This page was not yet optimized for use on mobile devices.
Oracle Linux 9 OpenSSL FIPS Provider
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate details
| Certificate ID | #5294 |
|---|---|
| Status | active |
| Validation dates | 01.06.2026 |
| Sunset date | 24-08-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs |
| Exceptions |
|
| Description | The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality. |
| Vendor | Oracle Corporation http://www.oracle.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-, AES-256, CAST, SEED, HMAC, HMAC-SHA-256, CMACAsymmetric Algorithms
RSA-PSS, RSA-OAEP, ECDH, ECDSA, ECC, DH, Diffie-HellmanHash functions
SHA-1, SHA-256, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, SHAKE128, SHAKE256, PBKDF2, PBKDFSchemes
MAC, Key Exchange, Key AgreementProtocols
SSH, TLS v1.2, TLS v1.3, TLS 1.2, TLS 1.3, TLS, IKERandomness
DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-256, P-384, P-521, curve P-192, P-224, P-192Block cipher modes
ECB, CBC, CTR, CFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 186-5, FIPS 197, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-135, SP 800-108, SP 800-90B, SP 800-140B, PKCS#1, RFC7627, RFC 7627, RFC 5288, RFC8446, RFC 3526, RFC 7919, RFC 8446Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
CVE matches
| ID | Links | Severity | CVSS Score | Published on |
|---|---|---|---|---|
| Base score | ||||
| CVE-2022-21505 | MEDIUM | 6.7 | 24.12.2024 | |
| CVE-2023-22024 | MEDIUM | 5.5 | 20.09.2023 | |
| CVE-2025-4598 | MEDIUM | 4.7 | 30.05.2025 |
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5294,
"dgst": "e71d3cc1a4848683",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A4329",
"HMAC-SHA2-384A4346",
"#A4322",
"#A4337",
"KDF SP800-108A4324",
"#A4330",
"SHA2-512/256A4346",
"#A4321",
"Safe Primes Key GenerationA4325",
"AES-GMACA4343",
"ECDSA KeyGen (FIPS186-4)A4346",
"#A4333",
"AES-KWPA4329",
"AES-ECBA4334",
"SHAKE-256A4319",
"SHA3-256A4319",
"#A4335",
"#A4319",
"#A4341",
"KDF ANS 9.42A4346",
"AES-CFB8A4329",
"#A4343",
"HMAC-SHA2-224A4346",
"ECDSA SigGen (FIPS186-4)A4346",
"AES-CFB128A4329",
"AES-XTS Testing Revision 2.0A4329",
"RSA SigGen (FIPS186-4)A4346",
"AES-OFBA4329",
"Safe Primes Key VerificationA4325",
"TLS v1.3 KDFA4310",
"#A4342",
"SHA2-512/224A4346",
"#A4309",
"#A4316",
"#A4345",
"HMAC-SHA2-512A4346",
"#A4326",
"#A4328",
"SHA3-512A4319",
"PBKDFA4346",
"TLS v1.2 KDF RFC7627A4346",
"AES-CCMA4329",
"HMAC DRBGA4311",
"HMAC-SHA3-256A4319",
"SHA2-512A4346",
"RSA KeyGen (FIPS186-4)A4346",
"#A4336",
"AES-KWA4329",
"SHA2-384A4346",
"KDA OneStep SP800-56Cr2A4309",
"SHAKE-128A4319",
"HMAC-SHA2-512/256A4346",
"#A4313",
"AES-CTRA4329",
"KDA TwoStep SP800-56Cr2A4309",
"#A4315",
"HMAC-SHA2-512/224A4346",
"#A4323",
"AES-CBC-CS2A4329",
"KDA HKDF Sp800-56Cr1A4310",
"HMAC-SHA3-224A4319",
"#A4320",
"Counter DRBGA4311",
"KDF ANS 9.63A4346",
"#A4332",
"HMAC-SHA3-384A4319",
"#A4311",
"#A4338",
"#A4346",
"#A4314",
"AES-CBC-CS1A4329",
"AES-CMACA4329",
"ECDSA SigVer (FIPS186-4)A4346",
"SHA2-256A4346",
"HMAC-SHA3-512A4319",
"KDF SSHA4334",
"#A4325",
"KAS-FFC-SSC Sp800-56Ar3A4325",
"RSA SigVer (FIPS186-4)A4346",
"AES-CBC-CS3A4329",
"AES-CBCA4329",
"#A4327",
"#A4344",
"SHA-1A4346",
"#A4340",
"#A4318",
"#A4334",
"HMAC-SHA-1A4346",
"#A4317",
"AES-GCMA4343",
"#A4310",
"KAS-ECC-SSC Sp800-56Ar3A4346",
"SHA3-224A4319",
"SHA3-384A4319",
"SHA2-224A4346",
"#A4331",
"#A4339",
"#A4312",
"Hash DRBGA4311",
"AES-CFB1A4329",
"HMAC-SHA2-256A4346",
"ECDSA KeyVer (FIPS186-4)A4346",
"#A4324"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"9"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2025-4598",
"CVE-2023-22024",
"CVE-2022-21505"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS1",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS2",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4313, A4314, A4315, A4320, A4327, A4328, A4329, A4331, A4332, A4333, A4334",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4316, A4321, A4322, A4323, A4335, A4336, A4337, A4338, A4339, A4340, A4341, A4342, A4343",
"properties": "-",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4316, A4321, A4322, A4323, A4335, A4336, A4337, A4338, A4339, A4340, A4341, A4342, A4343",
"properties": "-",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4313, A4314, A4315, A4327, A4328, A4329",
"properties": "-",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4311",
"properties": "-",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-4)",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigGen (FIPS186-4)",
"cavpCertName": "A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "ECDSA SigVer (FIPS186-4)",
"cavpCertName": "A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4311",
"properties": "-",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4311",
"properties": "-",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-224",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-256",
"cavpCertName": "A4317, A4318, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-384",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/224",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2-512/256",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-224",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-256",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-384",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3-512",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800- 56Ar3",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800- 56Ar3",
