This page was not yet optimized for use on mobile devices.
VMware OpenSSL FIPS Object Module
Certificate details
| Certificate ID | #2839 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 14.02.2017 , 22.02.2017 , 10.04.2018 , 31.10.2018 |
| Standard | FIPS 140-2 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates cryptographic keys whose strengths are modified by available entropy |
| Exceptions |
|
| Description | The VMware OpenSSL FIPS Object Module provides cryptographic functions to various VMware applications. |
| Tested configurations |
|
| Vendor | VMware, Inc. http://www.vmware.com |
| Lab | CGI Information Systems & Management Consultants Inc |
| Algorithms | |
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, DES, TDES, Triple-DES, HMAC, CMAC, CBC-MACAsymmetric Algorithms
RSA 512, ECDSA, ECC, DH, Diffie-Hellman, DSAHash functions
SHA-1, SHA1, SHA-256, SHA-224, SHA-384, SHA-512, SHA512, SHA-2Schemes
Key agreement, Key AgreementRandomness
PRNG, DRBG, RNGLibraries
OpenSSLElliptic Curves
P-224, P-384, P-192, P-256, P-521, K-233, K-571, B-283, B-571, B-163, K-409Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSVendor
Microsoft, Microsoft Corporation, CiscoSecurity level
Level 1Standards
FIPS 140-2, FIPS 197, FIPS 180-3, FIPS 198, FIPS 186-2, FIPS 186-4, FIPS 186-3, FIPS 1402, SP 800-90, SP 800-67, SP 800-38B, SP 800-38C, SP 800-38D, SP 800-38E, SP 800-56A, SP 800-56B, SP 800-90A, PKCS#1Cross-references
Incoming- 3356 - historical - VMware's Linux Cryptographic Module
Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 2839,
"dgst": "d7cee86db1db18fe",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"Triple-DES#2261",
"#943",
"HMAC#2710",
"#949",
"#1254",
"RSA#2251",
"#3407",
"#1123",
"#4137",
"DSA#1123",
"AES#4137",
"#2710",
"#2251",
"ECDSA#949",
"SHS#3407",
"#2261",
"DRBG#1254",
"CVL#943"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"-"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"3356",
"3875",
"3686",
"3542"
]
},
"directly_referencing": null,
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"3356",
"3875",
"3686",
"3542"
]
},
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"3356"
]
},
"directly_referencing": null,
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"3356"
]
},
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 45,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 5
},
"ECDSA": {
"ECDSA": 20
}
},
"FF": {
"DH": {
"DH": 8,
"Diffie-Hellman": 2
},
"DSA": {
"DSA": 24
}
},
"RSA": {
"RSA 512": 1
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 4
},
"CCM": {
"CCM": 5
},
"CFB": {
"CFB": 4
},
"CTR": {
"CTR": 3
},
"ECB": {
"ECB": 6
},
"GCM": {
"GCM": 6
},
"OFB": {
"OFB": 2
},
"XTS": {
"XTS": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 57
}
},
"crypto_protocol": {},
"crypto_scheme": {
"KA": {
"Key Agreement": 2,
"Key agreement": 2
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"B-163": 2,
"B-283": 2,
"B-571": 2,
"K-233": 3,
"K-409": 1,
"K-571": 1,
"P-192": 4,
"P-224": 4,
"P-256": 2,
"P-384": 2,
"P-521": 2
}
},
"eval_facility": {},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES 128/192/256": 2,
"DRBG 8": 1,
"DSA (1024": 2,
"HMAC SHA-1": 16,
"PKCS#1": 4,
"RSA 512": 1,
"SHA- 1, 224": 1,
"SHA- 224": 3,
"SHA- 256": 1,
"SHA-1": 22,
"SHA-1, 224": 21,
"SHA-1, 256": 1,
"SHA-2 (224": 2,
"SHA-224": 19,
"SHA-256": 9,
"SHA-384": 3,
"SHA-512": 1,
"SHA1": 1,
"SHA512": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 44,
"SHA1": 1
},
"SHA2": {
"SHA-2": 2,
"SHA-224": 19,
"SHA-256": 9,
"SHA-384": 3,
"SHA-512": 1,
"SHA512": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 14,
"PRNG": 2
},
"RNG": {
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 19,
"FIPS 1402": 1,
"FIPS 180-3": 1,
"FIPS 186-2": 11,
"FIPS 186-3": 1,
"FIPS 186-4": 19,
"FIPS 197": 1,
"FIPS 198": 1
},
"NIST": {
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 1,
"SP 800-38E": 1,
"SP 800-56A": 2,
"SP 800-56B": 1,
"SP 800-67": 1,
"SP 800-90": 1,
"SP 800-90A": 3
},
"PKCS": {
"PKCS#1": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 27
}
},
"DES": {
"3DES": {
"TDES": 7,
"Triple-DES": 10
},
"DES": {
"DES": 1
}
},
"constructions": {
"MAC": {
"CBC-MAC": 1,
"CMAC": 19,
"HMAC": 23
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {
"Cisco": {
"Cisco": 2
},
"Microsoft": {
"Microsoft": 9,
"Microsoft Corporation": 1
}
