This page was not yet optimized for use on mobile devices.
Amazon Linux 2023 GnuTLS Cryptographic Module
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate details
| Certificate ID | #5476 |
|---|---|
| Status | active |
| Validation dates | 11.08.2026 |
| Sunset date | 10-08-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | GnuTLS is a secure communications library implementing the TLS protocol. It provides a simple C language application programming interface to access the secure communications protocols as well as APIs to parse and write X.509, PKCS#12, and other required structures. |
| Vendor | Amazon Web Services, Inc. https://aws.amazon.com/linux/amazon-linux-2023/ |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-256, AES-, AES-128, Twofish, Serpent, CAST, RC2, RC4, DES, Triple-DES, Salsa20, Poly1305, Blowfish, Camellia, SEED, HMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA-256, SHA-224, SHA-384, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD4, MD5, PBKDF, PBKDF2Schemes
MAC, Key Agreement, Key agreement, AEADProtocols
TLS, TLS v1.2, TLS 1.0, TLS v1.3, TLSv1.0, TLSv1.1, TLSv1.2, TLSv1.3Randomness
DRBG, RNG, RBGLibraries
GnuTLSElliptic Curves
P-256, P-384, P-521Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTLS cipher suites
TLS_DH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DH_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DH_RSA_WITH_AES_128_GCM_SHA256, TLS_DH_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_CCM, TLS_DHE_RSA_WITH_AES_256_CCM, TLS_DHE_RSA_WITH_AES_128_CCM_8, TLS_DHE_RSA_WITH_AES_256_CCM_8Trusted Execution Environments
PSP, SSCSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS140-3, FIPS180-4, FIPS197, FIPS198-1, FIPS202, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-135, SP 800-132, NIST SP 800-57, PKCS#1, RFC7627, RFC5288, RFC8446, RFC3268, RFC5246, RFC4279, RFC4492, RFC5289, RFC6655Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
- cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*
CVE matches
| ID | Links | Severity | CVSS Score | Published on |
|---|---|---|---|---|
| Base score | ||||
| CVE-2024-6387 | HIGH | 8.1 | 01.07.2024 |
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5476,
"dgst": "e5ac171853c6de5e",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KDF TLSA7466",
"HMAC-SHA-1A7518",
"AES-CBCA7518",
"HMAC-SHA2-256A7518",
"SHA2-384A7518",
"#A7516",
"AES-XTS Testing Revision 2.0A7467",
"HMAC-SHA2-224A7518",
"#A7469",
"Counter DRBGA7466",
"HMAC-SHA2-384A7518",
"KDA HKDF Sp800-56Cr1A7465",
"RSA SigGen (FIPS186-5)A7466",
"ECDSA SigGen (FIPS186-5)A7466",
"TLS v1.2 KDF RFC7627A7466",
"#A7519",
"#A7520",
"AES-CCMA7515",
"SHA2-256A7518",
"KAS-FFC-SSC Sp800-56Ar3A7466",
"SHA2-224A7518",
"HMAC-SHA2-512A7518",
"SHA3-512A7519",
"#A7465",
"AES-CFB8A7521",
"#A7468",
"SHA3-256A7519",
"#A7515",
"#A7467",
"#A7517",
"RSA SigVer (FIPS186-5)A7466",
"SHA2-512A7518",
"#A7521",
"#A7464",
"#A7466",
"ECDSA SigVer (FIPS186-5)A7466",
"ECDSA KeyGen (FIPS186-5)A7466",
"AES-GMACA7466",
"AES-CMACA7518",
"AES-GCMA7518",
"PBKDFA7466",
"Safe Primes Key GenerationA7466",
"KAS-ECC-SSC Sp800-56Ar3A7466",
"SHA-1A7518",
"#A7518",
"SHA3-384A7519",
"RSA KeyGen (FIPS186-5)A7466",
"SHA3-224A7519",
"ECDSA KeyVer (FIPS186-5)A7466"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2023"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2024-6387"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A7464, A7466, A7515, A7516, A7517, A7518",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A7464, A7515",
"properties": "Key Length - 128, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0-256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A7469, A7520, A7521",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A7466, A7515, A7518",
"properties": "Direction - Generation Key Length - 128, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A7464, A7466, A7515, A7516, A7517, A7518",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 128, 256, 120, 0",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A7466",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 128, 256, 120, 0",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A7467",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A7466",
"properties": "Prediction Resistance - No Supports Reseed - Yes Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0, 256 Entropy Input - Entropy Input: 384",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Returned Bits - 512 Curve - P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Curve - P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Component - No Curve - P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A7464, A7466, A7518",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A7464, A7466, A7518",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A7464, A7466, A7518",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A7464, A7466, A7518",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A7464, A7466, A7518",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A7466",
"properties": "Domain Parameter Generation Methods - P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A7466",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800-56Cr1",
"cavpCertName": "A7465",
"properties": "Fixed Info Pattern - uPartyInfo||vPartyInfo Fixed Info Encoding - concatenation Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-65336 Increment 8 HMAC Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF TLS (CVL)",
"cavpCertName": "A7466",
"properties": "TLS Version - v1.0/1.1",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A7466",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 HMAC Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512 Password Length - Password Length: 8-128 Increment 1 Salt Length - Salt Length: 128-4096 Increment 8 Key Data Length - Key Data Length: 112-4096 Increment 8",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Key Generation Mode - provable Hash Algorithm - SHA2-384 Modulo - 2048, 3072, 4096, 6144, 8192",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A7466",
