This page was not yet optimized for use on mobile devices.

Junos® OS Evolved Kernel Cryptographic Module

Certificate details

Certificate ID	#4776
Status	historical
Historical reason	Moved to historical list due to dependency on certificate #4775
Validation dates	03.09.2024
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy with module Junos® OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #4775 operating in the approved mode. The module generates random strings whose strengths are modified by available entropy.
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The Juniper Kernel Cryptographic Module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.
Tested configurations	Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT with PAA Junos® OS Evolved version 22.4 running on Juniper Networks® Packet Transport Router Model PTX10001-36MR with Intel® Xeon® D-2163IT without PAA
Vendor	Juniper Networks, Inc. http://www.juniper.net
Lab	atsec information security corporation
Algorithms	AES-CBCA3602 AES-CMACA3602 AES-CTRA3602 AES-ECBA3602 AES-XTS Testing Revision 2.0A3602 Counter DRBGA3602 Hash DRBGA3605 HMAC DRBGA3605 HMAC-SHA-1A3605 HMAC-SHA2-224A3605 HMAC-SHA2-256A3605 HMAC-SHA2-384A3605 HMAC-SHA2-512A3605 SHA-1A3605 SHA2-224A3605 SHA2-256A3605 SHA2-384A3605 SHA2-512A3605
References	This certificate's webpage directly references 1 certificates, transitively this expands into 2 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-, CAST, HMAC, CMAC

Hash functions

SHA-1

Schemes

MAC

Randomness

DRBG, RNG, RBG

Libraries

OpenSSL

Block cipher modes

ECB, CBC, CTR, GCM, XTS

Security level

Level 1, level 1

Side-channel analysis

Fault Induction

Standards

FIPS 140-3, FIPS PUB 140-3, FIPS 198-1, FIPS 180-4, SP 800-38A, SP 800-38B, SP 800-38E, SP 800-90A, SP 800-90B, PKCS#1

Cross-references

Outgoing

4775 - historical - Junos® OS Evolved OpenSSL Cryptographic Module

Incoming

4878 - historical - Juniper Express 4 MACsec Cryptographic Module
4820 - historical - Junos® OS Evolved MACsec Cryptographic Library
4775 - historical - Junos® OS Evolved OpenSSL Cryptographic Module

Creation date	D:20240829104637Z00'00'
Modification date	D:20240829104637Z00'00'
Pages	46
Producer	macOS Versione 13.4.1 (c) (Build 22F770820d) Quartz PDFContext

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

06.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 2}}}}} data.
05.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 3}}}}} data.
24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 2}}}}} data.

The is_br1_format property was set to True.