"cavpCertName": "A4325",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KDA HKDF Sp800- 56Cr1",
"cavpCertName": "A4310",
"properties": "-",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA OneStep SP800- 56Cr2",
"cavpCertName": "A4309",
"properties": "-",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDA TwoStep SP800- 56Cr2",
"cavpCertName": "A4309",
"properties": "-",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF ANS 9.42 (CVL)",
"cavpCertName": "A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF ANS 9.63 (CVL)",
"cavpCertName": "A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "KDF SP800-108",
"cavpCertName": "A4324",
"properties": "-",
"reference": "SP 800-108 Rev. 1"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A4320, A4326, A4331, A4332, A4333, A4334",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186- 4)",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigGen (FIPS186- 4)",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 186-4"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A4325",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A4325",
"properties": "-",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4317, A4318, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A4312, A4319",
"properties": "-",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A4317, A4326, A4330, A4344, A4345, A4346",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A4310",
"properties": "-",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Compute a message digest",
"indicator": "EVP_DigestFinal_ex returns 1",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Compute the output of an XOF",
"indicator": "EVP_DigestFinalXOF returns 1",
"inputs": "Message",
"name": "XOF",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Encrypt a plaintext",
"indicator": "EVP_EncryptFinal_ex returns 1",
"inputs": "AES Key, plaintext, IV",
"name": "Encryption",
"outputs": "Cipherte xt",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption Decryption"
},
{
"description": "Decrypt a ciphertext",
"indicator": "EVP_DecryptFinal_ex returns 1",
"inputs": "AES Key, ciphertext , IV",
"name": "Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption Decryption"
},
{
"description": "Encrypt a plaintext",
"indicator": "AES GCM:EVP_CIPHER_*_FIPS_INDICATOR_AP PROVED Others: EVP_EncryptFinal_ex returns 1",
"inputs": "AES key, plaintext",
"name": "Authenticat ed Encryption",
"outputs": "Cipherte xt, MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenticat ed Encryption"
},
{
"description": "Decrypt a ciphertext",
"indicator": "AES GCM:EVP_CIPHER_*_FIPS_INDICATOR_AP PROVED Others: EVP_DecryptFinal_ex returns 1",
"inputs": "AES Key, ciphertext",
"name": "Authenticat ed Decryption",
"outputs": "Plaintext or failure",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Authenticat ed Decryption"
},
{
"description": "Compute a MAC tag",
"indicator": "HMAC:EVP_MAC_*_FIPS_INDICATOR_APP ROVED Others: EVP_MAC_final returns 1",
"inputs": "AES Key, message",
"name": "AES Message Authenticati on",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Message Authenticati on CMAC/GMA C"
},
{
"description": "Compute a MAC tag",
"indicator": "HMAC:EVP_MAC_*_FIPS_INDICATOR_APP ROVED Others: EVP_MAC_final returns 1",
"inputs": "HMAC Key, message",
"name": "HMAC Message Authenticati on",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - HMAC Key: W,E",
"secFunImpl": "Message Authenticati on HMAC"
},
{
"description": "Compute a shared secret Compliant with: Scenario 2 (1) of FIPS 140-3 IG D.F: Shared secret computati on",
"indicator": "EVP_PKEY_derive returns 1",
"inputs": "DH Private Key(owne r), DH Public Key(peer) EC Private Key(owne r), EC Public Key(peer)",
"name": "Shared Secret Computatio n",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - DH Private Key: W,E - DH Public Key: W,E - EC Private Key: W,E - EC Public Key: W,E - Shared Secret: G,R",
"secFunImpl": "Shared Secret Computatio n"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "KDA OneStep Key Derivation",
"outputs": "KDA OneStep derived Key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KDA OneStep Derived Key: G,R",
"secFunImpl": "KDA OneStep Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "KDA TwoStep Key Derivation",
"outputs": "KDA TwoStep derived key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KDA TwoStep Derived",
"secFunImpl": "KDA TwoStep Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "HKDF Key Derivation",
"outputs": "HKDF derived key",
"rolesSspAccess": "Key: G,R Crypto Officer - Shared Secret: W,E - HKDF Derived Key: G,R",
"secFunImpl": "HKDF Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "SSH Key Derivation",
"outputs": "SSH derived key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - SSH KDF Derived Key: G,R",
"secFunImpl": "SSH Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "KBKDF Key Derivation",
"outputs": "KBKDF derived key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - KBKDF Derived",
"secFunImpl": "Key-Based Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "TLS 1.2 Key Derivation",
"outputs": "TLS 1.2 derived key",
"rolesSspAccess": "Key: G,R Crypto Officer - Shared Secret: W,E - TLS 1.2 Derived",
"secFunImpl": "TLS v1.2 Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "ANS X9.63 Key Derivation",
