This page was not yet optimized for use on mobile devices.
Oracle Linux 9 libgcrypt Cryptographic Module
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate details
| Certificate ID | #4993 |
|---|---|
| Status | active |
| Validation dates | 28.03.2025 , 15.08.2025 , 26.11.2025 |
| Sunset date | 27-03-2030 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Vendor | Oracle Corporation http://www.oracle.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, AES-, CAST, HMAC, HMAC-SHA-256, HMAC-SHA-224, HMAC-SHA-384, HMAC-SHA-512, CMACAsymmetric Algorithms
ECDH, ECDSA, Diffie-HellmanHash functions
SHA-1, SHA-384, SHA-256, SHA-224, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD5, PBKDF, PBKDF2Schemes
MACRandomness
DRBG, RBGLibraries
libgcryptElliptic Curves
P-224, P-256, P-384, P-521, P-512Block cipher modes
ECB, CBC, CTR, CFB, GCM, CCM, XTSTrusted Execution Environments
PSPSecurity level
Level 1Side-channel analysis
Timing Attacks, timing attacksStandards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-2, FIPS 180-4, FIPS 202, FIPS 186-5, FIPS 197, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-90B, PKCS 1, PKCS #1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
CVE matches
| ID | Links | Severity | CVSS Score | Published on |
|---|---|---|---|---|
| Base score | ||||
| CVE-2022-21505 | MEDIUM | 6.7 | 24.12.2024 | |
| CVE-2023-22024 | MEDIUM | 5.5 | 20.09.2023 | |
| CVE-2025-4598 | MEDIUM | 4.7 | 30.05.2025 |
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4993,
"dgst": "e0a612f22ea3eab1",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"ECDSA KeyGen (FIPS186-4)A4778",
"#A4777",
"HMAC-SHA-1A4778",
"RSA SigGen (FIPS186-4)A4778",
"SHA2-512/224A4778",
"HMAC-SHA2-224A4778",
"SHA-1A4778",
"#A4772",
"HMAC-SHA2-512A4778",
"AES-CCMA4777",
"#A4778",
"SHA2-224A4778",
"AES-CTRA4777",
"AES-OFBA4777",
"AES-CFB128A4777",
"HMAC-SHA2-512/224A4778",
"HMAC-SHA3-384A4778",
"Counter DRBGA4777",
"SHAKE-128A4778",
"#A4776",
"SHA3-224A4778",
"Hash DRBGA4778",
"SHA3-512A4778",
"RSA SigVer (FIPS186-4)A4778",
"PBKDFA4778",
"#A4774",
"HMAC-SHA3-256A4778",
"HMAC-SHA3-224A4778",
"#A4775",
"AES-XTS Testing Revision 2.0A4777",
"ECDSA KeyVer (FIPS186-4)A4778",
"HMAC-SHA2-384A4778",
"SHA2-384A4778",
"SHA3-384A4778",
"AES-CMACA4777",
"ECDSA SigGen (FIPS186-4)A4778",
"SHA2-512A4778",
"HMAC DRBGA4778",
"HMAC-SHA2-512/256A4778",
"SHAKE-256A4778",
"#A4773",
"AES-KWA4777",
"AES-CFB8A4777",
"ECDSA SigVer (FIPS186-4)A4778",
"HMAC-SHA3-512A4778",
"SHA3-256A4778",
"AES-CBCA4777",
"SHA2-256A4778",
"RSA KeyGen (FIPS186-4)A4778",
"AES-ECBA4777",
"SHA2-512/256A4778",
"HMAC-SHA2-256A4778",
"RSA SigVer (FIPS186-2)A4778"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"9"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2025-4598",
"CVE-2023-22024",
"CVE-2022-21505"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 2,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4773",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4774",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0-524288 Increment 8, AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4776",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4777",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4773",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4774",
"properties": "8 Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4776",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4777",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher",
"reference": "SP 800-38F"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": ""
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4776",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4773",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4774",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128, Payload Length: 128-65536 Increment 8 Tweak Mode - Hex",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4776",
"properties": "Data Unit Length Matches Payload Length - Yes Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4777",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4773",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64 Personalization String Length - Personalization String Length: 0",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4774",
"properties": "Returned Bits - 1024, 512 Prediction Resistance - No, Yes Supports Reseed - No Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4776",