"properties": "Hash Pair - Hash Algorithm - SHA2-224 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss Mask Function - mgf1 Public Exponent Mode - random",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A7466",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A7464, A7466, A7518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A7464, A7466, A7518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A7464, A7466, A7518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A7464, A7466, A7518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A7464, A7466, A7518",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A7468, A7519",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A7468, A7519",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A7468, A7519",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A7468, A7519",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A7466",
"properties": "Hash Algorithm - SHA2-256, SHA2-384 Key Block Length - Key Block Length: 1024",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Generate AES or HMAC key",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Key size",
"name": "Symmetric Key Generation",
"outputs": "Key",
"rolesSspAccess": "Crypto Officer - Module- generated AES Key: G - Module- generated HMAC Key: G",
"secFunImpl": "Symmetric Key Generation with Counter DRBG"
},
{
"description": "Perform AES encryption",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Key, IV (for AEAD), Plaintext",
"name": "Symmetric Encryption",
"outputs": "Ciphertext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - AES-GCM IV: W,E",
"secFunImpl": "Symmetric Encryption with AES Authenticated Symmetric Encryption with AES"
},
{
"description": "Perform AES decryption",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Key, IV (for AEAD), Ciphertext",
"name": "Symmetric Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - AES-GCM IV: W,E",
"secFunImpl": "Symmetric Decryption with AES Authenticated Symmetric Decryption with AES"
},
{
"description": "Key wrapping (as part of the cipher suites in the TLS protocol)",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "AES key only or AES key and HMAC key, CSP",
"name": "Key Wrapping",
"outputs": "Wrapped CSP",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - HMAC Key: W,E",
"secFunImpl": "Key Wrapping with AES Key Wrapping with AES and HMAC"
},
{
"description": "Key Unwrapping (as part of the cipher suites in the TLS protocol)",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "AES key only or AES key and HMAC key, Wrapped CSP",
"name": "Key Unwrapping",
"outputs": "CSP",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - HMAC Key: W,E",
"secFunImpl": "Key Unwrapping with AES Key Unwrapping with AES and HMAC"
},
{
"description": "Generate RSA or ECDSA key pairs",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "RSA key size or Elliptic Curve",
"name": "Asymmetric Key Generation",
"outputs": "Key pair",
"rolesSspAccess": "Crypto Officer - Module- generated RSA Public Key: G,R - Module- generated RSA Private Key: G,R - Module- generated ECDSA Public Key: G,R - Module- generated ECDSA Private Key: G,R - Module- generated EC Diffie- Hellman Public Key: G,R - Module- generated EC Diffie- Hellman Private Key: G,R - Intermediate Key Generation Value: G,E",
"secFunImpl": "Key Pair Generation with RSA Key Pair Generation with ECDSA"
},
{
"description": "Perform DH key agreement with safe primes",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Key size",
"name": "Diffie-Hellman Key Generation using Safe Primes",
"outputs": "Key pair",
"rolesSspAccess": "Crypto Officer - Module- generated Diffie- Hellman Public Key: G - Module- generated Diffie- Hellman",
"secFunImpl": "Key Pair Generation with Safe Primes"
},
{
"description": "Generate a digital signature",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Message, hash algorithm, private key",
"name": "ECDSA Digital Signature Generation",
"outputs": "Digital signature",
"rolesSspAccess": "Crypto Officer - ECDSA Private Key: W,E",
"secFunImpl": "Digital Signature Generation with ECDSA"
},
{
"description": "Generate a digital signature",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Message, hash algorithm, private key",
"name": "RSA Digital Signature Generation",
"outputs": "Digital signature",
"rolesSspAccess": "Crypto Officer - RSA Private Key: W,E",
"secFunImpl": "Digital Signature Generation with RSA"
},
{
"description": "Verify a digital signature",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Digital signature, hash algorithm, public key",
"name": "ECDSA Digital Signature Verification",
"outputs": "Verification result",
"rolesSspAccess": "Crypto Officer - ECDSA Public Key: W,E",
"secFunImpl": "Digital Signature Verification with ECDSA"
},
{
"description": "Verify a digital signature",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Digital signature, hash algorithm, public key",
"name": "RSA Digital Signature Verification",
"outputs": "Verification result",
"rolesSspAccess": "Crypto Officer - RSA Public Key: W,E",
"secFunImpl": "Digital Signature Verification with RSA"
},
{
"description": "Verify ECDSA public key",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Key",
"name": "Public Key Verification",
"outputs": "Return codes/log messages",
"rolesSspAccess": "Crypto Officer - ECDSA Public Key: W,E",
"secFunImpl": "Public Key Verification with ECDSA"
},
{
"description": "Generate random bit strings",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Number of bits",
"name": "Random Number Generation",
"outputs": "Random number",
"rolesSspAccess": "Crypto Officer - Entropy Input: W,E - Counter DRBG Seed: G,E - Counter DRBG Internal State: V Value, Key: G,E",
"secFunImpl": "Random Number Generation with Counter DRBG"
},
{
"description": "Compute SHA hashes",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Digest of the message",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest with SHA"
},
{
