Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
Cohesity FIPS Object Module for OpenSSL
Cohesity FIPS Object Module for OpenSSL
cert_id 2676 4000
dgst 914a319c0ac806f2 b090147020e03353
heuristics/algorithms ECDSA#873, SHS#4353, HMAC#3591, RSA#2027, SHS#3271, AES#5426, DSA#1395, Triple-DES#2176, CVL#1876, CVL#796, AES#3967, Triple-DES#2724, DSA#1081, RSA#2906, ECDSA#1442, DRBG#1162, HMAC#2585, DRBG#2117 CVL#C1318, Triple-DES#C1318, AES#C1318, ECDSA#C1318, SHS#C1318, DSA#C1318, DRBG#C1318, RSA#C1318, HMAC#C1318
heuristics/module_processed_references/directly_referencing 2398 {}
heuristics/module_processed_references/indirectly_referencing 2398 {}
heuristics/module_prunned_references 2398 {}
pdf_data/keywords/fips_cert_id
  • Cert:
    • # 1876: 1
    • # 796: 1
pdf_data/keywords/fips_certlike
  • Certlike:
    • AES 128/ 192/256: 2
    • AES 128/192/256: 2
    • AES, 256: 1
    • DRBG3: 1
    • DRBG6: 1
    • PKCS#1: 2
    • SHA- 1: 2
    • SHA- 1, 224: 1
    • SHA1: 15
    • SHA1, 224: 2
    • SHA224: 1
    • SHA256: 4
    • SHA384: 1
    • SHA512: 2
  • Certlike:
    • AES 128/192/256: 1
    • AES GCM3: 1
    • AES, 256: 1
    • AES-128: 1
    • AES-128 128: 1
    • AES-192: 1
    • AES-256: 1
    • AES-256 256: 1
    • DRBG1: 1
    • HMAC SHA-1: 1
    • HMAC-SHA-1: 6
    • HMAC-SHA1: 2
    • PKCS#1: 2
    • SHA-1: 8
    • SHA-1 128: 1
    • SHA-2: 5
    • SHA-2 (224: 2
    • SHA-224: 1
    • SHA-256: 5
    • SHA-384: 3
    • SHA-512: 2
    • SHA-512 256: 1
pdf_data/keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 23
  • DES:
    • 3DES:
      • TDEA: 1
      • Triple-DES: 8
  • constructions:
    • MAC:
      • CMAC: 18
      • HMAC: 9
  • AES_competition:
    • AES:
      • AES: 20
      • AES-: 1
      • AES-128: 2
      • AES-192: 2
      • AES-256: 2
  • DES:
    • 3DES:
      • TDEA: 1
      • Triple-DES: 10
  • constructions:
    • MAC:
      • CMAC: 16
      • HMAC: 6
pdf_data/keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 5
    • ECDSA:
      • ECDSA: 17
  • FF:
    • DH:
      • DH: 9
    • DSA:
      • DSA: 17
  • ECC:
    • ECC:
      • ECC: 3
    • ECDH:
      • ECDH: 1
    • ECDSA:
      • ECDSA: 15
  • FF:
    • DH:
      • DH: 6
      • Diffie-Hellman: 5
    • DSA:
      • DSA: 16
pdf_data/keywords/hash_function
  • SHA:
    • SHA1:
      • SHA1: 17
    • SHA2:
      • SHA224: 1
      • SHA256: 4
      • SHA384: 1
      • SHA512: 2
  • SHA:
    • SHA1:
      • SHA-1: 9
    • SHA2:
      • SHA-2: 7
      • SHA-224: 2
      • SHA-256: 5
      • SHA-384: 3
      • SHA-512: 3
pdf_data/keywords/crypto_scheme
  • KA:
    • Key Agreement: 2
    • Key agreement: 2
  • KA:
    • Key Agreement: 1
pdf_data/keywords/crypto_protocol
  • TLS:
    • TLS:
      • TLS: 1
pdf_data/keywords/randomness
  • PRNG:
    • DRBG: 22
  • RNG:
    • RNG: 3
  • PRNG:
    • DRBG: 19
pdf_data/keywords/cipher_mode
  • CBC:
    • CBC: 4
  • CCM:
    • CCM: 6
  • CFB:
    • CFB: 4
  • CTR:
    • CTR: 4
  • ECB:
    • ECB: 3
  • GCM:
    • GCM: 7
  • OFB:
    • OFB: 2
  • XTS:
    • XTS: 8
  • CBC:
    • CBC: 3
  • CCM:
    • CCM: 3
  • CFB:
    • CFB: 1
  • CTR:
    • CTR: 1
  • ECB:
    • ECB: 3
  • GCM:
    • GCM: 7
  • OFB:
    • OFB: 1
  • XTS:
    • XTS: 4
pdf_data/keywords/ecc_curve
  • NIST:
    • B-163: 5
    • B-233: 4
    • B-283: 4
    • B-409: 4
    • B-571: 4
    • K-163: 5
    • K-233: 5
    • K-283: 4
    • K-409: 4
    • K-571: 3
    • P-192: 10
    • P-224: 10
    • P-256: 8
    • P-384: 8
    • P-521: 8
pdf_data/keywords/crypto_library
  • OpenSSL:
    • OpenSSL: 1
  • OpenSSL:
    • OpenSSL: 17
pdf_data/keywords/standard_id
  • FIPS:
    • FIPS 140-2: 5
    • FIPS 186-4: 1
    • FIPS 197: 3
    • FIPS 198-1: 2
  • NIST:
    • SP 800-90A: 1
  • PKCS:
    • PKCS#1: 1
  • FIPS:
    • FIPS 140-2: 12
    • FIPS 180-4: 2
    • FIPS 186-2: 5
    • FIPS 186-4: 8
    • FIPS 197: 2
    • FIPS 198: 1
    • FIPS 198-1: 1
  • NIST:
    • SP 800-135: 1
    • SP 800-38A: 1
    • SP 800-38B: 3
    • SP 800-38C: 2
    • SP 800-38D: 3
    • SP 800-38E: 2
    • SP 800-56A: 1
    • SP 800-56C: 1
    • SP 800-89: 1
    • SP 800-90A: 1
  • PKCS:
    • PKCS#1: 1
  • RFC:
    • RFC 5288: 1
pdf_data/policy_metadata
state/policy_pdf_hash Different Different
state/policy_txt_hash Different Different
web_data/caveat When installed, protected and initialized as assumed by the Crypto Officer role and as specified in the provided Security Policy. Installation and protection shall be completed as specified in Appendix A of the provided Security Policy. Initialization shall be invoked as per Section 4 of the provided Security Policy. Any deviation from specified protection, installation and initialization procedures will result in a non FIPS 140-2 compliant module. This validation entry is a non-security relevant modification to Cert. #2398 When operated in FIPS mode. No assurance of the minimum strength of generated keys.
web_data/certificate_pdf_url https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertJuly2016.pdf https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2021_010921_0733.pdf
web_data/description The Cohesity FIPS Object Module for OpenSSL is a general purpose cryptographic module compiled from the source code for the OpenSSL FIPS Object Module. It is incorporated into the CS2000 family of Cohesity Storage Systems. The KeyPair FIPS Object Module is incorporated into Cohesity OS that is supported on various hardware models.
web_data/mentioned_certs
  • 2398: 1
web_data/sw_versions 1.0.1 [1] and 1.0.2 [2] 1.0
web_data/tested_conf CentOS 7.2 running on a Cohesity CS2500 (single-user mode), CentOS 7 running on HPE ProLiant DL60 Gen9 with Intel Xeon E5-2609 with PAA, CentOS 7 running on HPE ProLiant DL60 Gen9 with Intel Xeon E5-2609 without PAA (single-user mode)
web_data/validation_history
  • date: 11.07.2016
  • lab: LEIDOS CSTL
  • validation_type: Initial
  • date: 03.08.2021
  • lab: ACUMEN SECURITY, LLC
  • validation_type: Initial
web_data/vendor Cohesity, Inc. Cohesity Inc.
web_data/vendor_url http://www.cohesity.com https://www.cohesity.com/