{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "f2ac0b4ca7b0e481", "cert_id": 5547, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "Qualcomm\u00ae Crypto Engine Core", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-10-09", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://www.qualcomm.com", "vendor": "Qualcomm Technologies, Inc.", "certificate_pdf_url": null, "module_type": "Hardware", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g. keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Software/Firmware security: N/A", "Operational environment: N/A", "Physical security: Level 2", "Non-invasive security: N/A", "Life-cycle assurance: Level 2", "Mitigation of other attacks: N/A"], "embodiment": "SingleChip", "description": "Qualcomm Crypto Engine Core is a general purpose cryptographic hardware engine capable of securely processing various confidentiality and integrity algorithms across multiple execution environments.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2031-10-08", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 1, "Level 2": 1}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 8, "HMAC SHA-1": 2, "HMAC- SHA-1": 1, "SHA-1": 11, "SHA2-256": 7, "SHA2-384": 8, "SHA2-512": 7, "SHA3-224": 7, "SHA3-256": 8, "SHA3-384": 7, "SHA3-512": 7, "SHA- 1": 4, "SHA1": 1, "SHA2 -256": 2, "SHA2 -384": 3, "SHA2 -512": 2, "SHA3 -224": 2, "SHA3 -256": 2, "SHA3 -384": 2, "SHA3 -512": 2, "SHA-3": 1}}, "vendor": {"Qualcomm": {"Qualcomm": 108}}, "eval_facility": {"atsec": {"atsec": 2}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES": 35, "AES-": 19}, "CAST": {"CAST": 42}}, "DES": {"DES": {"DES": 5}, "3DES": {"TDES": 14, "Triple-DES": 1, "TDEA": 1}}, "miscellaneous": {"SM4": {"SM4": 3}}, "constructions": {"MAC": {"HMAC": 30, "KMAC": 2, "CMAC": 5}}}, "asymmetric_crypto": {}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 11, "SHA1": 1}, "SHA2": {"SHA2": 9}, "SHA3": {"SHA3-224": 7, "SHA3-256": 8, "SHA3-384": 7, "SHA3-512": 7, "SHA3": 10, "SHA-3": 1}}}, "crypto_scheme": {"MAC": {"MAC": 27}, "AEAD": {"AEAD": 1}}, "crypto_protocol": {}, "randomness": {"RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 4}, "CBC": {"CBC": 5}, "CTR": {"CTR": 3}, "CCM": {"CCM": 6}, "XEX": {"XEX": 1}, "XTS": {"XTS": 9}}, "ecc_curve": {}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {}, "device_model": {}, "tee_name": {}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 46, "FIPS 198-1": 9, "FIPS 180-4": 5, "FIPS 202": 7, "FIPS PUB 140-3": 1, "FIPS 197": 1}, "NIST": {"SP 800-38A": 5, "SP 800-38C": 2, "SP 800-38B": 2, "SP 800-38E": 2, "SP 800-67": 2, "SP 800-133": 1, "NIST SP 800-57": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 789534, "pdf_is_encrypted": false, "pdf_number_of_pages": 37, "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260928081218-04'00'", "/ModDate": "D:20260928081218-04'00'", "/Producer": "Microsoft\u00ae Word for Microsoft 365", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://doi.org/10.6028/NIST.SP.800-38B", "https://doi.org/10.6028/NIST.FIPS.140-3", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "https://doi.org/10.6028/NIST.SP.800-67r2", "https://doi.org/10.6028/NIST.FIPS.180-4", "https://doi.org/10.6028/NIST.FIPS.202", "https://doi.org/10.6028/NIST.FIPS.198-1", "https://doi.org/10.6028/NIST.SP.800-38E", "https://doi.org/10.6028/NIST.SP.800-38C", "https://doi.org/10.6028/NIST.FIPS.197-upd1", "https://doi.org/10.6028/NIST.SP.800-38A"]}}, "module_algorithms": {"_type": "Set", "elements": ["TDES-CBCA6448", "TDES-ECBA6448", "HMAC-SHA2-384A6448", "SHA2-512A6448", "HMAC-SHA2-256A6448", "SHA3-224A6448", "SHA2-256A6448", "AES-CMACA6448", "SHA3-512A6448", "HMAC-SHA2-512A6448", "AES-CCMA6448", "HMAC-SHA3-256A6448", "AES-XTS Testing Revision 2.0A6448", "SHAKE-256A6448", "SHA2-384A6448", "AES-CBCA6448", "HMAC-SHA3-224A6448", "AES-ECBA6448", "HMAC-SHA3-384A6448", "SHA-1A6448", "HMAC-SHA-1A6448", "HMAC-SHA3-512A6448", "AES-CTRA6448", "SHA3-256A6448", "AES-CBC-CS2A6448", "SHA3-384A6448", "SHAKE-128A6448"]}, "policy_algorithms": {"_type": "Set", "elements": ["#A6448"]}, "is_br1_format": true, "br1_deviations": 