Dupaquis
vdupaquis@wisekey.com
+33 442370081

Benchaalal
obenchaalal@wisekey.com
+33 442370025

1.0.1 (Firmware)

The VaultIC407 ASSPs designed to secure various systems against counterfeiting, cloning or identity theft. It is a hardware security module that can be used in many applications such as IP protection, access control or hardware protection.

• • High-performance, Low Enhanced RISC Architecure

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #5903
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Glen Jaquette
jaquette@us.ibm.com
(713) 278-6279

4.14.4.3442 (Firmware)

IBM CryptoLite for C is used by the IBM® FS9100 FlashCore module, which is a NVMe-connected self-encrypting non-volatile storage module

• • Quad-core ARM(R) Cortex A53 MPcore

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3872
  • Counter Location: Before Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.17134

The Microsoft Windows Virtual TPM implementations provide cryptography algorithms to support the Virtual TPM functionality for Hyper-V

• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book 2 w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE w/ Windows 10 Enterprise April 2018 Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Standard Core (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro LTE w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Core on Hyper-V on Windows Server 2016 (x64)
• • Intel Core m5 with AES-NI and without SHA Extensions w/ Dell Latitude 12 Rugged Tablet w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio w/ Windows 10 Enterprise April 2018 Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Enterprise April 2018 Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s w/ Windows 10 Home April 2018 Update (x86)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Datacenter Core (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Education April 2018 Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro LTE w/ Windows 10 Enterprise April 2018 Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows Server Datacenter Core on Hyper-V on Windows Server (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5290 w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows Server Standard Core on Hyper-V on Windows Server (x64)
• • Intel Pentium with AES-NI and without SHA Extensions w/ Microsoft Surface Go w/ Windows 10 Pro April 2018 Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book 2 w/ Windows 10 Enterprise April 2018 Update (x64)

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #3859
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #2436, KAS #201

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.17134

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Windows 10 Education April 2018 Update (x64) w/ Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop
• • Windows Server Standard Core on Hyper-V on Windows Server (x64) w/ Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT
• • Windows Server Standard Core (x64) w/ Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book 2 w/ Windows 10 Pro April 2018 Update (x64)
• • Windows 10 Enterprise April 2018 Update (x64) w/ Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio
• • Windows 10 Pro April 2018 Update (x64) w/ Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop
• • Windows 10 Enterprise April 2018 Update (x64) w/ Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro LTE
• • Windows 10 Pro April 2018 Update (x64) w/ Intel Core m5 with AES-NI and without SHA Extensions w/ Dell Latitude 12 Rugged Tablet
• • Windows 10 Enterprise April 2018 Update (x64) w/ Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book 2
• • Windows 10 Enterprise April 2018 Update (x64) w/ Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE
• • Windows 10 Home April 2018 Update (x86) w/ Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s
• • Windows Server Datacenter Core (x64) w/ Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server
• • Windows 10 Pro April 2018 Update (x64) w/ Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5290
• • Windows Server Core on Hyper-V on Windows Server 2016 (x64) w/ Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server
• • Windows 10 Pro April 2018 Update (x64) w/ Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop
• • Windows Server Datacenter Core on Hyper-V on Windows Server (x64) w/ Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT
• • Windows 10 Enterprise April 2018 Update (x64) w/ Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop
• • Windows 10 Pro April 2018 Update (x64) w/ Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro LTE
• • Windows 10 Pro April 2018 Update (x64) w/ Intel Pentium with AES-NI and without SHA Extensions w/ Microsoft Surface Go

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5847, HMAC #3858
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #2435, KAS #200

Yongxin Xu
xuyongxin@sansec.com.cn
+86 186 6080 5090

1.0.12 (Firmware)

The CSM library implements cryptographic algorithms for data encryption, data decryption, signature generation, signature verification, message digest, message authentication code (MAC), and random number generation. The CMS library is part of the Sansec Hardware Security Module (HSM).

• • Intel G3260

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3792
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2306

Dupaquis
vdupaquis@wisekey.com
+33 442370081

Benchaalal
obenchaalal@wisekey.com
+33 442370025

1.0 (Firmware)

The VaultIC420 or VaultIC460 are ASSPs designed to secure various systems against counterfeiting, cloning or identity theft. It is a hardware security module that can be used in many applications such as IP protection, access control or hardware protection.

• • High-performance, Low-power Enhanced RISC architecture

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #5690
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Clint Winebrenner
cwinebre@cisco.com
(919) 392-6520

6.2 (Firmware)

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco Products

• • Cavium Octeon CN7240

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3784
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2299

Clint Winebrenner
cwinebre@cisco.com
(919) 392-6520

6.2 (Firmware)

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco Products.

