This page was not yet optimized for use on mobile devices.

Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.

	Ubuntu 20.04 Kernel Crypto API Cryptographic Module	Ubuntu 20.04 Kernel Crypto API Cryptographic Module
cert_id	4366	3928
dgst	37bf713760c5cbad	b74b161d6ec2fc6b
heuristics/algorithms	HMAC#A1385, RSA#A1446, DRBG#A1446, DRBG#A1375, SHS#A1383, Triple-DES#A389, DRBG#A1369, Triple-DES#A1384, AES#A1715, Triple-DES#A1445, AES#A1374, KTS#A1367, DRBG#A1368, Triple-DES#A1364, KTS#A1442, DRBG#A1382, Triple-DES#A1386, DRBG#A1442, Triple-DES#A1367, DRBG#A1378, AES#A1387, AES#A389, AES#A1377, AES#A1451, AES#A1716, AES#A1449, DRBG#A1374, Triple-DES#A1442, KTS#A1447, DRBG#A1384, AES#A1439, KTS#A1364, DRBG#A1447, KTS#A1382, AES#A1376, AES#A1365, DRBG#A1365, AES#A1441, HMAC#A1382, AES#A1379, SHS#A1448, Triple-DES#A1444, AES#A1364, Triple-DES#A1371, AES#A1373, DRBG#A1449, AES#A1440, AES#A1368, KTS#A1446, KTS#A1448, HMAC#A1447, AES#A1372, DRBG#A1377, AES#A1384, AES#A1371, HMAC#A1448, DRBG#A1448, KTS#A1383, AES#A1375, RSA#A1367, AES#A1450, SHS#A1447, DRBG#A389, Triple-DES#A1387, AES#A1366, SHS#A1367, AES#A1722, DRBG#A1450, SHS#A1384, DRBG#A1367, DRBG#A1383, DRBG#A1376, KTS#A1384, AES#A1655, DRBG#A1366, AES#A1452, KTS#A1445, AES#A1381, AES#A1367, Triple-DES#A1443, DRBG#A1655, DRBG#A1452, AES#A1383, RSA#A1447, SHS#A389, RSA#A1384, DRBG#A1364, RSA#A1448, SHS#A1382, AES#A1654, HMAC#A1367, AES#A1386, Triple-DES#A1372, AES#A1378, SHA-3#A1385, HMAC#A1446, AES#A1380, SHS#A1446, AES#A1369, DRBG#A1654, HMAC#A1383, AES#A1382, KTS#A389, HMAC#A1384, DRBG#A1451, DRBG#A1445	Triple-DES#A642, DRBG#A644, AES#A628, AES#A644, Triple-DES#A620, Triple-DES#A622, DRBG#A628, AES#A624, KTS#A616, AES#A638, SHS#A617, Triple-DES#A641, DRBG#A629, DRBG#A638, SHS#A644, DRBG#A637, HMAC#A616, HMAC#A617, AES#A629, HMAC#A618, AES#A630, DRBG#A630, Triple-DES#A621, AES#A634, DRBG#A639, RSA#A644, KTS#A622, DRBG#A635, DRBG#A622, AES#A632, AES#A635, HMAC#A644, AES#A640, SHS#A616, AES#A623, Triple-DES#A619, DRBG#A619, Triple-DES#A644, DRBG#A626, SHA-3#A643, AES#A633, RSA#A616, AES#A625, AES#A626, RSA#A617, AES#A627, KTS#A644, AES#A641, DRBG#A618, DRBG#A617, SHS#A618, AES#A637, DRBG#A616, KTS#A618, HMAC#A643, KTS#A617, DRBG#A636, AES#A631, RSA#A618, KTS#A619, AES#A636, DRBG#A631, AES#A639, DRBG#A627, AES#A642
heuristics/cpe_matches	{}	{}
heuristics/direct_transitive_cves	{}	{}
heuristics/extracted_versions	20.04	20.04
heuristics/indirect_transitive_cves	{}	{}
heuristics/module_processed_references/directly_referenced_by	{}	4046
heuristics/module_processed_references/directly_referencing	{}	{}
heuristics/module_processed_references/indirectly_referenced_by	{}	4046
heuristics/module_processed_references/indirectly_referencing	{}	{}
heuristics/module_prunned_references	{}	{}
heuristics/policy_processed_references/directly_referenced_by	{}	4126, 4132, 4127, 4046
heuristics/policy_processed_references/directly_referencing	{}	{}
heuristics/policy_processed_references/indirectly_referenced_by	{}	4126, 4127, 4132, 4046
heuristics/policy_processed_references/indirectly_referencing	{}	{}
heuristics/policy_prunned_references	{}	{}
heuristics/related_cves	{}	{}
heuristics/verified_cpe_matches	{}	{}
pdf_data/keywords/fips_cert_id	Cert: #1: 1
pdf_data/keywords/fips_security_level	Level: Level 1: 3 level 1: 3	Level: Level 1: 3 level 1: 2
pdf_data/keywords/fips_certlike	Certlike: AES key 128, 192: 1 AES-128: 14 AES-192: 13 AES-256: 14 DES5: 8 HMAC- SHA3: 2 HMAC-SHA-1: 2 HMAC-SHA-224: 2 HMAC-SHA-256: 2 HMAC-SHA-384: 2 HMAC-SHA-512: 8 PKCS #1: 2 PKCS#1: 4 SHA-1: 44 SHA-224: 16 SHA-256: 46 SHA-384: 42 SHA-512: 38 SHA-512 112: 3 SHA-512 2048: 3 SHA3: 5 SHA3-224: 6 SHA3-256: 7 SHA3-384: 7 SHA3-512: 5 SHA3-512 2048: 2	Certlike: AES key 128, 192: 1 AES-128: 7 AES-192: 6 AES-256: 6 HMAC- SHA-512: 1 HMAC- SHA3: 1 HMAC-SHA-1: 2 HMAC-SHA-224: 2 HMAC-SHA-256: 2 HMAC-SHA-384: 2 HMAC-SHA-512: 6 PKCS#1: 4 SHA-1: 24 SHA-224: 8 SHA-256: 26 SHA-384: 22 SHA-512: 21 SHA-512 112: 1 SHA-512 2048: 2 SHA3: 3 SHA3-224: 4 SHA3-256: 4 SHA3-384: 4 SHA3-512: 3 SHA3-512 2048: 1
pdf_data/keywords/vendor
pdf_data/keywords/eval_facility	atsec: atsec: 54	atsec: atsec: 47