The br1_tables property was set to {'_type': 'sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables', 'security_levels': {'section': 1, 'subsection': 2, 'found': False, 'entries': []}, 'tested_module_id_hw': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'tested_module_id_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': True, 'entries': [{'packageFileName': '/usr/bin/fips_chk_hmac (makes use of HMAC service from bound OpenSSL module)', 'swFwVersion': '2.0', 'features': 'N/A', 'integrityTest': 'HMAC-SHA2-256'}, {'packageFileName': '/soft/current/bzImage- re-64b.bin', 'swFwVersion': '2.0', 'features': 'N/A', 'integrityTest': 'HMAC-SHA2-256'}]}, 'tested_module_id_hw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'tested_op_env_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': True, 'entries': [{'operatingSystem': 'Junos OS Evolved version 22.4', 'hardwarePlatform': 'Juniper Networks® Packet Transport Router Model PTX10001- 36MR', 'processors': 'Intel(R) Xeon(R) D- 2163IT', 'paa_pai': 'With and without AES- NI, SHA Extensions (PAA)', 'hypervisorHostOs': '', 'version': '2.0'}]}, 'vendor_affirmed_op_env_sw_fw_hy': {'section': 2, 'subsection': 2, 'found': False, 'entries': []}, 'modes_of_operation': {'section': 2, 'subsection': 4, 'found': True, 'entries': [{'name': 'Approved mode', 'description': 'Automatically entered whenever an approved service is requested', 'type': 'Approved', 'statusIndicator': 'Equivalent to the indicator of the requested service as defined in Section 4.3'}, {'name': 'Non- approved mode', 'description': 'Automatically entered whenever a non-approved service is requested', 'type': 'Non- Approved', 'statusIndicator': 'Equivalent to the indicator of the requested service as defined in Section 4.3'}]}, 'approved_algorithms': {'section': 2, 'subsection': 5, 'found': True, 'entries': [{'algorithm': 'AES-CBC', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-CMAC', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-38B'}, {'algorithm': 'AES-CTR', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-ECB', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-XTS Testing Revision 2.0', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-38E'}, {'algorithm': 'Counter DRBG', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC DRBG', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC-SHA-1', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-224', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-384', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-512', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'SHA-1', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-224', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-256', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-384', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-512', 'cavpCertName': 'A3599', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'AES-CBC', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-CTR', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-ECB', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-XTS Testing Revision 2.0', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-38E'}, {'algorithm': 'Counter DRBG', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC DRBG', 'cavpCertName': 'A3600', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'AES-CBC', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-CMAC', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-38B'}, {'algorithm': 'AES-CTR', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-ECB', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-XTS Testing Revision 2.0', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-38E'}, {'algorithm': 'Counter DRBG', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC DRBG', 'cavpCertName': 'A3601', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'AES-CBC', 'cavpCertName': 'A3602', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-CMAC', 'cavpCertName': 'A3602', 'properties': '-', 'reference': 'SP 800-38B'}, {'algorithm': 'AES-CTR', 'cavpCertName': 'A3602', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-ECB', 'cavpCertName': 'A3602', 'properties': '-', 'reference': 'SP 800-38A'}, {'algorithm': 'AES-XTS Testing Revision 2.0', 'cavpCertName': 'A3602', 'properties': '-', 'reference': 'SP 800-38E'}, {'algorithm': 'Counter DRBG', 'cavpCertName': 'A3602', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC DRBG', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC-SHA-1', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-224', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-384', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-512', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'SHA-1', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-224', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-256', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-384', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-512', 'cavpCertName': 'A3603', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC DRBG', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC-SHA-1', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-224', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-384', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-512', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'SHA-1', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-224', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-256', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-384', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-512', 'cavpCertName': 'A3604', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'Hash DRBG', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC DRBG', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'SP 800-90A Rev. 1'}, {'algorithm': 'HMAC-SHA-1', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-224', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 198-1 FIPS'}, {'algorithm': 'HMAC-SHA2-384', 'cavpCertName': 'A3605', 'properties': '-', 'reference': '198-1'}, {'algorithm': 'HMAC-SHA2-512', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'SHA-1', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-224', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-256', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-384', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'SHA2-512', 'cavpCertName': 'A3605', 'properties': '-', 'reference': 'FIPS 180-4'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A4249', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A4246', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A4247', 'properties': '-', 'reference': 'FIPS 198-1'}, {'algorithm': 'HMAC-SHA2-256', 'cavpCertName': 'A4248', 'properties': '-', 'reference': 'FIPS 198-1'}]}, 'vendor_affirmed_algos': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_allowed_algos': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_allowed_NSC': {'section': 