Ad Noctem Connect 2.3

Certificate details

Certificate ID #5561
Status active
Validation dates 21.10.2026
Sunset date 20-10-2031
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When operated in approved mode. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Description The module is a VPN Client application. It provides secure communication over untrusted networks. To provide this security, the module implements IKEv2/IPsec. It can be configured over a local, web-based interface.
Vendor Northrop Grumman Corporation http://www.northropgrumman.com
Lab Teron Labs
Algorithms
  • AES-CBCA7624
  • AES-CCMA7624
  • AES-CTRA7623
  • AES-ECBA7623
  • AES-GCMA7624
  • Counter DRBGA7623
  • ECDSA KeyGen (FIPS186-5)A7623
  • ECDSA KeyVer (FIPS186-5)A7623
  • ECDSA SigGen (FIPS186-5)A7623
  • ECDSA SigVer (FIPS186-5)A7623
  • HMAC-SHA2-256A7624
  • HMAC-SHA2-384A7624
  • HMAC-SHA2-512A7624
  • KAS-ECC-SSC Sp800-56Ar3A7623
  • KAS-FFC-SSC Sp800-56Ar3A7623
  • KDF IKEv2A7623
  • RSA SigGen (FIPS186-5)A7623
  • RSA SigVer (FIPS186-5)A7623
  • Safe Primes Key GenerationA7623
  • Safe Primes Key VerificationA7623
  • SHA-1A7624
  • SHA2-256A7624
  • SHA2-384A7624
  • SHA2-512A7624
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES-256, AES, AES-, AES256, CAST-128, CAST, DES, Blowfish, Camellia, CMAC
Asymmetric Algorithms
RSA 3072, RSA 2048, RSA 4096, ECDH, ECDSA, EdDSA, ECC, Diffie-Hellman, DH
Hash functions
SHA-1, SHA1, SHA-224, SHA-3, MD5
Schemes
MAC, Key agreement, AEAD
Protocols
IKE, IKEv2, IPsec, VPN
Randomness
DRBG, RBG
Libraries
OpenSSL
Elliptic Curves
P-224, P-256, P-384, P-521, secp256k1
Block cipher modes
GCM, CCM

Trusted Execution Environments
PSP
Vendor
Infineon

Security level
Level 1

Creation date D:20261015083012-04'00'
Modification date D:20261015083012-04'00'
Pages 43
Creator Microsoft® Word for Microsoft 365
Producer Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5561,
  "dgst": "f3058bcbb026a692",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA KeyGen (FIPS186-5)A7623",
        "ECDSA SigVer (FIPS186-5)A7623",
        "SHA2-256A7624",
        "SHA-1A7624",
        "KAS-FFC-SSC Sp800-56Ar3A7623",
        "HMAC-SHA2-512A7624",
        "AES-CCMA7624",
        "RSA SigGen (FIPS186-5)A7623",
        "Counter DRBGA7623",
        "Safe Primes Key VerificationA7623",
        "AES-GCMA7624",
        "ECDSA SigGen (FIPS186-5)A7623",
        "HMAC-SHA2-384A7624",
        "AES-CTRA7623",
        "KDF IKEv2A7623",
        "AES-CBCA7624",
        "HMAC-SHA2-256A7624",
        "KAS-ECC-SSC Sp800-56Ar3A7623",
        "ECDSA KeyVer (FIPS186-5)A7623",
        "Safe Primes Key GenerationA7623",
        "AES-ECBA7623",
        "#A7623",
        "SHA2-384A7624",
        "#A7624",
        "RSA SigVer (FIPS186-5)A7623",
        "SHA2-512A7624"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "2.3"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 1,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [
          {
            "algorithm": "AES-CBC",
            "cavpCertName": "A7623, A7624",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-CCM",
            "cavpCertName": "A7624",
            "properties": "Key Length - 128, 256 Tag Length - 128, 64, 96 IV Length - IV Length: 64, 96, 104 Payload Length - Payload Length: 256 AAD Length - AAD Length: 64, 96",
            "reference": "SP 800-38C"
          },
          {
            "algorithm": "AES-CTR",
            "cavpCertName": "A7623",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8-128 Increment 8 Supports Counter larger than maximum value - No",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "",
            "cavpCertName": "",
            "properties": "Incremental Counter - Yes Counter Tests Performed - Yes",
            "reference": ""
          },
          {
            "algorithm": "AES-ECB",
            "cavpCertName": "A7623",
            "properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
            "reference": "SP 800-38A"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A7623",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1, 8.2.2 Key Length - 128, 192, 256 Tag Length - 128, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 120, 128, 248, 256, Payload Length: 160-65536 Increment 8 AAD Length - AAD Length: 64, 96",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "AES-GCM",
            "cavpCertName": "A7624",