"description": "Compute HMAC",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Message, HMAC key",
"name": "HMAC Message Authentication Code (MAC)",
"outputs": "Message authentication code (MAC)",
"rolesSspAccess": "Crypto Officer - HMAC Key: W,E",
"secFunImpl": "Message Authentication Code with HMAC"
},
{
"description": "Compute AES-based CMAC or AES-based GMAC",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Message, AES key",
"name": "AES Message Authentication Code Generation (MAC)",
"outputs": "Message authentication code (MAC)",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - AES-GCM IV: W,E",
"secFunImpl": "Message Authentication Code Generation with AES"
},
{
"description": "Verify AES- based GMAC",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Message, AES key",
"name": "AES Message Authentication Code Verification (MAC)",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - AES-GCM IV: W,E",
"secFunImpl": "Message Authentication Code Verification with AES-GCM"
},
{
"description": "Perform DH shared secret computation",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "DH private key, DH public key from peer",
"name": "Diffie-Hellman Shared Secret Computation",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - Diffie- Hellman Public Key: W,E - Diffie- Hellman Private Key:",
"secFunImpl": "Shared Secret Computation with KAS-FFC- SSC"
},
{
"description": "Perform ECDH shared secret computation",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "EC private key, EC public key from peer",
"name": "EC Diffie- Hellman Shared Secret Computation",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - EC Diffie- Hellman Public Key: W,E - EC Diffie- Hellman Private Key: W,E",
"secFunImpl": "Shared Secret Computation with KAS- ECC-SSC"
},
{
"description": "Perform key derivation",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "TLS pre-master secret",
"name": "TLS KDF and HKDF Key Derivation (derivation of TLS Master Secret)",
"outputs": "TLS master secret",
"rolesSspAccess": "Crypto Officer - TLS Pre- master Secret: W,E - TLS Master Secret: G,R",
"secFunImpl": "Key Derivation with TLS KDF Key Derivation with KDA HKDF"
},
{
"description": "Perform key derivation",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "TLS master secret",
"name": "TLS KDF and HKDF Key Derivation (derivation of TLS Derived Secret)",
"outputs": "TLS Derived Secret",
"rolesSspAccess": "Crypto Officer - TLS Master Secret: W,E - TLS Derived Secret: G,R",
"secFunImpl": "Key Derivation with TLS KDF Key Derivation with KDA HKDF"
},
{
"description": "Perform password- based key derivation",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Password/passphrase",
"name": "PBKDF Key Derivation",
"outputs": "PBKDF Derived key",
"rolesSspAccess": "Crypto Officer - PBKDF Password or Passphrase: W,E,Z - PBKDF",
"secFunImpl": "Key Derivation with PBKDF"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Derived Key: G,R",
"secFunImpl": ""
},
{
"description": "Provide supported cipher suites (listed in Appendix A) in approved mode",
"indicator": "GNUTLS_FIPS140_OP_APPROVED",
"inputs": "Cipher-suites listed in Appendix A, Digital Certificate, Public and Private Keys, Application Data",
"name": "Transport Layer Security (TLS) Network Protocol",
"outputs": "Return codes and/or log messages, Application data",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - HMAC Key: W,E - RSA Public Key: W,E - RSA Private Key: W,E - ECDSA Public Key: W,E - ECDSA Private Key: W,E - Module- generated Diffie- Hellman Public Key: G,E - Module- generated Diffie- Hellman Private Key: G,E - Module- generated EC Diffie- Hellman Public Key: G,E - TLS Pre- master Secret: G,E - TLS Master Secret: G,E - TLS Derived Secret: G,R - Intermediate Key Generation Value: G,E",
"secFunImpl": "Symmetric Encryption with AES Symmetric Decryption with AES Authenticated Symmetric Encryption with AES Authenticated Symmetric Decryption with AES Message Authentication Code with HMAC Message Digest with SHA Digital Signature Generation with RSA Digital Signature Generation with ECDSA Digital Signature Verification with RSA Digital Signature Verification with ECDSA Key Pair Generation with Safe Primes Public Key Verification with ECDSA TLS Handshake"
},
{
"description": "Show module status",
"indicator": "N/A",
"inputs": "N/A",
"name": "Show Status",
"outputs": "Return codes and/or log messages",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize SSPs",
"indicator": "N/A",
"inputs": "Context containing SSPs",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - Module-",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "generated AES Key: Z - AES Key: Z - Module- generated HMAC Key: Z - HMAC Key: Z - Module- generated RSA Public Key: Z - Module- generated RSA Private Key: Z - RSA Public Key: Z - RSA Private Key: Z - Module- generated ECDSA Public Key: Z - Module- generated ECDSA Private Key: Z - ECDSA Public Key: Z - ECDSA Private Key: Z - Module- generated Diffie- Hellman Public Key: Z - Module- generated Diffie- Hellman Private Key: Z - Diffie- Hellman Public Key: Z - Diffie- Hellman Private Key: Z - Module- generated EC Diffie- Hellman",
"secFunImpl": ""
},
{
"description": "Description",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Public Key: Z - Module- generated EC Diffie- Hellman Private Key: Z - EC Diffie- Hellman Public Key: Z - EC Diffie- Hellman Private Key: Z - (Diffie- Hellman) Shared Secret: Z - (EC Diffie- Hellman) Shared Secret: Z - PBKDF Password or Passphrase: Z - PBKDF Derived Key: Z - Entropy Input: Z - Counter DRBG Seed: Z - Counter DRBG Internal State: V Value, Key: Z - TLS Pre- master Secret: Z - TLS Master Secret: Z - TLS Derived Secret: Z - Intermediate Key Generation Value: Z",
"secFunImpl": "Functions"
},
{
"description": "Perform self- tests",
"indicator": "N/A",
"inputs": "Module reset",
"name": "Self-tests",