0, "br1_tables": {"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables", "security_levels": {"section": 1, "subsection": 2, "found": true, "entries": [{"section": "1", "title": "General", "level": "1"}, {"section": "2", "title": "Cryptographic module specification", "level": "1"}, {"section": "3", "title": "Cryptographic module interfaces", "level": "1"}, {"section": "4", "title": "Roles, services, and authentication", "level": "1"}, {"section": "5", "title": "Software/Firmware security", "level": "N/A"}, {"section": "6", "title": "Operational environment", "level": "N/A"}, {"section": "7", "title": "Physical security", "level": "2"}, {"section": "8", "title": "Non-invasive security", "level": "N/A"}, {"section": "9", "title": "Sensitive security parameter management", "level": "1"}, {"section": "10", "title": "Self-tests", "level": "1"}, {"section": "11", "title": "Life-cycle assurance", "level": "2"}, {"section": "12", "title": "Mitigation of other attacks", "level": "N/A"}, {"section": "", "title": "Overall Level", "level": "1"}]}, "tested_module_id_hw": {"section": 2, "subsection": 2, "found": true, "entries": [{"modelPartNum": "Snapdragon\u00ae 8 Elite Mobile Platform", "hwVersion": "5.9.0", "fwVersion": "N/A", "processors": "N/A", "features": "N/A"}, {"modelPartNum": "Snapdragon\u00ae 7 Gen 4 Mobile Platform", "hwVersion": "5.9.0", "fwVersion": "N/A", "processors": "N/A", "features": "N/A"}]}, "tested_module_id_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_module_id_hw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "tested_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "vendor_affirmed_op_env_sw_fw_hy": {"section": 2, "subsection": 2, "found": false, "entries": []}, "modes_of_operation": {"section": 2, "subsection": 4, "found": true, "entries": [{"name": "Approved mode of operation", "description": "Automatically entered whenever an approved service is requested", "type": "Approved", "statusIndicator": "Equivalent to the indicator of the requested service"}, {"name": "Non-approved mode of operation", "description": "Automatically entered whenever a non-approved service is requested", "type": "Non- Approved", "statusIndicator": "Non-approved services are not explicitly indicated. The absence of an explicit indicator is an implicit indicator of non- approved services."}]}, "approved_algorithms": {"section": 2, "subsection": 5, "found": true, "entries": [{"algorithm": "AES-CBC", "cavpCertName": "A6448", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-CBC-CS2", "cavpCertName": "A6448", "properties": "Direction - decrypt, encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8", "reference": "SP 800-38A"}, {"algorithm": "AES-CCM", "cavpCertName": "A6448", "properties": "Key Length - 128, 256 Tag Length - 112, 128, 32, 48, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0, 256 AAD Length - AAD Length: 256, 65536", "reference": "SP 800-38C"}, {"algorithm": "AES-CMAC", "cavpCertName": "A6448", "properties": "Direction - Generation, Verification Key Length - 128, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8", "reference": "SP 800-38B"}, {"algorithm": "AES-CTR", "cavpCertName": "A6448", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128 Supports Counter larger than maximum value - Yes Incremental Counter - Yes Counter Tests Performed - Yes", "reference": "SP 800-38A"}, {"algorithm": "AES-ECB", "cavpCertName": "A6448", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256", "reference": "SP 800-38A"}, {"algorithm": "AES-XTS Testing Revision 2.0", "cavpCertName": "A6448", "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 8 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes", "reference": "SP 800-38E"}, {"algorithm": "HMAC-SHA-1", "cavpCertName": "A6448", "properties": "MAC - MAC: 160 