            "properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.1 Key Length - 128, 256 Tag Length - 128, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 160-65536 Increment 8 AAD Length - AAD Length: 64, 96",
            "reference": "SP 800-38D"
          },
          {
            "algorithm": "Counter DRBG",
            "cavpCertName": "A7623",
            "properties": "Prediction Resistance - No Supports Reseed - No Mode - AES-256 Derivation Function Enabled - No Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 384 Nonce - Nonce: 0 Personalization String Length - Personalization String Length: 0 Returned Bits - 256",
            "reference": "SP 800-90A Rev. 1"
          },
          {
            "algorithm": "ECDSA KeyGen (FIPS186-5)",
            "cavpCertName": "A7623",
            "properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA KeyVer (FIPS186-5)",
            "cavpCertName": "A7623",
            "properties": "Curve - P-224, P-256, P-384, P-521",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigGen (FIPS186-5)",
            "cavpCertName": "A7623",
            "properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2- 512 Component - No",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "ECDSA SigVer (FIPS186-5)",
            "cavpCertName": "A7623",
            "properties": "Component - No Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-256, SHA2-384, SHA2- 512",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "HMAC-SHA2-256",
            "cavpCertName": "A7623, A7624",
            "properties": "MAC - MAC: 256 Key Length - Key Length: 256-512 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-384",
            "cavpCertName": "A7623, A7624",
            "properties": "MAC - MAC: 256-384 Increment 8 Key Length - Key Length: 256-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "HMAC-SHA2-512",
            "cavpCertName": "A7623, A7624",
            "properties": "MAC - MAC: 256-512 Increment 8 Key Length - Key Length: 256-1024 Increment 8",
            "reference": "FIPS 198-1"
          },
          {
            "algorithm": "KAS-ECC-SSC Sp800-56Ar3",
            "cavpCertName": "A7623",
            "properties": "Domain Parameter Generation Methods - P-224, P-256, P-384, P-521 Hash Function Z - SHA2-512 Scheme - onePassDh - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KAS-FFC-SSC Sp800-56Ar3",
            "cavpCertName": "A7623",
            "properties": "Domain Parameter Generation Methods - MODP- 2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "KDF IKEv2 (CVL)",
            "cavpCertName": "A7623",
            "properties": "Initiator Nonce Length - Initiator Nonce Length: 128-2048 Increment 8 Responder Nonce Length - Responder Nonce Length: 128-2048 Increment 8 Diffie-Hellman Shared Secret Length - Diffie- Hellman Shared Secret Length: 224-8192 Increment 8 Derived Keying Material Length - Derived Keying Material Length: 256-16384 Increment 8 Derived Keying Material Child Length - Derived Keying Material Child Length: 160-16384 Increment 8 Hash Algorithm - SHA2-256, SHA2-384, SHA2- 512",
            "reference": "SP 800-135 Rev. 1"
          },
          {
            "algorithm": "RSA SigGen (FIPS186-5)",
            "cavpCertName": "A7623",
            "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "RSA SigVer (FIPS186-5)",
            "cavpCertName": "A7623",
            "properties": "Hash Pair - Hash Algorithm - SHA2-256 Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5 Fixed Public Exponent - 010001 Public Exponent Mode - fixed",
            "reference": "FIPS 186-5"
          },
          {
            "algorithm": "Safe Primes Key Generation, Safe Primes Key Verification",
            "cavpCertName": "A7623",
            "properties": "Safe Prime Groups - MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192",
            "reference": "SP 800-56A Rev. 3"
          },
          {
            "algorithm": "SHA-1, SHA2-256, SHA2- 384, SHA2-512",
            "cavpCertName": "A7624, A7623",
            "properties": "Message Length - Message Length: 0-65536 Increment 8",
            "reference": "FIPS 180-4"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [
          {
            "description": "Execution of the IKEv2 daemon.",
            "indicator": "N/A",
            "inputs": "N/A",
            "name": "Start IKEv2 daemon",
            "outputs": "Success/Failure",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Load the VPN configuration and initiate the IKEv2 connection.",
