This page was not yet optimized for use on mobile devices.
SUSE Linux Enterprise OpenSSL 1 Cryptographic Module
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate details
| Certificate ID | #5238 |
|---|---|
| Status | active |
| Validation dates | 10.04.2026 |
| Sunset date | 09-04-2031 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | OpenSSL is an open-source library of various cryptographic algorithms written mainly in C. |
| Vendor | SUSE LLC http://www.suse.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, CAST, HMAC, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, DHE, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA-256, SHA-2, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2, PBKDFSchemes
MAC, Key Exchange, Key AgreementProtocols
SSH, TLS, TLS v1.2, TLS v1.3, TLS v1.0, TLSv1.2, TLSv1.3, TLS 1.2, TLS 1.3, IKERandomness
DRBG, RNG, RBGLibraries
OpenSSLElliptic Curves
P-224, P-256, P-384, P-521, P-192Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTLS cipher suites
TLS_DH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DH_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DH_RSA_WITH_AES_128_GCM_SHA256, TLS_DH_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_CCM, TLS_DHE_RSA_WITH_AES_256_CCM, TLS_DHE_RSA_WITH_AES_128_CCM_8, TLS_DHE_RSA_WITH_AES_256_CCM_8Trusted Execution Environments
PSP, SSCSecurity level
Level 1Side-channel analysis
timing attacksStandards
FIPS 140-3, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 140, FIPS 197, SP 800-132, SP 800-56A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-56C, SP 800-135, SP 800-90A, SP 800-52, SP 800-133, SP 800-38A, SP 800-38D, SP 800-90B, SP 800-131A, PKCS#1, RFC7627, RFC 5288, RFC 8446, RFC 4253, RFC 6668, RFC3268, RFC5246, RFC4279, RFC5288, RFC4492, RFC5289, RFC6655, RFC8446, RFC 3268, RFC 4279, RFC 4492, RFC 5246, RFC 5289, RFC 6655, RFC 7919Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
CVE matches
| ID | Links | Severity | CVSS Score | Published on |
|---|---|---|---|---|
| Base score | ||||
| CVE-2000-0218 | HIGH | 7.2 | 03.02.2000 | |
| CVE-2000-0361 | LOW | 2.1 | 14.12.1999 | |
| CVE-2004-1184 | MEDIUM | 4.6 | 21.01.2005 | |
| CVE-2004-1191 | LOW | 1.2 | 10.01.2005 | |
| CVE-2004-1491 | MEDIUM | 5.0 | 31.12.2004 | |
| CVE-2005-0206 | HIGH | 7.5 | 27.04.2005 | |
| CVE-2005-0638 | HIGH | 7.5 | 02.03.2005 | |
| CVE-2005-0639 | HIGH | 7.5 | 02.03.2005 | |
| CVE-2005-1043 | MEDIUM | 5.0 | 14.04.2005 | |
| CVE-2005-3146 | LOW | 2.1 | 05.10.2005 | |
| CVE-2005-3147 | LOW | 2.1 | 05.10.2005 | |
| CVE-2005-3148 | MEDIUM | 4.6 | 05.10.2005 | |
| CVE-2005-3624 | MEDIUM | 5.0 | 31.12.2005 | |
| CVE-2005-3625 | HIGH | 10.0 | 31.12.2005 | |
| CVE-2005-3626 | MEDIUM | 5.0 | 31.12.2005 | |
| CVE-2006-0043 | MEDIUM | 4.6 | 31.01.2006 | |
| CVE-2007-0460 | HIGH | 10.0 | 24.01.2007 | |
| CVE-2007-4074 | HIGH | 10.0 | 30.07.2007 | |
| CVE-2007-4393 | MEDIUM | 4.6 | 17.08.2007 | |
| CVE-2007-6167 | HIGH | 7.2 | 29.11.2007 | |
| CVE-2008-3949 | HIGH | 7.2 | 22.09.2008 |
Showing 5 out of 21.
Cross-references
Loading...
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5238,
"dgst": "f34eb9d345d7d40d",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"#A6085",
"SHA3-512A6111",
"#A6078",
"SHA2-384A6109",
"SHA2-512A6109",
"#A6075",
"#A6106",
"#A6099",
"RSA KeyGen (FIPS186-5)A6109",
"#A6086",
"AES-CFB1A5659",
"HMAC-SHA2-256A6110",
"#A6094",
"TLS v1.2 KDF RFC7627A6109",
"AES-GCMA6108",
"SHA3-256A6111",
"AES-CFB8A5659",
"#A6110",
"HMAC-SHA3-256A6111",
"#A6083",
"#A6102",
"SHA2-256A6110",
"#A6097",
"#A6096",
"#A6103",
"SHA3-384A6111",
"ECDSA KeyVer (FIPS186-5)A6109",
"HMAC-SHA2-512/224A6109",
"SHA2-512/224A6109",
"RSA SigGen (FIPS186-5)A6111",
"#A6093",
"AES-KWA5659",
"AES-CTRA5659",
"KDF SSHA6104",
"#A6101",
"#A6090",
"HMAC-SHA2-512A6109",
"#A6089",
"#A6080",
"#A6092",
"#A6111",
"KDA HKDF SP800-56Cr2A6095",
"#A6105",
"#A5556",
"#A6088",
"RSA SigVer (FIPS186-5)A6111",
"#A5554",
"ECDSA KeyGen (FIPS186-5)A6109",
"SHAKE-256A6111",
"#A6084",
"AES-GMACA6108",
"AES-CCMA5659",
"AES-CMACA5659",
"#A6109",
"#A6098",
"TLS v1.3 KDFA6095",
"AES-XTS Testing Revision 2.0A5659",
"#A6100",
"SHA2-224A6109",
"HMAC-SHA2-224A6109",
"#A6104",
"#A5659",
"KAS-FFC-SSC Sp800-56Ar3A6096",
"HMAC-SHA2-512/256A6109",
"#A5558",
"#A6081",
"AES-OFBA5659",
"HMAC-SHA3-384A6111",
"#A5553",
"#A6076",
"#A6095",
"#A5557",
"AES-CBCA5659",
"HMAC-SHA2-384A6109",
"#A6108",
"AES-ECBA5659",
"AES-CFB128A5659",
"#A6087",
"SHAKE-128A6111",
"Safe Primes Key VerificationA6096",
"HMAC-SHA3-512A6111",
"ECDSA SigGen (FIPS186-5)A6111",
"#A6079",
"#A6107",
"#A6082",
"#A6091",
"Counter DRBGA5659",
"KAS-ECC-SSC Sp800-56Ar3A6109",
"AES-KWPA5659",
"Safe Primes Key GenerationA6096",
"SHA3-224A6111",
"#A6077",
"SHA2-512/256A6109",
"ECDSA SigVer (FIPS186-5)A6111",
"HMAC-SHA3-224A6111",
"#A5555",
"PBKDFA6111"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"1"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": {
"_type": "Set",
"elements": [
"5464"
]
},
"directly_referencing": null,
"indirectly_referenced_by": {
"_type": "Set",
"elements": [
"5464"
]
},
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2004-1491",
"CVE-2005-0638",
"CVE-2000-0361",
"CVE-2005-3625",
"CVE-2006-0043",
"CVE-2008-3949",
"CVE-2004-1184",
"CVE-2000-0218",
"CVE-2005-3146",
"CVE-2005-3147",
"CVE-2007-4074",
"CVE-2007-0460",
"CVE-2007-6167",
"CVE-2005-0206",
"CVE-2004-1191",
"CVE-2005-1043",
"CVE-2005-3148",
"CVE-2005-3626",
"CVE-2007-4393",
"CVE-2005-0639",
"CVE-2005-3624"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Key Length - 128, 192, 256",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB1",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CFB8",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Generation Key Length - 128, 192, 256",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A6075, A6076, A6077, A6078, A6079, A6080, A6081, A6082, A6083, A6100, A6101, A6102, A6106, A6107, A6108",
"properties": "Direction - Decrypt, Encrypt IV Generation - External, Internal Key Length - 128, 192, 256 IV Generation Mode - 8.2.1, 8.2.2",
"reference": "SP 800- 38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A6075, A6076, A6077, A6078, A6079, A6080, A6081, A6082, A6083, A6100, A6101, A6102, A6106, A6107, A6108",
"properties": "Direction - Decrypt, Encrypt IV Generation - External Key Length - 128, 192, 256",
"reference": "SP 800- 38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-KWP",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800- 38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A5553, A5554, A5555, A5556, A5557, A5558, A5659",