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-256", "cavpCertName": "A6448", "properties": "MAC - MAC: 256 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-384", "cavpCertName": "A6448", "properties": "MAC - MAC: 384 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA2-512", "cavpCertName": "A6448", "properties": "MAC - MAC: 512 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-224", "cavpCertName": "A6448", "properties": "MAC - MAC: 224 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-256", "cavpCertName": "A6448", "properties": "MAC - MAC: 256 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-384", "cavpCertName": "A6448", "properties": "MAC - MAC: 384 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "HMAC-SHA3-512", "cavpCertName": "A6448", "properties": "MAC - MAC: 512 Key Length - Key Length: 512", "reference": "FIPS 198-1"}, {"algorithm": "SHA-1", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-256", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-384", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA2-512", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 180-4"}, {"algorithm": "SHA3-224", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-256", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-384", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHA3-512", "cavpCertName": "A6448", "properties": "Message Length - Message Length: 0-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-128", "cavpCertName": "A6448", "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - No Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "SHAKE-256", "cavpCertName": "A6448", "properties": "Supports Bit-Oriented Messages - No Supports Empty Message - No Supports Bit-Oriented Output - No Output Length - Output Length: 16-65536 Increment 8", "reference": "FIPS 202"}, {"algorithm": "TDES-CBC", "cavpCertName": "A6448", "properties": "Direction - Decrypt, Encrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}, {"algorithm": "TDES-ECB", "cavpCertName": "A6448", "properties": "Direction - Decrypt, Encrypt Keying Option - 1", "reference": "SP 800-67 Rev. 2"}]}, "vendor_affirmed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_algos": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_allowed_NSC": {"section": 2, "subsection": 5, "found": false, "entries": []}, "non_approved_not_allowed": {"section": 2, "subsection": 5, "found": true, "entries": [{"name": "AES-GCM (external IV)", "use": "encryption, decryption"}, {"name": "AES-SIV", "use": "encryption, decryption"}, {"name": "DES-CBC", "use": "encryption, decryption"}, {"name": "DES-ECB", "use": "encryption, decryption"}, {"name": "TDES (two independent keys)", "use": "encryption, decryption"}, {"name": "TDES Encryption (three independent keys)", "use": "encryption"}, {"name": "HMAC SHA-1 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA2-256 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA2-384 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA2-512 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-224 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-256 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-384 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "HMAC SHA3-512 with key sizes less than 112 bits", "use": "message authentication code"}, {"name": "AEAD-SHA-1 AES-CBC", "use": "encryption, decryption (with message authentication code)"}, {"name": "AEAD-SHA-1 AES-CTR", "use": "encryption, decryption (with message authentication code)"}, {"name": "AEAD-SHA-1 DES-CBC", "use": "encryption, decryption (with message authentication code)"}, {"name": "AEAD-SHA-1 TDES-CBC", "use": "encryption, decryption (with message authentication code)"}, {"name": "SM3", "use": "hashing"}, {"name": "SM4", "use": "encryption, decryption"}, {"name": "cSHAKE (not CAVP tested)", "use": "extendable output function"}, {"name": "KMAC (not CAVP tested)", "use": "message authentication code"}]}, "ports_interfaces": {"section": 3, "subsection": 