"outputs": "ANS X9.63 derived key",
"rolesSspAccess": "Secret: G,R Crypto Officer - Shared Secret: W,E - ANS X9.63 KDF Derived",
"secFunImpl": "ANS X9.63 Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "TLS v1.3 Key Derivation",
"outputs": "TLS v1.3 derived key",
"rolesSspAccess": "key: G,R Crypto Officer - Shared Secret: W,E - TLS 1.3 Derived Secret: G,R",
"secFunImpl": "TLS v1.3 Key Derivation"
},
{
"description": "Derive a key",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Shared Secret",
"name": "ANS X9.42 Key Derivation",
"outputs": "ANS X9.42 derived key",
"rolesSspAccess": "Crypto Officer - Shared Secret: W,E - ANS X9.42 KDF Derived Key: G,R",
"secFunImpl": "ANS X9.42 Key Derivation"
},
{
"description": "Derive a key from a password",
"indicator": "EVP_KDF_*_FIPS_INDICATOR_APPROVED",
"inputs": "Password",
"name": "Password- Based Key Derivation",
"outputs": "PBKDF derived key",
"rolesSspAccess": "Crypto Officer - Password: W,E - PBKDF2 Derived Key: G,R",
"secFunImpl": "Password- Based Key Derivation"
},
{
"description": "Key Pair Generatio n",
"indicator": "EVP_PKEY_generate returns 1",
"inputs": "DH Group",
"name": "DH Key Pair Generation",
"outputs": "Module generate d DH private key, Module generate d DH public key",
"rolesSspAccess": "Crypto Officer - Module Generated DH Public Key: G,R - Module Generated DH Private Key: G,R - Intermedia te Key Generatio n Value:",
"secFunImpl": "Key Pair Generation"
},
{
"description": "Key Pair Generatio n",
"indicator": "EVP_PKEY_generate returns 1",
"inputs": "Curve",
"name": "EC Key Pair Generation",
"outputs": "Module generate d EC private key, Module generate d EC public key",
"rolesSspAccess": "G,E,Z Crypto Officer - Module Generated EC Public Key: G,R - Module Generated EC Private Key: G,R - Intermedia te Key Generatio n Value: G,E,Z",
"secFunImpl": "Key Pair Generation"
},
{
"description": "Key Pair Generatio n",
"indicator": "EVP_PKEY_generate returns 1",
"inputs": "Modulus",
"name": "RSA Key Pair Generation",
"outputs": "Module generate d RSA private key, Module generate d RSA public key",
"rolesSspAccess": "Crypto Officer - Module Generated RSA Private Key: G,R - Module Generated RSA Public Key: G,R - Intermedia te Key Generatio n Value: G,E,Z",
"secFunImpl": "Key Pair Generation"
},
{
"description": "Verify an EC public key",
"indicator": "EVP_PKEY_public_check EVP_PKEY_private_check EVP_PKEY_check returns 1",
"inputs": "EC public key",
"name": "Public Key Verification",
"outputs": "Return codes/lo g message s",
"rolesSspAccess": "Crypto Officer - EC Private Key: W,E - EC Public",
"secFunImpl": "Key Pair Verification"
},
{
"description": "Generate random bytes",
"indicator": "EVP_RAND_generate returns 1",
"inputs": "Output length",
"name": "Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Key: W,E Crypto Officer - Entropy Input: W,E - DRBG Seed: G,E - Internal State (V, Key): G,E",
"secFunImpl": "Random Number Generation"
},
{
"description": "Verify a digital signature",
"indicator": "RSA: OSSL_*_FIPSINDICATOR_APPROVED and EVP_SIGNATURE_*_FIPS_INDICATOR_APP ROVED ECDSA: OSSL_*_FIPSINDICATOR_APPROVED",
"inputs": "Message, EC Public Key or RSA Public Key, signature, hash algorithm",
"name": "Signature Verification",
"outputs": "Pass/fail",
"rolesSspAccess": "Crypto Officer - EC Public Key: W,E - RSA Public Key: W,E",
"secFunImpl": "Signature Verification Signature Verification (Legacy)"
},
{
"description": "Signature Generatio n",
"indicator": "RSA: OSSL_*_FIPSINDICATOR_APPROVED and EVP_SIGNATURE_*_FIPS_INDICATOR_APP ROVED ECDSA: OSSL_*_FIPSINDICATOR_APPROVED",
"inputs": "Message, EC Private Key or RSA Private Key, hash algorithm",
"name": "Signature Generation",
"outputs": "Signatur e",
"rolesSspAccess": "Crypto Officer - EC Private Key: W,E - RSA Private Key: W,E",
"secFunImpl": "Signature Generation"
},
{
"description": "Return the module name and version informatio n",
"indicator": "None",
"inputs": "N/A",
"name": "Show Version",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module status",
"indicator": "None",
"inputs": "N/A",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and integrity tests",
"indicator": "None",
"inputs": "N/A",
"name": "Self-Test",
"outputs": "Pass/Fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": ""
},
{
"description": "Zeroize all SSPs",
"indicator": "None",
"inputs": "Any SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES Key:",
"secFunImpl": "None"
},
{
"description": "Descriptio",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "n",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Z - HMAC Key: Z - Shared Secret: Z - Password: Z - PBKDF2 Derived Key: Z - KDA OneStep Derived Key: Z - ANS X9.42 KDF Derived Key: Z - ANS X9.63 KDF Derived key: Z - SSH KDF Derived Key: Z - Entropy Input: Z - DRBG Seed: Z - Internal State (V, Key): Z - Internal State (V, C): Z - DH Public Key: Z - DH Private Key: Z - Module Generated DH Public Key: Z - Module Generated DH Private Key: Z",
"secFunImpl": ""
},
{
"description": "Descriptio",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security Functions"
},
{
