "operatorId": "CLI command for zeroization Powering off, Power-cycling or rebooting the module wipes the contents of the module's RAM"}]}, "self_tests": {"section": 10, "subsection": 1, "found": true, "entries": [{"algorithmOrTest": "Firmware Integrity Test", "testProps": "256-bit key size", "testMethod": "HMAC- SHA2-256", "type": "SW/FW Integrity", "indicator": "Success: \"Software Integrity test succeeded\" Error: \"Software integrity check failed\"", "details": "MAC is calculated and verified over binary executables"}, {"algorithmOrTest": "Key Store Integrity Test", "testProps": "", "testMethod": "16-bit Sum- of-bytes Checksum", "type": "SW/FW Integrity", "indicator": "Success: \"Software integrity check of personalization key store module succeeded\" Error:", "details": "Checksum is calculated and verified over personalization key store binary"}, {"algorithmOrTest": "", "testProps": "", "testMethod": "", "type": "", "indicator": "\"Integrity check failed\"", "details": ""}, {"algorithmOrTest": "Filesystem Integrity Test", "testProps": "", "testMethod": "32-bit CRC32C Checksum", "type": "SW/FW Integrity", "indicator": "Success: \"no error found\" Error: \"checksum error\"", "details": "Checksum is calculated and verified over specific filesystems"}]}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES Encryp t", "testProps": "128-bit key size in ECB, CBC, CFB128, OFB, and CTR Modes 192-bit key size in ECB, CBC, CFB128, and OFB Modes 256-bit key size in ECB, CBC, CFB128, and OFB Modes", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"AES self test failed\"", "details": "Encrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES Decry pt", "testProps": "128-bit key size in ECB, CBC, CFB128, OFB, and CTR Modes 192-bit key size in ECB, CBC, CFB128, and OFB Modes 256-bit key size in ECB, CBC, CFB128, and OFB Modes", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"AES self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES GCM Encryp t", "testProps": "AES GCM 128- bit, 192-bit, and 256-bit key size", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"GCM self test failed\"", "details": "Encrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES GCM Decry pt", "testProps": "AES GCM 128- bit, 192-bit, and 256-bit key size", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"GCM self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES CCM Encryp t", "testProps": "AES CCM 128- bit key size AES CCM CAST (encryption and decryption)", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CCM self test failed\"", "details": "Encrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES CCM Decry pt", "testProps": "AES CCM 128- bit key size AES CCM CAST (encryption and decryption)", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CCM self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES Key Wrap", "testProps": "AES-KW and AES-KWP 128- bit, 192-bit, 256-bit key sizes", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KW/KWP self test failed\"", "details": "Encrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES Key Unwra p", "testProps": "AES-KW and AES-KWP 128- bit, 192-bit, 256-bit key sizes", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KW/KWP self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES CMAC Encryp t", "testProps": "AES CMAC 128-bit, 192-bit, 256-bit key sizes", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CMAC self test failed\"", "details": "Encrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES CMAC Decry pt", "testProps": "AES CMAC 128-bit, 192-bit, 256-bit key sizes", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CMAC self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES FF1 Encryp t", "testProps": "AES FF1 128- bit key size Radix 36", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"FF1 self test failed\"", "details": "Encrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "AES FF1 Decry pt", "testProps": "AES FF1 128- bit key size Radix 36", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"FF1 self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "Count er DRBG (A534 4)", "testProps": "Counter DRBG with AES-256", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"CTR DRBG self test failed\"", "details": "Generate", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "ECDS A SigGe n (FIPS1 86-5) (A534 4)", "testProps": "P-224 curve, SHA2-256", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"ECDSA self test failed\"", "details": "Sign", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "ECDS A SigVer (FIPS1 86-5) (A534 4)", "testProps": "P-224 curve, SHA2-256", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"ECDSA self test failed\"", "details": "Verify", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "EDDS A SigGe n (A534 4)", "testProps": "ED-25519", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"EdDSA self test failed\"", "details": "Sign", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "EDDS A SigVer (A534 4)", "testProps": "ED-25519", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"EdDSA self test failed\"", "details": "Verify", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "HMAC -SHA- 1 (A534 4)", "testProps": "128-bit key size", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HMAC SHA1 self test failed\"", "details": "Message Authentic ation", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "HMAC - SHA2- 256 (A534 4)", "testProps": "128-bit key size", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HMAC SHA256 self test failed\"", "details": "Message Authentic ation", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "HMAC - SHA2- 512", "testProps": "2048-bit key size", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HMAC SHA512 self test failed\"", "details": "Message Authentic ation", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "(A534 4)", "testProps": "", "testMethod": "", "type": "", "indicator": "", "details": "", "condition": ""}, {"algorithmOrTest": "KAS- ECC- SSC Sp800 -56Ar3 (A534 4)", "testProps": "P-224 Curve", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KAS ECC Primitive Z self test failed\"", "details": "Shared Secret \"Z\" Computa tion\"", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "KAS- FFC- SSC Sp800 -56Ar3 (A534 4)", "testProps": "ffdhe2048", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"ffdhe_crypto_algo_self_tes t passed\" Error: \"assertion failed: '(left == right)'\"", "details": "Shared Secret \"Z\" Computa tion", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "KDF SP800 -108 (A534 4)", "testProps": "256-bit key size Feedback mode KDF with HMAC-SHA2- 256", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"KDF108 self test failed\"", "details": "Key Derivatio n", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "RSA Decry ption Primiti ve Sp800 -56Br2 (A534 4)", "testProps": "2048-bit key size SHA-256", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"RSA DP self test failed\"", "details": "Decrypt", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "SP 800- 132 KDF", "testProps": "2 iterations 256-bit key size HMAC SHA2- 512", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"PBKDF2 with HMAC- SHA2-512 self test failed\"", "details": "Key Derivatio n", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "RSA SigGe n", "testProps": "2048-bit key size, SHA2-256 PKCS1 v1.5", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"RSA self test failed\"", "details": "Sign", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "RSA SigVer", "testProps": "2048-bit key size, SHA2-256 PKCS1 v1.5", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"RSA self test failed\"", "details": "Verify", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "SHA-1 (A534 4)", "testProps": "", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA1 self test failed\"", "details": "Hash", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "SHA2- 256 (A534 4)", "testProps": "", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA256 self test failed\"", "details": "Hash", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "SHA2- 512 (A534 4)", "testProps": "", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA512 self test failed\"", "details": "Hash", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "SHA3", "testProps": "SHA3-224 SHA3-256 SHA3-384 SHA3-512", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"SHA3 self test failed\"", "details": "Hash", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "TLS v1.2 KDF RFC7 627 (A534", "testProps": "RFC 7627 SHA-256 SHA- 384", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"TLS 1.2 KDF self test failed\"", "details": "Key Derivatio n", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "4) TLS v1.3 KDF (A534 4)", "testProps": "RFC 8446 SHA-256 SHA- 384", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"TLS 1.3 self test failed\"", "details": "Key Derivatio n", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "ENT (P)", "testProps": "Bit Pattern Counting using Six (6) Different Bit Patterns in Sliding Window", "testMethod": "Develo per- Define d CHT per SP 800- 90B section 4.5", "type": "CAS T", "indicator": "Success: 0 Error: \"FIPS conditional test failure: Error in cryptographic operation - RNG failed\"", "details": "Entropy Gatherin g", "condition": "Upon entropy source (RDSE ED) access"}, {"algorithmOrTest": "DRBG", "testProps": "Counter DRBG with AES-256", "testMethod": "CRNG T", "type": "CAS T", "indicator": "Success: 0 Error: \"FIPS conditional test failure: Error in cryptographic operation - RNG failed\"", "details": "Instantiat e, Generate , Reseed", "condition": "Upon DRBG access"}, {"algorithmOrTest": "EDDS A", "testProps": "ED-25519", "testMethod": "PCT", "type": "PCT", "indicator": "Success: Ok Error: \"FIPS conditional test failure:", "details": "Sign, Verify", "condition": "Upon EDDS"}, {"algorithmOrTest": "Algori thm or Test", "testProps": "Test Properties", "testMethod": "Test Metho d", "type": "Test Typ e", "indicator": "Indicator Pairwise consistency test failed. Sign / Verify test failed.