2, 'subsection': 5, 'found': False, 'entries': []}, 'non_approved_not_allowed': {'section': 2, 'subsection': 5, 'found': True, 'entries': [{'name': 'AES- GCM', 'use': 'Authenticated Encryption and Decryption'}, {'name': 'RSA', 'use': 'RSA Encryption and Decryption primitives'}, {'name': 'RSA', 'use': 'RSA Signature Verification'}, {'name': 'RSA', 'use': 'Signature Generation and Signature Verification primitives with PKCS#1 v1.5 padding'}]}, 'ports_interfaces': {'section': 3, 'subsection': 1, 'found': True, 'entries': [{'physicalPort': 'As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs.', 'logicalInterface': 'Data Input', 'data': 'API input parameters from kernel system calls, AF_ALG type socket'}, {'physicalPort': 'As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs.', 'logicalInterface': 'Data Output', 'data': 'API output parameters from kernel system calls, AF_ALG type socket'}, {'physicalPort': 'As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs.', 'logicalInterface': 'Control Input', 'data': 'API function calls, API input parameters for control from kernel system calls, AF_ALG type socket, kernel command line'}, {'physicalPort': 'As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs.', 'logicalInterface': 'Status Output', 'data': 'API return codes, AF_ALG type socket, kernel logs'}]}, 'authentication_methods': {'section': 4, 'subsection': 1, 'found': False, 'entries': []}, 'roles': {'section': 4, 'subsection': 2, 'found': True, 'entries': [{'name': 'Crypto Officer', 'type': 'Role', 'operatorType': 'CO', 'authMethodList': 'None'}]}, 'approved_services': {'section': 4, 'subsection': 3, 'found': True, 'entries': [{'name': 'Message digest', 'description': 'Compute SHA hashes', 'indicator': 'crypto_shash_init returns 0', 'inputs': 'Message', 'outputs': 'Digest value', 'secFunImpl': 'Message digest', 'rolesSspAccess': 'Crypt o Office r'}, {'name': 'Symmetric encryption', 'description': 'Perform AES encryption', 'indicator': 'crypto_skcipher_s etkey returns 0', 'inputs': 'AES key, plaintext', 'outputs': 'Cipherte xt', 'secFunImpl': 'Symmetric encryption', 'rolesSspAccess': 'Crypt o Office r - AES key: W,E'}, {'name': 'Symmetric decryption', 'description': 'Perform AES decryption', 'indicator': 'crypto_skcipher_s etkey returns 0', 'inputs': 'AES key, ciphertex t', 'outputs': 'Plaintext', 'secFunImpl': 'Symmetric decryption', 'rolesSspAccess': 'Crypt o Office r - AES key: W,E'}, {'name': 'Random number generation', 'description': 'Generate random numbers', 'indicator': 'crypto_rng_get_by tes returns 0', 'inputs': 'Output length', 'outputs': 'Random bytes', 'secFunImpl': 'Random number generation', 'rolesSspAccess': 'Crypt o Office r - DRBG entro py input string : W,E - DRBG seed: G,E - DRBG intern al state (V, Key): G,W,E - DRBG intern al state (V, C): G,W,E'}, {'name': 'Message authenticat ion', 'description': 'Compute HMAC/AES -based CMAC', 'indicator': 'crypto_shash_init returns 0', 'inputs': 'AES: AES key, message ; HMAC: HMAC key, message', 'outputs': 'MAC tag', 'secFunImpl': 'Message authenticat ion', 'rolesSspAccess': 'Crypt o Office r - AES key: W,E - HMAC'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': 'key: W,E'}, {'name': 'Authenticat ed encryption', 'description': 'Encrypt and authentica te a plaintext', 'indicator': 'crypto_aead_setke y returns 0', 'inputs': 'AES key, plaintext', 'outputs': 'Cipherte xt, MAC tag', 'secFunImpl': 'Authenticat ed encryption', 'rolesSspAccess': 'Crypt o Office r - AES key: W,E - HMAC key: W,E'}, {'name': 'Authenticat ed decryption', 'description': 'Decrypt and authentica te a ciphertext', 'indicator': 'crypto_aead_setke y returns 0', 'inputs': 'AES key, ciphertex t, MAC tag', 'outputs': 'Plaintext or failure', 'secFunImpl': 'Authenticat ed decryption', 'rolesSspAccess': 'Crypt o Office r - AES key: W,E - HMAC key: W,E'}, {'name': 'Error detection code', 'description': 'Compute an EDC (crc32c, crct10dif)', 'indicator': 'None', 'inputs': 'Message', 'outputs': 'EDC', 'secFunImpl': 'None', 'rolesSspAccess': 'Crypt o Office r'}, {'name': 'Memory copy operation', 'description': 'Copy operation', 'indicator': 'None', 'inputs': 'Source, destinati on, offset, amount', 'outputs': 'Return codes and/or log message s', 'secFunImpl': 'None', 'rolesSspAccess': 'Crypt o Office r'}, {'name': 'Generic system call', 'description': 'Use the kernel to perform various non- cryptograp hic operations', 'indicator': 'None', 'inputs': 'Identifier , various argumen ts', 'outputs': 'Various return values', 'secFunImpl': 'None', 'rolesSspAccess': 'Crypt o Office r'}, {'name': 'Show status', 'description': 'Return the module status', 'indicator': 'None', 'inputs': 'N/A', 'outputs': 'Module status', 'secFunImpl': 'None', 'rolesSspAccess': 'Crypt o Office r'}, {'name': 'Self-tests', 'description': 'Perform the CASTs', 'indicator': 'None', 'inputs': 'N/A', 'outputs': 'Pass/fail', 'secFunImpl': 'Symmetric encryption', 'rolesSspAccess': 'Crypt o'}, {'name': '', 'description': 'and the integrity test', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': 'Message authenticat ion Random number generation Message digest Symmetric decryption Authenticat ed encryption Authenticat ed decryption (OpenSSL) Message authenticat ion', 'rolesSspAccess': 'Office r'}, {'name': 'Zeroization', 'description': 'Zeroize all SSPs', 'indicator': 'None', 'inputs': 'Any SSP', 'outputs': 'N/A', 'secFunImpl': 'None', 'rolesSspAccess': 'Crypt o Office r - AES key: Z - HMAC key: Z - DRBG entro py input string : Z - DRBG intern al state (V, Key): Z - DRBG'}, {'name': '', 'description': '', 'indicator': '', 'inputs': '', 'outputs': '', 'secFunImpl': '', 'rolesSspAccess': 'intern al state (V, C): Z - DRBG seed: Z'}, {'name': 'Show version', 'description': 'Return the module name and version', 'indicator': 'None', 'inputs': 'N/A', 'outputs': 'Name and version informati on', 'secFunImpl': 'None', 'rolesSspAccess': 'Crypt o Office r'}]}, 'non_approved_services': {'section': 4, 'subsection': 4, 'found': True, 'entries': [{'name': 'Authenticated encryption', 'description': 'Perform AES-GCM encryption', 'alg_accessed': 'AES-GCM', 'role': 'CO'}, {'name': 'Authenticated decryption', 'description': 'Perform AES-GCM decryption', 'alg_accessed': 'AES-GCM', 'role': 'CO'}, {'name': 'RSA encryption primitive', 'description': 'Compute the raw RSA encryption of a number', 'alg_accessed': 'RSA', 'role': 'CO'}, {'name': 'RSA decryption primitive', 'description': 'Compute the raw RSA decryption of a number', 'alg_accessed': 'RSA', 'role': 'CO'}, {'name': 'RSA signature generation primitive', 'description': 'Generate a digital signature for a pre- hashed message', 'alg_accessed': 'RSA', 'role': 'CO'}, {'name': 'RSA signature verification primitive', 'description': 'Verify a digital signature for a pre- hashed message', 'alg_accessed': 'RSA', 'role': 