This page was not yet optimized for use on mobile devices.
CryptoComply Module based on AWS-LC FIPS
Certificate details
| Certificate ID | #5525 |
|---|---|
| Status | active |
| Validation dates | 16.09.2026 |
| Sunset date | 02-06-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | SafeLogic's CryptoComply Module based on AWS-LC FIPS is designed to provide FIPS 140-3 validated cryptographic functionality. It includes PQC support and is available for licensing. |
| Vendor | SafeLogic, Inc. http://www.safelogic.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES-256, AES-128, AES-192, AES, CAST, HMAC, HMAC-RIPEMD-160Asymmetric Algorithms
ECDH, ECDSAPost-quantum Algorithms
ML-KEMHash functions
SHA-1, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD4, MD5, RIPEMD-160, PBKDF, PBKDF2Schemes
MAC, KEMProtocols
SSH, TLS, TLS 1.2, TLS 1.3Randomness
DRBG, RBGElliptic Curves
P-224, P-256, P-384, P-521, P-192, secp256k1Block cipher modes
OFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Side-channel analysis
timing attacksStandards
FIPS 140-3, FIPS 3, FIPS 140, FIPS186-5, FIPS 186-5, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 203, FIPS 180-4, FIPS 202, FIPS203, FIPS180-4, FIPS202, FIPS198-1, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-108, SP 800-135, SP 800-132, PKCS 1, PKCS#1, RFC5288, RFC8446, RFC 4253, RFC 6668, RFC 5288Cross-references
Outgoing- 5298 - active - AWS-LC 3 Cryptographic Module (dynamic)
Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5525,
"dgst": "c89fe5b7a007332d",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A6169",
"KDA OneStep SP800-56Cr2A6279",
"#A6278",
"RSA SigVer (FIPS186-4)A6280",
"AES-ECBA6277",
"#A6175",
"KDA HKDF Sp800-56Cr1A6279",
"#A6280",
"ECDSA KeyVer (FIPS186-5)A6279",
"#A6181",
"#A6273",
"HMAC-SHA-1A6279",
"#A6174",
"#A6172",
"#A6177",
"#A6166",
"SHA3-512A6183",
"#A6167",
"ECDSA SigGen (FIPS186-5)A6279",
"Counter DRBGA8124",
"#A6275",
"SHA3-224A6183",
"AES-CTRA6276",
"#A6170",
"#A6168",
"ML-KEM EncapDecapA6279",
"ECDSA SigVer (FIPS186-5)A6279",
"SHA3-256A6183",
"#A6184",
"#A6276",
"#A6163",
"KDF TLSA6279",
"SHA3-384A6183",
"#A6161",
"#A6279",
"HMAC-SHA2-224A6279",
"AES-KWPA6276",
"#A6182",
"HMAC-SHA2-512/224A6279",
"AES-KWA6276",
"#A6176",
"#A6180",
"SHA-1A6279",
"#A6274",
"EDDSA KeyGenA6279",
"#A8123",
"#A6183",
"AES-XTS Testing Revision 2.0A6276",
"ECDSA KeyGen (FIPS186-5)A6279",
"KDF SSHA6279",
"SHA2-512A6279",
"RSA KeyGen (FIPS186-5)A6280",
"#A6160",
"HMAC-SHA2-256A6279",
"SHAKE-128A6183",
"#A6179",
"SHAKE-256A6183",
"#A6162",
"#A8122",
"#A8121",
"HMAC-SHA2-512/256A6279",
"ML-KEM KeyGenA6279",
"#A6165",
"KAS-ECC-SSC Sp800-56Ar3A6279",
"SHA2-224A6279",
"#A6171",
"AES-CBCA6276",
"#A6277",
"#A6173",
"KDF SP800-108A6279",
"EDDSA SigVerA6279",
"SHA2-256A6279",
"AES-GCMA6277",
"#A6178",
"AES-GMACA6277",
"AES-CCMA6276",
"SHA2-512/256A6279",
"SHA2-512/224A6279",
"HMAC-SHA2-512A6279",
"RSA SigGen (FIPS186-5)A6280",
"ECDSA SigVer (FIPS186-4)A6279",
"#A8124",
"PBKDFA6279",
"SHA2-384A6279",
"HMAC-SHA2-384A6279",
"RSA SigVer (FIPS186-5)A6280",
"#A6164",
"AES-CMACA6276",
"EDDSA SigGenA6279"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": {
"_type": "Set",
"elements": [
"5298"
]
},
"indirectly_referenced_by": null,
"indirectly_referencing": {
"_type": "Set",
"elements": [
"5298"
]
}
},
"policy_prunned_references": {
"_type": "Set",
"elements": [
"5298"
]
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 2,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A6160, A6165, A6170, A6181, A6273, A6276",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A6160, A6165, A6170, A6181, A6273, A6276",
"properties": "Key Length - 128 Tag Length - 32 IV Length - IV Length: 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A6160, A6165, A6170, A6181, A6273, A6276",
"properties": "Direction - Generation, Verification Key Length - 128, 256 MAC Length - MAC Length: 32-128 Increment 8 Message Length - Message Length: 0-65536 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A6160, A6165, A6170, A6181, A6273, A6276",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - Yes Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A6160, A6161, A6162, A6163, A6164, A6165, A6166, A6167, A6168, A6169, A6170, A6171, A6172, A6173, A6174, A6181, A6182, A6273, A6274, A6275, A6276, A6277",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A6161, A6162, A6163, A6164, A6166, A6167, A6168, A6169, A6171, A6172, A6173, A6174, A6182, A6274, A6275, A6277",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal Key Length - 128, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128-65536 Increment 128 AAD Length - AAD Length: 0-320 Increment 8 IV Generation Mode - 8.2.1, 8.2.2",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A6161, A6162, A6163, A6164, A6166, A6167, A6168, A6169,",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal",
"reference": "SP 800-38D"
},
{
"algorithm": "",
"cavpCertName": "A6171, A6172, A6173, A6174, A6182, A6274, A6275, A6277",
"properties": "Key Length - 128, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 0-320 Increment 8 IV Generation Mode - 8.2.1, 8.2.2",
"reference": ""
},
{
"algorithm": "AES-KW",
"cavpCertName": "A6160, A6165, A6170, A6181, A6273, A6276",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A6160, A6165, A6170, A6181, A6273, A6276",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 8-4096 Increment 8",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A6160, A6165, A6170, A6175, A6181, A6273, A6276",
"properties": "Direction - Decrypt, Encrypt Key Length - 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A6181, A6273, A6276",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 256 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 384 Returned Bits - 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A8121, A8122, A8123, A8124",
"properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 256 Entropy Input - Entropy Input: 384 Nonce - Nonce: 128 Personalization String Length -",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Personalization String Length: 384 Returned Bits - 512",
"reference": ""
