This page was not yet optimized for use on mobile devices.

CTERA Crypto Module™ (Java)

Certificate details

Certificate ID	#5016
Status	active
Validation dates	13.05.2025
Sunset date	28-07-2029
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys).
Exceptions	Physical security: N/A Non-invasive security: N/A
Description	CTERA Crypto Module™ (Java) is a secure cryptographic engine used by the CTERA Enterprise File Services Platform. CTERA enables enterprises, defense and government agencies to gain control of their file data globally for optimal edge performance, data insight, and governance.
Tested configurations	VMware Photon OS 4.0 with Java SE Runtime Environment v8 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 4.0 with Java SE Runtime Environment v11 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 4.0 with Java SE Runtime Environment v17 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 5.0 with Java SE Runtime Environment v21 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330
Vendor	CTERA Networks Ltd. https://www.ctera.com
Lab	Leidos Accredited Testing & Evaluation (AT&E) Lab
Algorithms	AES-CBC-CS1A4399 AES-CBC-CS2A4399 AES-CBC-CS3A4399 AES-CBCA4399 AES-CCMA4399 AES-CFB128A4399 AES-CFB8A4399 AES-CMACA4399 AES-CTRA4399 AES-ECBA4399 AES-FF1A4399 AES-GCMA4399 AES-GMACA4399 AES-KWA4399 AES-KWPA4399 AES-OFBA4399 Counter DRBGA4399 cSHAKE-128A4399 cSHAKE-256A4399 DSA KeyGen (FIPS186-4)A4399 DSA PQGGen (FIPS186-4)A4399 DSA PQGVer (FIPS186-4)A4399 DSA SigGen (FIPS186-4)A4399 DSA SigVer (FIPS186-4)A4399 ECDSA KeyGen (FIPS186-4)A4399 ECDSA KeyVer (FIPS186-4)A4399 ECDSA SigGen (FIPS186-4)A4399 ECDSA SigVer (FIPS186-4)A4399 Hash DRBGA4399 HMAC DRBGA4399 HMAC-SHA-1A4399 HMAC-SHA2-224A4399 HMAC-SHA2-256A4399 HMAC-SHA2-384A4399 HMAC-SHA2-512/224A4399 HMAC-SHA2-512/256A4399 HMAC-SHA2-512A4399 HMAC-SHA3-224A4399 HMAC-SHA3-256A4399 HMAC-SHA3-384A4399 HMAC-SHA3-512A4399 KAS-ECC Sp800-56Ar3A4399 KAS-FFC Sp800-56Ar3A4399 KAS-IFCA4399 KDA HKDF SP800-56Cr2A4399 KDA OneStep SP800-56Cr2A4399 KDA TwoStep SP800-56Cr2A4399 KDF ANS 9.63A4399 KDF IKEv2A4399 KDF SNMPA4399 KDF SP800-108A4399 KDF SRTPA4399 KDF SSHA4399 KDF TLSA4399 KMAC-128A4399 KMAC-256A4399 KTS-IFCA4399 ParallelHash-128A4399 ParallelHash-256A4399 PBKDFA4399 RSA Decryption PrimitiveA4399 RSA KeyGen (FIPS186-4)A4399 RSA SigGen (FIPS186-4)A4399 RSA Signature PrimitiveA4399 RSA SigVer (FIPS186-2)A4399 RSA SigVer (FIPS186-4)A4399 Safe Primes Key GenerationA4399 Safe Primes Key VerificationA4399 SHA-1A4399 SHA2-224A4399 SHA2-256A4399 SHA2-384A4399 SHA2-512/224A4399 SHA2-512/256A4399 SHA2-512A4399 SHA3-224A4399 SHA3-256A4399 SHA3-384A4399 SHA3-512A4399 SHAKE-128A4399 SHAKE-256A4399 TupleHash-128A4399 TupleHash-256A4399
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES192, Twofish, Serpent, CAST5, CAST, RC4, RC2, DES, Triple-DES, TDEA, ChaCha20, Poly1305, IDEA, Blowfish, Camellia, SEED, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-224, KMAC, CMAC, CBC-MAC