"description": "n",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "Private Key: Z - EC Public Key: Z - Module Generated EC Private Key: Z - Module Generated EC Public Key: Z - RSA Private Key: Z - RSA Public Key: Z - Module Generated RSA Private Key: Z - Module Generated RSA Public Key: Z - Intermedia te Key Generatio n Value: Z - TLS 1.2 Derived Secret: Z - TLS 1.3 Derived Secret: Z - HKDF Derived Key: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-GCM (A4316)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4321)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4322)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4323)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4335)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4336)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4337)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4338)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "for use. Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4339)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4340)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4341)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4342)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4343)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4311)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4318)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA-1 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4317)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4326)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4330)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4344)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4345)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-4) (A4346)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-4) (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 2048 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4317)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4326)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4330)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4344)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4345)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4346)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256 and respective keys",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4312)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4319)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-4) (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature generation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4312)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4319)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-4) (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 with SHA- 224",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "P-224 curve",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A4325)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "PCT",
"testProps": "MODP-2048",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4313)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4314)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4315)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4327)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4328)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4329)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4313)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4314)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4315)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4320)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4327)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4328)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4329)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4331)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4332)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4333)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4334)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A4313)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A4314)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A4315)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A4327)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A4328)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A4329)",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "128-bit key decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512/256 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512/256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512/256 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512/256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512/256 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512/256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512/256 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512/256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512/256 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512/256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512/256 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-512/256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SP800-108 (A4324)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA2-256 with 128-bit key, 24-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF Sp800-56Cr1 (A4310)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA OneStep SP800-56Cr2 (A4309)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "KDA TwoStep SP800-56Cr2 (A4309)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-224",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4312)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4319)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.42 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.42 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4312)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4319)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF ANS 9.63 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based ANS X9.63 key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4320)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4331)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4332)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4333)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A4334)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based SSH KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.2 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF (A4310)",
