IBM® z/OS® Version 1 Release 10 System SSL Cryptographic Module

Certificate details

Certificate ID #1389
Status historical
Historical reason RNG SP800-131A Revision 1 Transition
Validation dates 12.08.2010
Standard FIPS 140-2
Security level 1
Type Software-Hybrid
Embodiment Multi-Chip Stand Alone
Caveat When operated in FIPS mode
Exceptions
  • Cryptographic Module Specification: Level 3
  • Tested as meeting Level 1 with IBM System z10™ Enterprise Class (z10 EC) with CP Assist for Cryptographic Functions DES/TDES Enablement Feature 3863 [Base GPC, Crypto Express2 Card (Coprocessor (CEX2C))
  • Crypto Express2 Card (Accelerator (CEX2A)) and Crypto Express2 Cards (Coprocessor (CEX2C) and Accelerator (CEX2A))] [IBM System z10™ Enterprise Class (z10 EC) with CP Assist for Cryptographic Functions DES/TDES Enablement Feature 3863 includes FC3863 w/System Driver Level 76 and z/OS® V1R10] (single-user mode)
Description System SSL is a set of generic services provided in z/OS® to protect TCP/IP communications using the SSL/TLS protocol. System SSL is exploited by many SSL enabled servers and clients in z/OS® to meet the transport security constraints required in an On Demand environment. The System SSL APIs are also externalized to customer applications. System SSL has evolved through the latest releases of z/OS® to support the new TLS (Transaction Layer Security) standard, to reach an unmatched level of performance and to extend the APIs available to applications to new functions.
Version (Hardware) FC3863 w/System Driver Level 76, CEX2A and CEX2C [CEX2A and CEX2C are separately configured versions of 4764-001 (P/Ns 12R6536, 12R8241, 12R8561 or 41U0438)]
Version (Firmware) 4764-001(2096a16d) or 4764-001(c16f4102)
Vendor IBM® Corporation http://www.IBM.com
Lab atsec information security corporation
Algorithms
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, RC2, DES, TDES, HMAC
Asymmetric Algorithms
Diffie-Hellman, DH, DSA
Hash functions
SHA-1, SHA-224, SHA-384, SHA-256, SHA-512, SHA-2, SHA2, MD5
Schemes
Key agreement
Protocols
SSL, SSL 3.0
Randomness
TRNG, RNG
Block cipher modes
CBC

Security level
Level 1

Title z/OS V1R10 System SSL Security Policy
Author Alyson Comer
Creation date D:20100805164131-04'00'
Modification date D:20100805160311-05'00'
Pages 32
Creator Lotus Symphony Documents
Producer Lotus Symphony