Asymmetric Algorithms

RSA-OAEP, ECDSA, EdDSA, ECC, Diffie-Hellman, DH, DSA

Post-quantum Algorithms

HSS, LMS

Hash functions

SHA-1, SHA-256, SHA-224, SHA-384, SHA-512, SHA-2, SHA3-224, SHA3-256, SHA3-512, SHA3-384, SHA-3, SHAKE128, SHAKE256, MD5, RIPEMD128, RIPEMD160, RIPEMD320, RIPEMD256, RIPEMD, PBKDF, PBKDF2

Schemes

MAC, Key Agreement, AEAD

Protocols

SSH, TLS, TLS 1.2, TLS v1.2, TLS 1.0, TLS 1.1, IKEv2

Randomness

PRNG, DRBG, RNG, RBG

Libraries

OpenSSL, BouncyCastle

Elliptic Curves

P-192, P-224, P-256, P-384, P-521, K-163, K-283, K-409, K-571, B-233, B-283, B-409, B-571, Ed25519, Ed448

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM

JavaCard API constants

X25519, X448

JavaCard packages

java.security, java.runtime.name, org.bouncycastle.util, org.bouncycastle.fips, org.bouncycastle.jcajce.provider, org.bouncycastle.entropy.factors, org.bouncycastle.entropy, org.bouncycastle.crypto

Trusted Execution Environments

SSC, SE

Vendor

Microsoft

Security level

Level 1

Side-channel analysis

timing attacks, timing attack

Title	Security Policy
Subject	MODULE NAME
Author	SafeLogic Inc.
Creation date	D:20250116120642-08'00'
Modification date	D:20250116120642-08'00'
Pages	73
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 4}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'AES GCM Encrypt KAT (128': 1, 'AES GCM Decrypt KAT (128': 1}, '__update__': {'SHA-1': 8, 'SHA2-512': 6, 'SHA2-256': 4, 'SHA-3': 7}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'Twofish': {'__update__': {'Twofish': 1}}, 'Serpent': {'__update__': {'Serpent': 1}}, 'CAST': {'__update__': {'CAST5': 1}}, 'RC': {'__update__': {'RC2': 1}}}}, 'DES': {'__update__': {'DES': {'__update__': {'DES': 2}}, '3DES': {'__update__': {'Triple-DES': 7}}}}, 'djb': {'__update__': {'ChaCha': {'__update__': {'ChaCha20': 2}}, 'Poly': {'__update__': {'Poly1305': 2}}}}, 'miscellaneous': {'__update__': {'IDEA': {'__update__': {'IDEA': 1}}, 'Blowfish': {'__update__': {'Blowfish': 1}}, 'Camellia': {'__update__': {'Camellia': 1}}, 'SEED': {'__update__': {'SEED': 1}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 16}}}}, 'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 5, 'DH': 16}}, 'DSA': {'__update__': {'DSA': 27}}}}}}, 'pq_crypto': {'__update__': {'LMS': {'__update__': {'HSS': 1, 'LMS': 1}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 8}}, 'SHA3': {'__update__': {'SHA-3': 7}}}}, 'SHAKE': {'__update__': {'SHAKE256': 2}}, 'MD': {'__update__': {'MD5': {'__update__': {'MD5': 6}}}}, 'RIPEMD': {'__update__': {'RIPEMD128': 2, 'RIPEMD160': 2, 'RIPEMD320': 2, 'RIPEMD256': 1}}, 'PBKDF': {'__update__': {'PBKDF': 20}}}}} data.