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3783
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2298

Clint Winebrenner
cwinebre@cisco.com
(919) 392-6520

6.2 (Firmware)

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco Products

• • Intel Xeon E5-2609

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3777
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2294

Clint Winebrenner
cwinebre@cisco.com
(919) 392-6520

6.2 (Firmware)

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco Products

• • Intel Xeon E5-2680

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3776
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2293

Richard Whitney
rw@arista.com
703-627-6092
Fax: 408-538-8920

Ethan Rahn
erahn@arista.com
408-547-5825

1.0 (Firmware)

The EOS MACSec Hybrid Module is a comprehensive algorithms module used to perform secure encryption, hashing, and random number operations. As a special note, no PAI/PAA functions of the processors are used in the implementation of the software crypto module.

• • AMD GE Series
• • AMD GX Series
• • Intel Xeon E3
• • Intel Pentium B9
• • Intel Xeon D-1500

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #5482
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A, SP 800-90A
  • K prerequisite: DRBG #2158

Security and Certifications Team
securitycertifications@gemalto.com

1.0 (Firmware)

The SafeNet Accelerated Cryptographic Library is a high-performance cryptographic library tailored to use the advanced security capabilities of the Andretta 2.0 Security ASIC.

• • Andretta 2.0

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5652
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

SafeLogic Inside Sales
sales@safelogic.com
844-436-2797

3.0.1

SafeLogic's CryptoComply for Java is designed to provide FIPS 140-2 validated cryptographic functionality and is available for licensing.

• • Intel i7 w/ Java SE 8 on Windows Server 2012 R2
• • Intel i7 w/ Java SE 8 on Red Hat Enterprise Linux 7

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5532, HMAC #3684
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2190, KAS #188
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5532, HMAC #3684
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2190, KAS #188
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5532, HMAC #3684
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2190, KAS #188
  • Supports Zero Length IVs

Klaus Majewski
legal@forcepoint.com
1-858-320-8000

Jorma Levomäki
legal@forcepoint.com
1-858-320-8000

6.4.1.20056.fips.8 (Firmware)

Forcepoint NGFW Cryptographic Library is a software module that provides cryptographic services required by the Forcepoint NGFW product.

• • Intel Xeon E5

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3669
  • K prerequisite: DRBG #2181
  • Supports Zero Length IVs

Klaus Majewski
legal@forcepoint.com
1-858-320-8000

Jorma Levomäki
legal@forcepoint.com
1-858-320-8000

6.4.1.20056.fips.8 (Firmware)

Forcepoint NGFW Cryptographic Library is a software module that provides cryptographic services required by the Forcepoint NGFW product.

• • Intel Xeon D

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3668
  • K prerequisite: DRBG #2180
  • Supports Zero Length IVs

Klaus Majewski
legal@forcepoint.com
1-858-320-8000

Jorma Levomäki
legal@forcepoint.com
1-858-320-8000

6.4.1.20056.fips.8 (Firmware)

Forcepoint NGFW Cryptographic Library is a software module that provides cryptographic services required by the Forcepoint NGFW product.

• • Intel Pentium D

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3667
  • K prerequisite: DRBG #2179
  • Supports Zero Length IVs

Seyed Safakish
seyeds@juniper.net
408-745-2000
Fax: 408-745-2100

Junos OS 17.4 R1-S4 (Firmware)

Comprehensive, scalable and secure switching & routing solutions specifically designed to meet the needs of campus, enterprises and service providers. All of our switches & routers - core, Multiservice edge and edge Ethernet - run on one common operating system- Junos

• • Freescale e500mc

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #5509
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

4A.08 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3666
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

49.09 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3660
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Marcel Dasen
dasen@securosys.ch
+41 44 552 31 33

Robert Rogenmoser
roro@securosys.ch
+41 44 552 31 11

XC7K160T 2.5.3 (Firmware)

Cryptographic library in an embedded environment. Uses hardware accelerator where it fits. Seeds DRBG from TRNG.

• • Marvell Armada XP PJ4Bv7

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5485, HMAC #3643
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2160, KAS #184
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5485, HMAC #3643
  • R Length: 32 bits
  • Counter Location: After Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2160, KAS #184
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5485, HMAC #3643
  • Counter Location: After Iteration Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2160, KAS #184

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

4A.09 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3937
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

49.08 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3638
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Joe Wang
joe.wang@taisys.com
+886-2-26270927x6699
Fax: +886-2-26270619

Kent Horng
kent.horng@taisys.com
+886-2-26562185 #206
Fax: +886-2-26579657

32 53 (Firmware)

The TAISYS JUISE-S2 is a contact/contactless module that provides security services targeted at mobile devices in a single Integrated Circuit Chip. The module is implemented upon Sun Java Card ™ 3.0.4 Classic Edition specifications and is also compliant with GlobalPlatform Card Specification - Version 2.2.1 with SCP03.