"properties": "Prediction Resistance - No, Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - No, Yes",
"reference": "SP 800- 90A Rev. 1"
},
{
"algorithm": "ECDSA KeyGen (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Curve - P-224, P-256, P-384, P-521 Secret Generation Mode - testing candidates",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA KeyVer (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Curve - P-224, P-256, P-384, P-521",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigGen (FIPS186-5)",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512 Component - No",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "ECDSA SigVer (FIPS186-5)",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Curve - P-224, P-256, P-384, P-521 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "FIPS 186-5"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109, A6110",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/224",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512/256",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Key Length - Key Length: 112-524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Domain Parameter Generation Methods - P- 224, P-256, P-384, P-521 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A6096",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-2048, MODP-3072, MODP-4096, MODP-6144, MODP-8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "KDA HKDF SP800-56Cr2",
"cavpCertName": "A6095",
"properties": "Derived Key Length - 2048 Shared Secret Length - Shared Secret Length: 224-3072 Increment 8 HMAC Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512, SHA2-512/224, SHA2- 512/256, SHA3-224, SHA3-256, SHA3-384, SHA3-512",
"reference": "SP 800-56C Rev. 2"
},
{
"algorithm": "KDF SSH (CVL)",
"cavpCertName": "A6085, A6087, A6089, A6091, A6098, A6104",
"properties": "Cipher - AES-128, AES-192, AES-256 Hash Algorithm - SHA2-224, SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "PBKDF",
"cavpCertName": "A6084, A6086, A6088, A6090, A6092, A6093, A6094, A6097, A6099, A6103, A6105, A6109, A6111",
"properties": "Iteration Count - Iteration Count: 1000-10000 Increment 1 Password Length - Password Length: 8-128 Increment 1",
"reference": "SP 800-132"
},
{
"algorithm": "RSA KeyGen (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Key Generation Mode - probable Modulo - 2048, 3072, 4096, 6144, 8192 Primality Tests - 2powSecStr Private Key Format - standard",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigGen (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6092, A6093, A6094, A6097, A6099, A6103, A6105, A6109, A6111",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "RSA SigVer (FIPS186-5)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6092, A6093, A6094, A6097, A6099, A6103, A6105, A6109, A6111",
"properties": "Modulo - 2048, 3072, 4096 Signature Type - pkcs1v1.5, pss",
"reference": "FIPS 186-5"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A6096",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP- 2048, MODP-3072, MODP-4096, MODP- 6144, MODP-8192",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "Safe Primes Key Verification",
"cavpCertName": "A6096",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP- 2048, MODP-3072, MODP-4096, MODP- 6144, MODP-8192",
"reference": "SP 800- 56A Rev. 3"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109, A6110",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/224",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512/256",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2, 4, 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-128",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "SHAKE-256",
"cavpCertName": "A6092, A6093, A6094, A6099, A6105, A6111",
"properties": "Output Length - Output Length: 16-65536 Increment 8",
"reference": "FIPS 202"
},
{
"algorithm": "TLS v1.2 KDF RFC7627 (CVL)",
"cavpCertName": "A6084, A6086, A6088, A6090, A6097, A6103, A6109",
"properties": "Hash Algorithm - SHA2-256, SHA2-384, SHA2-512",
"reference": "SP 800-135 Rev. 1"
},
{
"algorithm": "TLS v1.3 KDF (CVL)",
"cavpCertName": "A6095",
"properties": "HMAC Algorithm - SHA2-256, SHA2-384 KDF Running Modes - DHE, PSK, PSK-DHE",
"reference": "SP 800-135 Rev. 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Used to generate a SHA-2, or SHA- 3/SHAKE message digest",
"indicator": "fips_sli_SHA*_is_approved returns 1",
"inputs": "Message",
"name": "Message digest",
"outputs": "Message digest",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message digest"
},
{
"description": "Perform AES encryptio n",
"indicator": "fips_sli_is_approved_EVP_CIP HER_CTX returns 1",
"inputs": "Plaintext , AES key, IV",
"name": "Encryption",
"outputs": "Cipherte xt",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Encryption"
},
{
"description": "Perform AES decryptio n",
"indicator": "fips_sli_is_approved_EVP_CIP HER_CTX returns 1",
"inputs": "Cipherte xt, AES key, IV",
"name": "Decryptio n",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Decryptio n"
},
{
"description": "Perform authentica ted encryptio n",
"indicator": "fips_sli_is_approved_EVP_CIP HER_CTX returns 1",
"inputs": "Plaintext , AES key, IV",
"name": "Authentica ted encryption",
"outputs": "Cipherte xt, MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authentica ted encryption"
},
{
"description": "Perform authentica ted decryptio n",
"indicator": "fips_sli_is_approved_EVP_CIP HER_CTX returns 1",
"inputs": "Cipherte xt, AES key, IV, MAC tag",
"name": "Authentica ted decryption",
"outputs": "Plaintext or failure",
"rolesSspAccess": "Crypto Officer - AES key: W,E",
"secFunImpl": "Authentica ted decryption"
},
{
"description": "Compute a MAC tag using AES or HMAC",
"indicator": "fips_sli_is_approved_CMAC_C TX, fips_sli_HMAC_is_approved, or fips_sli_is_approved_EVP_CIP HER_CTX return 1",
"inputs": "Message, AES key or HMAC key",
"name": "Message authentica tion code (MAC)",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES key: W,E - HMAC key: W,E",
"secFunImpl": "Message authentica tion code (MAC)"
},
{
"description": "Generate random bytes using CTR- DRBG",
"indicator": "fips_sli_RAND_bytes_is_appro ved or fips_sli_RAND_priv_bytes_is_a pproved returns 1",
"inputs": "Output length",