The br1_deviations property was set to 11.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 3}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-1': 9, 'SHA2-512': 7, 'SHA2-256': 5, 'SHA-3': 8}, '__delete__': ['AES GCM Encrypt KAT (128', 'AES GCM Decrypt KAT (128']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'Twofish': {'__update__': {'Twofish': 2}}, 'Serpent': {'__update__': {'Serpent': 2}}, 'CAST': {'__update__': {'CAST5': 2}}, 'RC': {'__update__': {'RC2': 2}}}}, 'DES': {'__update__': {'DES': {'__update__': {'DES': 3}}, '3DES': {'__update__': {'Triple-DES': 8}}}}, 'djb': {'__update__': {'ChaCha': {'__update__': {'ChaCha20': 3}}, 'Poly': {'__update__': {'Poly1305': 3}}}}, 'miscellaneous': {'__update__': {'IDEA': {'__update__': {'IDEA': 2}}, 'Blowfish': {'__update__': {'Blowfish': 2}}, 'Camellia': {'__update__': {'Camellia': 2}}, 'SEED': {'__update__': {'SEED': 2}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 17}}}}, 'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 6, 'DH': 17}}, 'DSA': {'__update__': {'DSA': 28}}}}}}, 'pq_crypto': {'__update__': {'LMS': {'__update__': {'HSS': 2, 'LMS': 2}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 9}}, 'SHA3': {'__update__': {'SHA-3': 8}}}}, 'SHAKE': {'__update__': {'SHAKE256': 3}}, 'MD': {'__update__': {'MD5': {'__update__': {'MD5': 7}}}}, 'RIPEMD': {'__update__': {'RIPEMD128': 3, 'RIPEMD160': 3, 'RIPEMD320': 3, 'RIPEMD256': 2}}, 'PBKDF': {'__update__': {'PBKDF': 21}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['cSHAKE-128A4399', 'AES-CCMA4399', 'DSA SigVer (FIPS186-4)A4399', 'ParallelHash-256A4399', 'KDF ANS 9.63A4399', 'Safe Primes Key VerificationA4399', 'KDF SRTPA4399', 'KTS-IFCA4399', 'ECDSA SigGen (FIPS186-4)A4399', 'SHAKE-256A4399', 'AES-CBC-CS1A4399', 'ECDSA KeyGen (FIPS186-4)A4399', 'HMAC-SHA2-512A4399', 'ECDSA SigVer (FIPS186-4)A4399', 'RSA Signature PrimitiveA4399', 'PBKDFA4399', 'KDA HKDF SP800-56Cr2A4399', 'SHA3-256A4399', 'KDF TLSA4399', 'SHA2-512/256A4399', 'SHA-1A4399', 'AES-CBCA4399', 'KAS-ECC Sp800-56Ar3A4399', 'SHAKE-128A4399', 'HMAC DRBGA4399', 'KAS-IFCA4399', 'RSA SigVer (FIPS186-4)A4399', 'DSA PQGVer (FIPS186-4)A4399', 'KMAC-256A4399', 'AES-KWA4399', 'SHA2-384A4399', 'AES-CTRA4399', 'AES-CBC-CS3A4399', 'AES-GCMA4399', 'SHA2-224A4399', 'AES-CMACA4399', 'ParallelHash-128A4399', 'RSA SigGen (FIPS186-4)A4399', 'HMAC-SHA2-384A4399', 'KDF SP800-108A4399', 'HMAC-SHA2-256A4399', 'AES-CBC-CS2A4399', 'KAS-FFC Sp800-56Ar3A4399', 'RSA SigVer (FIPS186-2)A4399', 'AES-OFBA4399', 'SHA3-512A4399', 'AES-ECBA4399', 'ECDSA KeyVer (FIPS186-4)A4399', 'HMAC-SHA3-256A4399', 'cSHAKE-256A4399', 'KMAC-128A4399', 'Hash DRBGA4399', 'TupleHash-128A4399', 'HMAC-SHA2-512/224A4399', 'HMAC-SHA3-512A4399', 'KDF SNMPA4399', 'SHA2-512/224A4399', 'SHA3-224A4399', 'AES-FF1A4399', 'KDF IKEv2A4399', 'KDF SSHA4399', 'HMAC-SHA2-512/256A4399', 'Safe Primes Key GenerationA4399', 'RSA Decryption PrimitiveA4399', 'KDA TwoStep SP800-56Cr2A4399', 'HMAC-SHA3-384A4399', 'SHA2-256A4399', 'DSA PQGGen (FIPS186-4)A4399', 'DSA SigGen (FIPS186-4)A4399', 'AES-GMACA4399', 'AES-KWPA4399', 'HMAC-SHA-1A4399', 'HMAC-SHA3-224A4399', 'AES-CFB128A4399', 'DSA KeyGen (FIPS186-4)A4399', 'TupleHash-256A4399', 'HMAC-SHA2-224A4399', 'KDA OneStep SP800-56Cr2A4399', 'SHA3-384A4399', 'Counter DRBGA4399', 'AES-CFB8A4399', 'SHA2-512A4399', 'RSA KeyGen (FIPS186-4)A4399']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A4399']}}.