            "indicator": "LIST- SAS-IKE",
            "inputs": "Pre-shared keys or asymmetric key pairs Configuration data",
            "name": "Connect IKEv2",
            "outputs": "Success/failure",
            "rolesSspAccess": "Crypto Officer - DRBG Seed: R - DRBG Entropy Input: R - DRBG V Value: R,W - DRBG Key Value: R,W - ECDH KAS Private Key: G,W,R - ECDH KAS Public Key: G,W,R - ECDH KAS Peer Key: R - DH KAS Private Key: G,W,R - DH KAS Public Key: G,W,R - DH KAS Peer",
            "secFunImpl": "IKEv2 KAS- ECC IKEv2 KAS- FFC Block Cipher IKEv2 IKEv2 KDF Generate random KAS Key Pair Generation Message Authentication ECDSA Signature Generation ECDSA Signature Verification RSA Signature Generation RSA Signature"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Key: R - SKEYSEED: G,W,R - IKEv2 Derivation Key: G,W,R - IKEv2 Encryption keys: G,W,R - IKEv2 Authentication key: G,W,R - RSA Public Key: R - RSA Private Key: R - RSA Peer Public Key: R - ECDSA Public Key: R - ECDSA Private Key: R - ECDSA Peer Public Key: R - PSK: R",
            "secFunImpl": "Verification IKEv2 KTS"
          },
          {
            "description": "Encryption and decryption of user data over the IPsec tunnel",
            "indicator": "LIST- SAS-ESP",
            "inputs": "Tunnel encryption keys, Plaintext traffic, Encrypted traffic",
            "name": "IPsec Tunnelling",
            "outputs": "Encrypted traffic, decrypted traffic",
            "rolesSspAccess": "- IKEv2 AES- GCM IV: G,W,R Crypto Officer - IPsec Encryption Key: G,E - IPsec Authentication Key: G - IPsec AES- GCM IV: G,W,R",
            "secFunImpl": "Block Cipher IPsec"
          },
          {
            "description": "Teardown of Security Associations used for communication.",
            "indicator": "N/A",
            "inputs": "Connection identifier",
            "name": "Teardown connection",
            "outputs": "Success/Failure",
            "rolesSspAccess": "Crypto Officer - ECDH KAS Private Key: Z - ECDH KAS Public Key: Z - ECDH KAS Peer Key: Z - DH KAS Private Key: Z - DH KAS Public Key: Z - DH KAS Peer Key: Z - SKEYSEED: Z",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "- IKEv2 Derivation Key: Z - IKEv2 Encryption keys: Z - IKEv2 Authentication key: Z",
            "secFunImpl": ""
          },
          {
            "description": "Termination of IKEv2 daemon resulting in the clearing of all CSPs.",
            "indicator": "N/A",
            "inputs": "None",
            "name": "Terminate IKEv2 daemon",
            "outputs": "Success/Failure",
            "rolesSspAccess": "Crypto Officer - DRBG Seed: Z - DRBG Entropy Input: Z - DRBG V Value: Z - DRBG Key Value: Z - ECDH KAS Private Key: Z - ECDH KAS Public Key: Z - ECDH KAS Peer Key: Z - DH KAS Private Key: Z - DH KAS Public Key: Z - DH KAS Peer Key: Z - SKEYSEED: Z - IKEv2 Derivation Key: Z - IKEv2 Encryption keys: Z - IKEv2 Authentication key: Z - RSA Public Key: Z - RSA Private Key: Z - RSA Peer Public Key: Z - ECDSA Public Key: Z - ECDSA Private Key: Z - ECDSA Peer",
            "secFunImpl": "None"
          },
          {
            "description": "",
            "indicator": "",
            "inputs": "",
            "name": "",
            "outputs": "",
            "rolesSspAccess": "Public Key: Z - PSK: Z",
            "secFunImpl": ""
          },
          {
            "description": "On-demand execution of self-tests by power cycling",
            "indicator": "",
            "inputs": "",
            "name": "Perform Self-tests",
            "outputs": "",
            "rolesSspAccess": "Crypto Officer",
            "secFunImpl": "None"
          },
          {
            "description": "Zeroization of SSPs via power cycling",
            "indicator": "N/A",
            "inputs": "",
            "name": "Zeroization",
            "outputs": "",
            "rolesSspAccess": "Crypto Officer - DRBG Seed: Z - DRBG Entropy Input: Z - DRBG V Value: Z - DRBG Key Value: Z - ECDH KAS Private Key: Z - ECDH KAS Public Key: Z - ECDH KAS Peer Key: Z - DH KAS Private Key: Z - DH KAS Public Key: Z - DH KAS Peer Key: Z - SKEYSEED: Z - IKEv2 Derivation Key: Z - IKEv2 Encryption keys: Z - IKEv2 Authentication key: Z - RSA Public Key: Z - RSA Private Key: Z - RSA Peer Public Key: Z - ECDSA Public Key: Z - ECDSA Private Key: Z - ECDSA Peer Public Key: Z - PSK: Z",
            "secFunImpl": "None"
          },
          {
