This page was not yet optimized for use on mobile devices.
Amazon Linux 2023 Kernel Cryptographic API
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate details
| Certificate ID | #5369 |
|---|---|
| Status | active |
| Validation dates | 06.07.2026 |
| Sunset date | 22-09-2029 |
| Standard | FIPS 140-3 |
| Security level | 1 |
| Type | Software |
| Embodiment | MultiChipStand |
| Caveat | When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. |
| Exceptions |
|
| Description | The Amazon Linux 2023 Kernel Cryptographic API provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface. |
| Vendor | Amazon Web Services, Inc. http://www.amazon.com |
| Lab | atsec information security corporation |
| Algorithms |
|
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, AES-128, AES-192, AES-256, CAST, HMAC, HMAC-SHA-512, HMAC-SHA-256, CMACAsymmetric Algorithms
ECDH, ECDSA, Diffie-Hellman, DHHash functions
SHA-1, SHA-256, SHA-512, SHA-224, SHA-384, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2Schemes
MAC, Key AgreementProtocols
IKEv2, IPsecRandomness
DRBG, RNG, RBGElliptic Curves
P-256, P-384Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS 186-5, FIPS 197, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-90B, PKCS 1, PKCS#1, RFC 4106, RFC 7296Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
- cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*
- cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*
CVE matches
| ID | Links | Severity | CVSS Score | Published on |
|---|---|---|---|---|
| Base score | ||||
| CVE-2024-6387 | HIGH | 8.1 | 01.07.2024 |
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5369,
"dgst": "fad2f10e4d22685c",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"AES-CBC-CS3A4566",
"#A4556",
"AES-CFB128A4566",
"#A4564",
"#A4554",
"SHA2-256A4571",
"HMAC DRBGA4571",
"HMAC-SHA2-512A4571",
"AES-ECBA4568",
"KAS-ECC-SSC Sp800-56Ar3A4551",
"RSA SigVer (FIPS186-4)A4571",
"#A4568",
"#A4566",
"Hash DRBGA4571",
"SHA2-384A4571",
"SHA3-384A4557",
"HMAC-SHA3-256A4557",
"#A4570",
"AES-XTS Testing Revision 2.0A4566",
"#A4560",
"Safe Primes Key GenerationA4551",
"AES-CMACA4566",
"HMAC-SHA-1A4571",
"AES-CCMA4566",
"AES-GMACA4566",
"#A4557",
"#A4553",
"#A4567",
"#A4555",
"Counter DRBGA4568",
"AES-KWA4566",
"AES-CBCA4566",
"#A4562",
"AES-GCMA4568",
"#A4571",
"#A4559",
"AES-OFBA4566",
"ECDSA KeyGen (FIPS186-4)A4551",
"#A4552",
"SHA-1A4571",
"#A4558",
"HMAC-SHA3-224A4557",
"KAS-FFC-SSC Sp800-56Ar3A4551",
"SHA2-224A4571",
"#A4569",
"#A4563",
"SHA3-224A4557",
"HMAC-SHA3-384A4557",
"SHA2-512A4571",
"HMAC-SHA3-512A4557",
"HMAC-SHA2-256A4571",
"AES-CTRA4566",
"SHA3-512A4557",
"HMAC-SHA2-224A4571",
"SHA3-256A4557",
"HMAC-SHA2-384A4571",
"#A4561",
"#A4551",
"#A4565"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:amazon:amazon_linux:2023.5:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.1:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.6:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.8:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.0:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.2:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.4:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.7:*:*:*:*:*:*:*",
"cpe:2.3:o:amazon:amazon_linux:2023.3:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2023"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2024-6387"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 0,
"br1_tables": {
"_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
"approved_algorithms": {
"entries": [
{
"algorithm": "AES-CBC",
"cavpCertName": "A4551, A4554, A4557, A4558, A4561, A4563, A4566",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CBC-CS3",
"cavpCertName": "A4551, A4554, A4557, A4558, A4566",
"properties": "Direction - decrypt, encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 128-65536 Increment 8",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CCM",
"cavpCertName": "A4551, A4554, A4557, A4558, A4566",
"properties": "Key Length - 128, 192, 256 Tag Length - 112, 128, 64, 80, 96 IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104 Payload Length - Payload Length: 0- 256 Increment 8 AAD Length - AAD Length: 0, 256, 65536",
"reference": "SP 800-38C"
},
{
"algorithm": "AES-CFB128",
"cavpCertName": "A4551, A4554, A4558, A4566",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-CMAC",
"cavpCertName": "A4551, A4554, A4557, A4558, A4566",
"properties": "Direction - Generation, Verification Key Length - 128, 192, 256 MAC Length - MAC Length: 128 Message Length - Message Length: 8-524288 Increment 8",
"reference": "SP 800-38B"
},
{
"algorithm": "AES-CTR",
"cavpCertName": "A4551, A4554, A4557, A4558, A4561, A4563, A4566",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256 Payload Length - Payload Length: 8- 128 Increment 8 Supports Counter larger than maximum value - No Incremental Counter - Yes Counter Tests Performed - Yes",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-ECB",
"cavpCertName": "A4551, A4552, A4553, A4554, A4555, A4556, A4557, A4558, A4559, A4560, A4561, A4563, A4564, A4565, A4566, A4567, A4568",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4551, A4554, A4558, A4566",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128-65536 Increment 128 AAD Length - AAD Length: 128, 256, 120, 0",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4552, A4555, A4559, A4564, A4567",
"properties": "Direction - Encrypt IV Generation - Internal IV Generation Mode - 8.2.2 Key Length - 128, 192, 256 Tag Length - 128, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 256, 120, 248",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GCM",
"cavpCertName": "A4553, A4556, A4560, A4563, A4565, A4568",
"properties": "AAD Length - AAD Length: 64, 96 Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.2 Key Length - 128, 192, 256 Tag Length - 128, 64, 96 IV Length - IV Length: 96 Payload Length - Payload Length: 128, 256, 120, 248 AAD Length - AAD Length: 64, 96",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-GMAC",
"cavpCertName": "A4551, A4554, A4558, A4566",
"properties": "Direction - Decrypt, Encrypt IV Generation - External IV Generation Mode - 8.2.2 Key Length - 128, 192, 256 Tag Length - 104, 112, 120, 128, 32, 64, 96 IV Length - IV Length: 96 AAD Length - AAD Length: 128, 256, 120, 0",