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMACSHA-256': 1, 'AES 2': 1, 'DRBG 19': 19, 'DSA 3': 1}, '__update__': {'SHA-256': 8, 'SHA-1': 8, 'PKCS#1': 2}, '__delete__': ['HMAC 9', 'HMAC- SHA-256', 'AES2', 'DRBG19', 'DRBG 20', 'DSA3']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 120}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 35, 'KMAC': 15}}}}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 5, 'DH': 16}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 8}}, 'SHA2': {'__update__': {'SHA-256': 8}}}}, 'PBKDF': {'__update__': {'PBKDF': 20}}}}, 'crypto_scheme': {'__update__': {'KA': {'__update__': {'Key Agreement': 10}}}}, 'crypto_protocol': {'__update__': {'SSH': {'__delete__': ['SSHv2']}, 'TLS': {'__update__': {'TLS': {'__update__': {'TLS': 21}}}}, 'IKE': {'__update__': {'IKEv2': 10}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 81}}}}, 'cipher_mode': {'__update__': {'GCM': {'__update__': {'GCM': 21}}}}, 'ecc_curve': {'__update__': {'NIST': {'__update__': {'P-192': 2, 'K-163': 1, 'B-233': 1}, '__delete__': ['B-163']}}}, 'standard_id': {'__update__': {'FIPS': {'__insert__': {'FIPS 1403': 1}, '__update__': {'FIPS 140-3': 87, 'FIPS 140': 8}}, 'PKCS': {'__update__': {'PKCS#1': 1}}}}, 'javacard_api_const': {'__update__': {'curves': {'__update__': {'X25519': 1, 'X448': 1}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A4399']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '51c95f93afe0bd62e8e89ec1dcb123b0e108fc5f9d64c0c1ddb220eb6d8f26b4', 'json_hash': '4294f173e3ede6a0295f89a72e8f320bb95307bb8574f9d152d55197d0d4e3fe'} data.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2025_130625_0321.pdf.
30.03.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'pq_crypto': {'__update__': {'LMS': {'__insert__': {'HSS': 1}}}}} data.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
19.05.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5016,
  "dgst": "e9cf0653c1f1de47",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CMACA4399",
        "PBKDFA4399",
        "HMAC-SHA-1A4399",
        "RSA Signature PrimitiveA4399",
        "ECDSA KeyGen (FIPS186-4)A4399",
        "KAS-IFCA4399",
        "KDA HKDF SP800-56Cr2A4399",
        "AES-CTRA4399",
        "KDF SP800-108A4399",
        "KDA OneStep SP800-56Cr2A4399",
        "SHA3-256A4399",
        "AES-FF1A4399",
        "KDF ANS 9.63A4399",
        "Counter DRBGA4399",
        "DSA PQGGen (FIPS186-4)A4399",
        "AES-CFB8A4399",
        "KDF TLSA4399",
        "HMAC-SHA2-224A4399",
        "AES-OFBA4399",
        "ECDSA SigVer (FIPS186-4)A4399",
        "KDF SSHA4399",
        "AES-CBCA4399",
        "ParallelHash-256A4399",
        "KMAC-256A4399",
        "RSA SigGen (FIPS186-4)A4399",
        "HMAC-SHA2-512A4399",
        "cSHAKE-128A4399",
        "AES-ECBA4399",
        "TupleHash-128A4399",
        "KAS-FFC Sp800-56Ar3A4399",
        "HMAC-SHA2-256A4399",
        "SHA3-512A4399",
        "SHA2-384A4399",
        "ECDSA KeyVer (FIPS186-4)A4399",
        "AES-KWA4399",
        "DSA SigGen (FIPS186-4)A4399",
        "KDF IKEv2A4399",
        "SHA2-256A4399",
        "AES-GMACA4399",
        "HMAC-SHA3-384A4399",
        "RSA SigVer (FIPS186-2)A4399",
        "KAS-ECC Sp800-56Ar3A4399",
        "KMAC-128A4399",
        "AES-CBC-CS3A4399",
        "KDF SNMPA4399",
        "SHA-1A4399",
        "AES-CCMA4399",
        "HMAC-SHA3-224A4399",
        "HMAC DRBGA4399",
        "SHA2-512/224A4399",