"properties": "Returned Bits - 1024, 512 Prediction Resistance - No, Yes Supports Reseed - No Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64 Personalization String Length - Personalization String Length: 0",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4777",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 128, Entropy Input: 192, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64 Personalization String Length - Personalization String Length: 0 Returned Bits - 1024, 512",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512,",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": ""
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4773",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0,",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "256 Returned Bits - 320, 512, 768",
"reference": ""
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4774",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4776",
"properties": "Returned Bits - 320, 512, 768 Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 320, 512, 768",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4777",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 320, 512, 768",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4778",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 320, 512, 768",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4773",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0,",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "256 Returned Bits - 320, 512, 768",
"reference": ""
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4774",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4776",
"properties": "Returned Bits - 320, 512, 768 Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 320, 512, 768",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4777",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 320, 512, 768",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4778",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2-512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0, 160, Personalization String Length: 0, 256 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 320, 512, 768",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4772",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4773",
"properties": "8 MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4775",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4776",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4777",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4773",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4774",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4778",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4773",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4774",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4776",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4777",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4778",
"properties": "Iteration Count - Iteration Count: 1000-10000000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 128-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No",
"reference": "FIPS 186-4"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Public Exponent Mode - Random Private Key Format - Standard",
"reference": ""
},
{
"algorithm": "RSA KeyGen (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Key Generation Mode - B.3.3 Modulo - 2048, 3072, 4096 Primality Tests - Table C.2 Info Generated By Server - No Public Exponent Mode - Random Private Key Format - Standard",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair -",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4773",
"properties": "Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4774",
"properties": "Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4776",
"properties": "Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4777",
"properties": "Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-2)",
"cavpCertName": "A4778",
"properties": "Public Exponent Mode - Fixed Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 1024, 1536 Hash Pair - Hash Algorithm - SHA2-224",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4773",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28 Public Exponent Mode - Fixed",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4774",
"properties": "Fixed Public Exponent - 010001 Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28 Public Exponent Mode - Fixed Fixed Public Exponent - 010001",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4776",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28 Public Exponent Mode - Fixed",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4777",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28 Public Exponent Mode - Fixed Fixed Public Exponent - 010001",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4778",