},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"Triple-DES#2261",
"HMAC#2710",
"RSA#2251",
"DSA#1123",
"AES#4137",
"ECDSA#949",
"SHS#3407",
"DRBG#1254",
"CVL#943"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#1254",
"#943",
"#949",
"#1123",
"#4137",
"#2710",
"#2261",
"#3407",
"#2251"
]
},
"policy_metadata": {
"/Author": "Manoj Maskara",
"/CreationDate": "D:20181025185313-07\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Office 365",
"/ModDate": "D:20181025185313-07\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Office 365",
"/Subject": "FIPS 140-2 Security Policy Template",
"/Title": "Security Policy",
"pdf_file_size_bytes": 929733,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.2.tar.gz",
"http://software.intel.com/en-us/articles/intel-advanced-encryption-standard-instructions-aes-ni/?wapkw=aes-ni",
"http://www.arm.com/products/processors/technologies/neon.php",
"mailto:[email protected]",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.8.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.7.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.5.tar.gz",
"https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Validated-Modules/Search",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.4.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.4.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.1.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.tar.gz",
"http://www.openssl.org/source/openssl-fips-ecp-2.0.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.2.tar.gz",
"https://csrc.nist.gov/projects/cryptographic-module-validation-program",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.3.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.7.tar.gz",
"http://www.openssl.org/source/",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.1.tar.gz",
"http://www.intel.com/support/processors/sb/CS-030123.htm?wapkw=sse2",
"http://www.openssl.org/source/old/fips/openssl-fips-2.0.6.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.6.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.3.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.5.tar.gz",
"http://www.openssl.org/source/openssl-fips-2.0.9.tar.gz",
"http://www.openssl.org/source/old/fips/openssl-fips-ecp-2.0.8.tar.gz"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 31
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "3895febd1b684b1836bb28cf5572e730c445bbc68e17a3338faa035a570a6435",
"source_hash": "09a2d851e081a95e8c62f49c5d2530c95ff9790e0d42aeb1e0b29ea5ad25f89c",
"txt_hash": "9c8cf460ef3f2f24c0c25652aa2c587da632409b243db165e0fe58748a5c88f6"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates cryptographic keys whose strengths are modified by available entropy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/FIPS140ConsolidatedCertFeb2017.pdf",
"date_sunset": null,
"description": "The VMware OpenSSL FIPS Object Module provides cryptographic functions to various VMware applications.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Roles, Services, and Authentication: Level 2",
"Physical Security: N/A",
"Design Assurance: Level 3",
"Mitigation of Other Attacks: N/A"
],
"fw_versions": null,
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "VMware OpenSSL FIPS Object Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": "2.0.9",
"tested_conf": [
"Intel Core I with PAA w/ Windows 10 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I with PAA w/ Windows 10 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I with PAA w/ Windows 7 SP1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I with PAA w/ Windows 8.1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I without PAA w/ Windows 10 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I without PAA w/ Windows 10 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I without PAA w/ Windows 7 SP1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Core I without PAA w/ Windows 8.1 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ BLUX 4.4 on ESXi 6.5 (gcc Compiler version 5.3.0)",
"Intel Xeon with PAA w/ BLUX 4.9 on ESXi 6.5 (gcc Compiler version 5.3.0)",
