nShield F3 SCSI[1], nShield F3 SCSI Ultrasign[2], nShield F3 SCSI Ultrasign 32[3], payShield[4], and payShield Ultra[5]

Certificate #403

Webpage information

Status historical
Historical reason Moved to historical list due to sunsetting
Validation dates 18.03.2004 , 09.03.2006 , 15.03.2006
Standard FIPS 140-2
Security level 2
Type Hardware
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 3
  • EMI/EMC: Level 3
  • Design Assurance: Level 3
  • Self-Tests: Level 4
Description The nCipher nShield range of Hardware Security Modules improves the security of cryptographic keys, security sensitive software applications and increases server throughput of secure transactions in Public Key Infrastructure and other high integrity applications such as: Certificate Authorities, Registration Authorities, Government and Financial Institutions.
Version (Hardware) nC4032W-150[1], nC4032W-400[2], nC4132W-400[3], nC4232W-150[4] and nC4232W-400[5], Build Standard DR
Version (Firmware) 2.12.9-2
Vendor nCipher Corporation Ltd.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy

Symmetric Algorithms
AES, Twofish, Serpent, CAST, RC4, DES, 3DES, Blowfish, SEED, HMAC
Asymmetric Algorithms
DSA
Hash functions
SHA-1, SHA-256, SHA-384, SHA-512, MD5, RIPEMD, RIPEMD160
Schemes
MAC, Key Exchange
Protocols
SSL
Block cipher modes
ECB, CBC

Security level
level 2, level 3, Level 2, Level 3

Standards
FIPS 140-2, PKCS #8, PKCS #1, RFC2144, RFC2612

File metadata

Title Untitled Document
Creation date D:20060314093956
Modification date D:20060314094149Z
Pages 31
Creator FrameMaker 6.0
Producer Acrobat Distiller 4.05 for Windows

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 403,
  "dgst": "d26eae87829adde5",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Triple-DES#34",
        "AES#15",
        "Triple-DES MAC#34",
        "RSA#1",
        "DSA/SHA-1#11",
        "HMAC-SHA-1#11"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2.12.9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DSA": {
            "DSA": 17
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "ECB": {
          "ECB": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 2
          }
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 2
        },
        "MAC": {
          "MAC": 12
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1,
          "#11": 2,
          "#15": 1,
          "#24": 2,
          "#34": 2,
          "#8": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#1 HMAC": 1,
          "#24 DES": 1,
          "AES Certificate #15": 1,
          "Certificate #11 RSA": 1,
          "Certificate #15 DES": 1,
          "DES Certificate #24": 1,
          "DES Certificate #34": 1,
          "HMAC SHA-1": 1,
          "PKCS #1": 2,
          "PKCS #8": 4,
          "SHA-1": 12,
          "SHA-256": 3,
          "SHA-384": 3,
          "SHA-512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 2": 2,
          "Level 3": 2,
          "level 2": 10,
          "level 3": 8
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 3
          }
        },
        "RIPEMD": {
          "RIPEMD": 2,
          "RIPEMD160": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 12
          },
          "SHA2": {
            "SHA-256": 3,
            "SHA-384": 3,
            "SHA-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {},
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 9
        },
        "PKCS": {
          "PKCS #1": 1,
          "PKCS #8": 2
        },
        "RFC": {
          "RFC2144": 1,
          "RFC2612": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 7
          },
          "CAST": {
            "CAST": 14
          },
          "RC": {
            "RC4": 1
          },
          "Serpent": {
            "Serpent": 7
          },
          "Twofish": {
            "Twofish": 7
          }
        },
        "DES": {
          "3DES": {
            "3DES": 1
          },
          "DES": {
            "DES": 32
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 7
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 7
          },
          "SEED": {
            "SEED": 7
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20060314093956",
      "/Creator": "FrameMaker 6.0",
      "/ModDate": "D:20060314094149Z",
      "/Producer": "Acrobat Distiller 4.05 for Windows",
      "/Title": "Untitled Document",
      "pdf_file_size_bytes": 524660,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.ncipher.com"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 31
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "fe8530f24ab7c85909e522ccff8b080f461241a7561271a42d689b533127806f",
    "policy_txt_hash": "cb4a96be62f83ea36bd09bc2e25c97c59ca2807bc6596eff94d792fc8791a44c"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt403.pdf",
    "date_sunset": null,
    "description": "The nCipher nShield range of Hardware Security Modules improves the security of cryptographic keys, security sensitive software applications and increases server throughput of secure transactions in Public Key Infrastructure and other high integrity applications such as: Certificate Authorities, Registration Authorities, Government and Financial Institutions.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Roles, Services, and Authentication: Level 3",
      "Physical Security: Level 3",
      "EMI/EMC: Level 3",
      "Design Assurance: Level 3",
      "Self-Tests: Level 4"
    ],
    "fw_versions": "2.12.9-2",
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": "nC4032W-150[1], nC4032W-400[2], nC4132W-400[3], nC4232W-150[4] and nC4232W-400[5], Build Standard DR",
    "level": 2,
    "mentioned_certs": {},
    "module_name": "nShield F3 SCSI[1], nShield F3 SCSI Ultrasign[2], nShield F3 SCSI Ultrasign 32[3], payShield[4], and payShield Ultra[5]",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2004-03-18",
        "lab": "DOMUS",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2006-03-09",
        "lab": "",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2006-03-15",
        "lab": "",
        "validation_type": "Update"
      }
    ],
    "vendor": "nCipher Corporation Ltd.",
    "vendor_url": "http://www.nCipher.com"
  }
}