"properties": "Signature Type - PKCS 1.5, PKCSPSS Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA2-224 Salt Length - 28 Public Exponent Mode - Fixed Fixed Public Exponent - 010001",
"reference": "FIPS 186-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4772",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4775",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4776",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4777",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4773",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4774",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4778",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4773",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4774",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4778",
"properties": "8 Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4773",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4774",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4778",
"properties": "Supports Bit-Oriented Messages - No Supports Empty Message - Yes Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Perform AES encryptio n",
"indicator": "gcry_control() returns 0",
"inputs": "AES key, Plaintext",
"name": "Symmetric encryption",
"outputs": "Cipherte xt",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Encryption with AES"
},
{
"description": "Perform AES decryptio n",
"indicator": "gcry_control() returns 0",
"inputs": "AES key, Ciphertext",
"name": "Symmetric decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Decryption with AES"
},
{
"description": "Authentic ate and encrypt a plaintext using AES",
"indicator": "gcry_control() returns 0",
"inputs": "AES key, Plaintext, IV",
"name": "Authentica ted symmetric encryption",
"outputs": "Cipherte xt, MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authentica ted encryption with AES"
},
{
"description": "Authentic ate and decrypt a plaintext using AES",
"indicator": "gcry_control() returns 0",
"inputs": "AES key, Ciphertext, MAC tag",
"name": "Authentica ted symmetric decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authentica ted decryption with AES"
},
{
"description": "Generate RSA key pairs",
"indicator": "gcry_control() returns 0",
"inputs": "Key size",
"name": "RSA Key generation",
"outputs": "RSA public key, RSA private key",
"rolesSspAccess": "Crypto Officer - RSA public key: G,R - RSA private key: G,R",
"secFunImpl": "Key Pair Generation with RSA"
},
{
"description": "Generate ECDSA key pairs",
"indicator": "gcry_control() returns 0",
"inputs": "Key size",
"name": "ECDSA Key generation",
"outputs": "ECDSA public key, ECDSA private key",
"rolesSspAccess": "Crypto Officer - ECDSA public key: G,R - ECDSA private key: G,R",
"secFunImpl": "Key Pair Generation with ECDSA"
},
{
"description": "RSA signature generatio n",
"indicator": "gcry_control() returns 0",
"inputs": "RSA private key, Message, Hash algorithm",
"name": "RSA Digital signature generation",
"outputs": "Signatur e",
"rolesSspAccess": "Crypto Officer - RSA private key: W,E",
"secFunImpl": "Signature Generation with RSA"
},
{
"description": "ECDSA signature generatio n",
"indicator": "gcry_control() returns 0",
"inputs": "ECDSA private Key, Message, Hash algorithm",
"name": "ECDSA Digital signature generation",
"outputs": "Signatur e",
"rolesSspAccess": "Crypto Officer - ECDSA private key: W,E",
"secFunImpl": "Signature Generation with ECDSA"
},
{
"description": "RSA signature verificatio n",
"indicator": "gcry_control() returns 0",
"inputs": "Signature, Hash algorithm, RSA public key",
"name": "RSA Digital signature verification",
"outputs": "Signatur e verificati on result",
"rolesSspAccess": "Crypto Officer - RSA public key: W,E",
"secFunImpl": "Signature Verification with RSA"
},
{
"description": "ECDSA signature verificatio n",
"indicator": "gcry_control() returns 0",
"inputs": "Signature, Hash algorithm, ECDSA public key",
"name": "ECDSA Digital signature verification",
"outputs": "Signatur e verificati on result",
"rolesSspAccess": "Crypto Officer - ECDSA public key: W,E",
"secFunImpl": "Signature Verification with ECDSA"
},
{
"description": "Verify ECDSA public key",
"indicator": "gcry_mpi_ec_curve_p oint() returns 0",
"inputs": "ECDSA public key, ECDSA private key",
