IBM(R) Security QRadar(R) Cryptographic Security Kernel

Certificate details

Certificate ID #2554
Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 02.02.2016
Standard FIPS 140-2
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat The module generates cryptographic keys whose strengths are modified by available entropy
Exceptions
  • Roles, Services, and Authentication: Level 2
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Description The IBM(R) Security QRadar(R) Cryptographic Security Kernel is multi-algorithm library providing general-purpose cryptographic services. The purpose of the module is to provide a single API for cryptographic functionality that can provide centralized control over FIPS-Approved mode status, provide availability of only FIPS-Approved algorithms or vendor-affirmed implementations of non FIPS-Approved algorithms, and provide for centralized logging and reporting of the cryptographic engine.
Tested configurations
  • Red Hat Enterprise Linux (RHEL) v6.5 running on a IBM System X3650 M4 BD (single-user mode)
Vendor IBM® Corporation http://www.ibm.com
Lab COACT INC CAFE LAB
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-256, DES, Triple-DES, HMAC, HMAC-SHA-256, HMAC-SHA-512
Asymmetric Algorithms
RSA 2048, RSA 1024, Diffie-Hellman, DH
Hash functions
SHA-1, SHA-256, SHA-512, MD5
Protocols
SSH, TLS
Randomness
DRBG
Libraries
OpenSSL
Block cipher modes
ECB, CBC, CTR, CFB, OFB

Security level
Level 1

Title Non-Proprietary Security Policy
Subject Biscom Cryto Library Security Policy
Author Ward Rosenberry
Creation date D:20160129141700-05'00'
Modification date D:20160129141721-05'00'
Pages 20
Creator Acrobat PDFMaker 11 for Word
Producer Adobe PDF Library 11.0

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 2554,
  "dgst": "c344fdf40e328b78",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#1686",
        "HMAC#1981",
        "#1981",
        "SHS#2600",
        "DRBG#753",
        "#1794",
        "RSA#1686",
        "#2600",
        "#3131",
        "AES#3131",
        "Triple-DES#1794",
        "#753",
        "CVL#397",
        "#397"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 45,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "DH": 12,
            "Diffie-Hellman": 2
          }
        },
        "RSA": {
          "RSA 1024": 2,
          "RSA 2048": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CFB": {
          "CFB": 3
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 3
        },
        "OFB": {
          "OFB": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 1
        }
      },
      "crypto_protocol": {
        "SSH": {
          "SSH": 2
        },
        "TLS": {
          "TLS": {
            "TLS": 3
          }
        }
      },
      "crypto_scheme": {},
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 128, 192": 1,
          "AES 128/192/256": 1,
          "AES 256": 1,
          "AES-256 753": 1,
          "DRBG 2": 1,
          "Diffie-Hellman 2048": 1,
          "HMAC SHA-1": 1,
          "HMAC SHA-256": 2,
          "HMAC SHA-512": 1,
          "HMAC- SHA-256": 1,
          "HMAC-SHA-1": 2,
          "HMAC-SHA-256": 4,
          "HMAC-SHA-512 1981": 2,
          "HMAC-SHA1": 2,
          "HMAC-SHA256": 4,
          "HMAC-SHA512": 2,
          "PKCS#1": 6,
          "PKCS1": 2,
          "RSA 1024": 2,
          "RSA 2048": 2,
          "SHA 1 , 256": 1,
          "SHA- 256": 1,
          "SHA-1": 4,
          "SHA-256": 5,
          "SHA-512": 3,
          "SHA-512 2600": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 5
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 4
          },
          "SHA2": {
            "SHA-256": 5,
            "SHA-512": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 11
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 29,
          "FIPS PUB 140-2": 2
        },
        "NIST": {
          "SP 800-90A": 3
        },
        "PKCS": {
          "PKCS#1": 3,
          "PKCS1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 20,
            "AES-256": 1
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 13
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 20,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC#1981",
        "SHS#2600",
        "DRBG#753",
        "RSA#1686",
        "AES#3131",
        "Triple-DES#1794",
        "CVL#397"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#1686",
        "#1981",
        "#1794",
        "#2600",
        "#3131",
        "#753",
        "#397"
      ]
    },
    "policy_metadata": {
      "/Author": "Ward Rosenberry",
      "/Company": "",
      "/CreationDate": "D:20160129141700-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 11 for Word",
      "/Keywords": "",
      "/ModDate": "D:20160129141721-05\u002700\u0027",
      "/Producer": "Adobe PDF Library 11.0",
      "/SourceModified": "D:20160129191533",
      "/Subject": "Biscom Cryto Library Security Policy",
      "/Title": "Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 163092,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.ibm.com/",
          "http://csrc.nist.gov/groups/STM/cmvp/index.html"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 20
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "305f440fdbd1540908b0f5ba2119f95ff05e72fc23b6ee6996c0627b05536114",
      "source_hash": "5a6f3508be6fcc2b1fe418ea57acba0b67f016599bda7ebd6ea8731612f4f4df",
      "txt_hash": "392551da36e21a59c213169eee4d076a1ef96745c32627a0a78ab981bfa78500"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "The module generates cryptographic keys whose strengths are modified by available entropy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertFeb2016.pdf",
    "date_sunset": null,
    "description": "The IBM(R) Security QRadar(R) Cryptographic Security Kernel is multi-algorithm library providing general-purpose cryptographic services. The purpose of the module is to provide a single API for cryptographic functionality that can provide centralized control over FIPS-Approved mode status, provide availability of only FIPS-Approved algorithms or vendor-affirmed implementations of non FIPS-Approved algorithms, and provide for centralized logging and reporting of the cryptographic engine.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, Services, and Authentication: Level 2",
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "IBM(R) Security QRadar(R) Cryptographic Security Kernel",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "7.2",
    "tested_conf": [
      "Red Hat Enterprise Linux (RHEL) v6.5 running on a IBM System X3650 M4 BD (single-user mode)"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2016-02-02",
        "lab": "COACT INC CAFE LAB",
        "validation_type": "Initial"
      }
    ],
    "vendor": "IBM\u00ae Corporation",
    "vendor_url": "http://www.ibm.com"
  }
}