"outputs": "Result of self- test (pass/fail)",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Symmetric Encryption with AES Symmetric Decryption"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "with AES Authenticated Symmetric Encryption with AES Authenticated Symmetric Decryption with AES Message Authentication Code Generation with AES Message Authentication Code Verification with AES-GCM Message Authentication Code with HMAC Message Digest with SHA Key Derivation with TLS KDF Key Derivation with KDA HKDF Key Derivation with PBKDF Digital Signature Generation with RSA Digital Signature Generation with ECDSA Digital Signature Verification with RSA Digital Signature Verification with ECDSA Key Pair Generation with RSA Key Pair Generation with ECDSA Key Pair Generation with Safe"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "Primes Public Key Verification with ECDSA Shared Secret Computation with KAS- ECC-SSC Shared Secret Computation with KAS-FFC- SSC Random Number Generation with Counter DRBG"
},
{
"description": "Show module name and version",
"indicator": "N/A",
"inputs": "None",
"name": "Show Module Name and Version",
"outputs": "Name and version information",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "ECDSA KeyVer (FIPS186-5)",
"condition": "Test runs at power-on before the integrity test",
"details": "ECDSA Key verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "KDF TLS",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.0/1.1 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "N/A",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A7467) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7464) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7466) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7515) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7516) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7517) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7518) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB8 (A7469) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB8 (A7520) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 and 256-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB8 (A7521) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7464) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7466) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7515) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7516) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7517) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7518) Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A7467) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7464) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7466) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7515) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7516) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7517) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A7518) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB8 (A7469) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB8 (A7520) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB8 (A7521) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7464) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7466) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7515) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7516) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7517) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A7518) Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit keys, 96-bit IV",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800- 56Ar3 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "PCT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800- 56Ar3 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "SP 800-90Ar1 (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256; P-256, P-384, P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256; P-256, P-384, P- 521",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186- 5) (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800- 56Cr1 (A7465)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-224, SHA2-256; 48- bit, 392-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A7468)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A7519)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A7468)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A7519)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A7468)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A7519)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A7468)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A7519)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A7466)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A7466)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A7466)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-224 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-224 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-224 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-384 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-384 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-384 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7464)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A7518)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256; 384-bit input secret",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256; 24 character password; 288-bit salt; Iteration count: 4096",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186- 5) (A7466)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with SHA-256; 2048-bit key",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "When the integrity test or KAT fail When the KAT of DRBG fails during CASTs When the newly generated RSA, ECDSA, Diffie-Hellman or EC Diffie-Hellman key pair fails the PCT",
"description": "The module stops functioning and ends the application process",
"indicator": "GNUTLS_E_SELF_TEST_ERROR (-400); GNUTLS_E_RANDOM_FAILED (-206); GNUTLS_E_PK_GENERATION_ERROR (-403)",
"name": "Error State",
"recoveryMethod": "The module must be restarted and perform the pre-operational self-test and the CASTs to recover from these errors."