• • SC300

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #5461
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A

David Hebert
davidh@infinidat.com
+1 860-214-5666

Steve Sullivan
steves@infinidat.com
+1 781-264-1544

1.0.1

The INFINIDAT Crypto Module is a software cryptographic library that performs key management, encryption state management and secure management functionality via TLSv1.2 for the INFINIDAT B-Series and F-Series appliances. This library provides a NIST SP 800-108 compliant KBKDF.

• • Intel Xeon E5-2697 w/ InfiniBox OS 4.7

• Counter:
  • MACs: HMAC-SHA-256, HMAC-SHA-512
  • MAC prerequisite: HMAC #3585
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2109

CLint Winebrenner
cwinebre@cisco.com
919.392.6250

Rel5 (Firmware)

The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.

• • PPCe500
• • Intel Xeon w/ ESXI 6.0

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3629
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Hemant Chaskar
hemant.chaskar@mojonetworks.com
650-961-1111
Fax: 650-961-1169

2.2-1-00 (Firmware)

Cryptographic library offering cryptographic mechanisms for key handshake in access point.

• • ARMv7

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3419
  • Counter Location: Before Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Hemant Chaskar
hemant.chaskar@mojonetworks.com
650-961-1111
Fax: 650-961-1169

2.2-1-00 (Firmware)

Cryptographic library offering cryptographic mechanisms for key handshake in access point.

• • ARMv7

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3419
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Jung Ha Paik
jungha.paik@samsung.com
+82-10-8861-0858

Brian Wood
be.wood@samsung.com
+1-973-440-9125

v1.2.1

The Samsung BoringSSL Cryptographic Module is a general purpose cryptographic module to provide user-mode applications with security services.

• • Qualcomm SDM845 w/ Android 8.1
• • Samsung Electronics Exynos 9810 w/ Android 8.1
• • Qualcomm MSM8998 w/ Android 8.1
• • Qualcomm SDM450 w/ Android 8.1

• Counter:
  • MACs: HMAC-SHA-512
  • MAC prerequisite: HMAC #3626
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Futurex Security Certifications
certifications@futurex.com
830-980-9782

6.2.0.1 (Firmware)

The Crypto Library includes HMAC, CMAC, SP 800-90 DRBG, ECDSA, SHA, RSA, ECC, KDF, GCM, AES, and TDES algorithms for use in the Futurex cryptographic module.

• • TI AM3352

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3
  • MAC prerequisite: AES #5464, TDES #2749
  • Counter Location: Before Fixed Data
  • SPs used to generate K: N/A

Sal Ceravolo
Sal.ceravolo@redcom.com
585-905-0451

Chris Hasenauer
Chris.hasenauer@redcom.com
585-905-0451

3.0.1

REDCOM Encryption 140-2 is a FIPS 140-2 validated cryptographic engine for Java and Android based environments. The engine delivers core cryptographic functions including Suite B algorithms. Also, it offloads functions for secure key management, data integrity, data at rest encryption, and secure communications to a trusted implementation.

• • Qualcomm Snapdragon 820 w/ Android Marshmallow (6.0)
• • Qualcomm Snapdragon 835 w/ Android Nougat (7.0)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5457, TDES #2744, HMAC #3614
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2140, KAS #181
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5457, TDES #2744, HMAC #3614
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2140, KAS #181
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5457, TDES #2744, HMAC #3614
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2140, KAS #181
  • Supports Zero Length IVs

Jason Novecosky
jason@keynexus.net

1.0

The KeyNexus Cryptographic Library is a comprehensive library of FIPS Approved algorithms that is intended to provide cryptographic support to KeyNexus products.

• • Intel Core i7-870 w/ OpenJDK 1.8.0 on Ubuntu 14.04.1 on VirtualBox 5.1.8

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5453, TDES #2741, HMAC #3611
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2137, KAS #180
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5453, TDES #2741, HMAC #3611
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2137, KAS #180
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5453, TDES #2741, HMAC #3611
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2137, KAS #180
  • Supports Zero Length IVs

James Li
james@hypersecu.com
(604) 279-2000
Fax: (604) 272-1233

V1.0 (Firmware)

The HYP ALG Library contains algorithms are as follows: the AES, TDES, CMAC, KDF, SHA, RSA, ECDSA, DRBG.

• • HSC32K1

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #5450
  • Counter Location: After Fixed Data, Before Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Clint Winebrenner
cwinebre@cisco.com
tbd

6.0

The Cisco FIPS Object Module (FOM) is a software library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Apple A10 w/ iOS 11.x

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3608
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3135R Chip ID 0x311001 4.1.0.16 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • n/a

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3598
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2124

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3135R Chip ID 0x311001 4.1.0.16 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • n/a

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3598
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2124

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3235SF Chip ID 0x311001 4.1.0.16 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • n/a

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3597
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2123

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3235SF Chip ID 0x311001 4.1.0.16 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals..