"condition": "Test runs at power-on before the integrity test",
"details": "Industry-based TLS v1.3 KDF key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4312)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4319)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Password-based key derivation",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "SHA2-256 with 4096 iterations and 288-bit salt",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4311)",
"condition": "Test runs at power-on before the integrity test",
"details": "Hash DRBG",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1, with PR",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4311)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "HMAC-SHA-1, with PR",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A4325)",
"condition": "Test runs at power-on before the integrity test",
"details": "SP 800-56ARev3, 5.6.2.1.4",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "PCT",
"testProps": "Section 5.6.2.1.4 of SP800-56Arev3",
"type": "PCT"
},
{
"algorithmOrTest": "SHA-1 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4317)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4326)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4330)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4344)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4345)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4346)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "3-byte message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A4312)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "32-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A4319)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational and services are available for use.",
"testMethod": "KAT",
"testProps": "32-bit message",
"type": "CAST"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [],
"found": false,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service as defined in section 4.3",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested",
"name": "Non-approved mode",
"statusIndicator": "Not required per IG 2.4.C",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM (external IV)",
"use": "Encryption"
},
{
"name": "ANS X9.42 KDF (SHAKE128, SHAKE256)",
"use": "ANS X9.42 Key Derivation"
},
{
"name": "ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256)",
"use": "ANS X9.63 Key Derivation"
},
{
"name": "Hash_DRBG (SHA2-224, SHA2-384)",
"use": "Random Number Generation"
},
{
"name": "HMAC_DRBG (SHA2-224, SHA2-384)",
"use": "Random Number Generation"
},
{
"name": "ECDSA with curve P-192",
"use": "Key Pair Generation, Key Pair Verification"
},
{
"name": "HMAC (\u003c 112-bit keys)",
"use": "Message Authentication HMAC"
},
{
"name": "KAS1, KAS2",
"use": "Shared Secret Computation"
},
{
"name": "KBKDF (\u003c 112-bit keys)",
"use": "Key-Based Key Derivation"
},
{
"name": "KDA OneStep (\u003c 112-bit keys)",
"use": "KDA OneStep Key Derivation"
},
{
"name": "HKDF (\u003c 112-bit keys)",
"use": "HKDF Key Derivation"
},
{
"name": "ANS X9.42 KDF (\u003c 112-bit keys)",
"use": "ANS X9.42 Key Derivation"
},
{
"name": "ANS X9.63 KDF (\u003c 112-bit keys)",
"use": "ANS X9.63 Key Derivation"
},
{
"name": "KDA OneStep (SHAKE128, SHAKE256)",
"use": "KDA OneStep Key Derivation"
},
{
"name": "HKDF (SHAKE128, SHAKE256)",
"use": "HKDF OneStep Key Derivation"
},
{
"name": "PBKDF2 (short password; short salt; insufficient iterations; \u003c 112-bit keys)",
"use": "Password-Based Key Derivation"
},
{
"name": "RSA and ECDSA (pre-hashed message), ECDSA with curve P-192",
"use": "Signature Generation, Signature Verification"
},
{
"name": "RSA-PSS (invalid salt length)",
"use": "Signature Generation, Signature Verification"
},
{
"name": "RSA-OAEP",
"use": "Asymmetric Encryption, Asymmetric Decryption"
},
{
"name": "SSH KDF (SHA2-512/224, SHA2-512/256, SHA-3, SHAKE128, SHAKE256)",
"use": "SSH Key Derivation"
},
{
"name": "TLS 1.2 KDF (SHA-1, SHA2-224, SHA2-512/224, SHA2-512/256, SHA-3)",
"use": "TLS 1.2 Key Derivation"
},
{
"name": "TLS 1.2 KDF using master secret non-compliant with RFC 7627",
"use": "TLS v1.2 Key Derivation"
},
{
"name": "TLS 1.3 KDF (SHA-1, SHA2-224, SHA2-512, SHA2-512/224, SHA2-512/256, SHA-3)",
"use": "TLS v1.3 Key Derivation"
},
{
"name": "KDA TwoStep (\u003c 112-bit keys)",
"use": "KDA TwoStep Key Derivation"
},
{
"name": "KDA TwoStep (SHAKE128, SHAKE256)",
"use": "KDA TwoStep Key Derivation"
},
{
"name": "SSH KDF (\u003c 112-bit keys)",
"use": "SSH Key Derivation"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM (external IV)",
"description": "Encryption",
