This page was not yet optimized for use on mobile devices.

RIGFORT Pro Blockchain HSM

Certificate #4853

Webpage information ?

Status	active
Validation dates	28.10.2024
Sunset date	27-10-2026
Standard	FIPS 140-3
Security level	3
Type	Hardware
Embodiment	Multi-Chip Stand Alone
Caveat	Interim Validation. When installed, initialized and configured as specified in Section 11.1 of the Security Policy
Exceptions	Operational environment: N/A Non-invasive security: N/A Mitigation of other attacks: N/A Documentation requirements: N/A Cryptographic module security policy: N/A
Description	The RIGFORT Pro Blockchain HSM is a Multiple-chip standalone cryptographic module. It is a security module that supports the encryption algorithm approved by FIPS 140-3 and with physical security protection measures, key management mechanisms, and security features to provide secured and applicable cryptographic services for customer systems. Specifically, the security features include key wrapping, message authentication code (MAC), message digest, data encryption and decryption, digital signature generation and verification, etc.
Version (Hardware)	3.4.0
Version (Firmware)	1.4.0
Vendor	Shenzhen IBestChain Technology Co., Ltd.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES, AES-256, E2, TDEA, SM4, HMAC, HMAC-SHA-256, CMAC

Asymmetric Algorithms

RSA2048, RSA-2048, RSA 2048, ECDSA

Hash functions

SHA-256, SHA256, SHA3-256, SHA-3

Schemes

MAC

Randomness

DRBG

Elliptic Curves

P-256

Block cipher modes

ECB, CBC, CTR, GCM, CCM

JavaCard API constants

SM2

Trusted Execution Environments

PSP

Security level

Level 1, Level 3

Standards

FIPS 140-3, FIPS 202, FIPS 186-4, FIPS140-3, FIPS PUB 140-3, FIPS PUB 202, SP 800-38F, ISO/IEC 24759, ISO/IEC 19790

File metadata

Subject	FIPS 140-2 Security Policy Template
Author	Brown, Bethany
Creation date	D:20241017113757-05'00'
Modification date	D:20241017113757-05'00'
Pages	49
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

12.11.2024 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4853,
  "dgst": "fb420d1701eecd8f",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-ECBA2750",
        "Hash DRBGA2750",
        "KTS-IFCA2750",
        "KDF SP800-108A2750",
        "HMAC-SHA2-256A2750",
        "ECDSA SigGen (FIPS186-4)A2750",
        "ECDSA SigVer (FIPS186-4)A2750",
        "RSA SigVer (FIPS186-4)A2750",
        "RSA SigGen (FIPS186-4)A2750",
        "AES-CBCA2750",
        "SHA2-256A2750",
        "ECDSA KeyGen (FIPS186-4)A2750",
        "RSA KeyGen (FIPS186-4)A2750"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "3.4.0",
        "1.4.0"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDSA": {
            "ECDSA": 21
          }
        },
        "RSA": {
          "RSA 2048": 5,
          "RSA-2048": 13,
          "RSA2048": 4
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 16
        },
        "CCM": {
          "CCM": 1
        },
        "CTR": {
          "CTR": 4
        },
        "ECB": {
          "ECB": 14
        },
        "GCM": {
          "GCM": 1
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 8
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#2750": 6
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES [197": 1,
          "AES-256": 15,
          "HMAC [198": 1,
          "HMAC- SHA-256": 2,
          "HMAC- SHA-256 (Cert. #2750": 1,
          "HMAC- SHA256": 1,
          "HMAC-SHA-256": 3,
          "HMAC-SHA-256 (Cert. #2750": 1,
          "HMAC-SHA256": 4,
          "RSA 2048": 5,
          "RSA2048": 4,
          "SHA- 256": 1,
          "SHA-256": 15,
          "SHA-3": 1,
          "SHA2- 256": 1,
          "SHA2-256": 15,
          "SHA256": 1,
          "SHA3-256": 3,
          "SHS [180": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "Level 3": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA2": {
            "SHA-256": 15,
            "SHA256": 1
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3-256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "SM2": 9
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 21
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 56,
          "FIPS 186-4": 5,
          "FIPS 202": 1,
          "FIPS PUB 140-3": 1,
          "FIPS PUB 202": 1,
          "FIPS140-3": 1
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 24759": 4
        },
        "NIST": {
          "SP 800-38F": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 46,
            "AES-256": 15
          },
          "E2": {
            "E2": 2
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 1,
            "HMAC": 20,
            "HMAC-SHA-256": 2
          }
        },
        "miscellaneous": {
          "SM4": {
            "SM4": 9
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Brown, Bethany",
      "/CreationDate": "D:20241017113757-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20241017113757-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Subject": "FIPS 140-2 Security Policy Template",
      "pdf_file_size_bytes": 1177652,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/17"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 49
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "8327cfc08cc628b5fc68c776dbe017aea56a0a1bbb3cafccf94d2dcdfbe798e6",
    "policy_txt_hash": "901068f9f360c6c977f87796050d7f5b07c7c58ea53bf0761b430825602d95d2"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim Validation. When installed, initialized and configured as specified in Section 11.1 of the Security Policy",
    "certificate_pdf_url": null,
    "date_sunset": "2026-10-27",
    "description": "The RIGFORT Pro Blockchain HSM is a Multiple-chip standalone cryptographic module. It is a security module that supports the encryption algorithm approved by FIPS 140-3 and with physical security protection measures, key management mechanisms, and security features to provide secured and applicable cryptographic services for customer systems. Specifically, the security features include key wrapping, message authentication code (MAC), message digest, data encryption and decryption, digital signature generation and verification, etc.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Operational environment: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": "1.4.0",
    "historical_reason": null,
    "hw_versions": "3.4.0",
    "level": 3,
    "mentioned_certs": {},
    "module_name": "RIGFORT Pro Blockchain HSM",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "N/A",
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-10-28",
        "lab": "UL VERIFICATION SERVICES INC",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Shenzhen IBestChain Technology Co., Ltd.",
    "vendor_url": "http://www.ibestchain.cn"
  }
}