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA-1",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA KeyGen",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Curve - ED-25519",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigGen",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Curve - ED-25519 PreHash - No Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "EDDSA SigVer",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Curve - ED-25519 PreHash - No Pure - Yes",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Domain Parameter Generation Methods - P- 224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800-56Cr1",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo||l Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8 HMAC Algorithm - SHA-1, SHA2-224, SHA2- 256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800-56Cr2",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Auxiliary Function Methods - Auxiliary Function Name - HMAC-SHA-1 MAC Salting Methods - default, random Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-2048 Increment 8",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SP800- 108",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "KDF Mode - Counter, Feedback MAC Mode - HMAC-SHA-1, HMAC-SHA2-224, HMAC-SHA2-256, HMAC-SHA2-384, HMAC- SHA2-512, HMAC-SHA2-512/224, HMAC- SHA2-512/256 Supported Lengths - Supported Lengths: 2048 Fixed Data Order - After Fixed Data, Before Fixed Data Counter Length - 32, 8 Supports Empty IV - Yes Requires Empty IV - Yes Custom Key In Length - 0",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA-1, SHA2-224, SHA2- 256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "TLS Version - v1.0/1.1, v1.2 Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "ML-KEM EncapDecap",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Parameter Sets - ML-KEM-1024, ML-KEM- 512, ML-KEM-768 Functions - Decapsulation, Encapsulation",
"reference": "FIPS 203"
},
{
"algorithm": "ML-KEM KeyGen",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Parameter Sets - ML-KEM-1024, ML-KEM- 512, ML-KEM-768",
"reference": "FIPS 203"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Iteration Count - Iteration Count: 1000- 10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2- 256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256 Password Length - Password Length: 14-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279, A6280",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096, 6144, 8192 p mod 8 - 0 Primality Tests - 2powSecStr",
"reference": "FIPS 186-5"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "q mod 8 - 0 Fixed Public Exponent - 010001 Info Generated By Server - No Private Key Format - standard Public Exponent Mode - fixed",
"reference": ""
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279, A6280",
"properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279, A6280",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28 Public Exponent Mode - Fixed Fixed Public Exponent - 010001",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279, A6280",
"properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Fixed Public Exponent - 010001 Public Exponent Mode - fixed",
"reference": "FIPS 186-5"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A6176, A6177, A6178, A6179, A6180, A6184, A6278, A6279",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A6183",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A6183",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A6183",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A6183",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A6183",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A6183",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Encryption",
"indicator": "1",
"inputs": "AES key, plaintext",
"name": "Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption/Decryption with AES"
},
{
"description": "Decryption",
"indicator": "1",
"inputs": "AES key, ciphertext",
"name": "Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption/Decryption with AES"
},
{
"description": "Authenticated Encryption",
"indicator": "1",
"inputs": "AES key, plaintext, IV",
"name": "Authenticated Encryption",
"outputs": "Ciphertext, MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenticated Encryption/Decryption with AES CCM Authenticated Encryption/Decryption with AES GCM Authenticated Encryption/Decryption with AES KW/KWP"
},
{
"description": "Authenticated Decryption",
"indicator": "1",
"inputs": "AES key, ciphertext, IV, MAC tag",
"name": "Authenticated Decryption",
"outputs": "Plaintext or fail",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenticated Encryption/Decryption with AES CCM Authenticated Encryption/Decryption with AES GCM Authenticated"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Encryption/Decryption with AES KW/KWP"
},
{
"description": "MAC computation",
"indicator": "1",
"inputs": "AES key or HMAC key, message",
"name": "Message Authentication Generation",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC Key: W,E - AES Key: W,E",
"secFunImpl": "Message Authentication Generation with HMAC Message Authentication Generation with AES"
},
{
"description": "Generating message digest",
"indicator": "1",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest with SHA Message Digest with SHAKE"
},
{
"description": "Generating random numbers",
"indicator": "1",
"inputs": "Output length",
"name": "Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - Entropy Input: W,E - DRBG Seed: G,W,E - DRBG Internal State (V, Key): G,W,E",
"secFunImpl": "Random Number Generation with DRBG"
},
{
"description": "Generating a key pair",
"indicator": "1",
"inputs": "Modulus size / Curve",
"name": "Key Generation",
"outputs": "RSA public key, RSA private key / EC public key, EC private key / EDDSA public key, EDDSA private key / ML-KEM public key, ML-KEM private key",
"rolesSspAccess": "Crypto Officer - RSA Public Key: G,R - RSA Private Key: G,R - EC Public Key: G,R - EC Private Key: G,R - ML-KEM Public Key: G,R - ML-KEM",
"secFunImpl": "Key Generation with RSA Key Generation with ECDSA Key Generation with EDDSA Key Generation with ML-KEM"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Private Key: G,R - EDDSA Private Key: G,R - EDDSA Public Key: G,R - Intermediate Key Generation Value: G,E,Z",
"secFunImpl": ""
},
{
"description": "Verifying the public key",
"indicator": "1",
"inputs": "Public key",
"name": "Key Verification",
"outputs": "Success/ error",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E",
"secFunImpl": "Key Verification with ECDSA"
},
{
"description": "Generating signature",
"indicator": "1",
"inputs": "Message, EC private key EDDSA private key or RSA private key, hash algorithm",
"name": "Signature Generation",
"outputs": "Digital signature",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E - EC Private Key: W,E - EDDSA Private Key: W,E",
"secFunImpl": "Signature Generation with RSA Signature Generation with ECDSA Signature Generation with EDDSA"
},
{
"description": "Verifying signature",
"indicator": "1",
"inputs": "Signature, EC public key, EDDSA public key or RSA public key, hash algorithm",
"name": "Signature Verification",
"outputs": "Digital signature verification result",
"rolesSspAccess": "Crypto Officer - RSA Public Key: W,E - EC Public Key: W,E - EDDSA Public Key: W,E",
"secFunImpl": "Signature Verification with ECDSA Signature Verification with EDDSA Signature Verification with RSA Signature Verification with RSA (Legacy) Signature Verification with ECDSA (Legacy)"
},
{
"description": "Calculating the Shared Secret",
"indicator": "1",
"inputs": "EC public key, EC private key",
"name": "Shared Secret Computation",