"reference": "SP 800-38D"
},
{
"algorithm": "AES-KW",
"cavpCertName": "A4551, A4554, A4558, A4566",
"properties": "Direction - Decrypt, Encrypt Cipher - Cipher Key Length - 128, 192, 256 Payload Length - Payload Length: 128-4096 Increment 128",
"reference": "SP 800-38F"
},
{
"algorithm": "AES-OFB",
"cavpCertName": "A4551, A4554, A4558, A4566",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 192, 256",
"reference": "SP 800-38A"
},
{
"algorithm": "AES-XTS Testing Revision 2.0",
"cavpCertName": "A4551, A4554, A4557, A4558, A4561, A4563, A4566",
"properties": "Direction - Decrypt, Encrypt Key Length - 128, 256 Payload Length - Payload Length: 128-65536 Increment 128 Tweak Mode - Hex Data Unit Length Matches Payload Length - Yes",
"reference": "SP 800-38E"
},
{
"algorithm": "Counter DRBG",
"cavpCertName": "A4551, A4552, A4553, A4554, A4555, A4556, A4558, A4559, A4560, A4563, A4564, A4565, A4566, A4567, A4568",
"properties": "Prediction Resistance - No, Yes Supports Reseed - Yes Mode - AES-128, AES-192, AES-256 Derivation Function Enabled - Yes Additional Input - Additional Input: 0 Entropy Input - Entropy Input: 128,",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "",
"cavpCertName": "",
"properties": "Entropy Input: 192, Entropy Input: 256 Nonce - Nonce: 128, Nonce: 64 Personalization String Length - Personalization String Length: 0 Returned Bits - 1024, 4096, 512",
"reference": ""
},
{
"algorithm": "ECDSA KeyGen (FIPS186-4)",
"cavpCertName": "A4551",
"properties": "Curve - P-256, P-384 Secret Generation Mode - Testing Candidates",
"reference": "FIPS 186-4"
},
{
"algorithm": "Hash DRBG",
"cavpCertName": "A4551, A4569, A4570, A4571",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2- 512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC DRBG",
"cavpCertName": "A4551, A4569, A4570, A4571",
"properties": "Prediction Resistance - No, Yes Supports Reseed - No Mode - SHA-1, SHA2-256, SHA2- 512 Entropy Input - Entropy Input: 160, Entropy Input: 256 Nonce - Nonce: 160, Nonce: 256 Personalization String Length - Personalization String Length: 0 Additional Input - Additional Input: 0, 160, Additional Input: 0, 256 Returned Bits - 1024, 2048, 320",
"reference": "SP 800-90A Rev. 1"
},
{
"algorithm": "HMAC-SHA-1",
"cavpCertName": "A4551, A4557, A4569, A4570, A4571",
"properties": "MAC - MAC: 160 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 224",
"cavpCertName": "A4551, A4557, A4561, A4562, A4569, A4570, A4571",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 256",
"cavpCertName": "A4551, A4557, A4561, A4562, A4569, A4570, A4571",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 384",
"cavpCertName": "A4551, A4557, A4562, A4569, A4570, A4571",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA2- 512",
"cavpCertName": "A4551, A4557, A4562, A4569, A4570, A4571",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 224",
"cavpCertName": "A4551, A4557",
"properties": "MAC - MAC: 224 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 256",
"cavpCertName": "A4551, A4557",
"properties": "MAC - MAC: 256 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 384",
"cavpCertName": "A4551, A4557",
"properties": "MAC - MAC: 384 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "HMAC-SHA3- 512",
"cavpCertName": "A4551, A4557",
"properties": "MAC - MAC: 512 Key Length - Key Length: 112- 524288 Increment 8",
"reference": "FIPS 198-1"
},
{
"algorithm": "KAS-ECC-SSC Sp800-56Ar3",
"cavpCertName": "A4551",
"properties": "Domain Parameter Generation Methods - P-256, P-384 Scheme - ephemeralUnified - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "KAS-FFC-SSC Sp800-56Ar3",
"cavpCertName": "A4551",
"properties": "Domain Parameter Generation Methods - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192 Scheme - dhEphem - KAS Role - initiator, responder",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "RSA SigVer (FIPS186-4)",
"cavpCertName": "A4551, A4569, A4570, A4571",
"properties": "Signature Type - PKCS 1.5 Modulo - 2048, 3072, 4096 Hash Pair - Hash Algorithm - SHA-1 Public Exponent Mode - Random",
"reference": "FIPS 186-4"
},
{
"algorithm": "Safe Primes Key Generation",
"cavpCertName": "A4551",
"properties": "Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192",
"reference": "SP 800-56A Rev. 3"
},
{
"algorithm": "SHA-1",
"cavpCertName": "A4551, A4557, A4569, A4570, A4571",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-224",
"cavpCertName": "A4551, A4557, A4561, A4562, A4569, A4570, A4571",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-256",
"cavpCertName": "A4551, A4557, A4561, A4562, A4569, A4570, A4571",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-384",
"cavpCertName": "A4551, A4557, A4562, A4569, A4570, A4571",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA2-512",
"cavpCertName": "A4551, A4557, A4562, A4569, A4570, A4571",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 180-4"
},
{
"algorithm": "SHA3-224",
"cavpCertName": "A4551, A4557",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-256",
"cavpCertName": "A4551, A4557",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-384",
"cavpCertName": "A4551, A4557",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
},
{
"algorithm": "SHA3-512",
"cavpCertName": "A4551, A4557",
"properties": "Message Length - Message Length: 0-65536 Increment 8 Large Message Sizes - 1, 2",
"reference": "FIPS 202"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"approved_services": {
"entries": [
{
"description": "Compute a message digest",
"indicator": "crypto_shash_init returns 0",
"inputs": "Message",
"name": "Message Digest",
"outputs": "Digest value",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Message Digest"
},
{
"description": "Encrypt a plaintext",
"indicator": "crypto_skcipher_setkey returns 0",
"inputs": "AES key, IV, plaintex t",
"name": "Encryption",
"outputs": "Cipherte xt",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption, Decryption"
},
{
"description": "Decrypt a ciphertext",
"indicator": "crypto_skcipher_setkey returns 0",
"inputs": "AES key, IV, cipherte xt",
"name": "Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E",