            "description": "Query the status of the current connections.",
            "indicator": "N/A",
            "inputs": "swanctl --list- sas",
            "name": "Show Status",
            "outputs": "",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          },
          {
            "description": "Output the module name and version",
            "indicator": "N/A",
            "inputs": "cat /etc/adnoctem- release",
            "name": "Show Version",
            "outputs": "",
            "rolesSspAccess": "Unauthenticated",
            "secFunImpl": "None"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [
          {
            "algorithmOrTest": "SHA2-256 (A7623)",
            "condition": "Module load",
            "details": "Hash",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "-",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7623)",
            "condition": "Module load",
            "details": "Hash",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "-",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "IKEv2 KDF (A7623)",
            "condition": "Module load",
            "details": "Derive",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "SHA2-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7623)",
            "condition": "Module load",
            "details": "Compute MAC",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "160-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7623) Encrypt",
            "condition": "Module load",
            "details": "Encrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-ECB (A7623) Decrypt",
            "condition": "Module load",
            "details": "Decrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7623) Encrypt",
            "condition": "Module load",
            "details": "Encrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7623) Decrypt",
            "condition": "Module load",
            "details": "Decrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "256-bit key",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Counter DRBG (A7623)",
            "condition": "Module load",
            "details": "Instantiate, Reseed, Generate",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "AES256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7623)",
            "condition": "Module load",
            "details": "Sign",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "SHA2-256, secp256k1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7623)",
            "condition": "Module load",
            "details": "Verify",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "SHA2-256, secp256k1",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7623)",
            "condition": "Module load",
            "details": "Sign",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "SHA2-256, 2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7623)",
            "condition": "Module load",
            "details": "Verify",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "SHA2-256, 2048",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7623)",
            "condition": "Module load",
            "details": "Compute Shared Secret",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "P-256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A7623)",
            "condition": "Module load",
            "details": "Compute Shared secret",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "2048-bit",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "ECDH PCT",
            "condition": "Key pair generated",
            "details": "Sign/Verify",
            "indicator": "Connection successful",
            "testMethod": "PCT",
            "testProps": "",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "DH PCT",
            "condition": "Key pair generated",
            "details": "Compute public key",
            "indicator": "Connection successful",
            "testMethod": "PCT",
            "testProps": "",
            "type": "PCT"
          },
          {
            "algorithmOrTest": "AES-CBC (A7624) Encrypt",
            "condition": "Module load",
            "details": "Encrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128,192, 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CBC (A7624) Decrypt",
            "condition": "Module load",
            "details": "Decrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128,192, 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7624) Encrypt",