"outputs": "Shared Secret",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E - EC Private Key: W,E - Shared Secret: G,R",
"secFunImpl": "KAS-ECC-SSC (Shared Secret Computation with EC Diffie- Hellman)"
},
{
"description": "Deriving Keys",
"indicator": "1",
"inputs": "TLS Pre-Master Secret, key length",
"name": "Key Derivation with TLS KDF",
"outputs": "TLS Derived Key (AES/HMAC)",
"rolesSspAccess": "Crypto Officer - TLS Pre- Master Secret: W,E - TLS Master Secret: G,E,Z - TLS Derived Key (AES/HMAC): G,R",
"secFunImpl": "Key Derivation with TLS KDF"
},
{
"description": "Deriving Keys",
"indicator": "1",
"inputs": "Password, salt, iteration count, key length",
"name": "Key Derivation with PBKDF",
"outputs": "PBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - PBKDF Derived Key: G,R - Password: W,E",
"secFunImpl": "Key Derivation with PBKDF"
},
{
"description": "Deriving Keys",
"indicator": "1",
"inputs": "Shared Secret, Key Length",
"name": "Key Derivation with KDA HKDF",
"outputs": "HKDF Derived Key",
"rolesSspAccess": "Crypto Officer - HKDF Derived Key: G,R - Shared Secret: W,E",
"secFunImpl": "Key Derivation with KDA HKDF"
},
{
"description": "Deriving Keys",
"indicator": "1",
"inputs": "Shared Secret, Key Length",
"name": "Key Derivation with SSH KDF",
"outputs": "SSH Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - SSH Derived Key: G,R",
"secFunImpl": "Key Derivation with SSH KDF"
},
{
"description": "Deriving Keys",
"indicator": "1",
"inputs": "Key Derivation Key",
"name": "Key Derivation with KBKDF",
"outputs": "KBKDF Derived Key",
"rolesSspAccess": "Crypto Officer - KBKDF Derived Key: G,R - Key Derivation Key: W,E",
"secFunImpl": "Key Derivation with KBKDF"
},
{
"description": "Deriving Keys",
"indicator": "1",
"inputs": "Shared Secret",
"name": "Key Derivation with KDA OneStep KDF",
"outputs": "KDA OneStep Derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KDA OneStep Derived Key: G,R",
"secFunImpl": "Key Derivation with KDA OneStep"
},
{
"description": "Encapsulation",
"indicator": "1",
"inputs": "ML-KEM Public Key",
"name": "Encapsulation",
"outputs": "Ciphertext, ML-KEM Shared Secret",
"rolesSspAccess": "Crypto Officer - ML-KEM Shared Secret: G,R,E - ML-KEM Public Key: W,E",
"secFunImpl": "Encapsulation/Decapsulation with ML-KEM"
},
{
"description": "Decapsulation",
"indicator": "1",
"inputs": "ML-KEM Private Key, Ciphertext",
"name": "Decapsulation",
"outputs": "ML-KEM Shared Secret",
"rolesSspAccess": "Crypto Officer - ML-KEM Shared Secret: G,R",
"secFunImpl": "Encapsulation/Decapsulation with ML-KEM"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "ML-KEM Private Key: W,E",
"secFunImpl": "-"
},
{
"description": "Zeroize SSP in volatile memory",
"indicator": "N/A",
"inputs": "SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES Key: Z - HMAC Key: Z - Entropy Input: Z - DRBG Seed: Z - DRBG Internal State (V, Key): Z - RSA Public Key: Z - RSA Private Key: Z - EC Public Key: Z - EC Private Key: Z - Shared Secret: Z - TLS Pre- Master Secret: Z - TLS Master Secret: Z - TLS Derived Key (AES/HMAC): Z - HKDF Derived",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Key: Z - SSH Derived Key: Z - PBKDF Derived Key: Z - Password: Z - Key Derivation Key: Z - KDA OneStep Derived Key: Z - KBKDF Derived Key: Z - ML-KEM Public Key: Z - ML-KEM Private Key: Z - EDDSA Private Key: Z - EDDSA Public Key: Z - ML-KEM Shared Secret: Z - Intermediate Key Generation Value: Z",
"secFunImpl": ""
},
{
"description": "Show status of the module state",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show the version of the module using awslc_version_string",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Version",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Initiate cryptographic algorithms self-tests and integrity test on- demand.",
"indicator": "N/A",
"inputs": "N/A",
"name": "On-Demand Self-test",
"outputs": "Pass or fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "KAS-ECC-SSC (Shared Secret Computation with EC Diffie- Hellman) Encryption/Decryption with AES Signature Generation with RSA Signature Generation with ECDSA Signature Generation with EDDSA Key Generation with RSA Key Generation with ECDSA Key Generation with EDDSA Key Generation with ML-KEM Signature Verification with ECDSA Signature Verification with EDDSA Signature Verification with RSA Key Verification with ECDSA Encapsulation/Decapsulation with ML-KEM Key Derivation with TLS KDF Key Derivation with SSH KDF Key Derivation with KDA HKDF Key Derivation with KDA OneStep Key Derivation with PBKDF"
},
{
"description": "Description",
"indicator": "Indicator",
"inputs": "Inputs Outputs",
"name": "Name",
"outputs": "Security Functions",
"rolesSspAccess": "",
"secFunImpl": "SSP Access"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "Key Derivation with KBKDF Message Digest with SHA Message Digest with SHAKE Random Number Generation with DRBG Message Authentication Generation with HMAC Message Authentication Generation with AES Authenticated Encryption/Decryption with AES CCM Authenticated Encryption/Decryption with AES GCM Authenticated Encryption/Decryption with AES KW/KWP Signature Verification with RSA (Legacy) Signature Verification with ECDSA (Legacy)",
"rolesSspAccess": "",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC-Encrypt (A6160)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Decrypt (A6160)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Encrypt (A6165)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Decrypt (A6165)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Encrypt (A6170)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Decrypt (A6170)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Encrypt (A6181)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Decrypt (A6181)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Encrypt (A6273)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Decrypt (A6273)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Encrypt (A6276)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC-Decrypt (A6276)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6274)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6274)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6275)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6275)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6277)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6277)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6161)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6161)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6162)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6162)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6163)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6163)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6164)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6164)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6166)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6166)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6167)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6167)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6168)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6168)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6169)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6169)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6171)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6171)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6172)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6172)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6173)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6173)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6174)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6174)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Encrypt (A6182)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Encrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM- Decrypt (A6182)",
"condition": "Module power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "Decrypt with 128-bit key, 96-bit (internal IV)",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6176)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6177)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6178)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6179)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6180)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6184)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6176)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6177)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6178)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6179)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6180)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6184)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6183)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6176)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6177)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6178)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6179)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6180)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6184)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6176)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6177)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6178)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6179)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6180)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6184)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6176)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6177)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6178)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6179)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6180)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6184)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6176)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6177)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6178)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6179)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6180)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6184)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6176)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6177)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6178)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6179)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6180)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6184)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6176)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6177)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6178)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6179)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6180)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6184)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6176)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6177)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6178)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6179)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6180)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6184)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6176)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6177)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6178)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6179)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6180)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6184)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6176)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6177)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6178)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6179)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6180)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6184)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6176)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6177)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6178)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6179)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6180)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6184)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6176)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6177)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6178)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6179)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6180)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6184)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6176)",
"condition": "Module power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6177)",
"condition": "Module power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6178)",
"condition": "Module power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6179)",
"condition": "Module power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6180)",
"condition": "Module power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6184)",