'CO'}, {'name': 'RSA signature verification', 'description': 'Verify RSA-based signature', 'alg_accessed': 'RSA', 'role': 'CO'}]}, 'mechanisms_actions': {'section': 7, 'subsection': 1, 'found': False, 'entries': []}, 'storage_areas': {'section': 9, 'subsection': 1, 'found': True, 'entries': [{'name': 'RAM', 'description': 'Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs', 'persistance': 'Dynamic'}]}, 'ssp_io_methods': {'section': 9, 'subsection': 2, 'found': True, 'entries': [{'name': 'API input parameter s', 'source': 'Operator calling applicatio n (TOEPP)', 'dest': 'Cryptographi c module', 'format': 'Plaintex t', 'distribution': 'Manual', 'entry': 'Electroni c', 'sfiAlgo': ''}, {'name': 'AF_ALG type sockets (input)', 'source': 'Operator calling applicatio n (TOEPP)', 'dest': 'Cryptographi c module', 'format': 'Plaintex t', 'distribution': 'Manual', 'entry': 'Electroni c', 'sfiAlgo': ''}]}, 'ssp_zeroization_methods': {'section': 9, 'subsection': 3, 'found': True, 'entries': [{'method': 'Wipe and Free memory block allocated', 'description': 'Zeroizes the SSPs contained within the cipher handle.', 'rationale': 'Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded.', 'operatorId': 'By calling the cipher related zeroization APIs: appropriate zeroization functions: AES key: crypto_free_skcipher and crypto_free_aead; HMAC key: crypto_free_shash and crypto_free_ahash; DRBG entropy input string, DRBG seed, DRBG internal state: crypto_free_rng'}, {'method': 'Module Reset', 'description': 'De-allocates the volatile memory used to store SSPs', 'rationale': 'Volatile memory used by the module is overwritten within nanoseconds when power is removed.', 'operatorId': 'By unloading and reloading the module'}]}, 'self_tests': {'section': 10, 'subsection': 1, 'found': True, 'entries': [{'algorithmOrTest': 'HMAC- SHA2-256 (A4246)', 'testProps': '128-bit key', 'testMethod': 'Message Authentication', 'type': 'SW/FW Integrity', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Integrity test for static kernel binary.'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A4246)', 'testProps': '128-bit key', 'testMethod': 'Message Authentication', 'type': 'SW/FW Integrity', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Integrity test for fips_chk_hmac.'}]}, 'cond_self_tests': {'section': 10, 'subsection': 2, 'found': True, 'entries': [{'algorithmOrTest': 'SHA-1 (A3599)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA-1 (A3603)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA-1 (A3604)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA-1 (A3605)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-224 (A3599)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-224 (A3603)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-224 (A3604)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-224 (A3605)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-256 (A3599)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-256 (A3603)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-256 (A3604)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-256 (A3605)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-384 (A3599)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-384 (A3603)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-384 (A3604)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-384 (A3605)', 'testProps': '0-8184 bit messages', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-512 (A3599)', 'testProps': '0-8184 bit message', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-512 (A3603)', 'testProps': '0-8184 bit message', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-512 (A3604)', 'testProps': '0-8184 bit message', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'SHA2-512 (A3605)', 'testProps': '0-8184 bit message', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message digest', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-ECB (A3599)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-ECB (A3600)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-ECB (A3601)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-ECB (A3602)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CBC (A3599)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CBC (A3600)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CBC (A3601)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CBC (A3602)', 'testProps': '128, 192, 256 bit keys;', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': '', 'testProps': 'encrypt and decrypt', 'testMethod': '', 'type': '', 'indicator': '', 'details': '', 'condition': ''}, {'algorithmOrTest': 'AES-CTR (A3599)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CTR (A3600)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CTR (A3601)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CTR (A3602)', 'testProps': '128, 192, 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-XTS Testing Revision 2.0 (A3599)', 'testProps': '128 and 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-XTS Testing Revision 2.0 (A3600)', 'testProps': '128 and 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-XTS Testing Revision 2.0 (A3601)', 'testProps': '128 and 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-XTS Testing Revision 2.0 (A3602)', 'testProps': '128 and 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Symmetric operation', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CMAC (A3599)', 'testProps': '128 and 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CMAC (A3601)', 'testProps': '128 and 256 bit keys; encrypt and decrypt', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'AES-CMAC (A3602)', 'testProps': '128 and 256 bit keys;', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': '', 'testProps': 'encrypt and decrypt', 'testMethod': '', 'type': '', 'indicator': '', 'details': '', 'condition': ''}, {'algorithmOrTest': 'HMAC- SHA-1 (A3599)', 'testProps': 'SHA-1 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA-1 (A3603)', 'testProps': 'SHA-1 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA-1 (A3604)', 'testProps': 'SHA-1 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA-1 (A3605)', 'testProps': 'SHA-1 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-224 (A3599)', 'testProps': 'SHA2-224 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-224 (A3603)', 'testProps': 'SHA2-224 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-224 (A3604)', 'testProps': 'SHA2-224 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-224 (A3605)', 'testProps': 'SHA2-224 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A3599)', 'testProps': 'SHA2-256 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A3603)', 'testProps': 'SHA2-256 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A3604)', 'testProps': 'SHA2-256 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A3605)', 'testProps': 'SHA2-256 with 32-64 