"name": "Random number generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - Entropy input: W,E,Z - DRBG seed: G,E,Z - DRBG internal state (V value, Key): G,W,E",
"secFunImpl": "Random number generation"
},
{
"description": "Generate an asymmetri c key pair",
"indicator": "fips_sli_is_approved_EVP_PKE Y_CTX returns 1",
"inputs": "Group or Curve or Modulus bits",
"name": "Key pair generation",
"outputs": "DH key pair; EC key pair; RSA key pair",
"rolesSspAccess": "Crypto Officer - Module- generated RSA private key: G,R - Module- generated RSA public",
"secFunImpl": "Key pair generation Random number generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "key: G,R - Module- generated DH private key: G,R - Module- generated DH public key: G,R - Module- generated EC private key: G,R - Module- generated EC public key: G,R - Intermedi ate key generatio n value: G,E,Z - DRBG internal state (V value, Key): W,E",
"secFunImpl": ""
},
{
"description": "Verify a generated asymmetri c key pair",
"indicator": "fips_sli_is_approved_EVP_PKE Y_CTX returns 1",
"inputs": "Safe Primes key pair",
"name": "Key pair verificatio n",
"outputs": "Pass/Fail",
"rolesSspAccess": "Crypto Officer - DH private",
"secFunImpl": "Key pair verificatio n"
},
{
"description": "",
"indicator": "",
"inputs": "or EC key pair",
"name": "",
"outputs": "",
"rolesSspAccess": "key: W,E - DH public key: W,E - EC private key: W,E - EC public key: W,E",
"secFunImpl": ""
},
{
"description": "Generate a digital signature",
"indicator": "fips_sli_is_approved_EVP_PKE Y_CTX returns 1",
"inputs": "Message, private key",
"name": "Digital signature generation",
"outputs": "Signatur e",
"rolesSspAccess": "Crypto Officer - RSA private key: W,E - EC private key: W,E - DRBG internal state (V value, Key): W,E",
"secFunImpl": "Digital signature generation Random number generation"
},
{
"description": "Verify a digital signature",
"indicator": "fips_sli_is_approved_EVP_PKE Y_CTX returns 1",
"inputs": "Message, public key, signatur e",
"name": "Digital signature verificatio n",
"outputs": "Pass/Fail",
"rolesSspAccess": "Crypto Officer - RSA public key: W,E - EC public key: W,E",
"secFunImpl": "Digital signature verificatio n"
},
{
"description": "Compute a shared secret",
"indicator": "fips_sli_is_approved_EVP_PKE Y_CTX returns 1",
"inputs": "Private key, public key (peer)",
"name": "Shared secret computati on",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - DH private key: W,E - DH",
"secFunImpl": "Shared secret computati on"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "public key: W,E - EC private key: W,E - EC public key: W,E - Shared secret: G,R",
"secFunImpl": ""
},
{
"description": "Key derivation with KDA HKDF in the context of TLS v1.3",
"indicator": "fips_sli_is_approved_EVP_KDF _CTX returns 1",
"inputs": "Shared secret",
"name": "Key derivation with HKDF",
"outputs": "HKDF derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E - HKDF derived key: G,R",
"secFunImpl": "Key derivation with HKDF"
},
{
"description": "Perform key derivation using TLS KDF",
"indicator": "fips_sli_is_approved_EVP_KDF _CTX returns 1",
"inputs": "TLS pre- master secret",
"name": "Key derivation with TLS",
"outputs": "TLS derived key",
"rolesSspAccess": "Crypto Officer - TLS pre- master secret: W,E - TLS master secret: E,G,Z - TLS derived key: G,R",
"secFunImpl": "Key derivation with TLS"
},
{
"description": "Perform key derivation with SSH KDF",
"indicator": "fips_sli_is_approved_EVP_KDF _CTX returns 1",
"inputs": "Shared secret",
"name": "Key derivation with SSH",
"outputs": "SSH derived key",
"rolesSspAccess": "Crypto Officer - Shared secret: W,E",
"secFunImpl": "Key derivation with SSH KDF"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- SSH derived key: G,R",
"secFunImpl": ""
},
{
"description": "Derive a key from a password or passphrase",
"indicator": "fips_sli_PKCS5_PBKDF2_HMA C returns 1",
"inputs": "Passwor d or passphra se",
"name": "Key derivation from a password",
"outputs": "PBKDF Derived key",
"rolesSspAccess": "Crypto Officer - Password or passphras e: W,E - PBKDF derived key: G,R",
"secFunImpl": "Password- based key derivation"
},
{
"description": "Provide supported cipher suites (listed in Appendix A) in approved mode",
"indicator": "SSL_CIPHER_get_protocol_ id or SSL_get_current_cipher return a two-byte ID matching an approved cipher suite (listed in Appendix A)",
"inputs": "Cipher- suites listed in Appendi x A, Digital Certifica te, Public and Private Keys, Applicat ion Data",
"name": "Transport Layer Security (TLS) Network Protocol",
"outputs": "Return codes and/or log messages , Applicati on data",
"rolesSspAccess": "Crypto Officer - RSA private key: W,E - RSA public key: W,E - EC private key: W,E - EC public key: W,E - TLS pre- master secret: G,E - TLS master secret: G,E,Z - DH private key:",
"secFunImpl": "Message digest Authentica ted encryption Authentica ted decryption Message authentica tion code (MAC) Key pair generation Key pair verificatio n Digital signature generation Digital signature verificatio n Shared secret"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "G,W,E - DH public key: G,W,E - TLS derived key: G,W,E - HKDF derived key: G,W,E",
"secFunImpl": "computati on Key derivation with HKDF Key derivation with TLS"
},
{
"description": "Perform CASTs and integrity test",
"indicator": "None",
"inputs": "N/A",
"name": "Self-test",
"outputs": "Pass/fail result of self-tests",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message digest Encryption Decryptio n Authentica ted encryption Authentica ted decryption Message authentica tion code (MAC) Random number generation Digital signature generation Digital signature verificatio n Shared secret"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": "computati on Key derivation with HKDF Key derivation with SSH KDF Key derivation with TLS Password- based key derivation"
},
{
"description": "Show the current status of the module",
"indicator": "None",
"inputs": "N/A",
"name": "Show status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Show module name and the version of the module",
"indicator": "None",
"inputs": "N/A",
"name": "Show module name and version",
"outputs": "Name and version informat ion",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Zeroize SSPs",
"indicator": "None",
"inputs": "Any SSP",
"name": "Zeroizatio n",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES key: Z - HMAC key: Z - Module- generated DH",