• • n/a

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3597
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2123

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3235S Chip ID 0x311001 4.1.0.16 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • n/a

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3596
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2122

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3235S Chip ID 0x311001 4.1.0.16 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • n/a

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3596
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2122

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3235S 4.0.0.5 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals..

• • na

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3593
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2120

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3235SF 4.0.0.5 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • na

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3594
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2119

Alon Srednizki
alons@ti.com
+972-9-7906059
Fax: +972-9-7906098

Barak Cherches
barakch@ti.com
+972-9-7906238
Fax: +972-9-7906098

CC3135R 4.0.0.5 Chip ID 0x311001 (Firmware)

The TI SimpleLink Wi-Fi Family brings highly secured connectivity solutions for embedded Wi-Fi and Internet of Things applications. It consists of a Wi-Fi network and security processor subsystem, a Wi-Fi driver, multiple internet protocols in ROM and ARM Cortex-M4 application microcontroller with a rich set of peripherals.

• • na

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3592
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2118

Ambuj Kumar
+1 (628)-400-2043

1.0.0 (Firmware)

Fortanix Self-Defending Key Management Service (SDKMS) is the world's first cloud service secured with Intel® SGX. With SDKMS, you can securely generate, store and use cryptographic keys & certificates, as well as secrets, such as passwords, API keys or tokens. It provides access control to users & applications to enforce authorized access to keys.

• • Intel® Xeon E3-1230v5 4-Core, 3.40GHz with AES-NI

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3489
  • Counter Location: After Iteration Data
  • R Length: 8 bits
  • K prerequisite: DRBG #2115
  • Supports Zero Length IVs

David Hebert
davidh@infinidat.com
+1 860-214-5666

Steve Sullivan
steves@infinidat.com
+1 781-264-1544

1.0.0

The INFINIDAT Crypto Module is a software cryptographic library that performs key management, encryption state management and secure management functionality via TLSv1.2 for the INFINIDAT B-Series and F-Series appliances. This library provides a NIST SP 800-108 compliant KBKDF.

• • Intel Xeon E5-2697 w/ InfiniBox OS 4.7

• Counter:
  • MACs: HMAC-SHA-256, HMAC-SHA-512
  • MAC prerequisite: HMAC #3585
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2109

Lev Bolotin
Lev.Bolotin@clevx.com
+1.425.820.9929

Marc Singer
Marc.Singer@clevx.com
425.820.9929

ClevX-Datalock-v2.0 (Firmware)

ClevX Datalock Cryptographic Firmware Library

• • STM32L071C

• Counter:
  • MACs: CMAC-AES-128
  • MAC prerequisite: AES #5366
  • Counter Location: Before Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Yossi Talmi
yossi.talmi@nuvoton.com
+972-9-9702364
Fax: +972-9-9702001

Oren Tanami
oren.tanami@nuvoton.com
+972-9-9702390
Fax: +972-9-9702001

LAG019

Nuvoton NPCT7xx TPM (Trusted Platform Module), security processor with embedded firmware compliant with TPM Family 2.0, level 00, revision 1.38

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A

Abhi Maras
(650) 265-4200
Fax: (408) 738-2065

Mukunda Chikkeralli
+91 80 49134180

1.0 (Firmware)

The Ruckus Wi-Fi, switching and software portfolio builds on more than a decade's worth of patented technologies to offer better connections that enable awesome customer experiences—at a fraction of the cost of alternatives. Our indoor and outdoor wireless access points fit just about any budget, performance requirement or deployment scenario.

• • Qualcomm IPQ8064
• • Qualcomm IPQ8065
• • Qualcomm IPQ8068

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3398
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Yin Ling Liong
yliong@qti.qualcomm.com
858-651-7034
Fax: 858-845-1523

TZ.BF.4.0.1-00345

QSEE Kernel Crypto API provides software crypto functionalities to the QSEE Kernel

• • Snapdragon 820 w/ Qualcomm Secure Execution Environment (QSEE)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #3526
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #885

Brian Wood
be.wood@samsung.com
+1-973-440-9125

Exynos 8895

The cryptographic hardware module provides secure key services to provide sensitive key options in hardware.

• • N/A

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3556
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Brian Wood
be.wood@samsung.com
+1-973-440-9125

Exynos 9810

The cryptographic hardware module provides secure key services to provide sensitive key options in hardware.

• • N/A

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3555
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Ambuj Kumar
info@fortanix.com
+1 (628) 400-2043

2.6.0

Fortanix crypto algorithm library provides cryptographic functionality for Fortanix's Self-Defending Key Management Service(TM).