1, "found": true, "entries": [{"physicalPort": "Data In FIFO and Registers", "logicalInterface": "Data Input", "data": "All input data"}, {"physicalPort": "Data Out FIFO", "logicalInterface": "Data Output", "data": "All data output except Status information"}, {"physicalPort": "Registers", "logicalInterface": "Control Input", "data": "Command input"}, {"physicalPort": "Registers", "logicalInterface": "Status Output", "data": "Status information"}, {"physicalPort": "Physical power connector", "logicalInterface": "Power", "data": "N/A"}]}, "authentication_methods": {"section": 4, "subsection": 1, "found": false, "entries": []}, "roles": {"section": 4, "subsection": 2, "found": true, "entries": [{"name": "Crypto Officer", "type": "Role", "operatorType": "CO", "authMethodList": "None"}]}, "approved_services": {"section": 4, "subsection": 3, "found": true, "entries": [{"name": "AES Encrypti on", "description": "Perform data encryption", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 0 and 2 set to 0", "inputs": "AES Key, Plaint ext", "outputs": "Ciphertext, Success/Fail", "secFunImpl": "AES- CBC AES- CTR AES- ECB AES- XTS AES- CBC-", "rolesSspAccess": "Cry pto Offi cer - AES key: W, E"}, {"name": "AES Decrypti on", "description": "Perform data decryption", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 0 and 2 set to 0", "inputs": "AES Key, Cipher text", "outputs": "Plaintext, Success/Fail", "secFunImpl": "CS2 AES- CBC AES- CTR AES- ECB AES- XTS AES- CBC- CS2", "rolesSspAccess": "Cry pto Offi cer - AES key: W, E"}, {"name": "AES Authenti cated Encrypti on", "description": "Perform data encryption", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 1 set to 0", "inputs": "AES Key, Plaint ext, IV", "outputs": "Ciphertext, tag, Success/Fail", "secFunImpl": "AES- CCM", "rolesSspAccess": "Cry pto Offi cer - AES key: W, E"}, {"name": "AES Authenti cated Decrypti on", "description": "Perform data decryption", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 1 set to 0", "inputs": "AES Key, Cipher text, tag, IV", "outputs": "Plaintext, Success/Fail", "secFunImpl": "AES- CCM", "rolesSspAccess": "Cry pto Offi cer - AES key: W,"}, {"name": "CMAC Message Authenti cation", "description": "Message Authentication", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 13 set to 0", "inputs": "AES Key, Input data", "outputs": "CMAC value", "secFunImpl": "AES- CMA C", "rolesSspAccess": "E Cry pto Offi cer - AES key: W, E"}, {"name": "TDES Decrypti on (Legacy Use)", "description": "Decrypt data which was encrypted with 3- key TDES prior to the sunset date provided in IG C.M", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 3 set to 0", "inputs": "Triple -DES key, cipher text", "outputs": "Plaintext", "secFunImpl": "TDES -ECB (Lega cy Use) TDES -CBC (Lega cy Use)", "rolesSspAccess": "Cry pto Offi cer - Trip le- DES Key : W, E"}, {"name": "HMAC Message Authenti cation", "description": "Message Authentication", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 9- 12, 18-21 set to 0", "inputs": "HMA C Key, input data", "outputs": "HMAC value", "secFunImpl": "HMA C- SHA- 1 HMA", "rolesSspAccess": "Cry pto Offi cer -"}, {"name": "Name", "description": "Description", "indicator": "Indicator", "inputs": "Inputs", "outputs": "Outputs", "secFunImpl": "Secur ity Funct", "rolesSspAccess": "SSP Acc ess"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "ions C- SHA2 -256 HMA C- SHA2 -384 HMA C- SHA2 -512 HMA C- SHA3 -224 HMA C- SHA3 -256 HMA C- SHA3 -384 HMA C- SHA3 -512", "rolesSspAccess": "HM AC key: W, E"}, {"name": "Hash", "description": "Hashing", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bits 5- 8, 14-17 set to 0", "inputs": "Input data", "outputs": "Hash output", "secFunImpl": "SHA- 1 SHA2 -256 SHA2 -384 SHA2 -512 SHA3 -224 SHA3 -256 SHA3 -384 SHA3 -512", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "XOF", "description": "Extendable output function", "indicator": "CRYPTO0_CRYPTO_FI PS_APPROVED bit 22 