        "HMAC-SHA2-384A4399",
        "AES-KWPA4399",
        "DSA SigVer (FIPS186-4)A4399",
        "ParallelHash-128A4399",
        "AES-CBC-CS2A4399",
        "TupleHash-256A4399",
        "Safe Primes Key VerificationA4399",
        "SHA3-224A4399",
        "RSA Decryption PrimitiveA4399",
        "AES-CBC-CS1A4399",
        "Hash DRBGA4399",
        "HMAC-SHA3-256A4399",
        "RSA SigVer (FIPS186-4)A4399",
        "SHAKE-256A4399",
        "KTS-IFCA4399",
        "SHA2-512A4399",
        "SHA3-384A4399",
        "AES-CFB128A4399",
        "KDF SRTPA4399",
        "DSA KeyGen (FIPS186-4)A4399",
        "HMAC-SHA3-512A4399",
        "cSHAKE-256A4399",
        "DSA PQGVer (FIPS186-4)A4399",
        "HMAC-SHA2-512/256A4399",
        "RSA KeyGen (FIPS186-4)A4399",
        "SHA2-512/256A4399",
        "Safe Primes Key GenerationA4399",
        "HMAC-SHA2-512/224A4399",
        "SHA2-224A4399",
        "SHAKE-128A4399",
        "#A4399",
        "ECDSA SigGen (FIPS186-4)A4399",
        "AES-GCMA4399",
        "KDA TwoStep SP800-56Cr2A4399"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 11,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDSA": {
            "ECDSA": 16
          },
          "EdDSA": {
            "EdDSA": 2
          }
        },
        "FF": {
          "DH": {
            "DH": 16,
            "Diffie-Hellman": 5
          },
          "DSA": {
            "DSA": 27
          }
        },
        "RSA": {
          "RSA-OAEP": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 8
        },
        "CCM": {
          "CCM": 9
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 11
        },
        "ECB": {
          "ECB": 8
        },
        "GCM": {
          "GCM": 21
        },
        "OFB": {
          "OFB": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "BouncyCastle": {
          "BouncyCastle": 1
        },
        "OpenSSL": {
          "OpenSSL": 2
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 10
        },
        "SSH": {
          "SSH": 10
        },
        "TLS": {
          "TLS": {
            "TLS": 21,
            "TLS 1.0": 2,
            "TLS 1.1": 2,
            "TLS 1.2": 6,
            "TLS v1.2": 2
          }
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 1
        },
        "KA": {
          "Key Agreement": 10
        },
        "MAC": {
          "MAC": 8
        }
      },
      "device_model": {},
      "ecc_curve": {
        "Edwards": {
          "Ed25519": 2,
          "Ed448": 2
        },
        "NIST": {
          "B-233": 1,
          "B-283": 2,
          "B-409": 2,
          "B-571": 1,
          "K-163": 1,
          "K-283": 2,
          "K-409": 2,
          "K-571": 2,
          "P-192": 2,
          "P-224": 4,
          "P-256": 10,
          "P-384": 4,
          "P-521": 4
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 4
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES (128": 1,
          "AES 128": 1,
          "AES 192": 1,
          "AES 2": 1,
          "AES 256": 1,
          "AES CTR 256": 1,
          "AES GCM Decrypt KAT (128": 1,
          "AES GCM Encrypt KAT (128": 1,
          "AES192": 1,
          "DRBG 19": 19,
          "DSA 3": 1,
          "HMAC SHA-224": 1,
          "HMAC- SHA-2": 1,
          "HMAC- SHA-224": 1,
          "HMAC- SHA-512": 1,
          "HMAC-SHA- 1": 2,
          "HMAC-SHA- 256": 2,
          "HMAC-SHA- 3": 2,