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-384 (A3599)', 'testProps': 'SHA2-384 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-384 (A3603)', 'testProps': 'SHA2-384 with 32-', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': '', 'testProps': '1048 bit keys', 'testMethod': '', 'type': '', 'indicator': '', 'details': '', 'condition': ''}, {'algorithmOrTest': 'HMAC- SHA2-384 (A3604)', 'testProps': 'SHA2-384 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-384 (A3605)', 'testProps': 'SHA2-384 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-512 (A3599)', 'testProps': 'SHA2-512 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-512 (A3603)', 'testProps': 'SHA2-512 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-512 (A3604)', 'testProps': 'SHA2-512 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC- SHA2-512 (A3605)', 'testProps': 'SHA2-512 with 32- 1048 bit keys', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Message authentication', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Counter DRBG (A3599)', 'testProps': '128, 192, 256 bit keys With DF, With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Counter DRBG (A3600)', 'testProps': '128, 192, 256 bit keys With DF, With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Counter DRBG (A3601)', 'testProps': '128, 192, 256 bit keys With DF, With/without PR; Health', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': '', 'testProps': 'test per section 11.3 of SP 800- 90Arev1', 'testMethod': '', 'type': '', 'indicator': '', 'details': '', 'condition': ''}, {'algorithmOrTest': 'Counter DRBG (A3602)', 'testProps': '128, 192, 256 bit keys With DF, With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Hash DRBG (A3599)', 'testProps': 'SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Hash DRBG (A3600)', 'testProps': 'SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Hash DRBG (A3601)', 'testProps': 'SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Hash DRBG (A3603)', 'testProps': 'SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Hash DRBG (A3604)', 'testProps': 'SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'Hash DRBG (A3605)', 'testProps': 'SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC DRBG (A3599)', 'testProps': 'HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC DRBG (A3600)', 'testProps': 'HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC DRBG (A3601)', 'testProps': 'HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': '', 'testProps': 'of SP 800- 90Arev1', 'testMethod': '', 'type': '', 'indicator': '', 'details': '', 'condition': ''}, {'algorithmOrTest': 'HMAC DRBG (A3603)', 'testProps': 'HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC DRBG (A3604)', 'testProps': 'HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'HMAC DRBG (A3605)', 'testProps': 'HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational', 'details': 'Compliant with SP 800-90Ar1', 'condition': 'Module initialization'}, {'algorithmOrTest': 'ENT (NP)', 'testProps': '1024 samples', 'testMethod': 'RCT', 'type': 'CAST', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Entropy source start-up test', 'condition': 'Entropy source initialization'}, {'algorithmOrTest': 'ENT (NP)', 'testProps': '1024 samples', 'testMethod': 'APT', 'type': 'CAST', 'indicator': 'Module becomes operational and services are', 'details': 'Entropy source start-up test', 'condition': 'Entropy source initialization'}, {'algorithmOrTest': '', 'testProps': '', 'testMethod': '', 'type': '', 'indicator': 'available for use.', 'details': '', 'condition': ''}, {'algorithmOrTest': 'ENT (NP)', 'testProps': 'Cutoff C = 61', 'testMethod': 'RCT', 'type': 'CAST', 'indicator': 'Entropy source is operational', 'details': 'Entropy source continuous test', 'condition': 'Continuously'}, {'algorithmOrTest': 'ENT (NP)', 'testProps': 'Cutoff C = 355', 'testMethod': 'APT', 'type': 'CAST', 'indicator': 'Entropy source is operational', 'details': 'Entropy source continuous test', 'condition': 'Continuously'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A4249)', 'testProps': 'SHA2-256 with 256 bit key', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Message authentication. Makes use of HMAC from bound OpenSSL module.', 'condition': 'Module initialization. Before integrity test.'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A4248)', 'testProps': 'SHA2-256 with 256 bit key', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Message authentication. Makes use of HMAC from bound OpenSSL module.', 'condition': 'Module initialization. Before integrity test.'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A4247)', 'testProps': 'SHA2-256 with 256 bit key', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Message authentication. Makes use of HMAC from bound OpenSSL module.', 'condition': 'Module initialization. Before integrity test.'}, {'algorithmOrTest': 'HMAC- SHA2-256 (A4246)', 'testProps': 'SHA2-256 with 256 bit key', 'testMethod': 'KAT', 'type': 'CAST', 'indicator': 'Module becomes operational and services are available for use.', 'details': 'Message authentication. Makes use of HMAC from bound OpenSSL module.', 'condition': 'Module initialization. Before integrity test.'}]}, 'error_states': {'section': 10, 'subsection': 4, 'found': True, 'entries': [{'name': 'Error State', 'description': 'The Linux kernel immediately stops executing', 'conditions': 'Any self-test failure', 'recoveryMethod': 'Restart of the module', 'indicator': 'Kernel Panic'}]}}.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 3}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['SHA2-384A3605', 'HMAC-SHA2-512A3605', 'HMAC DRBGA3605', 'AES-CBCA3602', 'SHA-1A3605', 'AES-ECBA3602', 'HMAC-SHA-1A3605', 'SHA2-224A3605', 'Counter DRBGA3602', 'HMAC-SHA2-256A3605', 'AES-CMACA3602', 'SHA2-256A3605', 'SHA2-512A3605', 'HMAC-SHA2-384A3605', 'HMAC-SHA2-224A3605', 'Hash DRBGA3605', 'AES-XTS Testing Revision 2.0A3602', 'AES-CTRA3602']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A4248', '#A3602', '#A3603', '#A4249', '#A3601', '#A4247', '#A4246', '#A3599', '#A3604', '#A3600', '#A3605']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 1}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA2-512': 29}}}}, 'crypto_library': {'__update__': {'OpenSSL': {'__update__': {'OpenSSL': 11}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 198-1': 24}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A4248', '#A3602', '#A3603', '#A4249', '#A3601', '#A4247', '#A4246', '#A3599', '#A3604', '#A3600', '#A3605']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '3465cba2aff68d15d1907483af9df7330ce2d5802d4f107793e665a3b971c9b1', 'json_hash': '56e0500815ab1c5bb6e383efd3ff76e4afe733abc296490fbdd6a1a00c1f410e'} data.
27.07.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Moved to historical list due to dependency on certificate #4775.