            "condition": "Module load",
            "details": "Encrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128,192, 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-GCM (A7624) Decrypt",
            "condition": "Module load",
            "details": "Decrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128,192, 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A7624) Encrypt",
            "condition": "Module load",
            "details": "Encrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128,192, 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "AES-CCM (A7624) Decrypt",
            "condition": "Module load",
            "details": "Decrypt",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "128,192, 256",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7624)",
            "condition": "Module load",
            "details": "Compute MAC",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-384 (A7624)",
            "condition": "Module load",
            "details": "Compute MAC",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-512 (A7624)",
            "condition": "Module load",
            "details": "Compute MAC",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-256 (A7624)",
            "condition": "Module load",
            "details": "Hash",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-384 (A7624)",
            "condition": "Module load",
            "details": "Hash",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7624)",
            "condition": "Module load",
            "details": "Hash",
            "indicator": "Module started",
            "testMethod": "KAT",
            "testProps": "",
            "type": "CAST"
          },
          {
            "algorithmOrTest": "Algorithm or Test",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "Test Method Test Type Period",
            "testProps": "Test Method Test Type Period",
            "type": "Periodic Method"
          },
          {
            "algorithmOrTest": "SHA2-256 (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "IKEv2 KDF (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-ECB (A7623) Encrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-ECB (A7623) Decrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-GCM (A7623) Encrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-GCM (A7623) Decrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "Counter DRBG (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "RSA SigGen (FIPS186-5) (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "RSA SigVer (FIPS186-5) (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A7623)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "ECDH PCT",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "PCT",
            "testProps": "PCT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "DH PCT",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "PCT",
            "testProps": "PCT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-CBC (A7624) Encrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-CBC (A7624) Decrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-GCM (A7624) Encrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-GCM (A7624) Decrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-CCM (A7624) Encrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "AES-CCM (A7624) Decrypt",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-256 (A7624)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-384 (A7624)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "HMAC-SHA2-512 (A7624)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "SHA2-256 (A7624)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "SHA2-384 (A7624)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          },
          {
            "algorithmOrTest": "SHA2-512 (A7624)",
            "condition": "",
            "details": "",
            "indicator": "",
            "testMethod": "CAST",
            "testProps": "KAT",
            "type": "On demand Manual"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Any pre-operational or conditional self-test failure.",
            "description": "Module is in an inoperable state. No services are available in this state.",
            "indicator": "The charon daemon is not running",
            "name": "Hard Error",
            "recoveryMethod": "Power cycle module."