          "HMAC-SHA- 512": 4,
          "HMAC-SHA-1": 6,
          "HMAC-SHA-224": 2,
          "HMAC-SHA-256": 12,
          "HMAC-SHA-384": 6,
          "HMAC-SHA-512/224": 6,
          "HMAC-SHA-512/256": 6,
          "HMACSHA-256": 1,
          "PKCS #1": 8,
          "PKCS#1": 2,
          "PKCS#12": 6,
          "PKCS#5": 6,
          "PKCS1": 8,
          "SHA- 1": 1,
          "SHA- 256": 1,
          "SHA- 3": 1,
          "SHA- 384": 1,
          "SHA-1": 8,
          "SHA-2": 1,
          "SHA-224": 10,
          "SHA-256": 8,
          "SHA-3": 7,
          "SHA-384": 7,
          "SHA-512": 7,
          "SHA2- 256": 1,
          "SHA2- 384": 2,
          "SHA2-224": 2,
          "SHA2-256": 4,
          "SHA2-384": 1,
          "SHA2-512": 6,
          "SHA3- 224": 1,
          "SHA3- 384": 2,
          "SHA3-224": 6,
          "SHA3-256": 4,
          "SHA3-384": 2,
          "SHA3-512": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 4
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 6
          }
        },
        "PBKDF": {
          "PBKDF": 20,
          "PBKDF2": 1
        },
        "RIPEMD": {
          "RIPEMD": 1,
          "RIPEMD128": 2,
          "RIPEMD160": 2,
          "RIPEMD256": 1,
          "RIPEMD320": 2
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 8
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA-224": 10,
            "SHA-256": 8,
            "SHA-384": 7,
            "SHA-512": 7
          },
          "SHA3": {
            "SHA-3": 7,
            "SHA3-224": 6,
            "SHA3-256": 4,
            "SHA3-384": 2,
            "SHA3-512": 4
          }
        },
        "SHAKE": {
          "SHAKE128": 1,
          "SHAKE256": 2
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "X25519": 1,
          "X448": 1
        }
      },
      "javacard_packages": {
        "java": {
          "java.runtime.name": 1,
          "java.security": 2
        },
        "org": {
          "org.bouncycastle.crypto": 2,
          "org.bouncycastle.entropy": 1,
          "org.bouncycastle.entropy.factors": 1,
          "org.bouncycastle.fips": 2,
          "org.bouncycastle.jcajce.provider": 1,
          "org.bouncycastle.util": 1
        }
      },
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {
        "LMS": {
          "HSS": 1,
          "LMS": 1
        }
      },
      "randomness": {
        "PRNG": {
          "DRBG": 81,
          "PRNG": 2
        },
        "RNG": {
          "RBG": 2,
          "RNG": 2
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "timing attack": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140": 8,
          "FIPS 140-3": 87,
          "FIPS 1403": 1,
          "FIPS 180-4": 2,
          "FIPS 186-2": 2,
          "FIPS 186-4": 8,
          "FIPS 197": 2,
          "FIPS 198-1": 2,
          "FIPS 202": 2,
          "FIPS PUB 140-3": 1
        },
        "NIST": {
          "NIST SP 800-90C": 1,
          "SP 800-108": 1,
          "SP 800-131A": 1,
          "SP 800-132": 5,
          "SP 800-185": 2,
          "SP 800-38A": 3,
          "SP 800-38B": 2,
          "SP 800-38C": 2,
          "SP 800-38D": 3,
          "SP 800-38F": 2,
          "SP 800-38G": 4,
          "SP 800-89": 1,
          "SP 800-90A": 2,
          "SP 800-90B": 3
        },
        "PKCS": {
          "PKCS #1": 4,
          "PKCS#1": 1,
          "PKCS#12": 3,
          "PKCS#5": 3,
