VMware’s VPN Crypto Module

Certificate #4881

Webpage information ?

Status active
Validation dates 15.11.2024
Sunset date 14-11-2026
Standard FIPS 140-3
Security level 1
Type Firmware
Embodiment Multi-Chip Stand Alone
Caveat Interim validation
Exceptions
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
  • Documentation requirements: N/A
  • Cryptographic module security policy: N/A
Description VMware's VPN Crypto Module is a firmware cryptographic module whose purpose is to provide FIPS 140-3 validated cryptographic functions to various applications utilizing VPN capabilities.
Version (Firmware) 21.11
Tested configurations
  • Ubuntu 20.04 on ESXi 8.0 running on Dell PowerEdge R650 with Intel(R) Xeon(R) Gold 6330 with PAA
  • Ubuntu 20.04 on ESXi 8.0 running on Dell PowerEdge R650 with Intel(R) Xeon(R) Gold 6330 without PAA
Vendor Broadcom Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy ?

Symmetric Algorithms
AES, CAST, HMAC, CMAC
Hash functions
SHA-1
Schemes
MAC
Protocols
IKEv2, VPN
Randomness
DRBG
Block cipher modes
CBC, CTR, CFB, GCM, CCM

Vendor
Broadcom Inc, Broadcom

Security level
Level 1, level 1

Standards
FIPS 140-3, FIPS PUB 197, FIPS PUB 198-1, FIPS 180-4, RFC 4106, RFC 7296, ISO/IEC 19790, ISO/IEC 24759

File metadata

Author Lynn Butler Bradford
Creation date D:20241030164108-04'00'
Modification date D:20241030164108-04'00'
Pages 16
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

  • 18.11.2024 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4881,
  "dgst": "f2047c17e14c8c5b",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CCMA4384",
        "AES-GCMA4384",
        "SHA2-224A4384",
        "SHA2-512A4384",
        "SHA2-256A4385",
        "SHA2-384A4384",
        "AES-GMACA4384",
        "HMAC-SHA2-512A4384",
        "HMAC-SHA2-384A4384",
        "SHA-1A4384",
        "AES-CBCA4384",
        "HMAC-SHA-1A4384",
        "HMAC-SHA2-256A4385",
        "HMAC-SHA2-224A4384",
        "AES-CMACA4384"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "21.11"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CCM": {
          "CCM": 6
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "GCM": {
          "GCM": 7
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 2
        },
        "VPN": {
          "VPN": 20
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 5
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "HMAC-SHA-1": 6,
          "SHA-1": 2,
          "SHA2- 224": 1,
          "SHA2-224": 1,
          "SHA2-256": 7,
          "SHA2-384": 2,
          "SHA2-512": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 3
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 7,
          "FIPS 180-4": 2,
          "FIPS PUB 197": 1,
          "FIPS PUB 198-1": 2
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 24759": 6
        },
        "RFC": {
          "RFC 4106": 1,
          "RFC 7296": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 24
          },
          "CAST": {
            "CAST": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4,
            "HMAC": 8
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Broadcom": {
          "Broadcom": 3,
          "Broadcom Inc": 16
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Lynn Butler Bradford",
      "/CreationDate": "D:20241030164108-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20241030164108-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 474025,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://librte_crypto_post.so/",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "http://librte_cryptodev.so/",
          "http://libipsec_mb.so/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 16
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "fafed96bf3b6e1614b51c32f1ea62f2fef30bd5a0bb889cd4d87ca7b2b7446df",
    "policy_txt_hash": "037dc807f28aa2b8078f9aaff8d2828a7ec21eab747242b3215cf60d6ada07a3"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation",
    "certificate_pdf_url": null,
    "date_sunset": "2026-11-14",
    "description": "VMware\u0027s VPN Crypto Module is a firmware cryptographic module whose purpose is to provide FIPS 140-3 validated cryptographic functions to various applications utilizing VPN capabilities.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": "21.11",
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "VMware\u2019s VPN Crypto Module",
    "module_type": "Firmware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": [
      "Ubuntu 20.04 on ESXi 8.0 running on Dell PowerEdge R650 with Intel(R) Xeon(R) Gold 6330 with PAA",
      "Ubuntu 20.04 on ESXi 8.0 running on Dell PowerEdge R650 with Intel(R) Xeon(R) Gold 6330 without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-11-15",
        "lab": "Lightship Security, Inc.",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Broadcom Inc.",
    "vendor_url": "http://www.broadcom.com"
  }
}