"name": "Public key verification",
"outputs": "Return codes/lo g message s",
"rolesSspAccess": "Crypto Officer - ECDSA public key: W,E",
"secFunImpl": "Public Key Verification with ECDSA"
},
{
"description": "Generate random bitstrings",
"indicator": "gcry_randomize(), gcry_random_bytes(), gcry_random_bytes_s ecure() returns 0",
"inputs": "Size",
"name": "Random number generation",
"outputs": "Random number",
"rolesSspAccess": "Crypto Officer - Entropy input: W,E - DRBG seed: G,E - DRBG internal state: (V value, C value): G,W,E - DRBG internal state: (V value, key): G,W,E",
"secFunImpl": "Random Number Generation with DRBG"
},
{
"description": "Compute SHA hashes",
"indicator": "gcry_control() returns 0",
"inputs": "Message",
"name": "Message digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Hashes Extendable Output Function"
},
{
"description": "Compute HMAC or AES- based CMAC",
"indicator": "gcry_control() returns 0",
"inputs": "Message, Key",
"name": "Message authenticat ion code (MAC)",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC key: W,E - AES key: W,E",
"secFunImpl": "Message Authentica tion Code"
},
{
"description": "Perform AES- based key wrapping",
"indicator": "gcry_control() returns 0",
"inputs": "Key wrapping key, key to be wrapped",
"name": "Key wrapping",
"outputs": "Wrappe d key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key wrapping using AES CCM"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Key wrapping using AES KW"
},
{
"description": "Perform AES- based key unwrappi ng",
"indicator": "gcry_control() returns 0",
"inputs": "Wrapped key, key unwrapping key",
"name": "Key unwrappin g",
"outputs": "Unwrap ped key",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Key unwrappin g using AES CCM Key unwrappin g using AES KW"
},
{
"description": "Perform key derivatio n",
"indicator": "gcry_control() returns 0",
"inputs": "Password/passph rase; Derived key",
"name": "Key derivation",
"outputs": "Derived key",
"rolesSspAccess": "Crypto Officer - Password or passphrase: W,E - Derived key: G,R",
"secFunImpl": "Key Derivation with PBKDF"
},
{
"description": "Show module status",
"indicator": "N/A",
"inputs": "None",
"name": "Show status",
"outputs": "Current status of the module",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize SSPs",
"indicator": "N/A",
"inputs": "N/A",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - Password or passphrase: Z - Derived key: Z - Entropy input: Z - DRBG internal state: (V value, key): Z - DRBG internal state: (V value, C value): Z - DRBG seed: Z - ECDSA public key: Z",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- ECDSA private key: Z - RSA public key: Z - RSA private key: Z",
"secFunImpl": ""
},
{
"description": "Perform self-tests",
"indicator": "N/A",
"inputs": "Booting the module",
"name": "Self-tests",
"outputs": "N/A",
"rolesSspAccess": "Unauthentic ated",
"secFunImpl": "None"
},
{
"description": "Show module name and version",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show module name and version",
"outputs": "Display module name and version",
"rolesSspAccess": "Unauthentic ated",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-ECB (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption, Decryption",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys, encryption, and decryption (separately tested)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption, Decryption",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys, encryption, and decryption (separately tested)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption, Decryption",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys, encryption, and decryption (separately tested)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Encryption, Decryption",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES ECB mode with 128, 192, 256-bit keys, encryption, and decryption (separately tested)",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message Authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "AES CMAC with 128-bit key, MAC generation",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "CTR_DRBG with AES with 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "CTR_DRBG with AES with 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "CTR_DRBG with AES with 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "CTR_DRBG with AES with 128-bit key with DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Generate, Reseed",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256 