"condition": "Module power-on",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6278)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6279)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6176)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6177)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6178)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6179)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6180)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6184)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6176)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6177)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6178)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6179)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6180)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6184)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6176)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6177)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6178)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6179)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6180)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6184)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6176)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6177)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Encapsulate ciphertext; Encapsulate shared secret",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6178)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6179)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6180)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6184)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6278)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM EncapDecap (A6279)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; Encapsulate ciphertext; Encapsulate shared secret; Decapsulate non-rejection; Decapsulate implicit rejection",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6176)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6177)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6178)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6179)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6180)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6184)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "SHA-1 (A6278)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A6279)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6278)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6279)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6278)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6279)",
"condition": "Module power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A6181)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A6273)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A6276)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A8124)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A8123)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A8122)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A8121)",
"condition": "Module power-on",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256 bit keys, with DF, without PR",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6278)",
"condition": "First usage of key pair generation, signature generation, signature",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "verification or shared secret computation services",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6279)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6278)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6279)",
"condition": "First usage of key pair generation, signature generation, signature verification or shared secret computation services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256 with P-256",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6278)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigGen (A6279)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6278)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "EDDSA SigVer (A6279)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ED-25519",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6278)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6279)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6280)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A6278)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A6279)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6280)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6278)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6279)",
"condition": "First usage of key pair generation, signature generation or signature verification services",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6278)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A6279)",
"condition": "Module power-on",
"details": "Key based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6278)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A6279)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6278)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A6279)",
"condition": "Module power-on",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6176)",
"condition": "Module power-on",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6177)",
"condition": "Module power-on",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6178)",
"condition": "Module power-on",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6179)",
"condition": "Module power-on",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6180)",
"condition": "Module power-on",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6184)",
"condition": "Module power-on",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6278)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS (A6279)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6278)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6279)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6176)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6177)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6178)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6179)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6180)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6184)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6278)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen (A6279)",
"condition": "First usage of key pair generation, encapsulation or decapsulation services",
"details": "Encapsulation and Decapsulation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "(800, 1632) byte keys; KeyGen encapsulate; KeyGen decapsulate",
"type": "CAST"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6278)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "ML-KEM KeyGen PCT (A6279)",
"condition": "Key pair generation",
"details": "Encapsulation and Decapsulation",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "32-bytes shared secret",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6278)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "EDDSA KeyGen (A6279)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "ED-25519",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6279)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6278)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6280)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "PKCS#1 v1.5 with SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "SHA2-256 (A6176)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6177)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6178)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6179)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6180)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6184)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6278)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6279)",