pdf_data/keywords/symmetric_crypto	AES_competition: AES: AES: 76 AES-: 3 AES-128: 14 AES-192: 13 AES-256: 14 DES: 3DES: TDEA: 1 Triple-DES: 46 DES: DES: 4 constructions: MAC: CMAC: 19 HMAC: 38 HMAC-SHA-224: 1 HMAC-SHA-256: 1 HMAC-SHA-384: 1 HMAC-SHA-512: 4	AES_competition: AES: AES: 50 AES-: 1 AES-128: 7 AES-192: 6 AES-256: 6 DES: 3DES: TDEA: 1 Triple-DES: 34 DES: DES: 5 constructions: MAC: CMAC: 11 HMAC: 31 HMAC-SHA-224: 1 HMAC-SHA-256: 1 HMAC-SHA-384: 1 HMAC-SHA-512: 3
pdf_data/keywords/asymmetric_crypto	FF: DH: Diffie-Hellman: 5 DSA: DSA: 1	FF: DH: Diffie-Hellman: 5 DSA: DSA: 1
pdf_data/keywords/pq_crypto
pdf_data/keywords/hash_function	SHA: SHA1: SHA-1: 44 SHA2: SHA-224: 16 SHA-256: 46 SHA-384: 42 SHA-512: 44 SHA3: SHA3: 6 SHA3-224: 7 SHA3-256: 7 SHA3-384: 7 SHA3-512: 7	SHA: SHA1: SHA-1: 24 SHA2: SHA-224: 8 SHA-256: 26 SHA-384: 22 SHA-512: 24 SHA3: SHA3: 4 SHA3-224: 4 SHA3-256: 4 SHA3-384: 4 SHA3-512: 4
pdf_data/keywords/crypto_scheme	KA: Key Agreement: 2 KEX: Key Exchange: 2 MAC: MAC: 18	KA: Key Agreement: 2 KEX: Key Exchange: 2 MAC: MAC: 8
pdf_data/keywords/crypto_protocol	IKE: IKE: 1 IKEv2: 1 IPsec: IPsec: 5	IKE: IKE: 1 IKEv2: 1 IPsec: IPsec: 3
pdf_data/keywords/randomness	PRNG: DRBG: 29 RNG: RNG: 2	PRNG: DRBG: 22 RNG: RNG: 4
pdf_data/keywords/cipher_mode	CBC: CBC: 19 CCM: CCM: 10 CTR: CTR: 18 ECB: ECB: 23 GCM: GCM: 29 OFB: OFB: 6 XTS: XTS: 12	CBC: CBC: 12 CCM: CCM: 7 CTR: CTR: 11 ECB: ECB: 12 GCM: GCM: 20 OFB: OFB: 2 XTS: XTS: 8
pdf_data/keywords/ecc_curve
pdf_data/keywords/crypto_engine
pdf_data/keywords/tls_cipher_suite
pdf_data/keywords/crypto_library
pdf_data/keywords/vulnerability
pdf_data/keywords/side_channel_analysis
pdf_data/keywords/device_model
pdf_data/keywords/tee_name
pdf_data/keywords/os_name
pdf_data/keywords/cplc_data
pdf_data/keywords/ic_data_group
pdf_data/keywords/standard_id	FIPS: FIPS 140-2: 62 FIPS PUB 140-2: 2 FIPS140-2: 1 FIPS180-4: 13 FIPS186-4: 4 FIPS197: 22 FIPS198-1: 12 FIPS202: 2 NIST: SP 800-38F: 2 SP 800-57: 1 SP 800-90A: 1 SP 800-90B: 2 PKCS: PKCS #1: 1 PKCS#1: 2 RFC: RFC4106: 4 RFC6071: 1 RFC7296: 1 X509: X.509: 1	FIPS: FIPS 140-2: 54 FIPS PUB 140-2: 2 FIPS140-2: 1 FIPS180-4: 6 FIPS186-4: 4 FIPS197: 10 FIPS198-1: 6 FIPS202: 1 NIST: SP 800-38F: 2 SP 800-57: 1 PKCS: PKCS#1: 2 RFC: RFC4106: 3 RFC6071: 1 RFC7296: 1 X509: X.509: 1
pdf_data/keywords/javacard_version
pdf_data/keywords/javacard_api_const
pdf_data/keywords/javacard_packages
pdf_data/keywords/certification_process
pdf_data/policy_metadata	/Author: Alejandro Fabio Masino /CreationDate: D:20220912221359+00'00' /Creator: Microsoft Word /ModDate: D:20220912221359+00'00' /Title: FIPS 140-2 Non-Proprietary Security Policy pdf_file_size_bytes: 820271 pdf_hyperlinks: https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13849, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13855, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13858, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13924, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13862, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13925, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13931, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13856, http://csrc.nist.gov/publications/nistpubs/800-67-Rev1/SP-800-67-Rev1.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13921, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=12385, http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf, http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf, http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13869, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13857, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13851, http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13854, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14221, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14227, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13850, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13868, http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13870, http://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf, https://tools.ietf.org/html/rfc6071, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13865, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14220, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13926, http://csrc.nist.gov/groups/STM/cmvp/documents/fips140-2/FIPS1402IG.