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Entered by default, after passing the pre-operational and all conditional cryptographic algorithms self-tests (CASTs). Also, automatically entered whenever an approved service is requested",
"name": "Approved mode of operation",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.3",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non-approved service is requested",
"name": "Non-approved mode of operation",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.4",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "Blowfish",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "Camellia",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "CAST",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "Chacha20 and Poly1305",
"use": "Authenticated Encryption; Authenticated Decryption - Not FIPS 140-3 compliant"
},
{
"name": "CMAC with Triple-DES",
"use": "Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "DES",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "Diffie-Hellman with keys generated with domain parameters other than safe primes",
"use": "Key Agreement; Shared Secret Computation- Not SP 800-56Br2 compliant"
},
{
"name": "DSA",
"use": "Key Generation; Domain Parameter Generation; Digital Signature Generation; Digital Signature Verification - Not FIPS 140-3 compliant"
},
{
"name": "ECDSA with curves not listed in the Approved Algorithms table",
"use": "Key Generation; Public Key Verification - Not CAVP tested"
},
{
"name": "ECDSA with curves/hash functions not listed in the Approved Algorithms table",
"use": "Digital Signature Generation; Digital Signature Verification - Not CAVP tested"
},
{
"name": "EC Diffie-Hellman with curves not listed in the Approved Algorithms table",
"use": "Key Agreement; Shared Secret Computation - Not CAVP tested"
},
{
"name": "GOST",
"use": "Symmetric Encryption; Symmetric Decryption; Message Digest - Not FIPS 140-3 compliant"
},
{
"name": "HMAC with keys smaller than 112-bit",
"use": "Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "HMAC with GOST",
"use": "Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "MD2, MD4, MD5",
"use": "Message Digest; Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "PBKDF with HMAC not listed in the Approved Algorithms table or using input parameters not meeting requirements stated in section 2.7",
"use": "Key Derivation - Not FIPS 198-1 compliant"
},
{
"name": "RC2, RC4",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "RMD160",
"use": "Message Digest; Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "RSA with keys smaller than 2048 bits or greater than 4096 bits.",
"use": "Key Generation - Not CAVP tested"
},
{
"name": "RSA with keys smaller than 2048 bits or greater than 4096 bits and/or hash functions not listed in the Approved Algorithms table",
"use": "Digital Signature Generation - Not CAVP tested"
},
{
"name": "RSA with keys smaller than 2048 bits or greater than 4096 bits and/or hash functions not listed in the Approved Algorithms table",
"use": "Digital Signature Verification - Not CAVP tested"
},
{
"name": "Salsa20",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "SEED",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "Serpent",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "SRP",
"use": "Key Agreement - Not FIPS 140-3 compliant"
},
{
"name": "STREEBOG",
"use": "Message Digest; Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "Triple-DES",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "Twofish",
"use": "Symmetric Encryption; Symmetric Decryption - Not FIPS 140-3 compliant"
},
{
"name": "UMAC",
"use": "Message Authentication Code (MAC) - Not FIPS 140-3 compliant"
},
{
"name": "Yarrow",
"use": "Random Number Generation - Not FIPS 140-3 compliant"
},
{
"name": "DRBG when key length is less than 112 bits",
"use": "Random Number Generation - Not SP 800-56Br2 compliant"
},
{
"name": "RSA",
"use": "Key Encapsulation; Key Un-encapsulation - Not CAVP tested"
},
{
"name": "Non-supported cipher suites (not listed in Appendix A)",
"use": "Transport Layer Security (TLS) Network Protocol - Not CAVP tested"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "DRBG when key length is less than 112 bits",
"description": "Generate symmetric key other than AES and HMAC keys",