"condition": "Module power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit message",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Pre- operational test failure; CAST failure; PCT failure",
"description": "The library is aborted with SIGABRT signal. Module is no longer operational the data output interface is inhibited",
"indicator": "Per-operational test failure: Error message is output (i.e., \"FIPS integrity test failed.\") on the stderr and then the module is aborted; Conditional test failure: For CAST failure, an error message indicating which KAT failed (e.g., \"* KAT failed\") is output on the stderr and then the module is aborted. Upon PCT or entropy source failure the module enters the error state (i.e., is aborted). The abort statement indicates that the module has been aborted.",
"name": "Error",
"recoveryMethod": "Module reset"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested.",
"name": "Approved Mode",
"statusIndicator": "Return value 1 from the API call sequence specified in section 4.3.",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested.",
"name": "Non-approved Mode",
"statusIndicator": "Return value 0 from the API call sequence specified in section 4.3.",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [
{
"caveat": "Allowed per IG 2.4.A",
"name": "MD5",
"use": "Message Digest used in TLS 1.0/1.1 KDF only"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES with OFB or CFB1, CFB8, CFB128 modes",
"use": "Encryption, Decryption (not CAVP tested)"
},
{
"name": "AES GCM, GCM, GMAC, XTS with keys not listed in Table 5",
"use": "Encryption, Decryption"
},
{
"name": "AES using aes_*_generic function",
"use": "Encryption, Decryption (not CAVP tested)"
},
{
"name": "RSA encryption primitive with PKCS#1 v1.5 and OAEP padding",
"use": "Encryption"
},
{
"name": "AES GMAC using aes_*_generic",
"use": "Message Authentication Generation (not CAVP tested)"
},
{
"name": "Curve secp256k1",
"use": "Signature Generation, Signature Verification, Shared Secret Computation"
},
{
"name": "Diffie Hellman",
"use": "Shared Secret Computation (not CAVP tested)"
},
{
"name": "HMAC-MD4, HMAC-MD5, HMAC-SHA-3, HMAC-RIPEMD-160",
"use": "Message Authentication Generation (not CAVP tested)"
},
{
"name": "MD4",
"use": "Message Digest"
},
{
"name": "MD5 (outside of TLS)",
"use": "Message Digest"
},
{
"name": "RIPEMD-160",
"use": "Message Digest"
},
{
"name": "RSA using RSA_generate_key_ex",
"use": "Key Generation (not complaint with FIPS186-5)"
},
{
"name": "ECDSA using EC_KEY_generate_key",
"use": "Key Generation (not complaint with FIPS186-5)"
},
{
"name": "RSA using keys less than 2048 bits",
"use": "Signature Generation"
},
{
"name": "SHA-1",
"use": "Signature Generation"
},
{
"name": "RSA using keys less than 1024 bits",
"use": "Signature Verification"
},
{
"name": "RSA without hashing",
"use": "Sign/Verify primitive operations"
},
{
"name": "TLS KDF using any SHA algorithms other than SHA2-256, SHA2- 384, SHA2-512; or TLS KDF using non-extended master secret",
"use": "Key Derivation"
},
{
"name": "RSA",
"use": "Key Encapsulation/Un-encapsulation (not compliant with SP 800-56BRev2)"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES with OFB or CFB1, CFB8, CFB128 modes AES GCM, GCM, GMAC, XTS with keys not listed in Table 5 AES using aes_*_generic function RSA encryption primitive with PKCS#1 v1.5 and OAEP padding AES GMAC using aes_*_generic",
"description": "Encryption",
"name": "Encryption",
"role": "CO"
},
{
"alg_accessed": "AES with OFB or CFB1, CFB8, CFB128 modes AES GCM, GCM, GMAC, XTS with keys not listed in Table 5 AES using aes_*_generic function AES GMAC using aes_*_generic",
"description": "Decryption",
"name": "Decryption",
"role": "CO"
},
{
"alg_accessed": "AES using aes_*_generic function HMAC-MD4, HMAC-MD5, HMAC-SHA-3, HMAC-RIPEMD- 160",
"description": "MAC computation",
"name": "Message Authentication Generation",
"role": "CO"
},
{
"alg_accessed": "MD4 MD5 (outside of TLS) RIPEMD-160",
"description": "Generating message digest",
"name": "Message Digest",
"role": "CO"
},
{
"alg_accessed": "RSA using keys less than 2048 bits RSA without hashing SHA-1",
"description": "Generating signatures",
"name": "Signature Generation",
"role": "CO"
},
{
"alg_accessed": "RSA using keys less than 1024 bits RSA without hashing",
"description": "Verifying signatures",
"name": "Signature Verification",
"role": "CO"
},
{
"alg_accessed": "RSA using RSA_generate_key_ex ECDSA using EC_KEY_generate_key",
"description": "Generating key pair",
"name": "Key Generation",
"role": "CO"
},
{
"alg_accessed": "Curve secp256k1 Diffie Hellman",
"description": "Calculating shared secret",
"name": "Shared Secret Computation",
"role": "CO"
},
{
"alg_accessed": "TLS KDF using any SHA algorithms other than SHA2-256, SHA2-384, SHA2-512; or TLS KDF using non-extended master secret",
"description": "Deriving TLS keys",
"name": "Key Derivation",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Encrypting a key",
"name": "Key Encapsulation",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Decrypting a key",
"name": "Key Un-encapsulation",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters for data.",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters for data.",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls.",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, error message.",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256 (A6176)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6177)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6178)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6179)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6180)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6184)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6278)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A6279)",
"details": "Integrity test for bcm.o",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle",
"method": "Free Cipher Handle",
"operatorId": "By calling the appropriate zeroization functions: OpenSSL_cleanse, EVP_CIPHER_CTX_cleanup, EVP_AEAD_CTX_zero, HMAC_CTX_cleanup, CTR_DRBG_clear,",
"rationale": "Memory occupied by SSPs is overwritten with zeros, which renders the SSP values irretrievable. The successful completion of the zeroization"
},
{
"description": "",
"method": "",
"operatorId": "RSA_free, EC_KEY_free, KEM_KEY_free, EVP_PKEY_free",
"rationale": "routine indicates that the zeroization procedure succeeded."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module.",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed. The successful completion of the removal of power from the module indicates that zeroization has completed."