The date_sunset property was set to None.
16.02.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The date_sunset property was set to 2029-09-02.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
24.02.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The exceptions property was updated.
18.11.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The policy_processed_references property was updated, with the {'directly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4878']}}, 'indirectly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4878']}}} data.

The module_processed_references property was updated, with the {'directly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4878']}}, 'indirectly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4878']}}} data.
14.10.2024

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2024_011024_0217.pdf.
08.10.2024

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The policy_processed_references property was updated, with the {'directly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4820']}}, 'indirectly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4820']}}} data.

The module_processed_references property was updated, with the {'directly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4820']}}, 'indirectly_referenced_by': {'__add__': {'_type': 'Set', 'elements': ['4820']}}} data.
09.09.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4776,
  "dgst": "e408bd948222ee13",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA-1A3605",
        "Hash DRBGA3605",
        "#A3601",
        "HMAC-SHA2-384A3605",
        "AES-CTRA3602",
        "SHA2-256A3605",
        "#A4249",
        "#A4246",
        "#A3602",
        "Counter DRBGA3602",
        "#A3605",
        "#A3599",
        "SHA2-224A3605",
        "HMAC-SHA2-224A3605",
        "HMAC-SHA-1A3605",
        "SHA2-384A3605",
        "HMAC-SHA2-256A3605",
        "#A3604",
        "HMAC-SHA2-512A3605",
        "#A4248",
        "AES-ECBA3602",
        "#A4247",
        "#A3603",
        "HMAC DRBGA3605",
        "AES-CMACA3602",
        "SHA2-512A3605",
        "AES-CBCA3602",
        "#A3600",
        "AES-XTS Testing Revision 2.0A3602"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4878",
          "4775",
          "4820"
        ]
      },
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "4775"
        ]
      },
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4776",
          "4878",
          "4775",
          "4820"
        ]
      },
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "4775",
          "4776"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "4775"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4878",
          "4775",
          "4820"
        ]
      },
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "4775"
        ]
      },
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "4776",
          "4878",
          "4775",
          "4820"
        ]
      },
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "4775",
          "4776"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "4775"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 0,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A3599",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3600",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3601",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A3602",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CMAC",
            "cavpCertName": "A3602",
            "properties": "-",
            "reference": "SP 800-38B"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A3602",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A3602",
            "properties": "-",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-XTS Testing Revision 2.0",
            "cavpCertName": "A3602",
            "properties": "-",
            "reference": "SP 800-38E"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A3602",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A3603",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A3604",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "Hash DRBG",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC DRBG",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "HMAC-SHA-1",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-224",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 198-1 FIPS"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "SHA-1",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-224",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-256",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-384",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "SHA2-512",
            "cavpCertName": "A3605",
            "properties": "-",
            "reference": "FIPS 180-4"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A4249",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A4246",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A4247",
            "properties": "-",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A4248",
            "properties": "-",
            "reference": "FIPS 198-1"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Compute SHA hashes",
            "indicator": "crypto_shash_init returns 0",
            "inputs": "Message",
            "name": "Message digest",
            "outputs": "Digest value",
            "rolesSspAccess": "Crypt o Office r",
            "secFunImpl": "Message digest"
          },
          {
            "description": "Perform AES encryption",
            "indicator": "crypto_skcipher_s etkey returns 0",
            "inputs": "AES key, plaintext",
            "name": "Symmetric encryption",
            "outputs": "Cipherte xt",
            "rolesSspAccess": "Crypt o Office r - AES key: W,E",
            "secFunImpl": "Symmetric encryption"
          },
          {
            "description": "Perform AES decryption",
            "indicator": "crypto_skcipher_s etkey returns 0",
            "inputs": "AES key, ciphertex t",
            "name": "Symmetric decryption",
            "outputs": "Plaintext",
            "rolesSspAccess": "Crypt o Office r - AES key: W,E",
            "secFunImpl": "Symmetric decryption"
          },
          {
            "description": "Generate random numbers",
            "indicator": "crypto_rng_get_by tes returns 0",
            "inputs": "Output length",
            "name": "Random number generation",
            "outputs": "Random bytes",
            "rolesSspAccess": "Crypt o Office r - DRBG entro py input string : W,E - DRBG seed: G,E - DRBG intern al state (V, Key): G,W,E - DRBG intern al state (V, C): G,W,E",
            "secFunImpl": "Random number generation"
          },
          {
            "description": "Compute HMAC/AES -based CMAC",
            "indicator": "crypto_shash_init returns 0",
            "inputs": "AES: AES key, message ; HMAC: HMAC key, message",
            "name": "Message authenticat ion",
            "outputs": "MAC tag",
            "rolesSspAccess": "Crypt o Office r - AES key: W,E - HMAC",
            "secFunImpl": "Message authenticat ion"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "key: W,E",
            "secFunImpl": ""
          },
          {
            "description": "Encrypt and authentica te a plaintext",
            "indicator": "crypto_aead_setke y returns 0",
            "inputs": "AES key, plaintext",
            "name": "Authenticat ed encryption",
            "outputs": "Cipherte xt, MAC tag",
            "rolesSspAccess": "Crypt o Office r - AES key: W,E - HMAC key: W,E",
            "secFunImpl": "Authenticat ed encryption"
          },
          {
            "description": "Decrypt and authentica te a ciphertext",
            "indicator": "crypto_aead_setke y returns 0",
            "inputs": "AES key, ciphertex t, MAC tag",
            "name": "Authenticat ed decryption",
            "outputs": "Plaintext or failure",
            "rolesSspAccess": "Crypt o Office r - AES key: W,E - HMAC key: W,E",
            "secFunImpl": "Authenticat ed decryption"
          },
          {
            "description": "Compute an EDC (crc32c, crct10dif)",
            "indicator": "None",
            "inputs": "Message",
            "name": "Error detection code",
            "outputs": "EDC",
            "rolesSspAccess": "Crypt o Office r",
            "secFunImpl": "None"
          },
          {
            "description": "Copy operation",
            "indicator": "None",
            "inputs": "Source, destinati on, offset, amount",
            "name": "Memory copy operation",
            "outputs": "Return codes and/or log message s",
            "rolesSspAccess": "Crypt o Office r",
            "secFunImpl": "None"
          },
          {
            "description": "Use the kernel to perform various non- cryptograp hic operations",
            "indicator": "None",
            "inputs": "Identifier , various argumen ts",
            "name": "Generic system call",
            "outputs": "Various return values",
            "rolesSspAccess": "Crypt o Office r",
            "secFunImpl": "None"
          },
          {
            "description": "Return the module status",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show status",
            "outputs": "Module status",
            "rolesSspAccess": "Crypt o Office r",
            "secFunImpl": "None"
          },
          {
            "description": "Perform the CASTs",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Self-tests",
            "outputs": "Pass/fail",
            "rolesSspAccess": "Crypt o",
            "secFunImpl": "Symmetric encryption"
          },
          {
            "description": "and the integrity test",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Office r",
            "secFunImpl": "Message authenticat ion Random number generation Message digest Symmetric decryption Authenticat ed encryption Authenticat ed decryption (OpenSSL) Message authenticat ion"
          },
          {
            "description": "Zeroize all SSPs",
            "indicator": "None",
            "inputs": "Any SSP",
            "name": "Zeroization",
            "outputs": "N/A",
            "rolesSspAccess": "Crypt o Office r - AES key: Z - HMAC key: Z - DRBG entro py input string : Z - DRBG intern al state (V, Key): Z - DRBG",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "intern al state (V, C): Z - DRBG seed: Z",
            "secFunImpl": ""
          },
          {
            "description": "Return the module name and version",
            "indicator": "None",
            "inputs": "N/A",
            "name": "Show version",