set to 0", "inputs": "Input data, output length", "outputs": "XOF output", "secFunImpl": "SHA KE- 128 SHA KE- 256", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "Show Status", "description": "Return code read from CRYPTO0_CRYPTO_ BIST_STATUS", "indicator": "None", "inputs": "N/A", "outputs": "Zero (operational) or non-zero (error)", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "Self-Test", "description": "Self-Tests are executed automatically when device is booted or restarted", "indicator": "None", "inputs": "None", "outputs": "Self-test Success/Fail", "secFunImpl": "AES- ECB AES- CBC AES- CCM AES- CMA C AES- XTS HMA C- SHA- 1 HMA C- SHA2 -256 HMA C- SHA2 -384 HMA C- SHA2 -512 HMA C- SHA3 -256 HMA C- SHA3 -512", "rolesSspAccess": "Cry pto Offi cer"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "TDES -ECB (Lega cy Use) TDES -CBC (Lega cy Use) SHA KE- 256", "rolesSspAccess": ""}, {"name": "Zeroizati on", "description": "Zeroizes all SSPs", "indicator": "None", "inputs": "None", "outputs": "None", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer - AES key: Z - HM AC key: Z - Trip le- DES Key : Z"}, {"name": "Configur e keys for use by Crypto Officer", "description": "Configures the keys for Crypto Officer role", "indicator": "None", "inputs": "AES Key, HMA C Key, Triple -DES Key", "outputs": "Success/Fail", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer - AES key: W - HM AC key: W"}, {"name": "", "description": "", "indicator": "", "inputs": "", "outputs": "", "secFunImpl": "", "rolesSspAccess": "- Trip le- DES Key : W"}, {"name": "Show identifie r and version", "description": "Show the module's identifier and version", "indicator": "None", "inputs": "None", "outputs": "Module identifier and version read from registers CRYPTO0_CRYPT O_FIPS_ID and CRYPTO0_CRYPT O_VERSION", "secFunImpl": "None", "rolesSspAccess": "Cry pto Offi cer"}]}, "non_approved_services": {"section": 4, "subsection": 4, "found": true, "entries": [{"name": "Encryption", "description": "Encrypts data using symmetric cryptography", "alg_accessed": "AES-GCM (external IV) AES-SIV DES-CBC DES-ECB TDES (two independent keys) TDES Encryption (three independent keys) SM4", "role": "CO"}, {"name": "Decryption", "description": "Decrypts data using symmetric cryptography", "alg_accessed": "AES-GCM (external IV) AES-SIV DES-CBC DES-ECB TDES (two independent keys) SM4", "role": "CO"}, {"name": "Hash", "description": "Hashing algorithm", "alg_accessed": "SM3", "role": "CO"}, {"name": "Message Authentication", "description": "Computes the MAC value of data", "alg_accessed": "HMAC SHA-1 with key sizes less than 112 bits", "role": "CO"}, {"name": "", "description": "", "alg_accessed": "HMAC SHA2-256 with key sizes less than 112 bits HMAC SHA2-384 with key sizes less than 112 bits HMAC SHA2-512 with key sizes less than 112 bits HMAC SHA3-224 with key sizes less than 112 bits HMAC SHA3-256 with key sizes less than 112 bits HMAC SHA3-384 with key sizes less than 112 bits HMAC SHA3-512 with key sizes less than 112 bits KMAC (not CAVP tested)", "role": ""}, {"name": "Authenticated Encryption/Decryption (AEAD)", "description": "Encrypts or decrypts data using symmetric cryptography", "alg_accessed": "AEAD-SHA-1 AES-CBC AEAD-SHA-1 AES-CTR AEAD-SHA-1 DES-CBC AEAD-SHA-1 TDES-CBC", "role": "CO"}, {"name": "Extendable Output Function (XOF)", "description": "Extendable Output Function", "alg_accessed": "cSHAKE (not CAVP tested)", "role": "CO"}]}, "mechanisms_actions": {"section": 7, "subsection": 1, "found": true, "entries": [{"mechanism": "Tamper evident coating", "inspectFreq": "N/A", "inspectGuidance": "N/A"}]}, "storage_areas": {"section": 9, "subsection": 1, "found": true, "entries": [{"name": "Hardware FIFO", "description": "Temporary storage for SSPs used by the module as part of service execution", "persistance": "Dynamic"}, {"name": "Registers", "description": "Temporary storage for SSPs used by the module as part of service