"secFunImpl": "None"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "private key: Z - Module- generated DH public key: Z - Module- generated RSA private key: Z - Module- generated RSA public key: Z - Module- generated EC private key: Z - Module- generated EC public key: Z - DH private key: Z - DH public key: Z - RSA private key: Z - RSA",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "public key: Z - EC private key: Z - EC public key: Z - Shared secret: Z - Password or passphras e: Z - HKDF derived key: Z - SSH derived key: Z - TLS derived key: Z - PBKDF derived key: Z - Entropy input: Z - DRBG seed: Z - DRBG internal state (V value, Key): Z - Intermedi ate key generatio n value: Z",
"secFunImpl": ""
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- TLS pre- master secret: Z - TLS master secret: Z",
"secFunImpl": ""
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "SHA2-256 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A6110)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "72-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "120-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-128 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-128 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-128 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-128 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-128 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-128 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-256 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-256 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-256 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-256 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-256 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "SHAKE-256 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message Digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "144-bit message",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5553) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5555) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5556) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5659) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5553) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5555) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5556) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A5659) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5553) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5555) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5556) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5659) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5553) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5555) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5556) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A5659) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "192-bit key, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5553)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5554)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5555)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5556)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5558)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A5659)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-, 192-, 256- bit keys",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6075) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6076) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6077) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6078) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6079) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6080) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6081) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6082) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6083) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6100) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6101) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6102) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6106) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6107) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6108) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6075) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6076) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6077) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6078) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6079) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6080) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6081) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6082) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6083) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6100) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6101) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6102) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6106) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6107) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A6108) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Authenticated decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256-bit key, 96- bit IV, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5553) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "(A5555) - Encrypt",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5556) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5659) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Encryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, encrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5553) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5555) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5556) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-XTS Testing Revision 2.0 (A5659) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Decryption",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "256, 512-bit keys, decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 224 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 256 (A6110)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 384 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA2- 512 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "160-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 224 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "224, 1152, 1376 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 224 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "224, 1152, 1376 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 