Wave Relay® User Space Crypto Module

Certificate #5079

Webpage information

Status active
Validation dates 08.10.2025
Sunset date 07-10-2030
Standard FIPS 140-3
Security level 2
Type Software
Embodiment Single Chip
Caveat When operated in approved mode, No assurance of the minimum strength of generated SSPs (e.g., keys)
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description Persistent Systems LLC Wave Relay® User Space Crypto Module is a Software cryptographic module embedded in the Wave Relay® System that provides FIPS Validated cryptographic algorithms which are used by user space system services & protocols (e.g., TLS, IPsec, etc.).
Vendor Persistent Systems, LLC
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, KMAC, CMAC
Asymmetric Algorithms
ECDSA, ECC, Diffie-Hellman, DHE
Hash functions
SHA-1, SHA1, SHA3-224, SHA3-256, SHA3-512, SHA3-384, PBKDF, PBKDF2
Schemes
MAC, Key Agreement
Protocols
SSH, TLS, TLS v1.2, TLS v1.3, IKEv2, IPsec
Randomness
DRBG, RBG
Elliptic Curves
P-224, P-256, P-384, P-521, P-192, B-233, B-283, B-409, B-571, K-233, K-409, K-571, B-163, K-283, K-163
Block cipher modes
CTR, GCM, XTS

Trusted Execution Environments
PSP, SSC

Security level
Level 2, Level 1

Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS140-3, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-135, SP 800-108, SP 800-185, SP 800-56B, SP 800-132, PKCS 1, PKCS#1, RFC7627

File metadata

Author Hawes, David J. (Fed)
Creation date D:20251008094437-04'00'
Modification date D:20251008094605-04'00'
Pages 70
Creator Acrobat PDFMaker 25 for Word
Producer Adobe PDF Library 25.1.51

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5079,
  "dgst": "c567607d29893662",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 3
          },
          "ECDSA": {
            "ECDSA": 25
          }
        },
        "FF": {
          "DH": {
            "DHE": 2,
            "Diffie-Hellman": 2
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CTR": {
          "CTR": 1
        },
        "GCM": {
          "GCM": 5
        },
        "XTS": {
          "XTS": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 3
        },
        "IPsec": {
          "IPsec": 1
        },
        "SSH": {
          "SSH": 3
        },
        "TLS": {
          "TLS": {
            "TLS": 1,
            "TLS v1.2": 4,
            "TLS v1.3": 4
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 18
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "B-163": 11,
          "B-233": 30,
          "B-283": 21,
          "B-409": 28,
          "B-571": 25,
          "K-163": 9,
          "K-233": 25,
          "K-283": 26,
          "K-409": 21,
          "K-571": 24,
          "P-192": 10,
          "P-224": 46,
          "P-256": 60,
          "P-384": 48,
          "P-521": 50
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 2,
          "AES- 128, 192": 1,
          "AES- 256": 3,
          "AES-128": 6,
          "AES-192": 5,
          "AES-256": 2,
          "HMAC-SHA-1": 8,
          "PKCS 1": 6,
          "PKCS#1": 4,
          "SHA-1": 48,
          "SHA1": 1,
          "SHA2- 224": 6,
          "SHA2- 256": 15,
          "SHA2- 384": 1,
          "SHA2- 512": 9,
          "SHA2-224": 50,
          "SHA2-256": 64,
          "SHA2-384": 58,
          "SHA2-512": 56,
          "SHA2-512 21": 1,
          "SHA2-512 32": 1,
          "SHA3- 384": 2,
          "SHA3-224": 5,
          "SHA3-256": 8,
          "SHA3-384": 3,
          "SHA3-512": 5
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 2": 2
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 7,
          "PBKDF2": 2
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 48,
            "SHA1": 1
          },
          "SHA3": {
            "SHA3-224": 5,
            "SHA3-256": 8,
            "SHA3-384": 3,
            "SHA3-512": 5
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 23
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 8,
          "FIPS 180-4": 7,
          "FIPS 186-4": 9,
          "FIPS 198-1": 11,
          "FIPS 202": 7,
          "FIPS PUB 140-3": 1,
          "FIPS140-3": 2,
          "FIPS186-4": 24
        },
        "NIST": {
          "SP 800-108": 1,
          "SP 800-132": 1,
          "SP 800-135": 6,
          "SP 800-185": 2,
          "SP 800-38A": 10,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 3,
          "SP 800-38E": 1,
          "SP 800-38F": 2,
          "SP 800-56A": 6,
          "SP 800-56B": 1,
          "SP 800-56C": 3,
          "SP 800-90A": 3
        },
        "PKCS": {
          "PKCS 1": 4,
          "PKCS#1": 2
        },
        "RFC": {
          "RFC7627": 3
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 13,
            "AES-": 5,
            "AES-128": 6,
            "AES-192": 5,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 56
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 2,
            "HMAC": 17,
            "KMAC": 1
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 4
        },
        "IBM": {
          "SSC": 11
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/Comments": "",
      "/Company": "",
      "/ContentTypeId": "0x010100DDAED41F50E7E1489940D8989E1CB412",
      "/CreationDate": "D:20251008094437-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/MediaServiceImageTags": "",
      "/ModDate": "D:20251008094605-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 25.1.51",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "/_dlc_DocIdItemGuid": "d99cb545-c615-4aff-9c49-97c1576b5f50",
      "pdf_file_size_bytes": 719136,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=37787"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 70
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "5e164cc8eb54c333c7e020540624ae9056cb67b21e83a6fe5187969e27051c32",
    "policy_txt_hash": "002dd43cfcd3d3135a3d4e00bc8464b9c544d28d73f84fcdf5c3db515fc71e3d"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode, No assurance of the minimum strength of generated SSPs (e.g., keys)",
    "certificate_pdf_url": null,
    "date_sunset": "2030-10-07",
    "description": "Persistent Systems LLC Wave Relay\u00ae User Space Crypto Module is a Software cryptographic module embedded in the Wave Relay\u00ae System that provides FIPS Validated cryptographic algorithms which are used by user space system services \u0026 protocols (e.g., TLS, IPsec, etc.).",
    "embodiment": "Single Chip",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 2,
    "mentioned_certs": {},
    "module_name": "Wave Relay\u00ae User Space Crypto Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-10-08",
        "lab": "UL Verification Services, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Persistent Systems, LLC",
    "vendor_url": "http://www.persistentsystems.com/"
  }
}