• • Intel(R) Xeon(R) CPU E3-1230 v5 @ 3.40GHz with AES-NI support enabled w/ Ubuntu 16.04

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3526
  • Counter Location: After Iteration Data
  • R Length: 8 bits
  • K prerequisite: DRBG #2073
  • Supports Zero Length IVs

Manoj Maskara
mmaskara@vmware.com
650-427-1000
Fax: 650-475-5001

1.0.0

The VMware BC-FJA (Bouncy Castle FIPS Java API) is a software cryptographic module that provides cryptographic functions and services to various VMware applications via a well-defined Java-language application programming interface (API).

• • Intel Xeon w/ Windows Server 2016 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ BLUX 4.9 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ Windows 7 (32-bit) with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ SLES 12 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ Windows Server 2008 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ PhotonOS 2.0 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ Windows 10 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ PhotonOS 1.0 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ Windows Server 2012 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ Ubuntu 16.04 with JRE 1.8 on ESXi 6.5
• • Intel Xeon w/ PhotonOS 2.0 with JRE 1.8 on ESXi 6.7
• • Intel Xeon w/ Windows Server 2016 with JRE 1.8 on ESXi 6.7
• • Intel Xeon w/ Ubuntu 16.04 with JRE 1.8 on ESXi 6.7
• • Intel Xeon w/ PhotonOS 1.0 with JRE 1.8 on ESXi 6.7

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5365, HMAC #3553
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2076, KAS #177
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5365, HMAC #3553
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2076, KAS #177
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5365, HMAC #3553
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #2076, KAS #177
  • Supports Zero Length IVs

Sean Everson
sean.everson@certesnetworks.com
1.412.357.1130
Fax: 1.412.262.2574

Gary Brunner
gary.brunner@certesnetworks.com
1.412.200.2177
Fax: 1.412.262.2574

1.0 (Firmware)

The Certes Enforcement Point KBKDF Library provides key management functionality for the Certes CEP appliances.

• • Intel Xeon Processor E5 v4 Family
• • Intel Xeon Processor E3 v5 Family
• • Intel Atom Processor C Series

• Counter:
  • MACs: CMAC-AES-256
  • MAC prerequisite: AES #5338
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Brian Wood
be.wood@samsung.com
+1-973-440-9125

1.0

The Samsung SDPCrypto Module is a cryptographic library providing KDF support for sensitive data protection services.

• • Qualcomm SDM845 w/ Android 8
• • Qualcomm MSM8998 w/ Android 8
• • Samsung Electronics Exynos 9810 w/ Android 8
• • Samsung Electronics Exynos 8895 w/ Android 8
• • Samsung Electronics Exynos8890 w/ Android 8
• • Qualcomm MSM8996 w/ Android 8

• Counter:
  • MACs: HMAC-SHA-256, HMAC-SHA-512
  • MAC prerequisite: HMAC #3479
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Ambuj Kumar
info@fortanix.com
+1 (628) 400-2043

2.6.0

Fortanix crypto algorithm library provides cryptographic functionality for Fortanix's Self-Defending Key Management Service(TM).

• • Intel(R) Xeon(R) CPU E3-1230 v5 @ 3.40GHz with AES-NI support disabled w/ Ubuntu 16.04

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3527
  • Counter Location: After Iteration Data
  • R Length: 8 bits
  • K prerequisite: DRBG #2072
  • Supports Zero Length IVs

CLint Winebrenner
cwinebre@cisco.com
919.392.6250

Rel5 (Firmware)

The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.

• • Intel Atom

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3529
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Jesus Rodriguez
jrodriguez@realsec.com
+34 91 449 03 30
Fax: +34 91 579 56 06

Luis Jesus Hernandez
ljhernandez@realsec.com
+34 91 449 03 30
Fax: +34 91 579 56 06

1.1

The Cryptosec Dekaton is a high-end cryptographic accelerator card that provides cryptographic services and secure storage of cryptographic keys. The module is built to perform general cryptographic processing and features a tamper-responsive case to physically protect sensitive information contained within the card.

• • N/A

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5326, HMAC #3524
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Hemant Chaskar
hemant.chaskar@mojonetworks.com
(650) 961-1111
Fax: (650) 961-1169

2.0.16-3-00 (Firmware)

Cryptographic library offering various cryptographic mechanisms in server.