            "outputs": "Name and version informati on",
            "rolesSspAccess": "Crypt o Office r",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA-1 (A3599)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A3603)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A3604)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA-1 (A3605)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3599)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3603)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3604)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-224 (A3605)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3599)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3603)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3604)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A3605)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3599)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3603)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3604)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A3605)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit messages",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3599)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit message",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3603)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit message",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3604)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit message",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A3605)",
            "condition": "Module initialization",
            "details": "Message digest",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "0-8184 bit message",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3599)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3600)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3601)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A3602)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3599)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3600)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3601)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A3602)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys;",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "encrypt and decrypt",
            "type": ""
          },
          {
            "algorithmOrTest": "AES-CTR (A3599)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3600)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3601)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CTR (A3602)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3599)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3600)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3601)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-XTS Testing Revision 2.0 (A3602)",
            "condition": "Module initialization",
            "details": "Symmetric operation",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A3599)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A3601)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys; encrypt and decrypt",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CMAC (A3602)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128 and 256 bit keys;",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "encrypt and decrypt",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC- SHA-1 (A3599)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA-1 (A3603)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA-1 (A3604)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA-1 (A3605)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-224 (A3599)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-224 (A3603)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-224 (A3604)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-224 (A3605)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-224 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A3599)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A3603)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A3604)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A3605)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 32-64 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-384 (A3599)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-384 (A3603)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384 with 32-",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "1048 bit keys",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC- SHA2-384 (A3604)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-384 (A3605)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-384 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-512 (A3599)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-512 (A3603)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-512 (A3604)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-512 (A3605)",
            "condition": "Module initialization",
            "details": "Message authentication",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA2-512 with 32- 1048 bit keys",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3599)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys With DF, With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3600)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys With DF, With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A3601)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys With DF, With/without PR; Health",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "test per section 11.3 of SP 800- 90Arev1",
            "type": ""
          },
          {
            "algorithmOrTest": "Counter DRBG (A3602)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "128, 192, 256 bit keys With DF, With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3599)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3600)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3601)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3603)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3604)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Hash DRBG (A3605)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "SHA-1, SHA2-256, SHA2-512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3599)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3600)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3601)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "",
            "testProps": "of SP 800- 90Arev1",
            "type": ""
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3603)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3604)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC DRBG (A3605)",
            "condition": "Module initialization",
            "details": "Compliant with SP 800-90Ar1",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC-SHA- 1, HMAC- SHA2-256, HMAC-SHA2- 512 With/without PR; Health test per section 11.3 of SP 800- 90Arev1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ENT (NP)",
            "condition": "Entropy source initialization",
            "details": "Entropy source start-up test",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "RCT",
            "testProps": "1024 samples",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ENT (NP)",
            "condition": "Entropy source initialization",
            "details": "Entropy source start-up test",
            "indicator": "Module becomes operational and services are",
            "testMethod": "APT",
            "testProps": "1024 samples",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "",
            "condition": "",
            "details": "",
            "indicator": "available for use.",
            "testMethod": "",
            "testProps": "",
            "type": ""
          },
          {
            "algorithmOrTest": "ENT (NP)",
            "condition": "Continuously",
            "details": "Entropy source continuous test",
            "indicator": "Entropy source is operational",
            "testMethod": "RCT",
            "testProps": "Cutoff C = 61",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ENT (NP)",
            "condition": "Continuously",
            "details": "Entropy source continuous test",
            "indicator": "Entropy source is operational",
            "testMethod": "APT",
            "testProps": "Cutoff C = 355",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A4249)",
            "condition": "Module initialization. Before integrity test.",
            "details": "Message authentication. Makes use of HMAC from bound OpenSSL module.",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A4248)",
            "condition": "Module initialization. Before integrity test.",
            "details": "Message authentication. Makes use of HMAC from bound OpenSSL module.",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A4247)",
            "condition": "Module initialization. Before integrity test.",
            "details": "Message authentication. Makes use of HMAC from bound OpenSSL module.",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 256 bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A4246)",
            "condition": "Module initialization. Before integrity test.",
            "details": "Message authentication. Makes use of HMAC from bound OpenSSL module.",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "KAT",
            "testProps": "SHA2-256 with 256 bit key",
            "type": "CAST"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Any self-test failure",
            "description": "The Linux kernel immediately stops executing",
            "indicator": "Kernel Panic",
            "name": "Error State",
            "recoveryMethod": "Restart of the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [
          {
            "description": "Automatically entered whenever an approved service is requested",
            "name": "Approved mode",
            "statusIndicator": "Equivalent to the indicator of the requested service as defined in Section 4.3",
            "type": "Approved"
          },
          {
            "description": "Automatically entered whenever a non-approved service is requested",
            "name": "Non- approved mode",
            "statusIndicator": "Equivalent to the indicator of the requested service as defined in Section 4.3",
            "type": "Non- Approved"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES- GCM",
            "use": "Authenticated Encryption and Decryption"
          },
          {
            "name": "RSA",
            "use": "RSA Encryption and Decryption primitives"