"name": "Symmetric Key Generation",
"role": "Crypto Officer"
},
{
"alg_accessed": "Blowfish Camellia CAST Chacha20 and Poly1305 DES GOST",
"description": "Compute the cipher for encryption",
"name": "Symmetric Encryption",
"role": "Crypto Officer"
},
{
"alg_accessed": "Triple-DES Twofish Blowfish Camellia CAST Chacha20 and Poly1305 DES GOST RC2, RC4 Salsa20 SEED Serpent Triple-DES",
"description": "Compute the plaintext for decryption",
"name": "Symmetric Decryption",
"role": "Crypto Officer"
},
{
"alg_accessed": "DSA ECDSA with curves not listed in the Approved Algorithms table RSA with keys smaller than 2048 bits or greater than 4096 bits.",
"description": "Generate key pairs",
"name": "Asymmetric Key Generation",
"role": "Crypto Officer"
},
{
"alg_accessed": "DSA ECDSA with curves/hash functions not listed in the Approved Algorithms table RSA with keys smaller than 2048 bits or greater than 4096 bits and/or hash functions not listed in the Approved Algorithms table",
"description": "Sign RSA, DSA, and ECDSA signatures",
"name": "Digital Signature Generation",
"role": "Crypto Officer"
},
{
"alg_accessed": "DSA ECDSA with curves/hash functions not listed in the Approved Algorithms table RSA with keys smaller than 2048 bits or greater than 4096 bits and/or hash functions not listed in the Approved Algorithms table",
"description": "Verify RSA, DSA, and ECDSA signatures",
"name": "Digital Signature Verification",
"role": "Crypto Officer"
},
{
"alg_accessed": "GOST MD2, MD4, MD5 RMD160 STREEBOG",
"description": "Compute message digest",
"name": "Message Digest",
"role": "Crypto Officer"
},
{
"alg_accessed": "CMAC with Triple-DES HMAC with keys smaller than 112-bit HMAC with GOST RMD160 UMAC",
"description": "Compute HMAC or CMAC",
"name": "Message Authentication Code (MAC)",
"role": "Crypto Officer"
},
{
"alg_accessed": "RSA",
"description": "Perform RSA key encapsulation",
"name": "Key Encapsulation",
"role": "Crypto Officer"
},
{
"alg_accessed": "RSA",
"description": "Perform RSA key un- encapsulation",
"name": "Key Un-encapsulation",
"role": "Crypto Officer"
},
{
"alg_accessed": "Diffie-Hellman with keys generated with domain parameters other than safe primes",
"description": "Perform DH shared secret computation",
"name": "Diffie-Hellman Shared Secret Computation",
"role": "Crypto Officer"
},
{
"alg_accessed": "EC Diffie-Hellman with curves not listed in the Approved Algorithms table",
"description": "Perform ECDH shared secret computation",
"name": "EC Diffie-Hellman Shared Secret Computation",
"role": "Crypto Officer"
},
{
"alg_accessed": "PBKDF with HMAC not listed in the Approved Algorithms table or using input parameters not meeting requirements stated in section 2.7",
"description": "Perform key derivation",
"name": "Key Derivation",
"role": "Crypto Officer"
},
{
"alg_accessed": "Non-supported cipher suites (not listed in Appendix A)",
"description": "Provide non-supported cipher suites",
"name": "Transport Layer Security (TLS) Network Protocol",
"role": "Crypto Officer"
},
{
"alg_accessed": "Yarrow",
"description": "Generate random numbers",
"name": "Random Number Generation",
"role": "Crypto Officer"
},
{
"alg_accessed": "Diffie-Hellman with keys generated with domain parameters other than safe primes EC Diffie-Hellman with curves not listed in the Approved Algorithms table SRP",
"description": "Perform key agreement",
"name": "Key Agreement",
"role": "Crypto Officer"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API input parameters for control",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256 (A7464) - arm64",
"details": "Integrity test for libgnutls.so.30, libnettle.so.8, libhogweed.so.6",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A7518) - x86",
"details": "Integrity test for libgnutls.so.30, libnettle.so.8, libhogweed.so.6",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message Authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Calling application within TOEPP"
},
{
"dest": "Calling application within TOEPP",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs referenced in the function name",
"method": "Free cipher handle",