},
{
"description": "Automatically zeroized when no longer needed",
"method": "Automatically",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeros, which renders the SSP values irretrievable. The successful completion of the running service indicates that zeroization has completed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Amazon Linux 2023 on Graviton4 on r8g.metal-24xl",
"swFwVersion": "AWS-LC FIPS 3.1.0"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA2-256",
"packageFileName": "bcm.o on Amazon Linux 2023 on Intel Xeon Platinum 8375C on c6i.metal",
"swFwVersion": "AWS-LC FIPS 3.1.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "r8g.metal- 24xl",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Graviton4 (ARMv9)",
"version": "AWS-LC FIPS 3.1.0"
},
{
"hardwarePlatform": "c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8375C (AES-NI)",
"version": "AWS-LC FIPS 3.1.0"
},
{
"hardwarePlatform": "r8g.metal- 24xl",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "Graviton4 (ARMv9)",
"version": "AWS-LC FIPS 3.1.0"
},
{
"hardwarePlatform": "c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "Intel Xeon Platinum 8375C (AES-NI)",
"version": "AWS-LC FIPS 3.1.0"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric",
"implName": "N/A",
"name": "Asymmetric Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 4, example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 2
},
"ECDSA": {
"ECDSA": 86
}
}
},
"certification_process": {},
"cipher_mode": {
"CCM": {
"CCM": 5
},
"GCM": {
"GCM": 17
},
"OFB": {
"OFB": 3
},
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"SSH": {
"SSH": 16
},
"TLS": {
"TLS": {
"TLS": 67,
"TLS 1.2": 3,
"TLS 1.3": 4
}
}
},
"crypto_scheme": {
"KEM": {
"KEM": 6
},
"MAC": {
"MAC": 19
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 2,
"P-224": 18,
"P-256": 68,
"P-384": 20,
"P-521": 20,
"secp256k1": 2
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#5298": 1
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 1,
"AES-128": 1,
"AES-192": 1,
"AES-256": 4,
"HMAC-SHA-1": 6,
"HMAC-SHA-3": 4,
"PKCS 1": 1,
"PKCS#1": 58,
"SHA-1": 31,
"SHA-3": 4,
"SHA2- 256": 3,
"SHA2- 384": 1,
"SHA2-224": 9,
"SHA2-256": 123,
"SHA2-384": 8,
"SHA2-512": 26,
"SHA3-224": 3,
"SHA3-256": 5,
"SHA3-384": 3,
"SHA3-512": 3
}
},
"fips_security_level": {
"Level": {
"Level 1": 1
}
},
"hash_function": {
"MD": {
"MD4": {
"MD4": 2
},
"MD5": {
"MD5": 3
}
},
"PBKDF": {
"PBKDF": 31,
"PBKDF2": 4
},
"RIPEMD": {
"RIPEMD-160": 2
},
"SHA": {
"SHA1": {
"SHA-1": 31
},
"SHA3": {
"SHA-3": 4,
"SHA3-224": 3,
"SHA3-256": 5,
"SHA3-384": 3,
"SHA3-512": 3
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {
"FIPS": {
"ML-KEM": 100
}
},
"randomness": {
"PRNG": {
"DRBG": 44
},
"RNG": {
"RBG": 3
}
},
"side_channel_analysis": {
"SCA": {
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140": 10,
"FIPS 140-3": 126,
"FIPS 180-4": 7,
"FIPS 186-4": 7,
"FIPS 186-5": 12,
"FIPS 198-1": 7,
"FIPS 202": 6,
"FIPS 203": 2,
"FIPS 3": 9,
"FIPS180-4": 1,
"FIPS186-4": 10,
"FIPS186-5": 124,
"FIPS198-1": 1,
"FIPS202": 2,
"FIPS203": 2
},
"NIST": {
"SP 800-108": 1,
"SP 800-132": 5,
"SP 800-135": 2,
"SP 800-38A": 3,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 2,
"SP 800-38E": 3,
"SP 800-38F": 2,
"SP 800-56A": 1,
"SP 800-56C": 2,
"SP 800-90A": 2
},