with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4774s)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "P-256 with SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4772)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message authentication",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "HMAC-SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature generation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Signature verification",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "PKCS #1 v1.5 with 2048- bit key and SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4772)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4775)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4777)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Message digest",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4773)",
"condition": "Module initialization or on demand through API function call",
"details": "Key derivation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4774)",
"condition": "Module initialization or on demand through API function call",
"details": "Key derivation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4776)",
"condition": "Module initialization or on demand through API function call",
"details": "Key derivation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4777)",
"condition": "Module initialization or on demand",
"details": "Key derivation",
"indicator": "The module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits,",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "through API function call",
"details": "",
"indicator": "and the services are available for use",
"testMethod": "",
"testProps": "iteration count of 4096, and salt length of 288 bits; SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": ""
},
{
"algorithmOrTest": "PBKDF (A4778)",
"condition": "Module initialization or on demand through API function call",
"details": "Key derivation",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "KAT",
"testProps": "SHA-1 password length 24 characters, master key length of 200 bits, iteration count of 4096, and salt length of 288 bits; SHA-256 password length 24 characters, master key length of 320 bits, iteration count of 4096, and salt length of 288 bits",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4773)",
"condition": "EC key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4774)",
"condition": "EC key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4776)",
"condition": "EC key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4777)",
"condition": "EC key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4778)",
"condition": "EC key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation and verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4773)",
"condition": "RSA key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation of verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4774)",
"condition": "RSA key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation of verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen",
"condition": "RSA key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation of verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "(FIPS186-4) (A4776)",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4777)",
"condition": "RSA key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation of verification with SHA-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4778)",
"condition": "RSA key pair generation",
"details": "Key generation",
"indicator": "Successful key generation",
"testMethod": "PCT",
"testProps": "Signature generation of verification with SHA-256",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Software integrity test failure CAST failure PCT failure",
"description": "The module immediately stops functioning due to a self-test failure; PCT failure",
"indicator": "Module will not load; Module stops functioning for PCT failure",
"name": "Error State",
"recoveryMethod": "Restarting the module"
},
{
"conditions": "Random numbers are requested in the error state or cipher operations are requested on a deallocated handle",
"description": "The module immediately enters a non-recoverable error state and automatically transits to shutdown",
"indicator": "Module is aborted and is not available for use",
"name": "Fatal Error State",
"recoveryMethod": "Restarting the module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.3",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non-approved service is requested",