"secFunImpl": "Encryption, Decryption"
},
{
"description": "Encrypt a plaintext",
"indicator": "For all except AES GCM: crypto_aead_setkey returns 0; For AES GCM: crypto_aead_get_flags(tfm) has the CRYPTO_TFM_FIPS_COMP LIANCE flag set",
"inputs": "AES key, IV, plaintex t",
"name": "Authentica ted Encryption",
"outputs": "Cipherte xt, MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - HMAC Key: W,E",
"secFunImpl": "Authentica ted Encryption, Authentica ted Decryption"
},
{
"description": "Decrypt a ciphertext",
"indicator": "For all except AES GCM: crypto_aead_setkey returns 0; For AES GCM: crypto_aead_get_flags(tfm) has the CRYPTO_TFM_FIPS_COMP LIANCE flag set",
"inputs": "AES key, IV, cipherte xt, MAC tag",
"name": "Authentica ted Decryption",
"outputs": "Plaintext",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - HMAC Key: W,E",
"secFunImpl": "Authentica ted Encryption, Authentica ted Decryption"
},
{
"description": "Compute a MAC tag",
"indicator": "crypto_shash_init returns 0",
"inputs": "AES key, message ; HMAC key, message",
"name": "Message Authentica tion",
"outputs": "MAC tag",
"rolesSspAccess": "Crypto Officer - AES Key: W,E - HMAC Key: W,E",
"secFunImpl": "Message Authentica tion"
},
{
"description": "Verify a signature",
"indicator": "crypto_akcipher_setkey returns 0",
"inputs": "RSA Public Key, Signatur e",
"name": "Signature Verificatio n",
"outputs": "Digital signature verificati on result",
"rolesSspAccess": "Crypto Officer - RSA Public Key: W,E",
"secFunImpl": "Digital Signature Verificatio n"
},
{
"description": "Compute a shared secret",
"indicator": "crypto_kpp_compute_shared _secret returns 0",
"inputs": "DH private key, DH public key; EC private key, EC public key",
"name": "Shared Secret Computatio n",
"outputs": "Shared secret",
"rolesSspAccess": "Crypto Officer - DH Public Key: W,E - DH Private Key: W,E - Shared Secret: G,R",
"secFunImpl": "Shared Secret Computatio n"
},
{
"description": "Generate a key pair",
"indicator": "crypto_kpp_set_secret and crypto_kpp_generate_public _key return 0",
"inputs": "Group; Curve",
"name": "Key Pair Generation",
"outputs": "DH private key, DH public key; EC private key, EC public key",
"rolesSspAccess": "Crypto Officer - DH Public Key: G,R - DH Private Key: G,R - Intermedia te Key Generation Value: G,E,Z - EC Public Key: G,R - EC Private Key: G,R",
"secFunImpl": "Key Pair Generation Safe Primes Key Generation Function"
},
{
"description": "Generate random bytes",
"indicator": "crypto_rng_get_bytes returns 0",
"inputs": "Output length",
"name": "Random Number Generation",
"outputs": "Random bytes",
"rolesSspAccess": "Crypto Officer - Entropy Input (IG D.L): W,E - CTR_DRB G Seed (IG D.L): G,E - Hash_DRB G Seed (IG D.L): G,E",
"secFunImpl": "Random Number Generation"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "- HMAC_D RBG Seed (IG D.L): G,E - CTR_DRB G Internal State (V, Key) (IG D.L): G,E - Hash_DRB G Internal State (V, C) (IG D.L): G,E - HMAC_D RBG Internal State (V, Key) (IG",
"secFunImpl": ""
},
{
"description": "Compute an EDC (crc32, crct10dif)",
"indicator": "None",
"inputs": "Message",
"name": "Error Detection Code",
"outputs": "EDC",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Compress data (deflate, lz4, lz4hc, lzo, zlib- deflate, zstd)",
"indicator": "None",
"inputs": "Data",
"name": "Compressio n",
"outputs": "Compres sed data",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Use the kernel to perform various non- cryptograp hic operations",
"indicator": "None",
"inputs": "Identifi er, various argume nts",
"name": "Generic System Call",
"outputs": "Various return values",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Return the module name and version",
"indicator": "None",
"inputs": "N/A",
"name": "Show Version",
"outputs": "Module name and version",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "informatio n",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "",
"secFunImpl": ""
},
{
"description": "Return the module status",
"indicator": "None",
"inputs": "N/A",
"name": "Show Status",
"outputs": "Module status",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "None"
},
{
"description": "Perform the CASTs and integrity tests",
"indicator": "None",
"inputs": "N/A",
"name": "Self-Test",
"outputs": "Pass/fail",
"rolesSspAccess": "Crypto Officer",
"secFunImpl": "Encryption, Decryption Authentica ted Encryption, Authentica ted Decryption Message Authentica tion Random Number Generation Key Pair Generation Shared Secret Computatio n Digital Signature Verificatio n Message Digest Safe Primes Key Generation Function"
},
{
"description": "Zeroize all SSPs",
"indicator": "None",
"inputs": "Any SSP",
"name": "Zeroization",
"outputs": "N/A",
"rolesSspAccess": "Crypto Officer - AES Key: Z - HMAC Key: Z - Shared Secret: Z - Entropy Input (IG D.L): Z",
"secFunImpl": "None"
},
{
"description": "Descriptio n",
"indicator": "Indicator",
"inputs": "Inputs",
"name": "Name",
"outputs": "Outputs",
"rolesSspAccess": "SSP Access",
"secFunImpl": "Security"
},
{
"description": "",
"indicator": "",
"inputs": "",
"name": "",
"outputs": "",
"rolesSspAccess": "CTR_DRB G Seed (IG D.L): Z - Hash_DRB G Seed (IG D.L): Z - HMAC_D RBG Seed (IG D.L): Z - DH Public Key: Z - DH Private Key: Z - EC Public Key: Z - EC Private Key: Z - Intermedia te Key Generation Value: Z - CTR_DRB G Internal State (V, Key) (IG D.L): Z - Hash_DRB G Internal State (V, C) (IG D.L): Z - HMAC_D RBG Internal State (V, Key) (IG D.L): Z - RSA Public Key:",
"secFunImpl": "Functions"
}
],
"found": true,
"section": 4,
"subsection": 3
},
"authentication_methods": {
"entries": [],
"found": false,
"section": 4,
"subsection": 1
},
"cond_self_tests": {
"entries": [
{
"algorithmOrTest": "AES-CBC (A4563) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4563) - Decrypt",
"condition": "Test runs at power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128 bit key",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CBC (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4561) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC (A4561) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CBC- CS3 (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4554) - Encrypt",
