This page was not yet optimized for use on mobile devices.
NETSCOUT FIPS Object Module
Certificate details
| Certificate ID | #3457 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 09.05.2019 |
| Standard | FIPS 140-2 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in FIPS mode. This validation entry is a non-security-relevant modification to Cert. #1747 |
| Exceptions |
|
| Description | This cryptographic library provides FIPS Approved cryptographic services to the NETSCOUT family of products. |
| Tested configurations |
|
| Vendor | NETSCOUT Systems, Inc. http://www.netscout.com |
| Lab | BOOZ ALLEN HAMILTON |
| Algorithms |
|
| References | This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, Triple-DES, TDES, HMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA512, SHA-2Schemes
MAC, Key Agreement, Key agreementRandomness
PRNG, DRBG, RNGLibraries
OpenSSLElliptic Curves
P-224, P-384, P-256, P-521, P-192, K-233, K-409, B-233, B-409, B-283, B-571, K-283, K-571, B-163, K-163Block cipher modes
ECB, CBC, CTR, OFB, GCM, CCM, XTSSecurity level
Level 1, level 1Standards
FIPS 140-2, FIPS 197, FIPS 186-4, FIPS 186-2, FIPS PUB 186-4, SP 800-56A, SP 800-56B, NIST SP 800-90A, SP 800-38E, NIST SP 800-56A, SP 800-90A, PKCS1, PKCS#1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 3457,
"dgst": "c5de86654f0e517d",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#3774",
"RSA#C197",
"#3051",
"CVL#2124",
"#2869",
"RSA#3088",
"#1571",
"AES#C196",
"Triple-DES#2841",
"AES#5936",
"#3880",
"HMAC#3774",
"DRBG#2489",
"#1495",
"#2462",
"SHS#4543",
"DRBG#2462",
"#2491",
"#4543",
"#4656",
"#3088",
"#1535",
"AES#5900",
"#C197",
"DRBG#2491",
"#5900",
"#C196",
"RSA#3051",
"Triple-DES#2869",
"#2124",
"HMAC#C197",
"DRBG#C196",
"#5672",
"#2291",
"#2841",
"CVL#2056",
"AES#5938",
"#2056",
"DRBG#2291",
"AES#5672",
"#1457",
"SHS#C197",
"ECDSA#1571",
"#5938",
"HMAC#3880",
"DRBG#C197",
"ECDSA#C197",
"#2489",
"#5936",
"DSA#C197",
"DSA#1495",
"SHS#4656",
"ECDSA#1535",
"AES#C197",
"AES#5669",
"CVL#C197",
"Triple-DES#C197",
"#5669",
"DSA#1457"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"1747"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"1747"
]
}
},
"module_prunned_references": {
"_type": "Set",
"elements": [
"1747"
]
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 43,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 1
},
"ECDSA": {
"ECDSA": 21
}
},
"FF": {
"DH": {
"DH": 6,
"Diffie-Hellman": 2
},
"DSA": {
"DSA": 24
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 4
},
"CCM": {
"CCM": 3
},
"CTR": {
"CTR": 3
},
"ECB": {
"ECB": 4
},
"GCM": {
"GCM": 5
},
"OFB": {
"OFB": 2
},
"XTS": {
"XTS": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 1
}
},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 2,
"Key agreement": 2
},
"MAC": {
"MAC": 5
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 4,
"B-233": 3,
"B-283": 2,
"B-409": 4,
"B-571": 2,
"K-163": 1,
"K-233": 4,
"K-283": 2,
"K-409": 4,
"K-571": 1,
"P-192": 8,
"P-224": 8,
"P-256": 6,
"P-384": 8,
"P-521": 8
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1457": 1,
"#1535": 1,
"#2056": 2,
"#2124": 1,
"#2291": 1,
"#2489": 1,
"#2841": 1,
"#3051": 1,
"#3774": 1,
"#4543": 1,
"#5669": 1,
"#5900": 1,
"#5938": 1
}
},
"fips_certlike": {
"Certlike": {
"AES (128": 1,
"AES 128, 192": 1,
"AES 128/192/256": 1,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1,
"Cert. AES": 1,
"DSA (1024": 1,
"HMAC-SHA-1": 4,
"HMACSHA1": 2,
"PKCS#1": 2,
"PKCS1": 6,
"SHA- 512": 3,
"SHA-1": 22,
"SHA-1, 224": 2,
"SHA-2": 1,
"SHA-224": 14,
"SHA-256": 18,
"SHA-384": 16,
"SHA-512": 11,
"SHA512": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 3,
"level 1": 1
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 24
},
"SHA2": {
"SHA-2": 1,
"SHA-224": 14,
"SHA-256": 18,
"SHA-384": 16,
"SHA-512": 11,
"SHA512": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 20,
"PRNG": 1
},
"RNG": {
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 34,
"FIPS 186-2": 1,
"FIPS 186-4": 4,
"FIPS 197": 1,
"FIPS PUB 186-4": 1
},
"NIST": {
"NIST SP 800-56A": 1,
"NIST SP 800-90A": 7,
"SP 800-38E": 1,
"SP 800-56A": 2,
"SP 800-56B": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS#1": 1,
"PKCS1": 3
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 20,
"AES-128": 1,
"AES-192": 1,
"AES-256": 1
}
},
"DES": {
"3DES": {
"TDES": 7,
"Triple-DES": 4
}
},
"constructions": {
"MAC": {
"CMAC": 14,
"HMAC": 10
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"RSA#C197",
"CVL#2124",
"RSA#3088",
"AES#C196",
"Triple-DES#2841",
"AES#5936",
"HMAC#3774",
"DRBG#2489",
"SHS#4543",
"DRBG#2462",
"AES#5900",
"DRBG#2491",
"RSA#3051",
"Triple-DES#2869",
"HMAC#C197",
"DRBG#C196",
"CVL#2056",
"AES#5938",
"DRBG#2291",
"AES#5672",
"SHS#C197",
"ECDSA#1571",
"HMAC#3880",
"DRBG#C197",
"ECDSA#C197",
"DSA#C197",
"DSA#1495",
"SHS#4656",
"ECDSA#1535",
"AES#C197",
"AES#5669",
"CVL#C197",
"Triple-DES#C197",
"DSA#1457"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#3774",
"#2869",
"#3051",
"#1571",
"#3880",
"#2462",
"#1495",
"#2491",
"#4543",
"#4656",
"#3088",
"#1535",
"#C197",
"#C196",
"#2124",
"#5672",
"#2291",
"#2841",
"#2056",
"#1457",
"#5938",
"#2489",
"#5936",
"#5669",
"#5900"
]
},
"policy_metadata": {
"/Author": "Jason Cunningham",
"/CreationDate": "D:20190509111447-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Office 365",
"/ModDate": "D:20190509111447-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Office 365",