"name": "Non-approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.4",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "MD5",
"use": "Message digest"
},
{
"name": "ECDH noncompliant with SP 800-56Arev3 assurances",
"use": "Shared secret computation"
},
{
"name": "AES GCM noncompliant with IG C.H.",
"use": "Authenticated symmetric encryption, Authenticated symmetric decryption"
},
{
"name": "AES GCM-SIV",
"use": "Authenticated symmetric encryption, Authenticated symmetric decryption"
},
{
"name": "AES OCB",
"use": "Authenticated symmetric encryption, Authenticated symmetric decryption"
},
{
"name": "AES-EAX",
"use": "Authenticated symmetric encryption, Authenticated symmetric decryption"
},
{
"name": "RSA",
"use": "Signature generation primitive; Signature verification primitive; Encryption primitive; Decryption primitive"
},
{
"name": "RSA with non-approved flags that are not listed in Appendix A",
"use": "Key generation; Signature generation; Signature verification"
},
{
"name": "ECDSA",
"use": "Signature generation primitives, Signature verification primitives"
},
{
"name": "ECDSA with non-approved flags that are not listed in Appendix A",
"use": "Key generation; Key verification; Signature generation; Signature verification"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM noncompliant with IG C.H. AES GCM-SIV AES OCB AES-EAX",
"description": "AES encryption using non-approved AES modes",
"name": "Authenticated symmetric encryption",
"role": "CO"
},
{
"alg_accessed": "AES GCM noncompliant with IG C.H. AES GCM-SIV AES OCB AES-EAX",
"description": "AES decryption using non-approved AES modes",
"name": "Authenticated symmetric decryption",
"role": "CO"
},
{
"alg_accessed": "MD5",
"description": "Message digest",
"name": "Message digest using non- approved algorithms",
"role": "CO"
},
{
"alg_accessed": "ECDH noncompliant with SP 800-56Arev3 assurances",
"description": "ECDH Shared secret computation",
"name": "Shared secret computation",
"role": "CO"
},
{
"alg_accessed": "RSA with non-approved flags that are not listed in Appendix A ECDSA with non-approved flags that are not listed in Appendix A",
"description": "Generate RSA/ECDSA key pairs with public key flags not listed in Appendix A",
"name": "Key generation",
"role": "CO"
},
{
"alg_accessed": "RSA with non-approved flags that are not listed in Appendix A ECDSA with non-approved flags that are not listed in Appendix A",
"description": "RSA/ECDSA signature generation with public key flags not listed in Appendix A",
"name": "Digital signature generation",
"role": "CO"
},
{
"alg_accessed": "RSA with non-approved flags that are not listed in Appendix A ECDSA with non-approved flags that are not listed in Appendix A",
"description": "RSA/ECDSA signature verification with public key flags not listed in Appendix A",
"name": "Digital signature verification",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "RSA encryption and decryption primitives",
"name": "Asymmetric encryption and decryption primitives",
"role": "CO"
},
{
"alg_accessed": "RSA ECDSA",
"description": "RSA/ECDSA signature generation/verification primitives",
"name": "Signature generation/verification primitives",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters for data",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters for data",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API input parameters for control input",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, API output parameters for status output",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4773)",
"details": "Integrity test for libgcrypt.so.20.4.0",
"indicator": "The module becomes operational and the services are available for use",
"testMethod": "Message Authentication",
"testProps": "Key size: 376-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operating calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the provided cipher handle",
"method": "Free cipher handle",
"operatorId": "By calling the appropriate zeroization functions: AES key: gcry_cipher_close gcry_free() HMAC key: gcry_mac_close, gcry_free Key-derivation key: gcry_free Derived key: gcry_free RSA keys: gcry_mpi_release, gcry_sexp_release, gcry_free EC keys: gcry_mpi_release, gcry_free, gcry_mpi_point_release, gcry_sexp_release, gcry_ctx_release Entropy input: gcry_ctrl(GCRYCTL_TERM_SECMEM) Internal state: gcry_ctrl(GCRYCTL_TERM_SECMEM)",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. The completion of a zeroization routine will indicate that a zeroization procedure succeeded."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Remove power from the module",