"condition": "Test runs at power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CCM (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CCM (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CFB128 (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4563) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4563) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit key",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4551) - Decrypt",
"condition": "Test runs at power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CTR (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4557) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4561) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CTR (A4561) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4563) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4563) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4567) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4567) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4559) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4559) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4564) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4564) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4557) - Encrypt",
"condition": "Test runs at power-on",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-ECB (A4557) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4568) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4568) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4556) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4556) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4560) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4560) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4561) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4561) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4552) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4552) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4555) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4555) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4553) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4553) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4565) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-ECB (A4565) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4563) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4563) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4567) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4567) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4559) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4559) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4564) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4564) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4568) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4568) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4556) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4556) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4560) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4560) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4552) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4552) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4555) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4555) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4553) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4553) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4565) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-GCM (A4565) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 192, 256-bit keys, external IV and 96-bit internal IV, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4554) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4554) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4551) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4551) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4566) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4566) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4558) - Encrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-OFB (A4558) - Decrypt",
"condition": "Test runs at power-on before the integrity test",
"details": "Symmetric operation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128-bit keys, encrypt and decrypt",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4554)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 256-bit keys, generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 256-bit keys, generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4566)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 256-bit keys, generation",
"type": "CAST"
},
{
"algorithmOrTest": "AES-CMAC (A4557)",
"condition": "Test runs at power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 256-bit keys, generation",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "AES-CMAC (A4558)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "128, 256-bit keys, generation",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4563)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4567)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4559)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4554)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4564)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4566)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "with prediction resistance",
"type": ""
},
{
"algorithmOrTest": "Counter DRBG (A4568)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4558)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4556)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4560)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4552)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4555)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4553)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction resistance; AES-128 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Counter DRBG (A4565)",
"condition": "Test runs at power-on",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed,",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "AES-128, AES-192, AES-256 without prediction",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "generate) health test",