"operatorId": "By calling the appropriate zeroization functions: AES Key: gnutls_cipher_deinit() AES Key: gnutls_aead_cipher_deinit() HMAC Key: gnutls_hmac_deinit() RSA Public Key, RSA Private Key: gnutls_privkey_deinit() gnutls_x509_privkey_deinit() gnutls_rsa_params_deinit() ECDSA Public Key, ECDSA Private Key: gnutls_privkey_deinit() gnutls_x509_privkey_deinit() gnutls_rsa_params_deinit() Diffie-Hellman Public Key, Diffie-Hellman Private Key: gnutls_dh_params_deinit() TLS Pre-master Secret: gnutls_deinit() TLS Master Secret: gnutls_deinit() TLS Derived Secret: gnutls_deinit() Diffie- Hellman Public Key, Diffie-Hellman Private Key: gnutls_pk_params_clear() EC Diffie-Hellman Public Key, EC Diffie-Hellman Private Key: gnutls_pk_params_clear() Diffie-Hellman Shared Secret: zeroize key() EC Diffie-Hellman Shared Secret: zeroize key() All SSPs: gnutls_global_deinit()",
"rationale": "Memory occupied by SSPs is overwritten with zeros, which renders the SSP values irretrievable"
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Remove power from the module",
"operatorId": "By removing power",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed"
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeros, which renders the SSP values irretrievable"
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "EC2 c7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "AWS Graviton3 (ARMv8-A)",
"version": "3.8.3-98ce29ed6c83f8a2"
},
{
"hardwarePlatform": "EC2 c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8375C (Sunny Cove)",
"version": "3.8.3-98ce29ed6c83f8a2"
},
{
"hardwarePlatform": "EC2 c7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "AWS Graviton3 (ARMv8-A)",
"version": "3.8.3-98ce29ed6c83f8a2"
},
{
"hardwarePlatform": "EC2 c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "Intel Xeon Platinum 8375C (Sunny Cove)",
"version": "3.8.3-98ce29ed6c83f8a2"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "AWS Snowball with AMD EPYC 9R14",
"operatingSystem": "Amazon Linux 2023"
},
{
"hardwarePlatform": "AWS Snowball with AMD EPYC 7702",
"operatingSystem": "Amazon Linux 2023"
},
{
"hardwarePlatform": "AWS Snowcone with Intel Denverton Atom C3558",
"operatingSystem": "Amazon Linux 2023"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 82
}
},
"FF": {
"DH": {
"DH": 6,
"Diffie-Hellman": 60
},
"DSA": {
"DSA": 6
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 6
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 5
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"GnuTLS": {
"GnuTLS": 68
}
},
"crypto_protocol": {
"TLS": {
"TLS": {
"TLS": 82,
"TLS 1.0": 1,
"TLS v1.2": 7,
"TLS v1.3": 1,
"TLSv1.0": 1,
"TLSv1.1": 1,
"TLSv1.2": 1,
"TLSv1.3": 1
}
}
},
"crypto_scheme": {
"AEAD": {
"AEAD": 2
},
"KA": {
"Key Agreement": 6,
"Key agreement": 1
},
"MAC": {
"MAC": 27
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 34,
"P-384": 32,
"P-521": 28
}
},
"eval_facility": {
"atsec": {
"atsec": 2
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-128": 1,
"AES-256": 2,
"AES-GCM 96": 1,
"DRBG 256": 2,
"Diffie- Hellman 2048": 1,
"HMAC-SHA-1": 14,
"PKCS#1": 6,
"SHA-1": 18,
"SHA-224": 3,
"SHA-256": 9,
"SHA-3": 1,
"SHA-384": 3,
"SHA-512": 3,
"SHA2-224": 8,
"SHA2-256": 8,
"SHA2-384": 7,
"SHA2-512": 14,
"SHA3-224": 7,
"SHA3-256": 8,
"SHA3-384": 7,
"SHA3-512": 7
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"MD": {
"MD4": {
"MD4": 2
},
"MD5": {
"MD5": 3
}
},
"PBKDF": {
"PBKDF": 29,
"PBKDF2": 1
},
"SHA": {
"SHA1": {
"SHA-1": 18
},
"SHA2": {
"SHA-224": 3,
"SHA-256": 9,
"SHA-384": 3,
"SHA-512": 3
},
"SHA3": {
"SHA-3": 1,
"SHA3-224": 7,
"SHA3-256": 8,
"SHA3-384": 7,
"SHA3-512": 7
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 46
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 93,
"FIPS 180-4": 5,
"FIPS 186-5": 7,
"FIPS 198-1": 6,
"FIPS 202": 4,
"FIPS PUB 140-3": 2,
"FIPS140-3": 2,
"FIPS180-4": 1,
"FIPS186-5": 19,
"FIPS197": 1,
"FIPS198-1": 1,
"FIPS202": 1
},
"NIST": {
"NIST SP 800-57": 1,
"SP 800-132": 5,
"SP 800-135": 2,
"SP 800-38A": 2,
"SP 800-38B": 1,
"SP 800-38C": 1,
"SP 800-38D": 2,
"SP 800-38E": 2,
"SP 800-56A": 3,
"SP 800-56C": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS#1": 3
},
"RFC": {
"RFC3268": 4,
"RFC4279": 2,
"RFC4492": 8,
"RFC5246": 4,
"RFC5288": 5,
"RFC5289": 16,
"RFC6655": 4,
"RFC7627": 3,
"RFC8446": 5
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 91,
"AES-": 1,
"AES-128": 1,