"name": "AES GCM (external IV)",
"role": "CO"
},
{
"alg_accessed": "ANS X9.42 KDF (SHAKE128, SHAKE256)",
"description": "Key Derivation",
"name": "ANS X9.42 KDF (SHAKE128, SHAKE256)",
"role": "CO"
},
{
"alg_accessed": "ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256)",
"description": "Key Derivation",
"name": "ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256)",
"role": "CO"
},
{
"alg_accessed": "Hash_DRBG (SHA2-224, SHA2-384)",
"description": "Random Number Generation",
"name": "Hash_DRBG (SHA2-224, SHA2-384)",
"role": "CO"
},
{
"alg_accessed": "HMAC_DRBG (SHA2-224, SHA2-384)",
"description": "Random Number Generation",
"name": "HMAC_DRBG (SHA2-224, SHA2-384)",
"role": "CO"
},
{
"alg_accessed": "ECDSA with curve P-192",
"description": "Key Pair Generation, Key Pair Verification",
"name": "ECDSA with curve P-192",
"role": "CO"
},
{
"alg_accessed": "HMAC (\u003c 112-bit keys)",
"description": "Message Authentication",
"name": "HMAC (\u003c 112-bit keys)",
"role": "CO"
},
{
"alg_accessed": "KAS1, KAS2",
"description": "Shared Secret Computation",
"name": "KAS1, KAS2",
"role": "CO"
},
{
"alg_accessed": "KBKDF (\u003c 112-bit keys) KDA OneStep (\u003c 112-bit keys) HKDF (\u003c 112-bit keys) ANS X9.42 KDF (\u003c 112-bit keys) ANS X9.63 KDF (\u003c 112-bit keys) KDA TwoStep (\u003c 112-bit keys)",
"description": "Key Derivation",
"name": "KBKDF, KDA OneStep, KDA TwoStep, HKDF, ANS X9.42 KDF, ANS X9.63 KDF (\u003c 112-bit keys)",
"role": "CO"
},
{
"alg_accessed": "KDA OneStep (SHAKE128, SHAKE256) HKDF (SHAKE128, SHAKE256) KDA TwoStep (SHAKE128, SHAKE256)",
"description": "Key Derivation",
"name": "KDA OneStep, KDA TwoStep, HKDF (SHAKE128, SHAKE256)",
"role": "CO"
},
{
"alg_accessed": "PBKDF2 (short password; short salt; insufficient iterations; \u003c 112-bit keys)",
"description": "Password-Based Key Derivation",
"name": "PBKDF2 (short password; short salt; insufficient iterations; \u003c 112-bit keys)",
"role": "CO"
},
{
"alg_accessed": "RSA and ECDSA (pre-hashed message), ECDSA with curve P-192",
"description": "Signature Generation, Signature Verification",
"name": "RSA and ECDSA (pre-hashed message), ECDSA with curve P-192",
"role": "CO"
},
{
"alg_accessed": "RSA-PSS (invalid salt length)",
"description": "Signature Generation, Signature Verification",
"name": "RSA-PSS (invalid salt length)",
"role": "CO"
},
{
"alg_accessed": "RSA-OAEP",
"description": "Asymmetric Encryption, Asymmetric Decryption",
"name": "RSA-OAEP",
"role": "CO"
},
{
"alg_accessed": "SSH KDF (SHA2-512/224, SHA2-512/256, SHA-3, SHAKE128, SHAKE256) SSH KDF (\u003c 112-bit keys)",
"description": "SSH Key Derivation",
"name": "SSH KDF (SHA2-512/224, SHA2-512/256, SHA-3, SHAKE128, SHAKE256, \u003c 112-bit keys)",
"role": "CO"
},
{
"alg_accessed": "TLS 1.2 KDF (SHA-1, SHA2-224, SHA2- 512/224, SHA2-512/256, SHA-3)",
"description": "Key Derivation",
"name": "TLS 1.2 KDF (SHA-1, SHA2-224, SHA2- 512/224, SHA2-512/256, SHA-3)",
"role": "CO"
},
{
"alg_accessed": "TLS 1.2 KDF using master secret non- compliant with RFC 7627",
"description": "Key Derivation",
"name": "TLS 1.2 KDF using master secret non- compliant with RFC 7627",
"role": "CO"
},
{
"alg_accessed": "TLS 1.3 KDF (SHA-1, SHA2-224, SHA2- 512, SHA2-512/224, SHA2-512/256, SHA-3)",
"description": "Key Derivation",
"name": "TLS 1.3 KDF (SHA-1, SHA2-224, SHA2-512, SHA2-512/224, SHA2-512/256, SHA-3)",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API data input parameters",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API control input parameters",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return code, error queue",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "Crypto Officer",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-256 (A4317)",
"details": "SHA2-256 HMAC verification",
"indicator": "module inits",
"testMethod": "HMAC",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4318)",
"details": "SHA2-256 HMAC verification",
"indicator": "module inits",
"testMethod": "HMAC",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4326)",
"details": "SHA2-256 HMAC verification",
"indicator": "module inits",
"testMethod": "HMAC",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4330)",
"details": "SHA2-256 HMAC verification",
"indicator": "module inits",
"testMethod": "HMAC",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4344)",
"details": "SHA2-256 HMAC verification",
"indicator": "module inits",
"testMethod": "HMAC",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-256 (A4346)",
"details": "SHA2-256 HMAC verification",
"indicator": "module inits",
"testMethod": "HMAC",
"testProps": "SHA2-256",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs",
"method": "Calling the zeroization API",
"operatorId": "By calling the appropriate zeroization functions: AES key: EVP_CIPHER_CTX_free, EVP_MAC_CTX_free HMAC key: EVP_MAC_CTX_free Key-derivation key: EVP_KDF_CTX_free Shared secret: EVP_KDF_CTX_free PBKDF Password: EVP_KDF_CTX_free Derived key: EVP_KDF_CTX_free Entropy input: EVP_RAND_CTX_free DRBG seed: EVP_RAND_CTX_free DRBG Internal state: EVP_RAND_CTX_free DH private key: EVP_PKEY_free DH public key: EVP_PKEY_free EC private key: EVP_PKEY_free EC public key: EVP_PKEY_free RSA private key: EVP_PKEY_free RSA public key: EVP_PKEY_free TLS derived secret: EVP_KDF_CTX_free",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. All data output is inhibited during zeroization."
