Dell BSAFE™ Crypto Module

Certificate #4942

Webpage information ?

Status active
Validation dates 16.01.2025
Sunset date 15-01-2027
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat Interim validation. When operated in approved mode
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Description Dell BSAFE™ Crypto Module 2.0 is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements.
Tested configurations
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 5218 with PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 5218 without PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6240L with PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6240L without PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6254 with PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6254 without PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Platinum 8280L with PAA
  • Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Platinum 8280L without PAA
Vendor Dell Australia Pty Limited, BSAFE Product Team
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Security policy ?

Symmetric Algorithms
AES, AES-128, AES-192, AES-256, CAST, DES, 3DES, Triple-DES, TDEA, HMAC, CBC-MAC
Asymmetric Algorithms
Diffie-Hellman
Hash functions
SHA-1, SHA2, SHA-2, MD4, MD5, PBKDF2
Schemes
MAC, Key Agreement, Key agreement
Randomness
PRNG, DRBG, RNG
Block cipher modes
ECB, CBC, CTR, GCM, CCM, XTS

Trusted Execution Environments
PSP

Security level
Level 1
Side-channel analysis
timing attacks, Timing Attacks
Certification process
out of scope, variables containing SSP data on the stack or heap should be zeroized after use or before going out of scope. 32 Non-Proprietary Security Policy for Dell BSAFE Crypto Module 11.2.2 Random Number Generation

Standards
FIPS 140-3, FIPS 186-4, FIPS 180-4, FIPS 198-1, SP 900-38A, SP 800-38C, SP 800-38D, SP 800-38E, SP 800-56B, SP 800-132, SP 800-38F, SP 800-90A, SP 800-133, SP 800-90B, NIST SP 900-56B, NIST SP 800-131A, NIST SP 800-57, NIST SP 800-56B, NIST SP 800-107, SP 800-57, PKCS #1, ISO/IEC 24759

File metadata

Title Dell BSAFE™ Crypto Module for C 2.0 Security Policy
Keywords BSAFE Crypto Module for C, BSAFE, fips, security policy, level 1
Author Dell Australia Pty Limited
Creation date D:20100527131853Z
Modification date D:20241218092003+10'00'
Pages 38
Creator FrameMaker 17.0.5
Producer Adobe PDF Library 17.0