224 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "224, 1152, 1376 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 224 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "224, 1152, 1376 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 224 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "224, 1152, 1376 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 224 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "224, 1152, 1376 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 256 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 1088, 1344 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 256 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 1088, 1344 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 256 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 1088, 1344 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 256 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 1088, 1344 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 256 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 1088, 1344 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 256 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 1088, 1344 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 384 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 832, 1216 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 384 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 832, 1216 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 384 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 832, 1216 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 384 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 832, 1216 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 384 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 832, 1216 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 384 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "384, 832, 1216 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512, 576, 1088 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512, 576, 1088 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512, 576, 1088 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512, 576, 1088 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512, 576, 1088 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC-SHA3- 512 (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication code computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "512, 576, 1088 bits keys",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigGen (FIPS186-5) (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-5) (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "2048-bit key with SHA-256, with PKCS#1 v1.5 and PSS padding",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigGen (FIPS186-5) (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "ECDSA SigVer (FIPS186-5) (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256 with SHA- 256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC-SSC Sp800-56Ar3 (A6096)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC-SSC Sp800-56Ar3 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.2 KDF RFC7627 (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "TLS v1.3 KDF (A6095)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDA HKDF SP800-56Cr2 (A6095)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6085)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6087)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6089)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6091)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6098)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "KDF SSH (A6104)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6084)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6086)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6088)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6090)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6092)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6093)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6094)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6097)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6099)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6103)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6105)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6109)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "PBKDF (A6111)",
"condition": "Test runs at power-on before the integrity test",
"details": "Key derivation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "24 characters password, 288-bit salt, 4096 iterations, SHA2- 256",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5553)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5554)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5555)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5556)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5558)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A5659)",
"condition": "Test runs at power-on before the integrity test",
"details": "Random number generation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "CTR-DRBG with AES with 256-bit keys with and without DF, with and without PR",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A6096)",
"condition": "Key pair generation",
"details": "PCT according to SP 800-56A Rev.3, Section 5.6.2.1.4",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6084)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6086)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6088)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6090)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6097)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6103)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-5) (A6109)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6084)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6086)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6088)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6090)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6097)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6103)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
},
{
"algorithmOrTest": "RSA KeyGen (FIPS186-5) (A6109)",
"condition": "Key pair generation",
"details": "Signature generation and verification",
"indicator": "Key pair generation is successfull",
"testMethod": "PCT",