},
{
"description": "Zeroizes the SSPs",
"method": "Automatic",
"operatorId": "Intermediate key generation value: zeroized automatically by the module (after the requested service completed)",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. All data output is inhibited during zeroization."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Remove power from the module",
"operatorId": "By removing power",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "ORACLE SERVER X9-2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "Yes",
"processors": "Intel(R) Xeon(R) Platinum 8358",
"version": "3.0.7- b27cdeb3ba51be46"
},
{
"hardwarePlatform": "ORACLE SERVER E4-2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "Yes",
"processors": "AMD EPYC 7J13",
"version": "3.0.7- b27cdeb3ba51be46"
},
{
"hardwarePlatform": "ORACLE SERVER A1-2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "Yes",
"processors": "Ampere(R) Altra(R) Q80-30",
"version": "3.0.7- b27cdeb3ba51be46"
},
{
"hardwarePlatform": "ORACLE SERVER X9-2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "Intel(R) Xeon(R) Platinum 8358",
"version": "3.0.7- b27cdeb3ba51be46"
},
{
"hardwarePlatform": "ORACLE SERVER E4-2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "AMD EPYC 7J13",
"version": "3.0.7- b27cdeb3ba51be46"
},
{
"hardwarePlatform": "ORACLE SERVER A1-2c",
"hypervisorHostOs": "KVM on Oracle Linux 8",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "Ampere(R) Altra(R) Q80-30",
"version": "3.0.7- b27cdeb3ba51be46"
},
{
"hardwarePlatform": "Marvell Liquid IO II (MIPS64) SmartNIC",
"hypervisorHostOs": "N/A",
"operatingSystem": "Oracle Linux 9",
"paa_pai": "No",
"processors": "OCTEON III",
"version": "3.0.7- b27cdeb3ba51be46"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric RSA:2048, 3072, 4096 bits with 112, 128, 149 bits of key strength. ECDSA:P-224, P-256, P-384, P-521 elliptic curves with 112-256 bits of key strength Safe Primes Key Generation:2048, 3072, 4096, 6144, 8192-bit keys with 112-200 bits of key strength",
"implName": "N/A",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133Rev2 section 4, example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "Oracle X Series Servers",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Oracle E Series Servers",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Oracle A Series Servers",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Marvell T93 LiquidIO III (ARM v8.x) SmartNIC",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Pensando DSC-200-R (ARM v8.x) SmartNIC",
"operatingSystem": "Oracle Linux 9"
},
{
"hardwarePlatform": "Nvidia Bluefield-3 (ARM v8.x) SmartNIC",
"operatingSystem": "Oracle Linux 9"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 66
}
},
"FF": {
"DH": {
"DH": 40,
"Diffie-Hellman": 3
}
},
"RSA": {
"RSA-OAEP": 3,
"RSA-PSS": 3
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 17
},
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 77
}
},
"crypto_protocol": {
"IKE": {
"IKE": 3
},
"SSH": {
"SSH": 39
},
"TLS": {
"TLS": {
"TLS": 12,
"TLS 1.2": 18,
"TLS 1.3": 13,
"TLS v1.2": 25,
"TLS v1.3": 12
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"KEX": {
"Key Exchange": 1
},
"MAC": {
"MAC": 9
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 6,
"P-224": 52,
"P-256": 10,
"P-384": 2,
"P-521": 10,
"curve P-192": 6
}
},
"eval_facility": {
"atsec": {
"atsec": 3
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES GCM IV 2": 1,
"AES- 256": 1,
"AES-256": 2,
"DRBG 256, 320": 1,
"DRBG 880": 1,
"DRBG; 320": 1,
"DRBG; 444": 1,
"HMAC SHA-256": 2,
"HMAC-SHA-1": 30,
"HMAC-SHA-256": 8,
"PKCS#1": 26,
"SHA -1": 1,
"SHA- 224": 16,
"SHA-1": 48,
"SHA-256": 2,
"SHA-3": 10,
"SHA2- 512": 1,
"SHA2-224": 15,
"SHA2-256": 68,
"SHA2-384": 7,
"SHA2-512": 21,
"SHA3-224": 1,
"SHA3-256": 5,
"SHA3-384": 1,
"SHA3-512": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 21,
"PBKDF2": 15
},
"SHA": {
"SHA1": {
"SHA-1": 48
},
"SHA2": {
"SHA-256": 2
},
"SHA3": {
"SHA-3": 10,
"SHA3-224": 1,
"SHA3-256": 5,
"SHA3-384": 1,
"SHA3-512": 1
}
},
"SHAKE": {
"SHAKE128": 16,
"SHAKE256": 16
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 43
},
"RNG": {
"RBG": 3,
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 10,
"FIPS 180-4": 8,
"FIPS 186-4": 11,
"FIPS 186-5": 3,
"FIPS 197": 1,
"FIPS 198-1": 12,