          },
          {
            "name": "RSA",
            "use": "RSA Signature Verification"
          },
          {
            "name": "RSA",
            "use": "Signature Generation and Signature Verification primitives with PKCS#1 v1.5 padding"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "AES-GCM",
            "description": "Perform AES-GCM encryption",
            "name": "Authenticated encryption",
            "role": "CO"
          },
          {
            "alg_accessed": "AES-GCM",
            "description": "Perform AES-GCM decryption",
            "name": "Authenticated decryption",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA",
            "description": "Compute the raw RSA encryption of a number",
            "name": "RSA encryption primitive",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA",
            "description": "Compute the raw RSA decryption of a number",
            "name": "RSA decryption primitive",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA",
            "description": "Generate a digital signature for a pre- hashed message",
            "name": "RSA signature generation primitive",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA",
            "description": "Verify a digital signature for a pre- hashed message",
            "name": "RSA signature verification primitive",
            "role": "CO"
          },
          {
            "alg_accessed": "RSA",
            "description": "Verify RSA-based signature",
            "name": "RSA signature verification",
            "role": "CO"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [
          {
            "data": "API input parameters from kernel system calls, AF_ALG type socket",
            "logicalInterface": "Data Input",
            "physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs."
          },
          {
            "data": "API output parameters from kernel system calls, AF_ALG type socket",
            "logicalInterface": "Data Output",
            "physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs."
          },
          {
            "data": "API function calls, API input parameters for control from kernel system calls, AF_ALG type socket, kernel command line",
            "logicalInterface": "Control Input",
            "physicalPort": "As a software-only module, the module does not have physical ports. Physical ports are interpreted to be the physical ports of the hardware platform on which it runs."
          },
          {
            "data": "API return codes, AF_ALG type socket, kernel logs",
            "logicalInterface": "Status Output",
            "physicalPort": "As a software-only module, the module does not have physical ports. Physical Ports are interpreted to be the physical ports of the hardware platform on which it runs."
          }
        ],
        "found": true,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "None",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [],
        "found": false,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A4246)",
            "details": "Integrity test for static kernel binary.",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "Message Authentication",
            "testProps": "128-bit key",
            "type": "SW/FW Integrity"
          },
          {
            "algorithmOrTest": "HMAC- SHA2-256 (A4246)",
            "details": "Integrity test for fips_chk_hmac.",
            "indicator": "Module becomes operational and services are available for use.",
            "testMethod": "Message Authentication",
            "testProps": "128-bit key",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "Cryptographi c module",
            "distribution": "Manual",
            "entry": "Electroni c",
            "format": "Plaintex t",
            "name": "API input parameter s",
            "sfiAlgo": "",
            "source": "Operator calling applicatio n (TOEPP)"
          },
          {
            "dest": "Cryptographi c module",
            "distribution": "Manual",
            "entry": "Electroni c",
            "format": "Plaintex t",
            "name": "AF_ALG type sockets (input)",
            "sfiAlgo": "",
            "source": "Operator calling applicatio n (TOEPP)"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Zeroizes the SSPs contained within the cipher handle.",
            "method": "Wipe and Free memory block allocated",
            "operatorId": "By calling the cipher related zeroization APIs: appropriate zeroization functions: AES key: crypto_free_skcipher and crypto_free_aead; HMAC key: crypto_free_shash and crypto_free_ahash; DRBG entropy input string, DRBG seed, DRBG internal state: crypto_free_rng",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
          },
          {
            "description": "De-allocates the volatile memory used to store SSPs",
            "method": "Module Reset",
            "operatorId": "By unloading and reloading the module",
            "rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "N/A",
            "integrityTest": "HMAC-SHA2-256",
            "packageFileName": "/usr/bin/fips_chk_hmac (makes use of HMAC service from bound OpenSSL module)",
            "swFwVersion": "2.0"
          },
          {
            "features": "N/A",
            "integrityTest": "HMAC-SHA2-256",
            "packageFileName": "/soft/current/bzImage- re-64b.bin",
            "swFwVersion": "2.0"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [
          {
            "hardwarePlatform": "Juniper Networks\u00ae Packet Transport Router Model PTX10001- 36MR",
            "hypervisorHostOs": "",
            "operatingSystem": "Junos OS Evolved version 22.4",
            "paa_pai": "With and without AES- NI, SHA Extensions (PAA)",
            "processors": "Intel(R) Xeon(R) D- 2163IT",
            "version": "2.0"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 2
        },
        "XTS": {
          "XTS": 9
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 11
        }
      },
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 7
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 2
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#4775": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "HMAC- SHA-1": 4,
          "HMAC-SHA- 1": 12,
          "HMAC-SHA-1": 28,
          "PKCS#1": 4,
          "SHA-1": 29,
          "SHA2-224": 22,
          "SHA2-256": 45,
          "SHA2-384": 22,
          "SHA2-512": 29
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 29
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 102
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        }
      },
      "side_channel_analysis": {
        "FI": {
          "Fault Induction": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 51,
          "FIPS 180-4": 21,
          "FIPS 198-1": 24,
          "FIPS PUB 140-3": 2
        },
        "NIST": {
          "SP 800-38A": 13,
          "SP 800-38B": 4,
          "SP 800-38E": 6,
          "SP 800-90A": 16,
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS#1": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 25,
            "AES-": 2
          },
          "CAST": {
            "CAST": 167
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3,
            "HMAC": 49
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHA-1A3605",
        "AES-CMACA3602",
        "SHA2-512A3605",
        "Hash DRBGA3605",
        "HMAC-SHA2-512A3605",
        "SHA2-224A3605",
        "AES-CTRA3602",
        "AES-ECBA3602",
        "HMAC-SHA2-224A3605",
        "AES-CBCA3602",
        "HMAC-SHA-1A3605",
        "HMAC-SHA2-384A3605",
        "SHA2-256A3605",
        "HMAC DRBGA3605",
        "SHA2-384A3605",
        "HMAC-SHA2-256A3605",
        "Counter DRBGA3602",
        "AES-XTS Testing Revision 2.0A3602"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3605",
        "#A3599",
        "#A3600",
        "#A4246",
        "#A4248",
        "#A4247",
        "#A4249",
        "#A3602",
        "#A3604",
        "#A3603",
        "#A3601"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20240829104637Z00\u002700\u0027",
      "/ModDate": "D:20240829104637Z00\u002700\u0027",
      "/Producer": "macOS Versione 13.4.1 (c) (Build 22F770820d) Quartz PDFContext",
      "pdf_file_size_bytes": 785462,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "http://www.atsec.com/",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "http://www.juniper.net/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 46
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "56e0500815ab1c5bb6e383efd3ff76e4afe733abc296490fbdd6a1a00c1f410e",
      "source_hash": "b977fcc787657ee671139f88db4706a76b9c5dccdc2b339dfad4f3ea2b6737d3",
      "txt_hash": "3465cba2aff68d15d1907483af9df7330ce2d5802d4f107793e665a3b971c9b1"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy with module Junos\u00ae OS Evolved OpenSSL Cryptographic Module version 3.0.8 validated to FIPS 140-3 under Cert. #4775 operating in the approved mode. The module generates random strings whose strengths are modified by available entropy.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/September 2024_011024_0217.pdf",
    "date_sunset": null,
    "description": "The Juniper Kernel Cryptographic Module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to dependency on certificate #4775",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {
      "4775": 1
    },
    "module_name": "Junos\u00ae OS Evolved Kernel Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "historical",
    "sw_versions": "2.0",
    "tested_conf": [
      "Junos\u00ae OS Evolved version 22.4 running on Juniper Networks\u00ae Packet Transport Router Model PTX10001-36MR with Intel\u00ae Xeon\u00ae D-2163IT with PAA",
      "Junos\u00ae OS Evolved version 22.4 running on Juniper Networks\u00ae Packet Transport Router Model PTX10001-36MR with Intel\u00ae Xeon\u00ae D-2163IT without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-09-03",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Juniper Networks, Inc.",
    "vendor_url": "http://www.juniper.net"
  }
}

Sections

Junos® OS Evolved Kernel Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Hash functions

Schemes

Randomness

Libraries

Block cipher modes

Security level

Side-channel analysis

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Junos® OS Evolved Kernel Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Hash functions

Schemes

Randomness

Libraries

Block cipher modes

Security

Security level

Side-channel analysis

Other

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data