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "Triple DES",
            "use": "Encryption Algorithms"
          },
          {
            "name": "CAST-128",
            "use": "Encryption Algorithms"
          },
          {
            "name": "Blowfish",
            "use": "Encryption Algorithms"
          },
          {
            "name": "Camellia",
            "use": "Encryption Algorithms"
          },
          {
            "name": "AES-GMAC with null encryption",
            "use": "Authenticated Encryption (AEAD) Algorithms"
          },
          {
            "name": "Camellia with CCM",
            "use": "Authenticated Encryption (AEAD) Algorithms"
          },
          {
            "name": "chacha20poly1305",
            "use": "Authenticated Encryption (AEAD) Algorithms"
          },
          {
            "name": "HMAC-MD5, SHA1",
            "use": "Integrity Algorithms"
          },
          {
            "name": "AES XCBC",
            "use": "Integrity Algorithms"
          },
          {
            "name": "AES CMAC",
            "use": "Integrity Algorithms"
          },
          {
            "name": "AES-GMAC for authentication",
            "use": "Integrity Algorithms"
          },
          {
            "name": "Diffie Hellman with modp768, modp1024, modp1536",
            "use": "Diffie Hellman"
          },
          {
            "name": "Diffie Hellman with ecp224, ecp224bp, ecp256bp, ecp384bp, ecp512bp, curve25519, x25519, curve448, x448",
            "use": "EC"
          },
          {
            "name": "RSA Signatures with MD5, SHA-1, SHA-224, SHA-3",
            "use": "Signature Algorithms"
          },
          {
            "name": "ECDSA Signatures with non-NIST curves",
            "use": "Signature Algorithms"
          },
          {
            "name": "EdDSA",
            "use": "Signature Algorithms"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [
          {
            "alg_accessed": "Diffie Hellman with modp768, modp1024, modp1536 Diffie Hellman with ecp224, ecp224bp, ecp256bp, ecp384bp, ecp512bp, curve25519, x25519, curve448, x448 RSA Signatures with MD5, SHA-1, SHA- 224, SHA-3 ECDSA Signatures with non-NIST curves EdDSA Triple DES CAST-128 Blowfish Camellia AES-GMAC with null encryption Camellia with CCM chacha20poly1305 HMAC-MD5, SHA1 AES XCBC AES CMAC AES-GMAC for authentication",
            "description": "Load the VPN configuration and initiate the IKEv2 connection (using non-approved algorithms)",
            "name": "Connect IKEv2 (non-approved)",
            "role": "Crypto Officer"
          },
          {
            "alg_accessed": "Triple DES CAST-128 Blowfish Camellia AES-GMAC with null encryption Camellia with CCM chacha20poly1305 HMAC-MD5, SHA1 AES XCBC AES CMAC AES-GMAC for authentication",
            "description": "Encryption and decryption of user data over the IPsec tunnel (using non-approved algorihm)",
            "name": "IPsec Tunnelling (non-approved)",
            "role": "Crypto Officer"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [],
        "found": false,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [
          {
            "level": "1",
            "section": "1",
            "title": "General"
          },
          {
            "level": "1",
            "section": "2",
            "title": "Cryptographic module specification"
          },
          {
            "level": "1",
            "section": "3",
            "title": "Cryptographic module interfaces"
          },
          {
            "level": "1",
            "section": "4",
            "title": "Roles, services, and authentication"
          },
          {
            "level": "1",
            "section": "5",
            "title": "Software/Firmware security"
          },
          {
            "level": "1",
            "section": "6",
            "title": "Operational environment"
          },
          {
            "level": "N/A",
            "section": "7",
            "title": "Physical security"
          },
          {
            "level": "N/A",
            "section": "8",
            "title": "Non-invasive security"
          },
          {
            "level": "1",
            "section": "9",
            "title": "Sensitive security parameter management"
          },
          {
            "level": "1",
            "section": "10",
            "title": "Self-tests"
          },
          {
            "level": "1",
            "section": "11",
            "title": "Life-cycle assurance"
          },
          {
            "level": "N/A",
            "section": "12",
            "title": "Mitigation of other attacks"
          },
          {
            "level": "1",
            "section": "",
            "title": "Overall Level"
          }
        ],
        "found": true,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [
          {
            "algorithmOrTest": "HMAC- SHA2-256",
            "details": "HMAC-SHA2-256 performed on all files within the crypto boundary and compared to known digests.",
            "indicator": "Module becomes operational",
            "testMethod": "KAT",
            "testProps": "HMAC- SHA2-256",
            "type": "SW/FW Integrity"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [
          {
            "dest": "RAM",
            "distribution": "Manual",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Input: Configuration",
            "sfiAlgo": "",
            "source": "File storage within TOEPP"
          },
          {
            "dest": "RAM",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Input: IKEv2 protocol",
            "sfiAlgo": "",
            "source": "Network interface"
          },
          {
            "dest": "Network interface",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Plaintext",
            "name": "Output: IKEv2 protocol",
            "sfiAlgo": "",
            "source": "RAM"
          },
          {
            "dest": "RAM",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Input: IKEv2 encrypted protocol",
            "sfiAlgo": "Block Cipher IKEv2",
            "source": "Network interface"
          },
          {
            "dest": "Network interface",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Output: IKEv2 encrypted protocol",
            "sfiAlgo": "Block Cipher IKEv2",
            "source": "RAM"
          },
          {
            "dest": "RAM",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Input: IPsec encrypted protocol",
            "sfiAlgo": "Block Cipher IPsec",
            "source": "Network interface"
          },
          {
            "dest": "Network interface",
            "distribution": "Automated",
            "entry": "Electronic",
            "format": "Encrypted",
            "name": "Output: IPsec encrypted protocol",
            "sfiAlgo": "Block Cipher IPsec",
            "source": "RAM"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "The module is powered down.",
            "method": "Remove power from the module",
            "operatorId": "Operator removes power from the module.",
            "rationale": "All SSPs are stored in memory only, and are cleared when power is removed."