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13928, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13920, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13847, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=34264, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13863, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=34263, http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13848, http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar1.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13860, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13867, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14036, https://tools.ietf.org/html/rfc7296, http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13866, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13929, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14037, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13932, http://www.chronox.de/crypto-API/crypto/architecture.html, http://www.ietf.org/rfc/rfc3447.txt, mailto:[email protected], http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13930, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13933, http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13923, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13927, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13859, https://tools.ietf.org/html/rfc4106, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13861, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13922, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=33975, https://www.ubuntu.com/contact-us, http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13864, https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13852, http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf pdf_is_encrypted: False pdf_number_of_pages: 52	/CreationDate: D:20210430190501Z00'00' /Creator: Word /ModDate: D:20210430190501Z00'00' /Producer: macOS Version 10.15.7 (Build 19H524) Quartz PDFContext /Title: Microsoft Word - UbuntuKernelCryptoAPI-SecurityPolicy_v.1.1.doc pdf_file_size_bytes: 802283 pdf_hyperlinks: {} pdf_is_encrypted: False pdf_number_of_pages: 45
state/module_download_ok	True	True
state/module_extract_ok	True	True
state/policy_convert_garbage	False	False
state/policy_convert_ok	True	True
state/policy_download_ok	True	True
state/policy_extract_ok	True	True
state/policy_pdf_hash	Different	Different
state/policy_txt_hash	Different	Different
web_data/caveat	When operated in FIPS mode. The module generates random strings whose strengths are modified by available entropy	When operated in FIPS mode. The module generates random strings whose strengths are modified by available entropy
web_data/certificate_pdf_url	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2022_051222_0640_signed.pdf	https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2021_010621_0658.pdf
web_data/date_sunset	21.09.2026	18.05.2026
web_data/description	The Ubuntu 20.04 Kernel Crypto API module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.	The Ubuntu 20.04 Kernel Crypto API module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.
web_data/embodiment	Multi-Chip Stand Alone	Multi-Chip Stand Alone
web_data/exceptions	Physical Security: N/A, Mitigation of Other Attacks: N/A	Physical Security: N/A, Mitigation of Other Attacks: N/A
web_data/fw_versions	[]	[]
web_data/historical_reason	None	None
web_data/hw_versions	[]	[]
web_data/level	1	1
web_data/mentioned_certs
web_data/module_name	Ubuntu 20.04 Kernel Crypto API Cryptographic Module	Ubuntu 20.04 Kernel Crypto API Cryptographic Module
web_data/module_type	Software	Software
web_data/revoked_link	None	None
web_data/revoked_reason	None	None
web_data/standard	FIPS 140-2	FIPS 140-2
web_data/status	active	active
web_data/sw_versions	3.1	3.0
web_data/tested_conf	Ubuntu 20.04 LTS 64-bit running on IBM z15 with IBM z15 with PAI, Ubuntu 20.04 LTS 64-bit running on IBM z15 with IBM z15 without PAI (single-user mode), Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU with PAA, Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU without PAA	Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU with PAA, Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU without PAA (single-user mode), ,
web_data/validation_history	date: 14.11.2022 lab: ATSEC INFORMATION SECURITY CORP validation_type: Initial	date: 19.05.2021 lab: ATSEC INFORMATION SECURITY CORP validation_type: Initial
web_data/vendor	Canonical Ltd.	Canonical Ltd.
web_data/vendor_url	http://www.canonical.com	http://www.canonical.com