• • Intel Xeon

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3516
  • Counter Location: Before Fixed Data
  • SPs used to generate K: N/A

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.15063.728

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Qualcomm Snapdragon 808 (A57, A53) w/ Microsoft Lumia 950 w/ Windows 10 Mobile Creators Update (ARMv7)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Hub w/ Windows 10 Creators Update (x64)
• • Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop w/ Windows 10 Pro Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows 10 Pro Creators Update (x64)
• • Qualcomm Snapdragon 810 (A57, A53) w/ Microsoft Lumia 950 XL w/ Windows 10 Mobile Creators Update (ARMv7)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Panasonic Toughbook w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5285 w/ Windows 10 Pro Creators Update (x64)
• • Qualcomm Snapdragon 820 (Kryo) w/ HP Elite x3 w/ Windows 10 Mobile Creators Update (ARMv7)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Windows 10 Pro Creators Update on Hyper-V on Windows Server 2016 (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Pro Creators Update (x64)
• • Qualcomm Snapdragon 212 (A7) w/ Microsoft Lumia 650 w/ Windows 10 Mobile Creators Update (ARMv7)
• • Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s w/ Windows 10 Creators Update (x86)
• • AMD A4 with AES-NI and without SHA Extensions w/ HP Compaq Pro 6305 w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Atom x7 with AES-NI and without SHA Extensions w/ Microsoft Surface 3 with LTE w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 S Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Education Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 3 w/ Windows 10 Pro Creators Update (x64)
• • Intel Atom x7 with AES-NI and without SHA Extensions w/ Microsoft Surface 3 w/ Windows 10 Enterprise Creators Update (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5300, HMAC #3499
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #2037

Clint Winebrenner
cwinebre@cisco.com
(919) 392-6520

7.0

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of

• • ARMv8 w/ Android 7.1
• • Intel Core i5 w/ Windows 10 (with AES-NI)
• • Intel Core i7 w/ macOS 10.12 (with AES-NI)
• • Intel Core i5 w/ Windows 10
• • Intel Pentium w/ Linux 3.4
• • ARMv8 w/ iOS 11.2
• • Intel Core i7 w/ macOS 10.12 (without AES-NI)
• • Cavium Octeon II 68XX w/ Wind River Linux 4
• • Intel Xeon w/ SUSE Linux Enterprise 11 (with AES-NI)
• • Intel Xeon w/ SUSE Linux Enterprise 11 on VMware ESXI 6.0

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3513
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2048

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.14393.1770

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 4 w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Enterprise LTSB Anniversary Update (x86)
• • AMD A4 with AES-NI w/ Windows Server 2016 Standard Edition (x64)
• • Intel Core i7 with AES-NI w/ Windows 10 Home Anniversary Update (x64)
• • Intel Xeon with AES-NI w/ Windows Server 2016 Datacenter Edition (x64)
• • Intel Core i7 with AES-NI w/ Windows 10 Enterprise LTSB Anniversary Update (x64)
• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Pro 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Xeon with AES-NI w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Book w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Pro Anniversary Update (x86)
• • Intel Xeon with AES-NI w/ Windows 10 Enterprise LTSB Anniversary Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Book w/ Windows 10 Enterprise Anniversary Update (x64)
• • AMD A4 with AES-NI w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Pro 3 w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Xeon with AES-NI w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Enterprise Anniversary Update (x86)
• • Intel Xeon with AES-NI w/ Windows Server 2016 Standard Edition (x64)
• • Intel Xeon with AES-NI w/ Windows Storage Server 2016 (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Home Anniversary Update (x86)
• • Qualcomm Snapdragon 808 (A57, A53) w/ Microsoft Lumia 950 w/ Windows 10 Mobile Anniversary Update (ARMv7)
• • Intel Atom x7 with AES-NI w/ Microsoft Surface 3 w/ Windows 10 Home Anniversary Update (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5295, HMAC #3497
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #2036, KAS #171

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.10240.17643

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 2 w/ Windows 10 Enterprise LTSB (x64)
• • Intel Atom x7 with AES-NI w/ Microsoft Surface 3 w/ Windows 10 Enterprise LTSB (x64)
• • AMD A4 with AES-NI w/ Windows 10 Enterprise LTSB (x64)
• • Intel x64 Processor with AES-NI w/ Microsoft Surface Pro w/ Windows 10 Enterprise LTSB (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Enterprise LTSB (x86)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Pro 3 w/ Windows 10 Enterprise LTSB (x64)
• • Intel Core i7 with AES-NI w/ Windows 10 Enterprise LTSB (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5291, HMAC #3496
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #2035, KAS #170