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 1389,
  "dgst": "e40a3fa00fd2788c",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#4764",
        "#618",
        "SHS#1030",
        "DSA#356",
        "Triple-DES#805",
        "Triple-DES#769",
        "#619",
        "#976",
        "SHS#1029",
        "#769",
        "RSA#521",
        "#518",
        "RSA#517",
        "#1030",
        "RNG#615",
        "RSA#519",
        "#519",
        "#946",
        "SHS#946",
        "HMAC#618",
        "#1106",
        "#355",
        "#805",
        "#1029",
        "RNG#614",
        "RSA#520",
        "HMAC#619",
        "#804",
        "DSA#355",
        "Triple-DES#804",
        "#521",
        "#356",
        "RSA#518",
        "#1107",
        "AES#1106",
        "AES#976",
        "AES#1107",
        "#517"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "10",
        "4764",
        "001",
        "76",
        "1"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 39,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "DH": 5,
            "Diffie-Hellman": 5
          },
          "DSA": {
            "DSA": 20
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 158,
            "SSL 3.0": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key agreement": 1
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#10": 2,
          "#1029": 2,
          "#1106": 1,
          "#12": 1,
          "#355": 3,
          "#517": 3,
          "#519": 2,
          "#521": 1,
          "#614": 2,
          "#618": 1,
          "#769": 2,
          "#804": 1,
          "#946": 4,
          "#976": 2
        }
      },
      "fips_certlike": {
        "Certlike": {
          "#1107 AES": 1,
          "#518 RSA": 2,
          "#521 RSA": 1,
          "AES 128": 2,
          "Cert #519 RSA": 2,
          "Cert #976 AES": 2,
          "HMAC-SHA-1": 4,
          "HMAC-SHA1": 2,
          "PKCS #10": 4,
          "PKCS #12": 2,
          "PKCS#1": 14,
          "PKCS#10": 12,
          "PKCS#11": 12,
          "PKCS#12": 4,
          "PKCS#7": 56,
          "PKCS#8": 4,
          "SHA-1": 6,
          "SHA-2": 2,
          "SHA-224": 4,
          "SHA-256": 2,
          "SHA-384": 4,
          "SHA-512": 2,
          "SHA2": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 5
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 1
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-2": 2,
            "SHA-224": 4,
            "SHA-256": 2,
            "SHA-384": 4,
            "SHA-512": 2,
            "SHA2": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "RNG": {
          "RNG": 3
        },
        "TRNG": {
          "TRNG": 5
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 40,
          "FIPS 180-1": 2,
          "FIPS 180-2": 3,
          "FIPS 186-2": 3,
          "FIPS 197": 3,
          "FIPS 198": 1
        },
        "PKCS": {
          "PKCS #12": 1,
          "PKCS#1": 7,
          "PKCS#11": 6,
          "PKCS#12": 2,
          "PKCS#7": 28,
          "PKCS#8": 2
        },
        "RFC": {
          "RFC 2459": 1,
          "RFC2459": 1
        },
        "X509": {
          "X.509": 23
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 8
          },
          "RC": {
            "RC2": 2
          }
        },
        "DES": {
          "3DES": {
            "TDES": 16
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 1
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#1030",
        "DSA#356",
        "Triple-DES#805",
        "Triple-DES#769",
        "SHS#1029",
        "RSA#521",
        "RSA#517",
        "RNG#615",
        "RSA#519",
        "SHS#946",
        "HMAC#618",
        "RNG#614",
        "RSA#520",
        "HMAC#619",
        "DSA#355",
        "Triple-DES#804",
        "RSA#518",
        "AES#1106",
        "AES#976",
        "AES#1107"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#355",
        "#805",
        "#4764",
        "#1029",
        "#1107",
        "#618",
        "#769",
        "#518",
        "#1030",
        "#519",
        "#946",
        "#804",
        "#521",
        "#619",
        "#976",
        "#1106",
        "#356",
        "#517"
      ]
    },
    "policy_metadata": {
      "/Author": "Alyson Comer",
      "/CreationDate": "D:20100805164131-04\u002700\u0027",
      "/Creator": "Lotus Symphony Documents",
      "/ModDate": "D:20100805160311-05\u002700\u0027",
      "/Producer": "Lotus Symphony  ",
      "/Title": "z/OS V1R10 System SSL Security Policy",
      "pdf_file_size_bytes": 986875,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 32
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "bb1cd3702622e1857076f76d6425f76bb05c8dbd45855fcbe05e7de55c5e6a2f",
      "source_hash": "a835780906c12d1dfe1bd857660c066a3e31baf6f1150782fd35b91404509801",
      "txt_hash": "cf5516aeaaf37892f35f4965d91a67b47a1f0540ef9cf89b003c758e0526da5d"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt1389.pdf",
    "date_sunset": null,
    "description": "System SSL is a set of generic services provided in z/OS\u00ae to protect TCP/IP communications using the SSL/TLS protocol. System SSL is exploited by many SSL enabled servers and clients in z/OS\u00ae to meet the transport security constraints required in an On Demand environment. The System SSL APIs are also externalized to customer applications. System SSL has evolved through the latest releases of z/OS\u00ae to support the new TLS (Transaction Layer Security) standard, to reach an unmatched level of performance and to extend the APIs available to applications to new functions.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Cryptographic Module Specification: Level 3",
      "Tested as meeting Level 1 with IBM System z10\u2122 Enterprise Class (z10 EC) with CP Assist for Cryptographic Functions DES/TDES Enablement Feature 3863 [Base GPC, Crypto Express2 Card (Coprocessor (CEX2C))",
      "Crypto Express2 Card (Accelerator (CEX2A)) and Crypto Express2 Cards (Coprocessor (CEX2C) and Accelerator (CEX2A))] [IBM System z10\u2122 Enterprise Class (z10 EC) with CP Assist for Cryptographic Functions DES/TDES Enablement Feature 3863 includes FC3863 w/System Driver Level 76 and z/OS\u00ae V1R10] (single-user mode)"
    ],
    "fw_versions": "4764-001(2096a16d) or 4764-001(c16f4102)",
    "historical_reason": "RNG SP800-131A Revision 1 Transition",
    "hw_versions": "FC3863 w/System Driver Level 76, CEX2A and CEX2C [CEX2A and CEX2C are separately configured versions of 4764-001 (P/Ns 12R6536, 12R8241, 12R8561 or 41U0438)]",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "IBM\u00ae z/OS\u00ae Version 1 Release 10 System SSL Cryptographic Module",
    "module_type": "Software-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "APAR OA26457 and APAR OA26109",
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2010-08-12",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "IBM\u00ae Corporation",
    "vendor_url": "http://www.IBM.com"
  }
}