"testProps": "SHA2-256 with PKCS#1 v1.5 and PSS paddings",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Integrity test failure Any CAST failure",
"description": "If the module fails any of the preoperational self-tests or CASTs, the module enters this error state. In this error state, the module immediately stops functioning and ends the application process",
"indicator": "Message to stderr: \"OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE\". Module does not load.",
"name": "Abort",
"recoveryMethod": "Module reinitialization"
},
{
"conditions": "Any PCT failure",
"description": "A PCT fails after generation of a key pair is requested",
"indicator": "FIPS_selftest_failed() returns 1. The module returns an error code and stops functioning. Any cryptographic operation is inhibited.",
"name": "PCT error",
"recoveryMethod": "Module reinitialization"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non- approved service is requested",
"name": "Non-approved mode",
"statusIndicator": "Equivalent to the indicator of the requested service",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES-GCM with external IV",
"use": "Authenticated encryption"
},
{
"name": "HMAC with less than 112-bit keys, SipHash",
"use": "Message authentication code (MAC)"
},
{
"name": "Diffie-Hellman with domain parameters other than safe primes",
"use": "Key pair generation; Diffie-Hellman public key validation; Shared secret computation"
},
{
"name": "DSA with any key sizes",
"use": "Digital signature verification"
},
{
"name": "EC Diffie-Hellman with P-192 curve, K curves, B curves and non-NIST curves",
"use": "Shared secret computation"
},
{
"name": "ECDSA with P-192 curve, K curves, B curves and non-NIST curves",
"use": "Key pair generation; Digital signature generation; Digital signature verification"
},
{
"name": "PBKDF with non-approved message digest algorithms or using input parameters not meeting requirements stated in section 2.7.3",
"use": "Key derivation"
},
{
"name": "RSA with keys smaller than 2048 bits",
"use": "Key pair generation; Digital signature generation; Digital signature verification"
},
{
"name": "RSA encryption with any key sizes",
"use": "Key encapsulation"
},
{
"name": "RSA decryption with any key sizes",
"use": "Key un-encapsulation"
},
{
"name": "TLS v1.0, v1.1 KDF",
"use": "Key derivation"
},
{
"name": "SHA-1",
"use": "Message digest; Digital signature generation; Digital signature verification; Message authentication code (MAC); Key derivation"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "SHA-1",
"description": "Compute a message digest",
"name": "Message digest",
"role": "CO"
},
{
"alg_accessed": "AES-GCM with external IV",
"description": "Perform authenticated encryption using AES-GCM with an externally provided IV",
"name": "Authenticated encryption",
"role": "CO"
},
{
"alg_accessed": "HMAC with less than 112-bit keys, SipHash SHA-1",
"description": "Compute a MAC tag",
"name": "Message authentication code (MAC)",
"role": "CO"
},
{
"alg_accessed": "Diffie-Hellman with domain parameters other than safe primes EC Diffie-Hellman with P-192 curve, K curves, B curves and non-NIST curves",
"description": "Perform shared secret computation",
"name": "Shared secret computation",
"role": "CO"
},
{
"alg_accessed": "ECDSA with P-192 curve, K curves, B curves and non-NIST curves RSA with keys smaller than 2048 bits SHA-1",
"description": "Generate a digital signature",
"name": "Signature generation",
"role": "CO"
},
{
"alg_accessed": "DSA with any key sizes ECDSA with P-192 curve, K curves, B curves and non-NIST curves RSA with keys smaller than 2048 bits SHA-1",
"description": "Verify a digital signature",
"name": "Signature verification",
"role": "CO"
},
{
"alg_accessed": "Diffie-Hellman with domain parameters other than safe primes ECDSA with P-192 curve, K curves, B curves and non-NIST curves RSA with keys smaller than 2048 bits",
"description": "Generate a key pair",
"name": "Key pair generation",
"role": "CO"
},
{
"alg_accessed": "PBKDF with non-approved message digest algorithms or using input parameters not meeting requirements stated in section 2.7.3 TLS v1.0, v1.1 KDF SHA-1",
"description": "Derive a symmetric key",
"name": "Key derivation",
"role": "CO"
},
{
"alg_accessed": "RSA encryption with any key sizes",
"description": "Encapsulate a symmetric key using RSA",
"name": "Key encapsulation",
"role": "CO"
},
{
"alg_accessed": "RSA decryption with any key sizes",
"description": "Un-encapsulate a symmetric key using RSA",
"name": "Key un- encapsulation",
"role": "CO"
},
{
"alg_accessed": "Diffie-Hellman with domain parameters other than safe primes",
"description": "Validate a public key",
"name": "Public key validation",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API input parameters, kernel I/O network or files on filesystem, TLS protocol input messages.",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters, kernel I/O network or files on filesystem, TLS protocol output messages.",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API input parameters for control",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return codes, API output parameters for status output",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "1",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC- SHA2-256",
"details": "Integrity test of the shared library component of the module. Verified by comparing an HMAC SHA-256 value calculated at run time with the HMAC SHA-256 that was computed at build time",
"indicator": "Module becomes operational and services are available for use",
"testMethod": "Message authentication",
"testProps": "256-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle",
"method": "Free cipher handle",
"operatorId": "By calling the appropriate zeroization functions: EVP_CIPHER_CTX_free, EVP_CIPHER_CTX_reset, HMAC_CTX_free, RSA_free, EC_KEY_free, DH_free, EVP_PKEY_free, FIPS_drbg_free, SSL_free, SSL_clear",
"rationale": "Memory occupied by SSPs is overwritten with zeros, which renders the SSP values irretrievable. The successful completion of the zeroization routine indicates that the zeroization procedure succeeded."
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. The successful completion of the running service indicates that zeroization has completed."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when the module is unloaded. The successful completion of the module reset indicates that zeroization has completed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution.",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "ASUS RS700-E11-RS4U",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "Yes",