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.10586.1176

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 2 w/ Windows 10 Enterprise November Update (x64)
• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 4 w/ Windows 10 Pro November Update (x64)
• • Intel x64 Processor with AES-NI w/ Microsoft Surface Pro w/ Windows 10 Pro November Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Book w/ Windows 10 Pro November Update (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Home November Update (x86)
• • AMD A4 with AES-NI w/ Windows 10 Enterprise November Update (x64)
• • Intel Core i3 without AES-NI w/ Windows 10 Pro November Update (x86)
• • AMD A4 with AES-NI w/ Windows 10 Home November Update (x64)
• • Qualcomm Snapdragon 808 (A57, A53) w/ Microsoft Lumia 950 w/ Windows 10 Mobile November Update (ARMv7)
• • Intel Core i3 without AES-NI w/ Windows 10 Enterprise November Update (x86)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Pro 3 w/ Windows 10 Pro November Update (x64)
• • Intel Atom x7 with AES-NI w/ Microsoft Surface 3 w/ Windows 10 Enterprise November Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Book w/ Windows 10 Enterprise November Update (x64)
• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise November Update (x64)
• • AMD A4 with AES-NI w/ Windows 10 Pro November Update (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Pro 3 w/ Windows 10 Enterprise November Update (x64)
• • Intel Core i5 with AES-NI w/ Microsoft Surface Hub 55" w/ Windows 10 November Update for Surface Hub (x64)
• • Intel Core i7 with AES-NI w/ Microsoft Surface Hub 84" w/ Windows 10 November Update for Surface Hub (x64)
• • Intel Core i7 with AES-NI w/ Windows 10 Home November Update (x64)
• • Qualcomm Snapdragon 400 (A7) w/ Microsoft Lumia 635 w/ Windows 10 Mobile November Update (ARMv7)
• • Intel x64 Processor with AES-NI w/ Microsoft Surface Pro w/ Windows 10 Enterprise November Update (x64)
• • Intel Core i5 with AES-NI w/ Microsoft Surface Pro 2 w/ Windows 10 Pro November Update (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #5287, HMAC #3494
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #2033, KAS #169

Clint Winebrenner
cwinebre@cisco.com
(919) 392-6520

6.0

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco Products

• • Intel Xeon w/ ADE-OS v3.0

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3486
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #2018

Steve Weingart
steve.weingart@hpe.com
512-319-2480

ArubaOS 6.5.1 (Firmware)

The Aruba MOVE Architecture forms the core network infrastructure for supporting mobile and wireless computing devices. The system enables enterprise-scale 802.11 wireless LANs (Wi-Fi), secure remote VPNs, and mobility-optimized wired networks.

• • Qualcomm IPQ8064
• • Qualcomm IPQ4029
• • NXP QorIQ T1024

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #3485
  • Counter Location: After Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Andrew Pendray
support@ssni.com
+1 669 770 4000
Fax: +1 886 776 0015

130-0117-03 82136; 1.00 (Firmware)

Silver Spring Networks Endpoint Security Module provides acceleration and off-load of standard cryptographic algorithms and secure network protocols, key storage and generation, bootloader and firmware verification, and encrypted data storage. It is included in the SoC designed for SSN's Gen5 endpoint and infrastructure products.

• • ESM instruction manager processor

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3402
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1096, KAS #164

Frederic Garnier
Frederic.Garnier@gemalto.com
+33 442364368
Fax: +33 442366953

Didier Bonnet
Didier.Bonnet@gemalto.com
+33 442366803
Fax: +33 442365545

Infineon SLE78CLFX400VPHM 1.9 (Firmware)

IDCore 3130 is a highly secured smartcard platform with dual interfaces compliant with Javacard 3.0.5, Global Platform 2.2.1 standards, designed to operate with Infineon SLE78 chip (M7892). The library implements TDEA, AES, AES-CMAC, SHA1-224-256-384-512, RSA, RSA CRT, ECDSA, ECC CDH, KDF CMAC-AES, KAS OnePassDH and SP800-90A RNG algorithms.

• • Infineon SLE78 chip (M7892)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #5243
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Joe Wang
joe.wang@taisys.com
+886-2-26270927x6699
Fax: +886-2-26270619

Kent Horng
kent.horng@taisys.com
+886-2-26562185 #206
Fax: +886-2-26579657

ST33G1M2

The TAISYS JUISE-S2 is a contact/contactless module that provides security services targeted at mobile devices in a single Integrated Circuit Chip. The module is implemented upon Sun Java Card ™ 3.0.4 Classic Edition specifications and is also compliant with GlobalPlatform Card Specification - Version 2.2.1 with SCP03.

• • N/A

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #4688
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1590

Brian Wood
be.wood@samsung.com
+1-973-440-9125

Jung Ha Paik
jungha.paik@samsung.com
+82-10-8861-0858

v2.2

Provide general purpose cryptographic services to TrustZone applications on the mobile platform for the protection of data in transit.

• • Samsung Electronics Exynos9810 w/ Kinibi 400A (32-bit)
• • Qualcomm SDM845 w/ QSEE 5.0 (32-bit)
• • Qualcomm SDM845 w/ QSEE 5.0 (64-bit)

• Counter:
  • MACs: HMAC-SHA-512
  • MAC prerequisite: HMAC #3436
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Hemant Chaskar
hemant.chaskar@mojonetworks.com
(650) 961-1111
Fax: (650) 961-1169

2.0.16-1-01 (Firmware)

Cryptographic library offering various cryptographic mechanisms in sensor and access point.