          },
          {
            "description": "IKEv2 connection is closed",
            "method": "Close IKEv2 connection",
            "operatorId": "IKEv2 connection is closed.",
            "rationale": "SSPs in memory are overwritten with zeroes, making them irretrievable."
          },
          {
            "description": "The IKEv2 daemon is terminated.",
            "method": "Terminate IKEv2 daemon",
            "operatorId": "IKEv2 Daemon is terminated.",
            "rationale": "SSPs in memory are overwritten with zeroes, making them irretrievable."
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "SSPs are stored temporarily for use by the module services while operational.",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [
          {
            "features": "N/A",
            "integrityTest": "HMAC- SHA2-256",
            "packageFileName": "/etc/adnoctem-release /usr/lib/adnoctem-fipscheck.service.sh /usr/lib/adnoctem/crypto-boundary.txt",
            "swFwVersion": "StrongSwan 5.9.11 Kernel 5.14.21 OpenSSL 1.1.1l"
          },
          {
            "features": "",
            "integrityTest": "",
            "packageFileName": "StrongSwan: /usr/sbin/ipsec /usr/lib/ipsec/_updown /usr/lib/ipsec/charon /usr/lib/ipsec/pool /usr/lib/ipsec/starter /usr/lib/ipsec/stroke /usr/lib/ipsec/_fipscheck /usr/lib64/ipsec/libstrongswan.so.0.0.0 /usr/lib64/ipsec/libcharon.so.0.0.0 /usr/sbin/swanctl",
            "swFwVersion": ""
          },
          {
            "features": "",
            "integrityTest": "",
            "packageFileName": "OpenSSL: /usr/lib64/ipsec/plugins/libstrongswan-openssl.so /usr/lib64/libcrypto.so.1.1",
            "swFwVersion": ""
          },
          {
            "features": "",
            "integrityTest": "",
            "packageFileName": "Linux Kernel: /boot/vmlinux-5.14.21-150400.24.173-default *.ko files in /lib/modules/5.14.21-150400.24.173- default/kernel/arch/arm64/crypto/ *.ko files in /lib/modules/5.14.21-150400.24.173- default/kernel/crypto/",
            "swFwVersion": ""
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 25
          },
          "ECDSA": {
            "ECDSA": 42
          },
          "EdDSA": {
            "EdDSA": 2
          }
        },
        "FF": {
          "DH": {
            "DH": 26,
            "Diffie-Hellman": 3
          }
        },
        "RSA": {
          "RSA 2048": 1,
          "RSA 3072": 1,
          "RSA 4096": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CCM": {
          "CCM": 3
        },
        "GCM": {
          "GCM": 4
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 2
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 12,
          "IKEv2": 147
        },
        "IPsec": {
          "IPsec": 33
        },
        "VPN": {
          "VPN": 9
        }
      },
      "crypto_scheme": {
        "AEAD": {
          "AEAD": 3
        },
        "KA": {
          "Key agreement": 2
        },
        "MAC": {
          "MAC": 9
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 12,
          "P-256": 14,
          "P-384": 12,
          "P-521": 12,
          "secp256k1": 2
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES- GCM IV IV 96": 1,
          "AES-256": 1,
          "AES-GCM IV IV 96": 1,
          "AES256": 1,
          "DRBG 256": 1,
          "RSA 2048": 1,
          "RSA 3072": 1,
          "RSA 4096": 1,
          "SHA- 224": 1,
          "SHA-1": 3,
          "SHA-224": 1,
          "SHA-3": 2,
          "SHA1": 3,
          "SHA2- 384": 1,
          "SHA2- 512": 3,
          "SHA2-256": 18,