"FIPS 202": 7,
"FIPS PUB 140-3": 2,
"FIPS186-4": 77
},
"NIST": {
"SP 800-108": 1,
"SP 800-132": 7,
"SP 800-135": 5,
"SP 800-140B": 1,
"SP 800-38A": 12,
"SP 800-38B": 2,
"SP 800-38C": 2,
"SP 800-38D": 3,
"SP 800-38E": 3,
"SP 800-38F": 3,
"SP 800-56A": 4,
"SP 800-56C": 3,
"SP 800-90A": 3,
"SP 800-90B": 1
},
"PKCS": {
"PKCS#1": 13
},
"RFC": {
"RFC 3526": 2,
"RFC 5288": 2,
"RFC 7627": 5,
"RFC 7919": 2,
"RFC 8446": 1,
"RFC7627": 13,
"RFC8446": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 42,
"AES-": 1,
"AES-256": 2
},
"CAST": {
"CAST": 310
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 45,
"HMAC-SHA-256": 4
}
},
"miscellaneous": {
"SEED": {
"SEED": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 6
},
"IBM": {
"SSC": 4
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"HMAC-SHA2-384A4346",
"Safe Primes Key VerificationA4325",
"AES-CBC-CS3A4329",
"AES-CTRA4329",
"KDA TwoStep SP800-56Cr2A4309",
"TLS v1.3 KDFA4310",
"HMAC-SHA2-512/224A4346",
"SHA2-512/224A4346",
"AES-CBCA4329",
"SHA-1A4346",
"KDF SP800-108A4324",
"SHA2-512/256A4346",
"AES-CBC-CS2A4329",
"HMAC-SHA-1A4346",
"HMAC-SHA2-512A4346",
"KDA HKDF Sp800-56Cr1A4310",
"AES-GCMA4343",
"Safe Primes Key GenerationA4325",
"HMAC-SHA3-224A4319",
"Counter DRBGA4311",
"KDF ANS 9.63A4346",
"AES-GMACA4343",
"KAS-ECC-SSC Sp800-56Ar3A4346",
"PBKDFA4346",
"ECDSA KeyGen (FIPS186-4)A4346",
"SHA2-224A4346",
"SHA3-224A4319",
"SHA3-384A4319",
"AES-KWPA4329",
"SHA3-512A4319",
"TLS v1.2 KDF RFC7627A4346",
"HMAC-SHA3-384A4319",
"AES-ECBA4334",
"SHAKE-256A4319",
"AES-CCMA4329",
"KAS-FFC-SSC Sp800-56Ar3A4325",
"HMAC DRBGA4311",
"HMAC-SHA3-256A4319",
"Hash DRBGA4311",
"AES-CFB1A4329",
"AES-CBC-CS1A4329",
"SHA3-256A4319",
"AES-CMACA4329",
"ECDSA SigVer (FIPS186-4)A4346",
"HMAC-SHA2-256A4346",
"SHA2-512A4346",
"SHA2-256A4346",
"RSA KeyGen (FIPS186-4)A4346",
"AES-KWA4329",
"HMAC-SHA3-512A4319",
"ECDSA KeyVer (FIPS186-4)A4346",
"SHA2-384A4346",
"KDF ANS 9.42A4346",
"AES-CFB8A4329",
"HMAC-SHA2-512/256A4346",
"HMAC-SHA2-224A4346",
"KDA OneStep SP800-56Cr2A4309",
"KDF SSHA4334",
"ECDSA SigGen (FIPS186-4)A4346",
"AES-CFB128A4329",
"SHAKE-128A4319",
"AES-XTS Testing Revision 2.0A4329",
"RSA SigVer (FIPS186-4)A4346",
"RSA SigGen (FIPS186-4)A4346",
"AES-OFBA4329"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4329",
"#A4322",
"#A4315",
"#A4342",
"#A4309",
"#A4327",
"#A4316",
"#A4344",
"#A4337",
"#A4345",
"#A4340",
"#A4318",
"#A4323",
"#A4330",
"#A4321",
"#A4334",
"#A4317",
"#A4326",
"#A4328",
"#A4320",
"#A4310",
"#A4332",
"#A4331",
"#A4333",
"#A4339",
"#A4311",
"#A4338",
"#A4346",
"#A4312",
"#A4314",
"#A4335",
"#A4319",
"#A4336",
"#A4341",
"#A4343",
"#A4325",
"#A4324",
"#A4313"
]
},
"policy_metadata": {
"/Author": "Dick Sikkema",
"/CreationDate": "D:20260601115236-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260601115236-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1139834,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://www.ietf.org/rfc/rfc3447.txt",
"https://www.ietf.org/rfc/rfc7919.txt",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"https://www.ietf.org/rfc/rfc5288.txt",
"https://webstore.ansi.org/standards/ascx9/ansix9422001",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"http://www.oracle.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://www.ietf.org/rfc/rfc3526.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://webstore.ansi.org/standards/ascx9/ansix9632001",
"https://docs.oracle.com/en/operating-systems/oracle-linux/9/fips/about_fips_1403.html#about-fips-140-3",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://www.ietf.org/rfc/rfc8446.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 69
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "89d16264a008826123db4a0e2492e63423ef99feed8c3e9718eba5c89139bdca",
"source_hash": "302c33527454493fa03b82fd59fcdbd1288669ce4354a407e47b20d4d984aa56",
"txt_hash": "a170a0da7aa470f399aec39092e1b0ebbacc15cb1dbc9fb166e6475688a395d6"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
"date_sunset": "2029-08-24",
"description": "The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Oracle Linux 9 OpenSSL FIPS Provider",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-06-01",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Oracle Corporation",
"vendor_url": "http://www.oracle.com"
}
}