\"", "details": "Details", "condition": "Condit ions A key pair generat"}, {"algorithmOrTest": "ECDH and DH (PCT)", "testProps": "KAS-ECC, KAS-FFC", "testMethod": "PCT", "type": "PCT", "indicator": "Success: Ok Error: \"FipsCheckError::General( FFDHE Pairwise Consistency Test: failed)\" / \"FipsCheckError::Mbedtls( EcpInvalidKey)\"", "details": "Key Agreeme nt", "condition": "ion Upon (EC)D H key pair generat ion and import"}, {"algorithmOrTest": "ECDH and DH (CAST )", "testProps": "KAS-ECC, KAS-FFC", "testMethod": "Full Public- Key Validity", "type": "CAS T", "indicator": "Success: Ok Error: \"FipsCheckError::General( FFDHE Full Public-Key Validity: failed)\" / \"FipsCheckError::Mbedtls( EcpInvalidKey)\"", "details": "Key Agreeme nt", "condition": "Upon (EC)D H key pair generat ion and"}, {"algorithmOrTest": "RSA (PCT)", "testProps": "SHA-256", "testMethod": "PCT", "type": "PCT", "indicator": "Success: Ok Error: \"FIPS conditional test failure: Pairwise consistency test failed. Sign / Verify test failed.\" / \"FIPS conditional test failure: Pairwise consistency test failed. Encryption / Decryption test failed.\"", "details": "Sign, Verify, Encrypt, Decrypt", "condition": "import Upon RSA key pair generat ion"}, {"algorithmOrTest": "Firmw are Load Test", "testProps": "ECDSA P-256 SHA2-256", "testMethod": "Digital Signat ure Verific ation", "type": "SW/ FW Load", "indicator": "Success: Ok Error: \"Firmware verification failed.\"", "details": "Verify", "condition": "Upon Firmwa re Load"}, {"algorithmOrTest": "Plugin Load Test", "testProps": "RSA (2048 - 4096) ECDSA (P-256, P-384, or P-521)", "testMethod": "Digital Signat ure", "type": "SW/ FW Load", "indicator": "Success: Ok Error: \"failed to verify plugin code signature\"", "details": "Verify", "condition": "Upon plugin Load"}, {"algorithmOrTest": "ECDS A", "testProps": "SHA-256", "testMethod": "PCT", "type": "PCT", "indicator": "Success: Ok Error: \"FIPS conditional test failure: Pairwise consistency test failed. Sign / Verify test failed.\"", "details": "Sign, Verify", "condition": "Upon ECDS A key pair generat ion"}, {"algorithmOrTest": "LMS and HSS KeyGe n", "testProps": "HSS, One Level LMS_SHA256_ M24_H5", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HSS self test failed\"", "details": "Sign, Verify", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "LMS SigGe n", "testProps": "HSS, One Level LMS_SHA256_ M24_H5", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HSS self test failed\"", "details": "Sign", "condition": "Power On Crypto Library Load"}, {"algorithmOrTest": "LMS SigVer", "testProps": "HSS, One Level LMS_SHA256_ M24_H5", "testMethod": "KAT", "type": "CAS T", "indicator": "Success: \"Power-up self- tests succeeded\" Error: \"HSS self test failed\"", "details": "Verify", "condition": "Power On Crypto Library Load"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Hard Error State", "description": "Unrecoverable errors that indicate an equipment malfunction that may require maintenance, service, or repair of the cryptographic module", "conditions": "Cryptographic Algorithm Self-Test (CAST) failure Integrity Test failure", "recoveryMethod": "Power Cycle", "indicator": "A status message is output to the logs indicating which self-test failed"}, {"name": "Soft Error State", "description": "Recoverable errors that indicate a transient error, such as an operator", "conditions": "Firmware Load Test failure Plugin Load Test failure Public Key", "recoveryMethod": "Automatic", "indicator": "A status code is output to the operator"}, {"name": "", "description": "providing invalid inputs to a function", "conditions": "Checks on externally- provided public keys failure", "recoveryMethod": "", "indicator": "indicating that the operation failed"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["RSA Signature PrimitiveA5344", "KTS-IFCA5344", "Safe Primes Key GenerationA5344", "#A5345", "#A5344", "EDDSA KeyGenA5344", "SHA2-224A5344", "AES-CBCA5344", "AES-GCMA5344", "RSA SigVer (FIPS186-2)A5344", "ECDSA SigVer (FIPS186-5)A5344", "HMAC-SHA2-256A5344", "ECDSA SigGen (FIPS186-5)A5344", "Safe Primes Key VerificationA5344", "EDDSA SigGenA5344", "AES-ECBA5344", "KAS-FFC-SSC Sp800-56Ar3A5344", "SHA3-224A5344", "AES-CTRA5344", "SHAKE-256A5344", "RSA Decryption Primitive Sp800-56Br2A5344", "HMAC-SHA-1A5344", "TLS v1.2 KDF RFC7627A5344", "ECDSA KeyGen (FIPS186-5)A5344", "HMAC-SHA2-512A5344", "KAS-ECC-SSC Sp800-56Ar3A5344", "SHA2-256A5345", "AES-OFBA5344", "HMAC-SHA2-384A5344", "ECDSA KeyVer (FIPS186-5)A5344", "PBKDFA5344", "LMS SigVerA5344", "TLS v1.3 KDFA5344", "SHA3-384A5344", "EDDSA SigVerA5344", "AES-KWA5344", "SHA3-512A5344", "RSA KeyGen (FIPS186-5)A5344", "RSA SigGen (FIPS186-5)A5344", "SHAKE-128A5344", "AES-CCMA5344", "SHA2-384A5344", "#A5244", "AES-KWPA5344", "LMS SigGenA5344", "AES-CFB128A5344", "LMS KeyGenA5344", "AES-FF1A5344", "Counter DRBGA5344", "RSA SigVer (FIPS186-5)A5344", "AES-CMACA5344", "HMAC-SHA2-224A5344", "Conditioning Component AES-CBC-MAC SP800-90BA5245", "SHA3-256A5344", "SHA2-512A5344", "SHA-1A5344", "#A5245", "KDF SP800-108A5344"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "685364e0a5c51e735feca902e4cf9844693c330a735d0c372d6852143ff7bfc9", "txt_hash": "07867b0d0885701b248ea92984543db6596362940cae28994e939c97982fda0c", "json_hash": "b5f1251fb050d232d28fc6a7d559053b0bf46f9c3570bb3cba410d36dfba84b1"}}}