"PKCS": {
"PKCS 1": 1,
"PKCS#1": 29
},
"RFC": {
"RFC 4253": 1,
"RFC 5288": 1,
"RFC 6668": 1,
"RFC5288": 1,
"RFC8446": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 56,
"AES-128": 1,
"AES-192": 1,
"AES-256": 4
},
"CAST": {
"CAST": 399
}
},
"constructions": {
"MAC": {
"HMAC": 14,
"HMAC-RIPEMD-160": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 4
},
"IBM": {
"SSC": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"SHA2-256A6279",
"AES-GCMA6277",
"KDA OneStep SP800-56Cr2A6279",
"RSA SigVer (FIPS186-4)A6280",
"SHA3-256A6183",
"AES-ECBA6277",
"SHA2-512A6279",
"AES-GMACA6277",
"AES-CCMA6276",
"SHA2-512/256A6279",
"KDA HKDF Sp800-56Cr1A6279",
"RSA KeyGen (FIPS186-5)A6280",
"SHA2-512/224A6279",
"HMAC-SHA2-256A6279",
"ECDSA KeyVer (FIPS186-5)A6279",
"HMAC-SHA2-512A6279",
"KDF TLSA6279",
"SHAKE-128A6183",
"SHAKE-256A6183",
"SHA3-384A6183",
"HMAC-SHA-1A6279",
"RSA SigGen (FIPS186-5)A6280",
"ECDSA SigVer (FIPS186-4)A6279",
"HMAC-SHA2-224A6279",
"AES-KWPA6276",
"HMAC-SHA2-512/224A6279",
"AES-KWA6276",
"PBKDFA6279",
"SHA2-384A6279",
"HMAC-SHA2-512/256A6279",
"ML-KEM KeyGenA6279",
"HMAC-SHA2-384A6279",
"RSA SigVer (FIPS186-5)A6280",
"KAS-ECC-SSC Sp800-56Ar3A6279",
"SHA2-224A6279",
"SHA3-512A6183",
"ECDSA SigGen (FIPS186-5)A6279",
"Counter DRBGA8124",
"AES-CBCA6276",
"AES-CMACA6276",
"SHA-1A6279",
"EDDSA KeyGenA6279",
"EDDSA SigGenA6279",
"AES-XTS Testing Revision 2.0A6276",
"AES-CTRA6276",
"ECDSA KeyGen (FIPS186-5)A6279",
"EDDSA SigVerA6279",
"KDF SP800-108A6279",
"SHA3-224A6183",
"ML-KEM EncapDecapA6279",
"ECDSA SigVer (FIPS186-5)A6279",
"KDF SSHA6279"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A6169",
"#A6278",
"#A6175",
"#A6184",
"#A6276",
"#A6178",
"#A6280",
"#A6160",
"#A6181",
"#A6163",
"#A6179",
"#A6273",
"#A6161",
"#A6162",
"#A6279",
"#A6174",
"#A6182",
"#A8122",
"#A8124",
"#A6172",
"#A8121",
"#A6177",
"#A6166",
"#A6176",
"#A6180",
"#A6165",
"#A6171",
"#A6164",
"#A6167",
"#A6274",
"#A8123",
"#A6275",
"#A6183",
"#A6170",
"#A6277",
"#A6173",
"#A6168"
]
},
"policy_metadata": {
"/Author": "jjing",
"/CreationDate": "D:20260916115244-04\u002700\u0027",
"/Creator": "PScript5.dll Version 5.2.2",
"/ModDate": "D:20260916115244-04\u002700\u0027",
"/Producer": "Acrobat Distiller 26.0 (Windows)",
"/Title": "Microsoft Word - TID-11-2384-RBND-IS-2609101502_140sp.docx",
"pdf_file_size_bytes": 833257,
"pdf_hyperlinks": {
"_type": "Set",
"elements": []
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 115
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "83fa8a0904b375949d512b9e8c965e6cc3e61b85902280e70b70e88f51b6a02f",
"source_hash": "b6845fa215caad36bd35edaa44d042a298a28b62caf77913ffe93f86dcd98c2b",
"txt_hash": "462113f1c834d60418282ef6b84a3237035cad92782b93b000cb0e341b397005"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": null,
"date_sunset": "2031-06-02",
"description": "SafeLogic\u0027s CryptoComply Module based on AWS-LC FIPS is designed to provide FIPS 140-3 validated cryptographic functionality. It includes PQC support and is available for licensing.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "CryptoComply Module based on AWS-LC FIPS",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-09-16",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "SafeLogic, Inc.",
"vendor_url": "http://www.safelogic.com"
}
}