{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "ea1bcb3116150abb", "cert_id": 5337, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Rocky Linux 8 and 9 NSS Cryptographic Module", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-06-17", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "https://ciq.com/", "vendor": "Ctrl IQ, Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "The Rocky Linux 8 and 9 NSS Cryptographic Module consists of the Softoken and Freebl libraries offering various cryptographic mechanisms.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-06-16", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-256": 4, "SHA2-224": 20, "SHA2-256": 40, "SHA2-384": 22, "SHA2- 512": 8, "SHA-1": 15, "SHA2-512": 18, "SHA-224": 2, "SHA-256": 10, "SHA-384": 4, "SHA-512": 4, "SHA3-256": 1, "SHA- 256": 2, "SHA2- 256": 4, "SHA2- 384": 4, "SHA-3": 1, "PKCS#5": 6, "PKCS#7": 2, "PKCS#11": 2, "PKCS#12": 6, "- PKCS 1": 4, "PKCS#1": 18, "PKCS 1": 4}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 84}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 61, "AES-": 1}, "CAST": {"CAST": 153}, "RC": {"RC2": 3, "RC4": 3}}, "DES": {"DES": {"DES": 5}, "3DES": {"Triple-DES": 5}}, "djb": {"ChaCha": {"ChaCha20": 3}, "Poly": {"Poly1305": 1}}, "miscellaneous": {"Camellia": {"Camellia": 5}, "SEED": {"SEED": 5}}, "constructions": {"MAC": {"HMAC": 21, "HMAC-SHA-256": 2, "CBC-MAC": 2, "CMAC": 8}}}, "asymmetric_crypto": {"ECC": {"ECDSA": {"ECDSA": 52}, "ECC": {"ECC": 4}}, "FF": {"DH": {"Diffie-Hellman": 8}, "DSA": {"DSA": 6}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 15}, "SHA2": {"SHA-224": 2, "SHA-256": 10, "SHA-384": 4, "SHA-512": 4}, "SHA3": {"SHA3-256": 1, "SHA-3": 1}}, "MD": {"MD5": {"MD5": 12}}, "PBKDF": {"PBKDF2": 18, "PBKDF": 6}}, "crypto_scheme": {"MAC": {"MAC": 12}, "KEX": {"Key Exchange": 2}, "KA": {"Key Agreement": 1}}, "crypto_protocol": {"TLS": {"SSL": {"SSL": 2}, "TLS": {"TLS": 24, "TLS v1.2": 7, "TLS 1.2": 17, "TLS 1.3": 5}}, "IKE": {"IKEv2": 23, "IKEv1": 2, "IKE": 13}}, "randomness": {"PRNG": {"DRBG": 28}, "RNG": {"RNG": 1, "RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 2}, "CTR": {"CTR": 1}, "GCM": {"GCM": 7}}, "ecc_curve": {"NIST": {"P-256": 32, "P-384": 16, "P-521": 28}, "Edwards": {"Ed25519": 2}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {"NSS": {"NSS": 89}}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"Timing attacks": 1, "timing attack": 1, "timing attacks": 1}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 3}, "IBM": {"SSC": 2}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 95, "FIPS PUB 140-3": 2, "FIPS186-5": 46, "FIPS 186-5": 18, "FIPS 198-1": 17, "FIPS186-2": 3, "FIPS 186-4": 6, "FIPS186-4": 3, "FIPS 180-4": 17, "FIPS 186-2": 3, "FIPS 197": 1, "FIPS 202": 1}, "NIST": {"SP 800-132": 9, "SP 800-38A": 18, "SP 800-38B": 5, "SP 800-38D": 7, "SP 800-38F": 9, "SP 800-90A": 2, "SP 800-56A": 6, "SP 800-56C": 2, "SP 800-135": 4, "SP 800-108": 2, "SP 800-90B": 1}, "PKCS": {"PKCS#5": 3, "PKCS#7": 1, "PKCS#11": 1, "PKCS#12": 3, "PKCS 1": 4, "PKCS#1": 9}, "RFC": {"RFC7627": 6, "RFC 5288": 3, "RFC 8446": 4, "RFC 3526": 4, "RFC 7919": 4, "RFC 7627": 2}, "X509": {"X.509": 1}}, "javacard_version": {}, "javacard_api_const": {"curves": {"X25519": 4}}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 729334, "pdf_is_encrypted": false, "pdf_number_of_pages": 82, "/Author": "", "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos", "/ClassificationContentMarkingHeaderShapeIds": "461509c1,7b280525,351710bb", "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT", "/Comments": "", "/Company": "", "/CreationDate": "D:20260612143606-04'00'", "/Creator": "Acrobat PDFMaker 26 for Word", "/Keywords": "", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "86a1d044-d9de-4c0d-9ac1-5b80216ca79e", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-06-12T18:27:01Z", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a", "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1", "/ModDate": "D:20260612144050-04'00'", "/Producer": "Adobe PDF Library 26.1.59", "/SourceModified": "D:20260612183534", "/Subject": "", "/Title": "", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.ietf.org/rfc/rfc3526.txt", "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf", "https://www.ietf.org/rfc/rfc5288.txt", "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf", "https://csrc.nist.gov/files/pubs/fips/186-2/final/docs/fips186-2.pdf", "https://www.ietf.org/rfc/rfc8446.txt", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf", "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf", "https://www.rfc-editor.org/rfc/rfc8017.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1-upd1.pdf", "https://www.ietf.org/rfc/rfc7919.txt", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["ECDSA SigGen (FIPS186-5)A5921", "KDF SP800-108A5921", "AES-CBCA5923", "KAS-ECC-SSC Sp800-56Ar3A5921", "AES-CTRA5923", "AES-ECBA5923", "HMAC-SHA2-384A5925", "AES-KWA5923", "KDF IKEv2A5922", "RSA SigGen (FIPS186-5)A5921", "Safe Primes Key GenerationA5921", "HMAC-SHA2-512A5925", "AES-GCMA5924", "KDA HKDF SP800-56Cr2A5920", "AES-CBC-CS1A5923", "RSA SigVer (FIPS186-2)A5921", "HMAC-SHA2-224A5925", "RSA SigVer (FIPS186-4)A5921", "KAS-FFC-SSC Sp800-56Ar3A5921", "PBKDFA5921", "Hash DRBGA5921", "ECDSA SigVer (FIPS186-5)A5921", "TLS v1.2 KDF RFC7627A5921", "RSA KeyGen (FIPS186-5)A5921", "SHA2-512A5925", "SHA2-384A5925", "SHA2-256A5925", "ECDSA KeyGen (FIPS186-5)A5921", "AES-KWPA5923", "AES-CMACA5923", "SHA2-224A5925", "RSA SigVer (FIPS186-5)A5921", "HMAC-SHA2-256A5925"]}, "extracted_versions": {"_type": "Set", "elements": ["8", "9"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "472939018ccea2a9efe7fa12f495c28a85c925d889883f4fc911ee8fc323a2f5", "txt_hash": "d204cc2b35294f2105c66db1fa82e0cae8cf6a42632a5f1e8b29667940d87d7b", "json_hash": null}}}