          "SHA2-384": 5,
          "SHA2-512": 6
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 3,
            "SHA1": 3
          },
          "SHA2": {
            "SHA-224": 1
          },
          "SHA3": {
            "SHA-3": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 37
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 45,
          "FIPS 180-4": 1,
          "FIPS 186-5": 6,
          "FIPS 198-1": 3,
          "FIPS186-5": 20
        },
        "NIST": {
          "SP 800-133": 1,
          "SP 800-135": 1,
          "SP 800-38A": 3,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-56A": 3,
          "SP 800-90A": 1,
          "SP 800-90B": 1
        },
        "RFC": {
          "RFC 4303": 1,
          "RFC 5282": 1,
          "RFC 7296": 2,
          "RFC4106": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 6,
            "AES-": 4,
            "AES-256": 1,
            "AES256": 1
          },
          "CAST": {
            "CAST": 54,
            "CAST-128": 3
          }
        },
        "DES": {
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 3
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 3
          },
          "Camellia": {
            "Camellia": 6
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 10
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Infineon": {
          "Infineon": 2
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA KeyGen (FIPS186-5)A7623",
        "ECDSA SigVer (FIPS186-5)A7623",
        "SHA2-256A7624",
        "SHA-1A7624",
        "KAS-FFC-SSC Sp800-56Ar3A7623",
        "HMAC-SHA2-512A7624",
        "AES-CCMA7624",
        "RSA SigGen (FIPS186-5)A7623",
        "Counter DRBGA7623",
        "Safe Primes Key VerificationA7623",
        "AES-GCMA7624",
        "ECDSA SigGen (FIPS186-5)A7623",
        "HMAC-SHA2-384A7624",
        "AES-CTRA7623",
        "KDF IKEv2A7623",
        "AES-CBCA7624",
        "HMAC-SHA2-256A7624",
        "KAS-ECC-SSC Sp800-56Ar3A7623",
        "ECDSA KeyVer (FIPS186-5)A7623",
        "Safe Primes Key GenerationA7623",
        "AES-ECBA7623",
        "SHA2-384A7624",
        "RSA SigVer (FIPS186-5)A7623",
        "SHA2-512A7624"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A7623",
        "#A7624"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20261015083012-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20261015083012-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1117877,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "http://www.teronlabs.com/",
          "https://docs.strongswan.org/docs/5.9/index.html"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 43
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "4d7d8211c80587e38956159684e31c28f098f3cb297bb3724b607f1ea8581009",
      "source_hash": "75100acbffd4d4b2bb3a902f6726d6c2ad4399ed747d44e2045a3ba9a89594f7",
      "txt_hash": "1c29930b31cc049e363a7416a5cdf359c99d3c0e2ba9029b544f6e7fb40bc3e3"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.",
    "certificate_pdf_url": null,
    "date_sunset": "2031-10-20",
    "description": "The module is a VPN Client application. It provides secure communication over untrusted networks. To provide this security, the module implements IKEv2/IPsec. It can be configured over a local, web-based interface.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Ad Noctem Connect 2.3",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-10-21",
        "lab": "Teron Labs",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Northrop Grumman Corporation",
    "vendor_url": "http://www.northropgrumman.com"
  }
}