{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "cc1acd99ace85a8a", "cert_id": 5350, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Rocky Linux 8 and 9 GnuTLS Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-23", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "https://ciq.com/", "vendor": "Ctrl IQ, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A", "Mitigation of other attacks: N/A"], "embodiment": "MultiChipStand", "description": "Rocky Linux 8 and 9 GnuTLS Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-22", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3, "level 1": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 10, "HMAC-SHA- 1": 8, "SHA2-224": 14, "SHA2-256": 23, "SHA2- 384": 3, "SHA2-512": 14, "SHA2-384": 13, "SHA-1": 9, "SHA3-224": 9, "SHA3-256": 10, "SHA3-384": 9, "SHA3-512": 9, "SHA-3": 5, "SHA2- 256": 6, "SHA-256": 4, "PKCS#1": 2, "AES-256": 2, "Diffie-Hellman 2048": 1}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 89}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 2, "AES": 59, "AES-": 13}, "CAST": {"CAST": 237}, "RC": {"RC2": 2, "RC4": 2}}, "DES": {"DES": {"DES": 2}, "3DES": {"Triple-DES": 4}}, "djb": {"ChaCha": {"ChaCha20": 2}, "Salsa": {"Salsa20": 2}, "Poly": {"Poly1305": 2}}, "miscellaneous": {"Camellia": {"Camellia": 2}}, "constructions": {"MAC": {"HMAC": 28, "CMAC": 5}}}, "asymmetric_crypto": {"ECC": {"ECDSA": {"ECDSA": 98}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 53, "DH": 1}, "DSA": {"DSA": 5}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 9}, "SHA2": {"SHA-256": 4}, "SHA3": {"SHA3-224": 9, "SHA3-256": 10, "SHA3-384": 9, "SHA3-512": 9, "SHA-3": 5}}, "MD": {"MD5": {"MD5": 2}}, "PBKDF": {"PBKDF": 31, "PBKDF2": 3}}, "crypto_scheme": {"MAC": {"MAC": 37}, "KA": {"Key agreement": 5, "Key Agreement": 2}}, "crypto_protocol": {"TLS": {"TLS": {"TLS": 64, "TLS v1.2": 15, "TLS 1.2": 6, "TLSv1.3": 6, "TLS v1.3": 1, "TLS 1.3": 1}}}, "randomness": {"PRNG": {"DRBG": 32}, "RNG": {"RNG": 2, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 1}, "CTR": {"CTR": 1}, "CFB": {"CFB": 1}, "OFB": {"OFB": 1}, "GCM": {"GCM": 14}, "CCM": {"CCM": 4}, "XTS": {"XTS": 6}}, "ecc_curve": {"NIST": {"P-256": 54, "P-384": 26, "P-521": 10, "P-512": 7}}, "crypto_engine": {}, "tls_cipher_suite": {"TLS": {"TLS_DH_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_DH_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_DH_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_DH_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1, "TLS_PSK_WITH_AES_128_CBC_SHA": 1, "TLS_PSK_WITH_AES_256_CBC_SHA": 1, "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_DH_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_DH_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256": 1, "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384": 1, "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256": 1, "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384": 1, "TLS_DHE_RSA_WITH_AES_128_CCM": 1, "TLS_DHE_RSA_WITH_AES_256_CCM": 1, "TLS_DHE_RSA_WITH_AES_128_CCM_8": 1, "TLS_DHE_RSA_WITH_AES_256_CCM_8": 1}}, "crypto_library": {"GnuTLS": {"GnuTLS": 93}}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {"AMD": {"PSP": 9}, "IBM": {"SSC": 4}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 98, "FIPS PUB 140-3": 2, "FIPS186-5": 39, "FIPS 186-5": 9, "FIPS 198-1": 5, "FIPS 180-4": 5, "FIPS 202": 4, "FIPS140-3": 1, "FIPS180-4": 1, "FIPS197": 1, "FIPS198-1": 1, "FIPS202": 1}, "NIST": {"SP 800-38A": 3, "SP 800-38C": 1, "SP 800-38B": 1, "SP 800-38D": 2, "SP 800-38E": 2, "SP 800-90A": 5, "SP 800-56A": 3, "SP 800-56C": 1, "SP 800-132": 4, "SP 800-135": 1, "SP 800-52": 2, "SP 800-133": 2, "SP 800-131A": 1}, "PKCS": {"PKCS#1": 1}, "RFC": {"RFC7627": 8, "RFC5288": 5, "RFC8446": 5, "RFC3268": 4, "RFC5246": 4, "RFC4279": 2, "RFC4492": 8, "RFC5289": 16, "RFC6655": 4}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 1012507, "pdf_is_encrypted": false, "pdf_number_of_pages": 88, "/Author": "Christopher Dickerman", "/CreationDate": "D:20260622082145-04'00'", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "1978d42c-099a-4b7b-a1d2-0f6546975ed3", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-06-22T12:16:19Z", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1", "/ModDate": "D:20260622082146-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf", "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "http://www.atsec.com/", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf", "https://www.ietf.org/rfc/rfc3447.txt", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38b.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf", "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/Draft%20FIPS-140-3-CMVP%20Management%20Manual%20v1.2%20%5BDec%2023%202022%5D.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://doi.org/10.6028/NIST.FIPS.140-3"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA2-512A6484", "HMAC-SHA2-512A6484", "HMAC-SHA-1A6484", "SHA3-384A6486", "AES-GCMA6484", "PBKDFA6484", "SHA-1A6484", "AES-CFB8A6487", "ECDSA SigVer (FIPS186-5)A6484", "HMAC-SHA2-256A6484", "RSA SigGen (FIPS186-5)A6484", "SHA2-224A6484", "AES-CCMA6476", "Safe Primes Key GenerationA6484", "Counter DRBGA6484", "RSA KeyGen (FIPS186-5)A6484", "AES-CMACA6484", "RSA SigVer (FIPS186-5)A6484", "SHA2-384A6484", "ECDSA KeyVer (FIPS186-5)A6484", "ECDSA SigGen (FIPS186-5)A6484", "SHA3-224A6486", "TLS v1.2 KDF RFC7627A6484", "KAS-FFC-SSC Sp800-56Ar3A6484", "SHA3-512A6486", "HMAC-SHA2-224A6484", "AES-GMACA6484", "ECDSA KeyGen (FIPS186-5)A6484", "KAS-ECC-SSC Sp800-56Ar3A6484", "HMAC-SHA2-384A6484", "AES-CBCA6484", "SHA3-256A6486", "KDA HKDF Sp800-56Cr1A6483", "AES-ECBA6533", "SHA2-256A6484", "AES-XTS Testing Revision 2.0A6485"]}, "extracted_versions": {"_type": "Set", "elements": ["8", "9"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "6032ddbbc1fc45374a355d829b602f45c15c36fe42c9579d18043fa51323f2ac", "txt_hash": "35522c73da87fa93a649b7fb50350f0967f07ab98d68776cad02bc8f483cf60a", "json_hash": null}}}