"processors": "Intel\u00ae Xeon\u00ae Gold 5416S",
"version": "4.3"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "No",
"processors": "Intel\u00ae Xeon\u00ae Gold 5416S",
"version": "4.3"
},
{
"hardwarePlatform": "IBM z16 A01",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "Yes",
"processors": "IBM\u00ae Telum(TM)",
"version": "4.3"
},
{
"hardwarePlatform": "IBM z16 A01",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "No",
"processors": "IBM\u00ae Telum(TM)",
"version": "4.3"
},
{
"hardwarePlatform": "GIGABYTE R152-P30",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "Yes",
"processors": "Ampere\u00ae Altra\u00ae Q80-30",
"version": "4.3"
},
{
"hardwarePlatform": "GIGABYTE R152-P30",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "No",
"processors": "Ampere\u00ae Altra\u00ae Q80-30",
"version": "4.3"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQC-R1K23LPB and Motherboard H12DSi-NT6",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "Yes",
"processors": "AMD EPYC(TM) 7343",
"version": "4.3"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQC-R1K23LPB and Motherboard H12DSi-NT6",
"hypervisorHostOs": "N/A",
"operatingSystem": "SUSE Linux Enterprise Server 15 SP6",
"paa_pai": "No",
"processors": "AMD EPYC(TM) 7343",
"version": "4.3"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key type:Asymmetric",
"implName": "N/A",
"name": "Asymmetric Cryptographic Key Generation (CKG)",
"reference": "SP 800-133r2, section 4, example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Server for SAP 15SP6"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Server for SAP 15SP6"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Desktop 15SP6"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Desktop 15SP6"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "GIGABYTE R152-P30 on Ampere\u00ae Altra\u00ae Q80-30",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "IBM z16 A01 on IBM\u00ae Telum(TM)",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "IBM LinuxONE III Model LT1 on z15",
"operatingSystem": "SUSE Linux Enterprise Server 15SP6"
},
{
"hardwarePlatform": "QEMU VM on AMD EPYC(TM) 7773X",
"operatingSystem": "SUSE Linux Enterprise Server Real Time 15SP6"
},
{
"hardwarePlatform": "QEMU VM on AMD EPYC(TM) 7773X",
"operatingSystem": "SUSE Linux Enterprise Desktop 15SP6"
},
{
"hardwarePlatform": "QEMU VM on Intel\u00ae i7-1195G7",
"operatingSystem": "SUSE Linux Enterprise Desktop 15SP6"
},
{
"hardwarePlatform": "Dell XPS 13 on Intel\u00ae i7-1195G7",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "QEMU VM on Ampere\u00ae Altra\u00ae Q80-30",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "IBM LinuxONE III Model LT1 QEMU VM on z15",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP6"
},
{
"hardwarePlatform": "IBM LinuxONE III Model LT1 QEMU VM on z15",
"operatingSystem": "SUSE Linux Enterprise Server 15SP6"
},
{
"hardwarePlatform": "QEMU VM on AMD EPYC(TM) 7773X",
"operatingSystem": "SUSE Linux Enterprise Server 15SP6"
},
{
"hardwarePlatform": "QEMU VM on Ampere\u00ae Altra\u00ae Q80-30",
"operatingSystem": "SUSE Linux Enterprise Server 15SP6"
},
{
"hardwarePlatform": "QEMU VM on Intel\u00ae Xeon\u00ae Gold 6338",
"operatingSystem": "SUSE Linux Enterprise Server 15SP6"
},
{
"hardwarePlatform": "QEMU VM on Intel\u00ae Xeon\u00ae Gold 5218R",
"operatingSystem": "SUSE Linux Enterprise Server for SAP 15SP6"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Server for SAP 15SP7"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Server for SAP 15SP7"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Desktop 15SP7"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Desktop 15SP7"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP7"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP7"
},
{
"hardwarePlatform": "GIGABYTE R152-P30 on Ampere\u00ae Altra\u00ae Q80-30",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP7"
},
{
"hardwarePlatform": "IBM z16 A01 on IBM\u00ae Telum(TM)",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP7"
},
{
"hardwarePlatform": "IBM LinuxONE III Model LT1 on z15",
"operatingSystem": "SUSE Linux Enterprise Base Container Image 15SP7"
},
{
"hardwarePlatform": "IBM LinuxONE III Model LT1 on z15",
"operatingSystem": "SUSE Linux Enterprise Server 15SP7"
},
{
"hardwarePlatform": "IBM z16 A01 on IBM\u00ae Telum(TM)",
"operatingSystem": "SUSE Linux Enterprise Server 15SP7"
},
{
"hardwarePlatform": "ASUS RS700-E11-RS4U on Intel\u00ae Xeon\u00ae Gold 5416S",
"operatingSystem": "SUSE Linux Enterprise Server 15SP7"
},
{
"hardwarePlatform": "SuperMicro SuperChassis 825BTQCR1K23LPB and Motherboard H12DSi-NT6 on AMD EPYC(TM) 7343",
"operatingSystem": "SUSE Linux Enterprise Server 15SP7"
},
{
"hardwarePlatform": "GIGABYTE R152-P30 on Ampere\u00ae Altra\u00ae Q80-30",
"operatingSystem": "SUSE Linux Enterprise Server 15SP7"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 2
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 87
}
},
"FF": {
"DH": {
"DH": 38,
"DHE": 1,
"Diffie-Hellman": 11
},
"DSA": {
"DSA": 2
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"CCM": {
"CCM": 6
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 12
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 9
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 141
}
},
"crypto_protocol": {
"IKE": {
"IKE": 1
},
"SSH": {
"SSH": 34
},
"TLS": {
"TLS": {
"TLS": 72,
"TLS 1.2": 1,
"TLS 1.3": 1,
"TLS v1.0": 2,
"TLS v1.2": 19,
"TLS v1.3": 5,
"TLSv1.2": 1,
"TLSv1.3": 2
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"KEX": {
"Key Exchange": 1
},
"MAC": {
"MAC": 21
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 12,
"P-224": 20,
"P-256": 80,
"P-384": 22,
"P-521": 22
}
},
"eval_facility": {
"atsec": {
"atsec": 2
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES-128": 2,
"AES-192": 2,
"AES-256": 3,
"HMAC SHA-256": 2,
"PKCS#1": 66,
"SHA- 256": 26,
"SHA-1": 6,
"SHA-2": 1,
"SHA-256": 28,
"SHA-3": 2,
"SHA2- 256": 13,
"SHA2-224": 5,
"SHA2-256": 53,
"SHA2-384": 7,
"SHA2-512": 20,
"SHA3-224": 4,
"SHA3-256": 17,
"SHA3-384": 4,
"SHA3-512": 16
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 39,
"PBKDF2": 5
},
"SHA": {
"SHA1": {
"SHA-1": 6
},
"SHA2": {
"SHA-2": 1,
"SHA-256": 28
},
"SHA3": {
"SHA-3": 2,
"SHA3-224": 4,
"SHA3-256": 17,
"SHA3-384": 4,
"SHA3-512": 16