          "PKCS1": 4
        },
        "RFC": {
          "RFC 5246": 1,
          "RFC 7914": 1,
          "RFC 8708": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 120,
            "AES192": 1
          },
          "CAST": {
            "CAST": 2,
            "CAST5": 1
          },
          "RC": {
            "RC2": 1,
            "RC4": 1
          },
          "Serpent": {
            "Serpent": 1
          },
          "Twofish": {
            "Twofish": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 2,
            "Triple-DES": 7
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1,
            "CMAC": 10,
            "HMAC": 35,
            "HMAC-SHA-224": 1,
            "HMAC-SHA-256": 6,
            "HMAC-SHA-384": 3,
            "KMAC": 15
          }
        },
        "djb": {
          "ChaCha": {
            "ChaCha20": 2
          },
          "Poly": {
            "Poly1305": 2
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 1
          },
          "Camellia": {
            "Camellia": 1
          },
          "IDEA": {
            "IDEA": 1
          },
          "SEED": {
            "SEED": 1
          }
        }
      },
      "tee_name": {
        "IBM": {
          "SE": 79,
          "SSC": 1
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Microsoft": {
          "Microsoft": 12
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CMACA4399",
        "PBKDFA4399",
        "HMAC-SHA-1A4399",
        "RSA Signature PrimitiveA4399",
        "ECDSA KeyGen (FIPS186-4)A4399",
        "KAS-IFCA4399",
        "KDA HKDF SP800-56Cr2A4399",
        "AES-CTRA4399",
        "KDF SP800-108A4399",
        "KDA OneStep SP800-56Cr2A4399",
        "SHA3-256A4399",
        "AES-FF1A4399",
        "KDF ANS 9.63A4399",
        "Counter DRBGA4399",
        "DSA PQGGen (FIPS186-4)A4399",
        "AES-CFB8A4399",
        "KDF TLSA4399",
        "HMAC-SHA2-224A4399",
        "AES-OFBA4399",
        "ECDSA SigVer (FIPS186-4)A4399",
        "KDF SSHA4399",
        "AES-CBCA4399",
        "ParallelHash-256A4399",
        "KMAC-256A4399",
        "RSA SigGen (FIPS186-4)A4399",
        "HMAC-SHA2-512A4399",
        "cSHAKE-128A4399",
        "AES-ECBA4399",
        "TupleHash-128A4399",
        "KAS-FFC Sp800-56Ar3A4399",
        "HMAC-SHA2-256A4399",
        "SHA3-512A4399",
        "SHA2-384A4399",
        "ECDSA KeyVer (FIPS186-4)A4399",
        "AES-KWA4399",
        "DSA SigGen (FIPS186-4)A4399",
        "KDF IKEv2A4399",
        "SHA2-256A4399",
        "AES-GMACA4399",
        "HMAC-SHA3-384A4399",
        "RSA SigVer (FIPS186-2)A4399",
        "KAS-ECC Sp800-56Ar3A4399",
        "KMAC-128A4399",
        "AES-CBC-CS3A4399",
        "KDF SNMPA4399",
        "SHA-1A4399",
        "AES-CCMA4399",
        "HMAC-SHA3-224A4399",
        "HMAC DRBGA4399",
        "SHA2-512/224A4399",
        "HMAC-SHA2-384A4399",
        "AES-KWPA4399",
        "DSA SigVer (FIPS186-4)A4399",
        "ParallelHash-128A4399",
        "AES-CBC-CS2A4399",
        "TupleHash-256A4399",
        "Safe Primes Key VerificationA4399",
        "SHA3-224A4399",
        "RSA Decryption PrimitiveA4399",
        "AES-CBC-CS1A4399",
        "Hash DRBGA4399",
        "HMAC-SHA3-256A4399",
        "RSA SigVer (FIPS186-4)A4399",
        "SHAKE-256A4399",
        "KTS-IFCA4399",
        "SHA2-512A4399",
        "SHA3-384A4399",
        "AES-CFB128A4399",
        "KDF SRTPA4399",