"operatorId": "By unloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed. Module power off indicates that the"
},
{
"description": "",
"method": "",
"operatorId": "",
"rationale": "zeroization procedure succeeded."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [],
"found": false,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.0 on Oracle Linux 9 with Intel(R) Xeon(R) Platinum 8358",
"swFwVersion": "1.10.0- 3957adb8de08b15a"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.0 on Oracle Linux 9 with AMD EPYC 7J13",
"swFwVersion": "1.10.0- 3957adb8de08b15a"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.0 on Oracle Linux 9 with Ampere(R) Altra(R) Q80- 30",
"swFwVersion": "1.10.0- 3957adb8de08b15a"
},
{
"features": "N/A",
"integrityTest": "HMAC-SHA-256",
"packageFileName": "libgcrypt.so.20.4.0 on Oracle Linux 9 with OCTEON III",
"swFwVersion": "1.10.0- 3957adb8de08b15a"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "ORACLE SERVER X9- 2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "Yes",
"processors": "Intel(R) Xeon(R) Platinum 8358",
"version": "1.10.0- 3957adb8de08b15a"
},
{
"hardwarePlatform": "ORACLE SERVER E4- 2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "Yes",
"processors": "AMD EPYC 7J13",
"version": "1.10.0- 3957adb8de08b15a"
},
{
"hardwarePlatform": "ORACLE SERVER A1- 2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "Yes",
"processors": "Ampere(R) Altra(R) Q80-30",
"version": "1.10.0- 3957adb8de08b15a"
},
{
"hardwarePlatform": "ORACLE SERVER X9- 2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "Intel(R) Xeon(R) Platinum 8358",
"version": "1.10.0- 3957adb8de08b15a"
},
{
"hardwarePlatform": "ORACLE SERVER E4- 2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "AMD EPYC 7J13",
"version": "1.10.0- 3957adb8de08b15a"
},
{
"hardwarePlatform": "ORACLE SERVER A1- 2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "Ampere(R) Altra(R) Q80-30",
"version": "1.10.0- 3957adb8de08b15a"
},
{
"hardwarePlatform": "Marvell Liquid IO II (MIPS64) SmartNIC",
"hypervisorHostOs": "N/A",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "OCTEON III",
"version": "1.10.0- 3957adb8de08b15a"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-512 (112, 128, 192, 256 bits)",
"implName": "Oracle Linux 9 libgcrypt Cryptographic Module (Full Acceleration)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-512 (112, 128, 192, 256 bits)",
"implName": "Oracle Linux 9 libgcrypt Cryptographic Module (No Acceleration)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384. P-521 (112, 128, 192, 256 bits)",
"implName": "Oracle Linux 9 libgcrypt Cryptographic Module (AESNI AVX)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "RSA:2048, 3072, 4096 (112, 128, 149 bits) ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "Oracle Linux 9 libgcrypt Cryptographic Module (SHLD)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "RSA:2048, 3072, 4096 (112, 128, 149 bits)",
"implName": "Oracle Linux 9 libgcrypt Cryptographic Module (SSSE3)",
"name": "CKG",
"reference": "FIPS 186-4, SP 800- 133rev2 Section 5.1"
},
{
"algoPropList": "ECDSA:P-224, P-256, P-384, P-521 (112, 128, 192, 256 bits)",
"implName": "",
"name": "",
"reference": ""
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Oracle X Series Servers",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Oracle E Series Servers",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Oracle A Series Servers",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Marvell T93 LiquidIO III (ARM v8.x) SmartNIC",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Pensando DSC-200-R (ARM v8.x) SmartNIC",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Hardware Platform",
"operatingSystem": "Operating"
},
{
"hardwarePlatform": "",
"operatingSystem": "System"
},
{
"hardwarePlatform": "Nvidia Bluefield-3 (ARM v8.x) SmartNIC",
"operatingSystem": "Oracle Linux 9"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 4
},
"ECDSA": {
"ECDSA": 121
}
},
"FF": {
"DH": {
"Diffie-Hellman": 1
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 9
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 5
},
"GCM": {
"GCM": 4
},
"XTS": {
"XTS": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"libgcrypt": {
"libgcrypt": 94
}
},
"crypto_protocol": {},
"crypto_scheme": {
"MAC": {
"MAC": 70
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-224": 44,