"indicator": "",
"testMethod": "",
"testProps": "resistance; AES-128 with prediction resistance",
"type": ""
},
{
"algorithmOrTest": "Hash DRBG (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256, SHA-512 without prediction resistance; SHA- 256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256, SHA-512 without prediction resistance; SHA- 256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256, SHA-512 without prediction resistance; SHA- 256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "Hash DRBG (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256, SHA-512 without prediction resistance; SHA- 256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, HMAC-SHA-512 without prediction resistance; HMAC- SHA-256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, HMAC-SHA-512 without prediction resistance; HMAC- SHA-256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC DRBG (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, HMAC-SHA-512 without prediction resistance; HMAC- SHA-256 with",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "prediction resistance",
"type": ""
},
{
"algorithmOrTest": "HMAC DRBG (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Compliant with SP 800-90Ar1, (instantiate, reseed, generate) health test",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "HMAC-SHA-256, HMAC-SHA-512 without prediction resistance; HMAC- SHA-256 with prediction resistance",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA-1 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-224 (A4561)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-256 (A4561)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4551)",
"condition": "Test runs at power-on",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-384 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA2-512 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-224 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-256 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-384 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "HMAC- SHA3-512 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message authentication",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-ECC- SSC Sp800- 56Ar3 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "P-256, P-384",
"type": "CAST"
},
{
"algorithmOrTest": "KAS-FFC- SSC Sp800- 56Ar3 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Shared secret computation",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "ffdhe2048",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4571)",
"condition": "Test runs at power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA-1 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA-1 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-1",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-224 (A4561)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-256 (A4561)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-384 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4569)",
"condition": "Test runs at power-on",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "",
"condition": "before the integrity test",
"details": "",
"indicator": "",
"testMethod": "",
"testProps": "",
"type": ""
},
{
"algorithmOrTest": "SHA2-512 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4562)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA2-512 (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-224 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-224",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-256 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-256",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-384 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-384",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "SHA3-512 (A4557)",
"condition": "Test runs at power-on before the integrity test",
"details": "Message digest",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "SHA3-512",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4569)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 4096 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4551)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 4096 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4571)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 4096 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4570)",
"condition": "Test runs at power-on before the integrity test",
"details": "Digital signature verification",
"indicator": "Module becomes operational",
"testMethod": "KAT",
"testProps": "PKCS#1 v1.5 with 4096 bit key and SHA2-256",
"type": "CAST"
},
{
"algorithmOrTest": "Safe Primes Key Generation (A4551)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "N/A",
"type": "PCT"
},
{
"algorithmOrTest": "ECDSA KeyGen (FIPS186-4) (A4551)",
"condition": "Key pair generation",
"details": "Signature generation \u0026 verification",
"indicator": "Successful key pair generation",
"testMethod": "PCT",
"testProps": "SHA2-256, P-256, P-384 curves, Appendix B.4.2 Testing Candidates",
"type": "PCT"
}
],
"found": true,
"section": 10,
"subsection": 2
},
"error_states": {
"entries": [
{
"conditions": "Any self-test",
"description": "The Linux kernel immediately stops",
"indicator": "Kernel",
"name": "Error",
"recoveryMethod": "Restart of the"
},
{
"conditions": "failure",
"description": "executing",
"indicator": "panic",
"name": "State",
"recoveryMethod": "module"
}
],
"found": true,
"section": 10,
"subsection": 4
},
"mechanisms_actions": {
"entries": [],
"found": false,
"section": 7,
"subsection": 1
},
"modes_of_operation": {
"entries": [
{
"description": "Automatically entered whenever an approved service is requested",
"name": "Approved mode",
"statusIndicator": "Mapped to approved service indicator in Section 4.3 for all approved algorithms except GCM: respective approved service function returns indicator 0. For GCM: crypto_aead_get_flags(tfm) has the CRYPTO_TFM_FIPS_COMPLIANCE flag set",
"type": "Approved"
},
{
"description": "Automatically entered whenever a non-approved service is requested",
"name": "Non- approved mode",
