Entrust CygnaCom IPSec Cryptographic Module

Certificate #278

Webpage information

Status historical
Historical reason Validation Sunsetting Policy - FIPS 140-1 Certificate
Validation dates 07.11.2002 , 23.08.2004 , 28.05.2014
Standard FIPS 140-1
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat None
Exceptions
  • Operating System Security: Tested as meeting Level 1 with SCO CMW+ V3.0.1 Operating System (single user mode)
Description The Entrust CygnaCom IPSec Cryptographic Module is a software cryptographic module intended to provide secure IPSEC communications between client workstations/laptops and servers. The communications are secured by the use of Triple DES (TDES) running in the Triple Cipher Block Chaining (TCBC) mode of operation to encrypt and the data portion of TCP/IP packets using either the IPSEC ESP-tunneled mode or ESP-transport mode. HMAC SHA-1 is used to authenticate IPSEC message headers and protocol data units.
Vendor Entrust CygnaCom
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
DES, TDES, HMAC
Asymmetric Algorithms
Diffie-Hellman
Hash functions
SHA-1
Schemes
MAC, Key Exchange
Protocols
SSH, IKE
Randomness
PRNG

Security level
Level 1, Level 2

Standards
FIPS 46-3, FIPS 81, FIPS 113, FIPS 140-1, FIPS 180-1, FIPS 186-2, FIPS PUB 140-1, FIPS PUB 198

File metadata

Title SCO CMW Security Policy 10-25-02.PDF
Author smid
Creation date D:20021025165043Z
Modification date D:20021107153702-05'00'
Pages 10
Creator SCO CMW Security Policy 10-25-02 - Microsoft Word
Producer Acrobat PDFWriter 4.0 for Windows NT

References

Incoming
  • 585 - historical - Bluefire Mobile Security™ FIPS Cryptographic Module
  • 508 - historical - RSA BSAFE® Crypto-C Micro Edition (ME)

Heuristics

No heuristics are available for this certificate.

References

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 278,
  "dgst": "ee62de25ccc2b55d",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA-1#79",
        "Triple-DES#91",
        "SHA-1#79"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": {
        "_type": "Set",
        "elements": [
          "508",
          "585"
        ]
      },
      "directly_referencing": null,
      "indirectly_referenced_by": {
        "_type": "Set",
        "elements": [
          "508",
          "585"
        ]
      },
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "Diffie-Hellman": 11
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {},
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKE": 5
        },
        "SSH": {
          "SSH": 5
        }
      },
      "crypto_scheme": {
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 4
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "HMAC SHA-1": 2,
          "SHA-1": 7
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 5,
          "Level 2": 1
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 7
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "PRNG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 113": 1,
          "FIPS 140-1": 6,
          "FIPS 180-1": 3,
          "FIPS 186-2": 4,
          "FIPS 46-3": 2,
          "FIPS 81": 1,
          "FIPS PUB 140-1": 1,
          "FIPS PUB 198": 1
        }
      },
      "symmetric_crypto": {
        "DES": {
          "3DES": {
            "TDES": 10
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 4
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "smid",
      "/CreationDate": "D:20021025165043Z",
      "/Creator": "SCO CMW Security Policy 10-25-02 - Microsoft Word",
      "/ModDate": "D:20021107153702-05\u002700\u0027",
      "/Producer": "Acrobat PDFWriter 4.0 for Windows NT",
      "/Title": "SCO CMW Security Policy 10-25-02.PDF",
      "pdf_file_size_bytes": 54598,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 10
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "b95f4ee9cd54dca06c78df05f31e68ca359a05813ea36fd3edddb37625a8b00f",
    "policy_txt_hash": "69c2101260974c345418ba6b5cbb7076a2f07df32cc35d4f5d86883867e93dc6"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "None",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/140crt278.pdf",
    "date_sunset": null,
    "description": "The Entrust CygnaCom IPSec Cryptographic Module is a software cryptographic module intended to provide secure IPSEC communications between client workstations/laptops and servers. The communications are secured by the use of Triple DES (TDES) running in the Triple Cipher Block Chaining (TCBC) mode of operation to encrypt and the data portion of TCP/IP packets using either the IPSEC ESP-tunneled mode or ESP-transport mode. HMAC SHA-1 is used to authenticate IPSEC message headers and protocol data units.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Operating System Security: Tested as meeting Level 1 with SCO CMW+ V3.0.1 Operating System (single user mode)"
    ],
    "fw_versions": null,
    "historical_reason": "Validation Sunsetting Policy - FIPS 140-1 Certificate",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Entrust CygnaCom IPSec Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-1",
    "status": "historical",
    "sw_versions": "1.0",
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2002-11-07",
        "lab": "SAIC-VA",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2004-08-23",
        "lab": "",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2014-05-28",
        "lab": "",
        "validation_type": "Update"
      }
    ],
    "vendor": "Entrust CygnaCom",
    "vendor_url": "http://www.cygnacom.com"
  }
}