"AES-256": 2
},
"CAST": {
"CAST": 149
},
"RC": {
"RC2": 2,
"RC4": 2
},
"Serpent": {
"Serpent": 2
},
"Twofish": {
"Twofish": 2
}
},
"DES": {
"3DES": {
"Triple-DES": 5
},
"DES": {
"DES": 4
}
},
"constructions": {
"MAC": {
"CMAC": 5,
"HMAC": 50
}
},
"djb": {
"Poly": {
"Poly1305": 3
},
"Salsa": {
"Salsa20": 2
}
},
"miscellaneous": {
"Blowfish": {
"Blowfish": 3
},
"Camellia": {
"Camellia": 3
},
"SEED": {
"SEED": 2
}
}
},
"tee_name": {
"AMD": {
"PSP": 9
},
"IBM": {
"SSC": 8
}
},
"tls_cipher_suite": {
"TLS": {
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_128_CCM": 1,
"TLS_DHE_RSA_WITH_AES_128_CCM_8": 1,
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_256_CCM": 1,
"TLS_DHE_RSA_WITH_AES_256_CCM_8": 1,
"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_DH_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_DH_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_DH_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_DH_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_DH_RSA_WITH_AES_256_CBC_SHA256": 1,
"TLS_DH_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDH_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_PSK_WITH_AES_128_CBC_SHA": 1,
"TLS_PSK_WITH_AES_256_CBC_SHA": 1
}
},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KDF TLSA7466",
"HMAC-SHA-1A7518",
"AES-CBCA7518",
"HMAC-SHA2-256A7518",
"SHA2-384A7518",
"AES-XTS Testing Revision 2.0A7467",
"HMAC-SHA2-224A7518",
"Counter DRBGA7466",
"HMAC-SHA2-384A7518",
"KDA HKDF Sp800-56Cr1A7465",
"RSA SigGen (FIPS186-5)A7466",
"ECDSA SigGen (FIPS186-5)A7466",
"TLS v1.2 KDF RFC7627A7466",
"AES-CCMA7515",
"SHA2-256A7518",
"KAS-FFC-SSC Sp800-56Ar3A7466",
"SHA2-224A7518",
"HMAC-SHA2-512A7518",
"SHA3-512A7519",
"AES-CFB8A7521",
"SHA3-256A7519",
"RSA SigVer (FIPS186-5)A7466",
"SHA2-512A7518",
"ECDSA SigVer (FIPS186-5)A7466",
"ECDSA KeyGen (FIPS186-5)A7466",
"AES-GMACA7466",
"AES-CMACA7518",
"AES-GCMA7518",
"PBKDFA7466",
"Safe Primes Key GenerationA7466",
"KAS-ECC-SSC Sp800-56Ar3A7466",
"SHA-1A7518",
"SHA3-384A7519",
"RSA KeyGen (FIPS186-5)A7466",
"SHA3-224A7519",
"ECDSA KeyVer (FIPS186-5)A7466"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A7518",
"#A7467",
"#A7517",
"#A7469",
"#A7465",
"#A7519",
"#A7520",
"#A7521",
"#A7464",
"#A7468",
"#A7466",
"#A7515",
"#A7516"
]
},
"policy_metadata": {
"/CreationDate": "D:20260807073815-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260807073815-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 861850,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://doi.org/10.6028/NIST.SP.800-56Ar3",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
"http://www.ietf.org/rfc/rfc3447.txt",
"http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"http://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"http://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://doi.org/10.6028/NIST.SP.800-90B",
"https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
"http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
"http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38d.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://doi.org/10.6028/NIST.SP.800-133r2",
"http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://doi.org/10.6028/NIST.SP.800-56Cr2",
"http://dx.doi.org/10.6028/NIST.SP.800-90Ar1"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 65
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "9d1e2d7558ae9f4807f5829f05a92d836f280e6852d08c762b62fca82c306a4a",
"source_hash": "c261c5bfcd93ed0c9dd48766c8cc6ef9cc06ba309bfcc39e6ae246ca0f472dc7",
"txt_hash": "a88a80b81a2d377efbfb384865150322c00f1560ead0179ce9446b0d2ca5888f"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2026_020926_0917.pdf",
"date_sunset": "2031-08-10",
"description": "GnuTLS is a secure communications library implementing the TLS protocol. It provides a simple C language application programming interface to access the secure communications protocols as well as APIs to parse and write X.509, PKCS#12, and other required structures.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Amazon Linux 2023 GnuTLS Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-08-11",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Amazon Web Services, Inc.",
"vendor_url": "https://aws.amazon.com/linux/amazon-linux-2023/"
}
}