"statusIndicator": "No service indicator required for non-approved services per IG 2.4.C",
"type": "Non- Approved"
}
],
"found": true,
"section": 2,
"subsection": 4
},
"non_approved_allowed_NSC": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_allowed_algos": {
"entries": [],
"found": false,
"section": 2,
"subsection": 5
},
"non_approved_not_allowed": {
"entries": [
{
"name": "AES GCM with external IV",
"use": "Encryption (not compliant to SP 800-56Br2)"
},
{
"name": "KBKDF (libkcapi)",
"use": "Key Derivation with implementation not tested by CAVP"
},
{
"name": "HKDF (libkcapi)",
"use": "Key Derivation with implementation not tested by CAVP"
},
{
"name": "PBKDF2 (libkcapi)",
"use": "Password-Based Key Derivation with implementation not tested by CAVP"
},
{
"name": "RSA",
"use": "Encryption Primitive; Decryption Primitive (not compliant to SP 800-56Br2)"
},
{
"name": "RSA with PKCS#1 v1.5 padding",
"use": "Signature Generation (pre-hashed message); Signature Verification (pre-hashed message); Key Encapsulation (not compliant to SP 800-56Br2); Key Un-encapsulation (not compliant to SP 800-56Br2)"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"non_approved_services": {
"entries": [
{
"alg_accessed": "AES GCM with external IV",
"description": "Encryption",
"name": "AES GCM with external IV",
"role": "CO"
},
{
"alg_accessed": "KBKDF (libkcapi)",
"description": "Key Derivation",
"name": "KBKDF (libkcapi)",
"role": "CO"
},
{
"alg_accessed": "HKDF (libkcapi)",
"description": "Key Derivation",
"name": "HKDF (libkcapi)",
"role": "CO"
},
{
"alg_accessed": "PBKDF2 (libkcapi)",
"description": "Password-Based Key Derivation",
"name": "PBKDF2 (libkcapi)",
"role": "CO"
},
{
"alg_accessed": "RSA",
"description": "Encryption Primitive; Decryption Primitive",
"name": "RSA",
"role": "CO"
},
{
"alg_accessed": "RSA with PKCS#1 v1.5 padding",
"description": "Signature Generation (pre-hashed message); Signature Verification (pre-hashed message); Key Encapsulation; Key Un-encapsulation",
"name": "RSA with PKCS#1 v1.5 padding",
"role": "CO"
}
],
"found": true,
"section": 4,
"subsection": 4
},
"ports_interfaces": {
"entries": [
{
"data": "API data input parameters, AF_ALG type sockets",
"logicalInterface": "Data Input",
"physicalPort": "N/A"
},
{
"data": "API output parameters, AF_ALG type sockets",
"logicalInterface": "Data Output",
"physicalPort": "N/A"
},
{
"data": "API function calls, API control input parameters, AF_ALG type sockets, kernel command line",
"logicalInterface": "Control Input",
"physicalPort": "N/A"
},
{
"data": "API return values, AF_ALG type sockets, kernel logs",
"logicalInterface": "Status Output",
"physicalPort": "N/A"
}
],
"found": true,
"section": 3,
"subsection": 1
},
"roles": {
"entries": [
{
"authMethodList": "None",
"name": "Crypto Officer",
"operatorType": "CO",
"type": "Role"
}
],
"found": true,
"section": 4,
"subsection": 2
},
"security_levels": {
"entries": [
{
"level": "1",
"section": "1",
"title": "General"
},
{
"level": "1",
"section": "2",
"title": "Cryptographic module specification"
},
{
"level": "1",
"section": "3",
"title": "Cryptographic module interfaces"
},
{
"level": "1",
"section": "4",
"title": "Roles, services, and authentication"
},
{
"level": "1",
"section": "5",
"title": "Software/Firmware security"
},
{
"level": "1",
"section": "6",
"title": "Operational environment"
},
{
"level": "N/A",
"section": "7",
"title": "Physical security"
},
{
"level": "N/A",
"section": "8",
"title": "Non-invasive security"
},
{
"level": "1",
"section": "9",
"title": "Sensitive security parameter management"
},
{
"level": "1",
"section": "10",
"title": "Self-tests"
},
{
"level": "1",
"section": "11",
"title": "Life-cycle assurance"
},
{
"level": "N/A",
"section": "12",
"title": "Mitigation of other attacks"
},
{
"level": "1",
"section": "",
"title": "Overall Level"
}
],
"found": true,
"section": 1,
"subsection": 2
},
"self_tests": {
"entries": [
{
"algorithmOrTest": "HMAC-SHA2-512 (A4571) - x86 kernel",
"details": "Used for kernel binary",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A4571) - x86 libkcapi",
"details": "Used for libkcapi shared library",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A4571) - x86 sha512hmac",
"details": "Used for sha512hmac binary",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4571) -x86 *.ko files",
"details": "Used for kernel object files",
"indicator": "Module becomes operational",
"testMethod": "Signature Verification",
"testProps": "PKCS#1 v1.5 with SHA-512 4096-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A4557) - arm64 kernel",
"details": "Used for kernel binary",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A4557) - arm64 libkcapi",
"details": "Used for libkcapi shared library",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "HMAC-SHA2-512 (A4557) - arm64 sha512hmac",
"details": "Used for sha512hmac binary",
"indicator": "Module becomes operational",
"testMethod": "Message Authentication",
"testProps": "128-bit key",
"type": "SW/FW Integrity"
},
{
"algorithmOrTest": "RSA SigVer (FIPS186-4) (A4551) - arm64 *.ko files",
"details": "Used for kernel object files",
"indicator": "Module becomes operational",
"testMethod": "Signature Verification",
"testProps": "PKCS#1 v1.5 with SHA-512 4096-bit key",
"type": "SW/FW Integrity"
}
],
"found": true,
"section": 10,
"subsection": 1
},
"ssp_io_methods": {
"entries": [
{
"dest": "Cryptographic module",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API input parameters",
"sfiAlgo": "",
"source": "Operator calling application (TOEPP)"
},
{
"dest": "Operator calling application (TOEPP)",
"distribution": "Manual",
"entry": "Electronic",
"format": "Plaintext",
"name": "API output parameters",
"sfiAlgo": "",
"source": "Cryptographic module"
}
],
"found": true,
"section": 9,
"subsection": 2
},
"ssp_zeroization_methods": {
"entries": [
{
"description": "Zeroizes the SSPs contained within the cipher handle.",
"method": "Wipe and Free memory block allocated",
"operatorId": "By calling the cipher related zeroization API",
"rationale": "Memory occupied by SSPs is overwritten with zeroes and then it is released, which renders the SSP values irretrievable. The completion of the zeroization routine indicates that the zeroization procedure succeeded."