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

  • 24.02.2025 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The exceptions property was updated.
  • 27.01.2025 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name Dell BSAFE™ Crypto Module was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4942,
  "dgst": "2bdfe17b9632fe94",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "Counter DRBGA1204",
        "RSA Decryption PrimitiveA1204",
        "KAS-IFC-SSCA1204",
        "HMAC-SHA2-384A1204",
        "PBKDFA1204",
        "SHA2-384A1204",
        "HMAC-SHA2-256A1204",
        "RSA KeyGen (FIPS186-4)A1204",
        "HMAC-SHA2-512A1204",
        "SHA2-224A1204",
        "RSA Signature PrimitiveA1204",
        "AES-CTRA1204",
        "HMAC-SHA-1A1204",
        "SHA2-512/224A1204",
        "AES-KWA1204",
        "HMAC DRBGA1204",
        "AES-KWPA1204",
        "RSA SigGen (FIPS186-4)A1204",
        "AES-CBCA1204",
        "SHA2-512A1204",
        "AES-XTSA1204",
        "AES-ECBA1204",
        "AES-GCMA1204",
        "SHA-1A1204",
        "SHA2-256A1204",
        "AES-CCMA1204",
        "RSA SigVer (FIPS186-4)A1204",
        "SHA2-512/256A1204"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          }
        }
      },
      "certification_process": {
        "OutOfScope": {
          "out of scope": 1,
          "variables containing SSP data on the stack or heap should be zeroized after use or before going out of scope. 32 Non-Proprietary Security Policy for Dell BSAFE Crypto Module 11.2.2 Random Number Generation": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 2
        },
        "CTR": {
          "CTR": 16
        },
        "ECB": {
          "ECB": 5
        },
        "GCM": {
          "GCM": 4
        },
        "XTS": {
          "XTS": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {},
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1,
          "Key agreement": 1
        },
        "MAC": {
          "MAC": 23
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 4
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 128, 192": 1,
          "AES-128": 1,
          "AES-128 128": 1,
          "AES-128 3072": 1,
          "AES-192": 1,
          "AES-192 192": 1,
          "AES-192 7680": 1,
          "AES-256": 4,
          "AES-2561": 1,
          "AES-CTR 128": 1,
          "DES3": 4,
          "DES31": 1,
          "DRBG6": 1,
          "HMAC7": 2,
          "PKCS #1": 5,
          "RSA PKCS #1": 3,
          "SHA-1": 12,
          "SHA-1 112": 1,
          "SHA-2": 1,
          "SHA2": 2,
          "SHA2-224": 5,
          "SHA2-256": 8,
          "SHA2-384": 8,
          "SHA2-512": 10,
          "SHA2-512 256": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 10
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 1
          },
          "MD5": {
            "MD5": 3
          }
        },
        "PBKDF": {
          "PBKDF2": 9
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 14
          },
          "SHA2": {
            "SHA-2": 1,
            "SHA2": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 72,
          "PRNG": 1
        },
        "RNG": {
          "RNG": 2
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Timing Attacks": 1,
          "timing attacks": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 27,
          "FIPS 180-4": 1,
          "FIPS 186-4": 4,
          "FIPS 198-1": 1
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "NIST SP 800-107": 1,
          "NIST SP 800-131A": 1,
          "NIST SP 800-56B": 1,
          "NIST SP 800-57": 3,
          "NIST SP 900-56B": 1,
          "SP 800-132": 2,
          "SP 800-133": 4,
          "SP 800-38C": 1,
          "SP 800-38D": 1,
          "SP 800-38E": 1,
          "SP 800-38F": 1,
          "SP 800-56B": 2,
          "SP 800-57": 1,
          "SP 800-90A": 4,
          "SP 800-90B": 10,
          "SP 900-38A": 1
        },
        "PKCS": {
          "PKCS #1": 4
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 36,
            "AES-128": 3,
            "AES-192": 3,
            "AES-256": 4
          },
          "CAST": {
            "CAST": 5
          }
        },
        "DES": {
          "3DES": {
            "3DES": 1,
            "TDEA": 1,
            "Triple-DES": 2
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 1,
            "HMAC": 29
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Dell Australia Pty Limited",
      "/CreationDate": "D:20100527131853Z",
      "/Creator": "FrameMaker 17.0.5",
      "/Keywords": "BSAFE Crypto Module for C, BSAFE, fips, security policy, level 1",
      "/ModDate": "D:20241218092003+10\u002700\u0027",
      "/Producer": "Adobe PDF Library 17.0",
      "/Title": "Dell BSAFE\u2122 Crypto Module for C 2.0 Security Policy",
      "/Trapped": "/False",
      "pdf_file_size_bytes": 375337,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://link.springer.com/content/pdf/10.1007/s001450010016.pdf",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/validated-modules/search/all",
          "http://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://ink.library.smu.edu.sg/sis_research/3723/",
          "http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf",
          "http://csrc.nist.gov/index.html",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
          "https://www.rambus.com/timing-attacks-on-implementations-of-diffie-hellman-rsa-dss-and-other-systems/",
          "https://www.dell.com/support"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "f49e3c7ec2faa61f94abb4c37fe567780d80b8f3931aac855e6cc9ba2816f189",
    "policy_txt_hash": "ff8e9baffebbcdbdcd8c8ef7fa1e63b151989f1f66a871ad0dc78c0cbc305566"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in approved mode",
    "certificate_pdf_url": null,
    "date_sunset": "2027-01-15",
    "description": "Dell BSAFE\u2122 Crypto Module 2.0 is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Dell BSAFE\u2122 Crypto Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "2.0.0.0",
    "tested_conf": [
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 5218 with PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 5218 without PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6240L with PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6240L without PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6254 with PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Gold 6254 without PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Platinum 8280L with PAA",
      "Dell PowerMaxOS 10 running on a PowerMax storage array compute node with an Intel Xeon Platinum 8280L without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-01-16",
        "lab": "LEIDOS CSTL",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Dell Australia Pty Limited, BSAFE Product Team",
    "vendor_url": "http://www.dell.com"
  }
}