"Intel Xeon with PAA w/ PhotonOS 1.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ PhotonOS 1.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ PhotonOS 1.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ PhotonOS 2.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ PhotonOS 2.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ PhotonOS 2.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ SLES 11 on ESXi 6.7 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ SLES 11 SP3 on ESXi 6.0 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ SLES 12 on ESXi 6.5 (gcc Compiler Version 5.3.0)",
"Intel Xeon with PAA w/ Ubuntu 14.04 on ESXi 6.0 (gcc Compiler version 4.6.3)",
"Intel Xeon with PAA w/ Ubuntu 14.04 on ESXi 6.5 (gcc Compiler version 4.6.3)",
"Intel Xeon with PAA w/ Ubuntu 16.04 on ESXi 6.0 (gcc Compiler version 4.6.3)",
"Intel Xeon with PAA w/ Ubuntu 16.04 on ESXi 6.5 (gcc Compiler version 4.6.3)",
"Intel Xeon with PAA w/ Ubuntu 16.04 on ESXi 6.7 (gcc Compiler Version 4.6.3)",
"Intel Xeon with PAA w/ VMware NSX Controller OS 12.04 on ESXi 6.0 (gcc Compiler Version 4.6.3)",
"Intel Xeon with PAA w/ VMware NSX Edge OS 3.14 on ESXi 6.0 (gcc Compiler Version 4.6.3)",
"Intel Xeon with PAA w/ VMware NSX Manager OS 3.17 on ESXi 6.0 (gcc Compiler Version 4.6.3)",
"Intel Xeon with PAA w/ Windows 10 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows 2012 64 bit on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows 2012 R2 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows 2016 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows Server 2008 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows Server 2012 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows Server 2016 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon with PAA w/ Windows Server 2016 on ESXi 6.7 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ BLUX 4.4 on ESXi 6.5 (gcc Compiler version 5.3.0)",
"Intel Xeon without PAA w/ BLUX 4.9 on ESXi 6.5 (gcc Compiler version 5.3.0)",
"Intel Xeon without PAA w/ PhotonOS 1.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ PhotonOS 1.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ PhotonOS 1.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ PhotonOS 2.0 on ESXi 6.0 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ PhotonOS 2.0 on ESXi 6.5 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ PhotonOS 2.0 on ESXi 6.7 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ SLES 11 on ESXi 6.7 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ SLES 11 SP3 on ESXi 6.0 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ SLES 12 on ESXi 6.5 (gcc Compiler Version 5.3.0)",
"Intel Xeon without PAA w/ Ubuntu 14.04 on ESXi 6.0 (gcc Compiler version 4.6.3)",
"Intel Xeon without PAA w/ Ubuntu 14.04 on ESXi 6.5 (gcc Compiler version 4.6.3)",
"Intel Xeon without PAA w/ Ubuntu 16.04 on ESXi 6.0 (gcc Compiler version 4.6.3)",
"Intel Xeon without PAA w/ Ubuntu 16.04 on ESXi 6.5 (gcc Compiler version 4.6.3)",
"Intel Xeon without PAA w/ Ubuntu 16.04 on ESXi 6.7 (gcc Compiler Version 4.6.3)",
"Intel Xeon without PAA w/ VMware NSX Controller OS 12.04 on ESXi 6.0 (gcc Compiler Version 4.6.3)",
"Intel Xeon without PAA w/ VMware NSX Edge OS 3.14 on ESXi 6.0 (gcc Compiler Version 4.6.3)",
"Intel Xeon without PAA w/ VMware NSX Manager OS 3.17 on ESXi 6.0 (gcc Compiler Version 4.6.3)",
"Intel Xeon without PAA w/ Windows 10 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows 2012 64 bit on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows 2012 R2 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows 2016 on ESXi 6.0 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows Server 2008 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows Server 2012 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows Server 2016 on ESXi 6.5 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Intel Xeon without PAA w/ Windows Server 2016 on ESXi 6.7 (Microsoft C/C++ Optimizing Compiler Version 18.00.21005.1)",
"Within ESXi 6.7 on Intel Xeon 6126 with PAA",
"Within ESXi 6.7 on Intel Xeon 6126 without PAA",
"Within ESXi 6.7 on Intel Xeon E5-2440 with PAA",
"Within ESXi 6.7 on Intel Xeon E5-2440 without PAA (single-user mode)"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-02-14",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2017-02-22",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-04-10",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2018-10-31",
"lab": "CGI Information Systems \u0026 Management Consultants Inc",
"validation_type": "Update"
}
],
"vendor": "VMware, Inc.",
"vendor_url": "http://www.vmware.com"
}
}