},
{
"description": "Automatically zeroized by the module when no longer needed",
"method": "Automatic",
"operatorId": "N/A",
"rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable."
},
{
"description": "De-allocates the volatile memory used to store SSPs",
"method": "Module Reset",
"operatorId": "By unloading and reloading the module",
"rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed."
}
],
"found": true,
"section": 9,
"subsection": 3
},
"storage_areas": {
"entries": [
{
"description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs",
"name": "RAM",
"persistance": "Dynamic"
}
],
"found": true,
"section": 9,
"subsection": 1
},
"tested_module_id_hw": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_hw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_module_id_sw_fw_hy": {
"entries": [],
"found": false,
"section": 2,
"subsection": 2
},
"tested_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "EC2 c7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "AWS Graviton3",
"version": "Kernel: 6.1.41-64.118.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "EC2 c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Xeon Platinum 8375C",
"version": "Kernel: 6.1.41-64.118.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "AWS Snowball",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "AMD EPYC 7702",
"version": "Kernel: 6.1.41- 64.118.fips.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "AWS Snowblade",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Xeon Gold 6314U",
"version": "Kernel: 6.1.41- 64.118.fips.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "AWS Snowcone",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "Yes",
"processors": "Intel Atom C3558",
"version": "Kernel: 6.1.41- 64.118.fips.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "EC2 c7g.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "AWS Graviton3",
"version": "Kernel: 6.1.41-64.118.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "EC2 c6i.metal",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "Intel Xeon Platinum 8375C",
"version": "Kernel: 6.1.41-64.118.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "AWS Snowball",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "AMD EPYC 7702",
"version": "Kernel: 6.1.41- 64.118.fips.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "AWS Snowblade",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "Intel Xeon Gold 6314U",
"version": "Kernel: 6.1.41- 64.118.fips.amzn2023, libkcapi: 1.4.0-105.amzn2023"
},
{
"hardwarePlatform": "AWS Snowcone",
"hypervisorHostOs": "N/A",
"operatingSystem": "Amazon Linux 2023",
"paa_pai": "No",
"processors": "Intel Atom C3558",
"version": "Kernel: 6.1.41- 64.118.fips.amzn2023, libkcapi: 1.4.0-105.amzn2023"
}
],
"found": true,
"section": 2,
"subsection": 2
},
"vendor_affirmed_algos": {
"entries": [
{
"algoPropList": "Key Type:Asymmetric",
"implName": "N/A",
"name": "Cryptographic Key Generation (CKG)",
"reference": "SP 800-133r2 Section 4 example 1"
}
],
"found": true,
"section": 2,
"subsection": 5
},
"vendor_affirmed_op_env_sw_fw_hy": {
"entries": [
{
"hardwarePlatform": "EC2 c7g.metal with Intel Xeon Platinum 8375C (PAA: AES-NI)",
"operatingSystem": "Bottlerocket v1.20.0"
},
{
"hardwarePlatform": "EC2 c6i.metal with AWS Graviton3 processor (PAA: Neon, Cryptography Extensions)",
"operatingSystem": "Bottlerocket v1.20.0"
}
],
"found": true,
"section": 2,
"subsection": 2
}
},
"is_br1_format": true,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDH": {
"ECDH": 1
},
"ECDSA": {
"ECDSA": 5
}
},
"FF": {
"DH": {
"DH": 25,
"Diffie-Hellman": 6
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 2
},
"CCM": {
"CCM": 2
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 1
},
"ECB": {
"ECB": 1
},
"GCM": {
"GCM": 15
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 8
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKEv2": 1
},
"IPsec": {
"IPsec": 7
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"MAC": {
"MAC": 17
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 12,
"P-384": 8
}
},
"eval_facility": {
"atsec": {
"atsec": 79