execution", "persistance": "Dynamic"}]}, "ssp_io_methods": {"section": 9, "subsection": 2, "found": true, "entries": [{"name": "Input parameter", "source": "Caller within the physical perimeter", "dest": "Hardware registers, hardware FIFOs", "format": "Plaintext", "distribution": "N/A", "entry": "N/A", "sfiAlgo": ""}]}, "ssp_zeroization_methods": {"section": 9, "subsection": 3, "found": true, "entries": [{"method": "Power-off", "description": "All SSPs will be zeroized", "rationale": "The registers holding the SSPs are set to all zeroes", "operatorId": "Operator can initiate this zeroization method by powering off the module"}]}, "self_tests": {"section": 10, "subsection": 1, "found": false, "entries": []}, "cond_self_tests": {"section": 10, "subsection": 2, "found": true, "entries": [{"algorithmOrTest": "AES-ECB (A6448) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-ECB (A6448) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CTR (A6448) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CTR (A6448) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CBC (A6448) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CBC (A6448) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6448) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A6448) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CCM (A6448) - Encryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CCM (A6448) - Decryption", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption", "condition": "Performed during module power-up"}, {"algorithmOrTest": "AES-CMAC (A6448)", "testProps": "256 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "TDES-ECB (A6448)", "testProps": "168 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption (Legacy)", "condition": "Performed during module power-up"}, {"algorithmOrTest": "TDES-CBC (A6448)", "testProps": "168 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Decryption (Legacy)", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA-1 (A6448)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA2- 256 (A6448)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA2- 512 (A6448)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA2- 384 (A6448)", "testProps": "SHA2-384", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA3- 512 (A6448)", "testProps": "512 bit key", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "HMAC-SHA3- 256 (A6448)", "testProps": "SHA3-256", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "MAC tag computation and verification", "condition": "Performed during module power-up"}, {"algorithmOrTest": "SHAKE-256 (A6448)", "testProps": "N/A", "testMethod": "KAT", "type": "CAST", "indicator": "Module becomes operational and services are available for use", "details": "Encryption", "condition": "Performed during module power-up"}]}, "error_states": {"section": 10, "subsection": 4, "found": true, "entries": [{"name": "Error", "description": "No cryptographic operation can be performed. No data input or output is possible.", "conditions": "KAT failure", "recoveryMethod": "Power cycling", "indicator": "CRYPTO0_CRYPTO_BIST_STATUS register is non-zero"}]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["TDES-CBCA6448", "TDES-ECBA6448", "HMAC-SHA2-384A6448", "SHA2-512A6448", "HMAC-SHA2-256A6448", "SHA3-224A6448", "SHA2-256A6448", "AES-CMACA6448", "SHA3-512A6448", "HMAC-SHA2-512A6448", "AES-CCMA6448", "HMAC-SHA3-256A6448", "AES-XTS Testing Revision 2.0A6448", "SHAKE-256A6448", "SHA2-384A6448", "AES-CBCA6448", "HMAC-SHA3-224A6448", "AES-ECBA6448", "HMAC-SHA3-384A6448", "SHA-1A6448", "#A6448", "HMAC-SHA-1A6448", "HMAC-SHA3-512A6448", "AES-CTRA6448", "SHA3-256A6448", "AES-CBC-CS2A6448", "SHA3-384A6448", "SHAKE-128A6448"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "a691a95c45459cd8a5068942e620f0e80ded1d750eae807f66ff5aa06b157aa6", "txt_hash": "6cb16e77b219e8603da94832d140b3f4a476c606a39b33487b2d615ee74db196", "json_hash": "14b3b51c5dbb60d05bb0cd9d9f86fa3ed32f874580a86b40a728f1bd75ba11e7"}}}