"pdf_file_size_bytes": 403043,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://csrc.nist.gov/groups/STM/cmvp/index.html"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 20
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "d57a79f828d7e97490cf04a7b3621908b2b396b9ed9d42e875a187f50e747d7e",
"source_hash": "d30b8b21593a7793c4062bed9525cd1f7121f50e2c8a09ccde56862c42a7afa4",
"txt_hash": "bdb04c280757677f954e1d331294e1d6d475479034be82b940186a82bbadcfeb"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode. This validation entry is a non-security-relevant modification to Cert. #1747",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/MayConsolidatedCert.pdf",
"date_sunset": null,
"description": "This cryptographic library provides FIPS Approved cryptographic services to the NETSCOUT family of products.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Roles, Services, and Authentication: Level 2",
"Physical Security: N/A",
"Design Assurance: Level 3",
"Mitigation of Other Attacks: N/A"
],
"fw_versions": null,
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": null,
"level": 1,
"mentioned_certs": {
"1747": 1
},
"module_name": "NETSCOUT FIPS Object Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": "1.0",
"tested_conf": [
"ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2600 (Intel Xeon E5) without PAA",
"ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2600 (Intel Xeon E5) with PAA",
"ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2800 (Intel Xeon E5) with PAA",
"ArbOS 7.0 running on a NETSCOUT Arbor Edge Defense and APS Systems 2800 (Intel Xeon E5) without PAA (single-user mode)",
"Custom Linux 2.6.39.1 running on a NETSCOUT 6900C Series {69XXC} (Intel Xeon X 5620) with PAA",
"Custom Linux 2.6.39.1 running on a NETSCOUT 6900C Series {69XXC} (Intel Xeon X 5620) without PAA",
"Custom Linux 2.6.39.1 running on a NETSCOUT 7900C Series {79XXC} (Intel Xeon X 5620) with PAA",
"Custom Linux 2.6.39.1 running on a NETSCOUT 7900C Series {79XXC} (Intel Xeon X 5620) without PAA",
"Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410} (Intel Xeon Silver) with PAA",
"Custom Linux 3.10 running on a NETSCOUT 2400 Series {2410} (Intel Xeon Silver) without PAA",
"Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795} (Intel Xeon Gold) with PAA",
"Custom Linux 3.10 running on a NETSCOUT 4700 Series {4795} (Intel Xeon Gold) without PAA",
"Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895} (Intel Xeon Gold) with PAA",
"Custom Linux 3.10 running on a NETSCOUT 4800 Series {4895} (Intel Xeon Gold) without PAA",
"Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795} (Intel Xeon Gold) with PAA",
"Custom Linux 3.10 running on a NETSCOUT 9700 Series {9795} (Intel Xeon Gold) without PAA",
"Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802} (Intel Xeon Gold) with PAA",
"Custom Linux 3.10 running on a NETSCOUT 9800 Series {9802} (Intel Xeon Gold) without PAA",
"Custom Linux 3.10 running on a NETSCOUT PowerEdge R730 {enhanced} (Intel Xeon E5-2697 v3) with PAA",
"Custom Linux 3.10 running on a NETSCOUT PowerEdge R730 {enhanced} (Intel Xeon E5-2697 v3) without PAA",
"Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} (Intel Xeon Gold) with PAA",
"Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {enhanced} (Intel Xeon Gold) without PAA",
"Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} (Intel Xeon Silver) with PAA",
"Custom Linux 3.10 running on a NETSCOUT PowerEdge R740 {standard} (Intel Xeon Silver) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 1400 Series {1410} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 1400 Series {1410} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 1900 Series {1910D} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 1900 Series {1910D} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 2400 Series {2410} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 2400 Series {2410} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 2600 Series {2695} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 2600 Series {2695} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 2900 Series {2910D} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 2900 Series {2910D} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 3300 Series {3300} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 4500 Series {4595D} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 4500 Series {4595D} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 4700 Series {4795} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 4700 Series {4795} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 4800 Series {4895} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 4800 Series {4895} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 6600 Series {6695} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 6600 Series {6695} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 9700 Series {9795} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 9700 Series {9795} (Intel Xeon E5) without PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 9800 Series {9802} (Intel Xeon E5) with PAA",
"Custom Linux 3.7.5 running on a NETSCOUT 9800 Series {9802} (Intel Xeon E5) without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2019-05-09",
"lab": "BOOZ ALLEN HAMILTON",
"validation_type": "Initial"
}
],
"vendor": "NETSCOUT Systems, Inc.",
"vendor_url": "http://www.netscout.com"
}
}