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 1,
"AES-128": 31,
"AES-192": 16,
"AES-256": 16,
"Diffie- Hellman 128": 1,
"HMAC- SHA-1": 5,
"HMAC- SHA-256": 4,
"HMAC-SHA- 512": 6,
"HMAC-SHA-1": 12,
"HMAC-SHA-256": 8,
"HMAC-SHA-512": 16,
"PKCS 1": 1,
"PKCS#1": 22,
"SHA -512": 1,
"SHA- 256": 4,
"SHA-1": 32,
"SHA-224": 14,
"SHA-256": 23,
"SHA-3": 1,
"SHA-384": 12,
"SHA-512": 19,
"SHA2- 512": 2,
"SHA2-224": 22,
"SHA2-256": 29,
"SHA2-384": 19,
"SHA2-512": 19,
"SHA3-224": 11,
"SHA3-256": 11,
"SHA3-384": 11,
"SHA3-512": 11
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"PBKDF": {
"PBKDF2": 4
},
"SHA": {
"SHA1": {
"SHA-1": 32
},
"SHA2": {
"SHA-224": 14,
"SHA-256": 23,
"SHA-384": 12,
"SHA-512": 19
},
"SHA3": {
"SHA-3": 1,
"SHA3-224": 11,
"SHA3-256": 11,
"SHA3-384": 11,
"SHA3-512": 11
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 62
},
"RNG": {
"RBG": 7,
"RNG": 1
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 87,
"FIPS 180-4": 6,
"FIPS 186-4": 5,
"FIPS 186-5": 2,
"FIPS 197": 1,
"FIPS 198-1": 10,
"FIPS 202": 5,
"FIPS PUB 140-3": 2,
"FIPS186-4": 18
},
"NIST": {
"SP 800-38A": 8,
"SP 800-38B": 2,
"SP 800-38C": 2,
"SP 800-38D": 5,
"SP 800-38E": 3,
"SP 800-38F": 2,
"SP 800-56A": 3,
"SP 800-90A": 3,
"SP 800-90B": 1
},
"PKCS": {
"PKCS 1": 1,
"PKCS#1": 11
},
"RFC": {
"RFC 4106": 3,
"RFC 7296": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 37,
"AES-128": 31,
"AES-192": 16,
"AES-256": 16
},
"CAST": {
"CAST": 481
}
},
"constructions": {
"MAC": {
"CMAC": 2,
"HMAC": 26,
"HMAC-SHA-256": 4,
"HMAC-SHA-512": 8
}
}
},
"tee_name": {
"AMD": {
"PSP": 3
},
"IBM": {
"SSC": 3
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"AES-CBC-CS3A4566",
"AES-CFB128A4566",
"SHA2-256A4571",
"HMAC DRBGA4571",
"HMAC-SHA2-512A4571",
"AES-ECBA4568",
"KAS-ECC-SSC Sp800-56Ar3A4551",
"RSA SigVer (FIPS186-4)A4571",
"Hash DRBGA4571",
"SHA2-384A4571",
"SHA3-384A4557",
"HMAC-SHA3-256A4557",
"AES-XTS Testing Revision 2.0A4566",
"Safe Primes Key GenerationA4551",
"AES-CMACA4566",
"HMAC-SHA-1A4571",
"AES-CCMA4566",
"AES-GMACA4566",
"Counter DRBGA4568",
"AES-KWA4566",
"AES-CBCA4566",
"AES-GCMA4568",
"AES-OFBA4566",
"ECDSA KeyGen (FIPS186-4)A4551",
"SHA-1A4571",
"HMAC-SHA3-224A4557",
"KAS-FFC-SSC Sp800-56Ar3A4551",
"SHA2-224A4571",
"SHA3-224A4557",
"HMAC-SHA3-384A4557",
"SHA2-512A4571",
"HMAC-SHA3-512A4557",
"HMAC-SHA2-256A4571",
"AES-CTRA4566",
"SHA3-512A4557",
"HMAC-SHA2-224A4571",
"SHA3-256A4557",
"HMAC-SHA2-384A4571"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4556",
"#A4564",
"#A4554",
"#A4571",
"#A4568",
"#A4566",
"#A4565",
"#A4560",
"#A4557",
"#A4553",
"#A4567",
"#A4555",
"#A4562",
"#A4559",
"#A4552",
"#A4558",
"#A4569",
"#A4563",
"#A4551",
"#A4561",
"#A4570"
]
},
"policy_metadata": {
"/CreationDate": "D:20260706101627-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20260706101627-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 1155379,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
"https://www.ietf.org/rfc/rfc3447.txt",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://docs.aws.amazon.com/linux/al2023/ug/fips-mode.html",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://datatracker.ietf.org/doc/html/rfc4106",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 77
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "0cdae1a05e660e1635c4e4ee4ee0938b65730331a4b7200e1e36e330f13fec63",
"source_hash": "f86e2c13f0251da98c9d1633b93728eef2cad74463caffa4dafc05aaa059bee4",
"txt_hash": "d03902a3baaf9ee2b245bdac2fe5e4545412ca74530ff878a284d3c9f44ecc9a"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf",
"date_sunset": "2029-09-22",
"description": "The Amazon Linux 2023 Kernel Cryptographic API provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.",
"embodiment": "MultiChipStand",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A",
"Mitigation of other attacks: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Amazon Linux 2023 Kernel Cryptographic API",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-07-06",
"lab": "atsec information security corporation",
"validation_type": "Initial"
}
],
"vendor": "Amazon Web Services, Inc.",
"vendor_url": "http://www.amazon.com"
}
}