"P-256": 82,
"P-384": 58,
"P-512": 2,
"P-521": 58
}
},
"eval_facility": {
"atsec": {
"atsec": 3
}
},
"fips_cert_id": {
"Cert": {
"#1": 10
}
},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 15,
"AES-128": 4,
"AES-192": 4,
"AES-256": 4,
"HMAC SHA-256": 2,
"HMAC- SHA-1": 6,
"HMAC-SHA-1": 38,
"HMAC-SHA-224": 10,
"HMAC-SHA-256": 18,
"HMAC-SHA-384": 10,
"HMAC-SHA-512": 10,
"PKCS #1": 20,
"PKCS 1": 15,
"SHA- 256": 4,
"SHA- 512": 4,
"SHA-1": 60,
"SHA-224": 5,
"SHA-256": 53,
"SHA-3": 1,
"SHA-384": 9,
"SHA-512": 4,
"SHA2-224": 50,
"SHA2-256": 46,
"SHA2-384": 36,
"SHA2-512": 44,
"SHA3- 224": 1,
"SHA3- 384": 1,
"SHA3-224": 22,
"SHA3-256": 24,
"SHA3-384": 22,
"SHA3-512": 22,
"SHA3-512 2": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 2
}
},
"PBKDF": {
"PBKDF": 25,
"PBKDF2": 4
},
"SHA": {
"SHA1": {
"SHA-1": 60
},
"SHA2": {
"SHA-224": 5,
"SHA-256": 53,
"SHA-384": 9,
"SHA-512": 4
},
"SHA3": {
"SHA-3": 1,
"SHA3-224": 22,
"SHA3-256": 24,
"SHA3-384": 22,
"SHA3-512": 23
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 98
},
"RNG": {
"RBG": 2
}
},
"side_channel_analysis": {
"SCA": {
"Timing Attacks": 1,
"timing attacks": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 8,
"FIPS 180-4": 38,
"FIPS 186-4": 49,
"FIPS 186-5": 2,
"FIPS 197": 1,
"FIPS 198-1": 50,
"FIPS 202": 19,
"FIPS PUB 140-3": 2,
"FIPS186-2": 6,
"FIPS186-4": 102
},
"NIST": {
"SP 800-132": 13,
"SP 800-38A": 25,
"SP 800-38B": 5,
"SP 800-38C": 4,
"SP 800-38E": 5,
"SP 800-38F": 5,
"SP 800-90A": 14,
"SP 800-90B": 1
},
"PKCS": {
"PKCS #1": 10,
"PKCS 1": 15
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 82,
"AES-": 3,
"AES-128": 4,
"AES-192": 4,
"AES-256": 4
},
"CAST": {
"CAST": 234
}
},
"constructions": {
"MAC": {
"CMAC": 8,
"HMAC": 35,
"HMAC-SHA-224": 5,
"HMAC-SHA-256": 9,
"HMAC-SHA-384": 5,
"HMAC-SHA-512": 5
}
}
},
"tee_name": {
"AMD": {
"PSP": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"ECDSA KeyGen (FIPS186-4)A4778",
"HMAC-SHA-1A4778",
"RSA SigGen (FIPS186-4)A4778",
"SHA2-512/224A4778",
"HMAC-SHA2-224A4778",
"SHA-1A4778",
"HMAC-SHA2-512A4778",
"AES-CCMA4777",
"SHA2-224A4778",
"AES-CTRA4777",
"AES-OFBA4777",
"AES-CFB128A4777",
"HMAC-SHA2-512/224A4778",
"HMAC-SHA3-384A4778",
"Counter DRBGA4777",
"SHAKE-128A4778",
"SHA3-224A4778",
"Hash DRBGA4778",
"SHA3-512A4778",
"RSA SigVer (FIPS186-4)A4778",
"PBKDFA4778",
"HMAC-SHA3-256A4778",
"HMAC-SHA3-224A4778",
"AES-XTS Testing Revision 2.0A4777",
"ECDSA KeyVer (FIPS186-4)A4778",
"HMAC-SHA2-384A4778",
"SHA2-384A4778",
"SHA3-384A4778",
"AES-CMACA4777",
"ECDSA SigGen (FIPS186-4)A4778",
"SHA2-512A4778",
"HMAC DRBGA4778",
"HMAC-SHA2-512/256A4778",
"SHAKE-256A4778",
"AES-KWA4777",
"AES-CFB8A4777",
"ECDSA SigVer (FIPS186-4)A4778",
"HMAC-SHA3-512A4778",
"SHA3-256A4778",
"AES-CBCA4777",
"SHA2-256A4778",
"RSA KeyGen (FIPS186-4)A4778",
"AES-ECBA4777",
"SHA2-512/256A4778",
"HMAC-SHA2-256A4778",
"RSA SigVer (FIPS186-2)A4778"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4777",
"#A4776",
"#A4772",
"#A4778",
"#A4774",
"#A4775",
"#A4773"
]
},
"policy_metadata": {
"/Author": "",
"/Comments": "",
"/Company": "",
"/CreationDate": "D:20251126091208-05\u002700\u0027",
"/Creator": "Acrobat PDFMaker 25 for Word",
"/Keywords": "",
"/ModDate": "D:20251126091431-05\u002700\u0027",
"/Producer": "Adobe PDF Library 25.1.51",
"/SourceModified": "",
"/Subject": "",
"/Title": "",
"pdf_file_size_bytes": 915573,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://gnupg.org/documentation/manuals/gcrypt.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"http://www.oracle.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 78
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "2128a1b08313b4c2c404f23ee431bcd6acc7999ec2f6d59a00fe6a3716154034",
"source_hash": "63244ee19ea76190ba1919714eb66b76044b07f5b5b3a123dbfebf84e37db2f5",
"txt_hash": "def0bbeb198a7a16ae1ad1b80cc4c2d534979e7e6bc9b67c0f678b85b279cc4e"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/March 2025_010425_0326.pdf",
"date_sunset": "2030-03-27",
"description": null,
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Oracle Linux 9 libgcrypt Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-03-28",
"lab": "atsec information security corporation",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-08-15",
"lab": "atsec information security corporation",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-11-26",
"lab": "atsec information security corporation",
"validation_type": "Update"
}
],
"vendor": "Oracle Corporation",
"vendor_url": "http://www.oracle.com"
}
}