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 47
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {
"SCA": {
"timing attacks": 2
}
},
"standard_id": {
"FIPS": {
"FIPS 140": 1,
"FIPS 140-3": 147,
"FIPS 180-4": 7,
"FIPS 186-5": 11,
"FIPS 197": 1,
"FIPS 198-1": 11,
"FIPS 202": 7,
"FIPS PUB 140-3": 3,
"FIPS186-5": 148
},
"NIST": {
"SP 800-131A": 1,
"SP 800-132": 7,
"SP 800-133": 4,
"SP 800-135": 5,
"SP 800-38A": 1,
"SP 800-38B": 2,
"SP 800-38C": 2,
"SP 800-38D": 1,
"SP 800-38E": 3,
"SP 800-38F": 3,
"SP 800-52": 3,
"SP 800-56A": 6,
"SP 800-56C": 2,
"SP 800-90A": 3,
"SP 800-90B": 1
},
"PKCS": {
"PKCS#1": 33
},
"RFC": {
"RFC 3268": 1,
"RFC 4253": 1,
"RFC 4279": 1,
"RFC 4492": 1,
"RFC 5246": 1,
"RFC 5288": 3,
"RFC 5289": 1,
"RFC 6655": 1,
"RFC 6668": 1,
"RFC 7919": 1,
"RFC 8446": 3,
"RFC3268": 4,
"RFC4279": 2,
"RFC4492": 8,
"RFC5246": 4,
"RFC5288": 4,
"RFC5289": 16,
"RFC6655": 4,
"RFC7627": 15,
"RFC8446": 4
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 44,
"AES-128": 2,
"AES-192": 2,
"AES-256": 3
},
"CAST": {
"CAST": 535
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 16
}
}
},
"tee_name": {
"AMD": {
"PSP": 7
},
"IBM": {
"SSC": 1
}
},
"tls_cipher_suite": {
"TLS": {
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_128_CCM": 1,
"TLS_DHE_RSA_WITH_AES_128_CCM_8": 1,
"TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1,
"TLS_DHE_RSA_WITH_AES_256_CCM": 1,
"TLS_DHE_RSA_WITH_AES_256_CCM_8": 1,
"TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_DH_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_DH_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_DH_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_DH_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_DH_RSA_WITH_AES_256_CBC_SHA256": 1,
"TLS_DH_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA": 1,
"TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256": 1,
"TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256": 1,
"TLS_ECDH_RSA_WITH_AES_256_CBC_SHA": 1,
"TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384": 1,
"TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384": 1,
"TLS_PSK_WITH_AES_128_CBC_SHA": 1,
"TLS_PSK_WITH_AES_256_CBC_SHA": 1
}
},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"RSA SigVer (FIPS186-5)A6111",
"HMAC-SHA3-384A6111",
"SHA3-512A6111",
"ECDSA KeyGen (FIPS186-5)A6109",
"SHAKE-256A6111",
"AES-CBCA5659",
"HMAC-SHA2-384A6109",
"AES-GMACA6108",
"AES-ECBA5659",
"SHA2-384A6109",
"AES-CFB128A5659",
"SHA2-512A6109",
"SHAKE-128A6111",
"Safe Primes Key VerificationA6096",
"AES-CCMA5659",
"HMAC-SHA3-512A6111",
"SHA3-384A6111",
"ECDSA KeyVer (FIPS186-5)A6109",
"AES-CMACA5659",
"ECDSA SigGen (FIPS186-5)A6111",
"HMAC-SHA2-512/224A6109",
"TLS v1.3 KDFA6095",
"AES-XTS Testing Revision 2.0A5659",
"RSA KeyGen (FIPS186-5)A6109",
"AES-CFB1A5659",
"HMAC-SHA2-256A6110",
"RSA SigGen (FIPS186-5)A6111",
"SHA2-512/224A6109",
"AES-KWA5659",
"AES-CTRA5659",
"KDF SSHA6104",
"SHA2-224A6109",
"TLS v1.2 KDF RFC7627A6109",
"HMAC-SHA2-224A6109",
"AES-GCMA6108",
"Counter DRBGA5659",
"KAS-ECC-SSC Sp800-56Ar3A6109",
"AES-KWPA5659",
"Safe Primes Key GenerationA6096",
"AES-CFB8A5659",
"SHA3-224A6111",
"SHA3-256A6111",
"HMAC-SHA2-512A6109",
"KAS-FFC-SSC Sp800-56Ar3A6096",
"SHA2-512/256A6109",
"ECDSA SigVer (FIPS186-5)A6111",
"HMAC-SHA3-224A6111",
"PBKDFA6111",
"HMAC-SHA3-256A6111",
"HMAC-SHA2-512/256A6109",
"KDA HKDF SP800-56Cr2A6095",
"SHA2-256A6110",
"AES-OFBA5659"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A6085",
"#A5553",
"#A5554",
"#A6096",
"#A6076",
"#A6103",
"#A6084",
"#A5557",
"#A6095",
"#A6108",
"#A6078",
"#A6087",
"#A6075",
"#A6106",
"#A6109",
"#A6079",
"#A6082",
"#A6107",
"#A6099",
"#A6098",
"#A6086",
"#A6100",
"#A6094",
"#A6093",
"#A6091",
"#A6101",
"#A6104",
"#A6077",
"#A6090",
"#A5659",
"#A6110",
"#A6089",
"#A5555",
"#A6080",
"#A6092",
"#A6083",
"#A6102",
"#A6111",
"#A5558",
"#A6105",
"#A5556",
"#A6097",
"#A6081",
"#A6088"
]
},
"policy_metadata": {
"/Author": "Natan",
"/CreationDate": "D:20260408070139-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "92475855-0a98-4324-a177-63b58c2a3de7",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-04-08T10:57:18Z",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
"/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1",
"/ModDate": "D:20260408070139-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 2337607,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://doi.org/10.6028/NIST.SP.800-38B",
"https://doi.org/10.6028/NIST.SP.800-56Ar3",
"https://doi.org/10.6028/NIST.SP.800-131Ar2",
"https://www.ietf.org/rfc/rfc7919.txt",
"https://doi.org/10.6028/NIST.FIPS.202",
"https://doi.org/10.6028/NIST.SP.800-38F",
"https://doi.org/10.6028/NIST.SP.800-135r1",
"https://doi.org/10.6028/NIST.SP.800-38C",
"https://doi.org/10.6028/NIST.SP.800-38A",
"https://doi.org/10.6028/NIST.FIPS.186-5",
"https://doi.org/10.6028/NIST.SP.800-90B",
"https://www.rfc-editor.org/rfc/rfc6655.txt",
"https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
"https://doi.org/10.6028/NIST.SP.800-90Ar1",
"https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS-140-3-CMVP%20Management%20Manual.pdf",
"https://www.rfc-editor.org/rfc/rfc5246.txt",
"https://doi.org/10.6028/NIST.SP.800-52r2",
"https://www.rfc-editor.org/rfc/rfc4279.txt",
"https://doi.org/10.6028/NIST.SP.800-132",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://doi.org/10.6028/NIST.FIPS.197-upd1",
"https://www.rfc-editor.org/rfc/rfc3268.txt",
"https://doi.org/10.6028/NIST.SP.800-133r2",
"https://www.rfc-editor.org/rfc/rfc4492.txt",
"https://doi.org/10.6028/NIST.SP.800-56Cr2",
"https://doi.org/10.6028/NIST.FIPS.180-4",
"https://doi.org/10.6028/NIST.FIPS.198-1",
"https://www.ietf.org/rfc/rfc8446.txt",
"https://doi.org/10.6028/NIST.SP.800-38E",
"https://www.ietf.org/rfc/rfc5289.txt"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 136
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "0c54232f0ce57ccd5427e69079375e03d3830480ee796c9b858a4e0a4290274f",
"source_hash": "9c3a7873b3e21ce7721067f4ca0113e192995850507bb61b198ba272382dd77a",
"txt_hash": "231ca6131bde5088328269d086047ed209b5b3e21a1275d48170727d7fba54c3"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2026_010526_0732.pdf",
"date_sunset": "2031-04-09",
"description": "OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "SUSE Linux Enterprise OpenSSL 1 Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-04-10",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "SUSE LLC",
"vendor_url": "http://www.suse.com"
}
}