        "DSA KeyGen (FIPS186-4)A4399",
        "HMAC-SHA3-512A4399",
        "cSHAKE-256A4399",
        "DSA PQGVer (FIPS186-4)A4399",
        "HMAC-SHA2-512/256A4399",
        "RSA KeyGen (FIPS186-4)A4399",
        "SHA2-512/256A4399",
        "Safe Primes Key GenerationA4399",
        "HMAC-SHA2-512/224A4399",
        "SHA2-224A4399",
        "SHAKE-128A4399",
        "ECDSA SigGen (FIPS186-4)A4399",
        "AES-GCMA4399",
        "KDA TwoStep SP800-56Cr2A4399"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4399"
      ]
    },
    "policy_metadata": {
      "/Author": "SafeLogic Inc.",
      "/CreationDate": "D:20250116120642-08\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20250116120642-08\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Subject": "MODULE NAME",
      "/Title": "Security Policy",
      "pdf_file_size_bytes": 1105462,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.safelogic.com/",
          "https://www.ctera.com/",
          "https://nvd.nist.gov/",
          "mailto:[email protected]",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 73
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4294f173e3ede6a0295f89a72e8f320bb95307bb8574f9d152d55197d0d4e3fe",
      "source_hash": "b6d39ac4887c525da96a4efcbd83f193a2370639c9fe01f43290e60764041c85",
      "txt_hash": "51c95f93afe0bd62e8e89ec1dcb123b0e108fc5f9d64c0c1ddb220eb6d8f26b4"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys).",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/May 2025_130625_0321.pdf",
    "date_sunset": "2029-07-28",
    "description": "CTERA Crypto Module\u2122 (Java) is a secure cryptographic engine used by the CTERA Enterprise File Services Platform. CTERA enables enterprises, defense and government agencies to gain control of their file data globally for optimal edge performance, data insight, and governance.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "CTERA Crypto Module\u2122 (Java)",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "2.0.0",
    "tested_conf": [
      "VMware Photon OS 4.0 with Java SE Runtime Environment v8 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 4.0 with Java SE Runtime Environment v11 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 4.0 with Java SE Runtime Environment v17 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330, VMware Photon OS 5.0 with Java SE Runtime Environment v21 on VMware ESXi 8.0 running on Dell PowerEdge R650 with Intel Xeon Gold 6330"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-05-13",
        "lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
        "validation_type": "Initial"
      }
    ],
    "vendor": "CTERA Networks Ltd.",
    "vendor_url": "https://www.ctera.com"
  }
}

Sections

CTERA Crypto Module™ (Java)

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Post-quantum Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

JavaCard API constants

JavaCard packages

Trusted Execution Environments

Vendor

Security level

Side-channel analysis

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

CTERA Crypto Module™ (Java)

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Post-quantum Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Device

JavaCard API constants

JavaCard packages

Trusted Execution Environments

Vendor

Security

Security level

Side-channel analysis

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data