• • ARMv7

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3419
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

n/a

1.0.0 (Firmware)

a library of unique software cipher solutions which are standard encryption algorithm-based to provide Toshiba Memory Corporation enterprise SSD products and the systems using them a robust and secure data storage environment

• • Cortex-M3

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #3388
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Roland Ebrecht
Roland.Ebrecht@infineon.com
+49-821-25851-68
Fax: +49-821-25851-40

Thomas Hoffmann
Thomas.Hoffmann@infineon.com
+49-821-25851-24
Fax: +49-821-25851-40

SLB 9670 7.83 (Firmware)

Infineon Trusted Platform Module 2.0 SLB9670 is an implementation according to the TPM Main Specification Version 2.0 Revision 01.16 Errata Version 1.4 by Trusted Computing Group.

• • Infineon SLB 9670 security controller IC

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3383
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1886, KAS #157

Yin Ling Liong
yliong@qti.qualcomm.com
858-651-7034
Fax: 858-845-1523

TZ.XF.5.0.1-00033

QTEE Kernel Software Crypto APIs provide software crypto functionalities to the QTEE Kernel.

• • Snapdragon 845 w/ Qualcomm Trusted Execution Environment (QTEE)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #4959
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1788

Aleksandr Tkachev
Aleksandr.Tkachev@infotecs.us
+1 (646) 589-8571

Andrey Krasikov
krasikov@infotecs.us
1(646) 274-1494

2.0

The ViPNet Common Crypto Core Library is a software library that provides cryptographic services to a number of ViPNet applications via an API. It is available in user space and kernel driver implementations on a wide range of operational systems. User space library and kernel library use the same base source code.

• • Intel® Core i5-3337U w/ Linux Debian 7.11 (64 bit)
• • Intel® Core i7-3632QM w/ Windows 10 (64-bit)

• Counter:
  • MACs: CMAC-AES-256
  • MAC prerequisite: AES #5035
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1848

Aleksandr Tkachev
Aleksandr.Tkachev@infotecs.us
+1 (646) 589-8571

Vladimir Kuryndin
kurindinvv@infotecs.us
+7 (495) 737-6192
Fax: +7 (495) 737-7278

2.0

n/a

• • n/a w/ Windows 10 (64-bit)

• Counter:
  • MACs: CMAC-AES-256
  • MAC prerequisite: AES #5034
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1847

Aleksandr Tkachev
Aleksandr.Tkachev@infotecs.us
+1 (646) 589-8571

Andrey Krasikov
krasikov@infotecs.us
1(646) 274-1494

2.0

The ViPNet Common Crypto Core Library is a software library that provides cryptographic services to a number of ViPNet applications via an API. It is available in user space and kernel driver implementations on a wide range of operational systems. User space library and kernel library use the same base source code.

• • Intel® Core i5 w/ MacOS X 10.12
• • Apple A10 Fusion w/ iOS 10.3.3
• • Samsung Exynos 7880 w/ Android 7.0
• • Intel® Core i5-3337U w/PAA w/ Linux Debian 7.11 (64-bit)
• • Intel® Core i7-3632QM w/ Windows 10 (64-bit)
• • Intel® Core i5-3337U w/ Linux Debian 7.11 (64-bit)

• Counter:
  • MACs: CMAC-AES-256
  • MAC prerequisite: AES #5033
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1846

Suneetha Sarala
Suneetha.Sarala@arris.com
650-265-4200

Julie Lu
Julie.Lu@arris.com
650-265-4200

BRCD-IP-CRYPTO-VER-4.0 (Firmware)

Firmware algorithm for the Brocade FastIron Series

• • ARM Cortex A57

• Counter:
  • MACs: CMAC-AES-128
  • MAC prerequisite: AES #5023
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1838

Suneetha Sarala
Suneetha.Sarala@arris.com
650-265-4200

Julie Lu
Julie.Lu@arris.com
650-265-4200

BRCD-IP-CRYPTO-VER-4.0 (Firmware)

Firmware algorithm for the Brocade FastIron Series

• • ARM Cortex A9

• Counter:
  • MACs: CMAC-AES-128
  • MAC prerequisite: AES #5022
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1837

Security and Certifications Team
SecurityCertifications@gemalto.com

6.24.6 (Firmware)

The K6 Cryptographic Library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module's firmware or associated co-processor.

• • AMCC 440EPx Power PC (PPC440EPx) Embedded Processor

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3
  • MAC prerequisite: AES #5021, TDES #2588
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Security and Certifications Team
SecurityCertifications@gemalto.com

6.24.6 (Firmware)

The G5 Cryptographic Library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module's firmware or associated co-processor.

• • AMCC 440EPx Power PC (PPC440EPx) Embedded Processor

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3
  • MAC prerequisite: AES #5012, TDES #2585
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Security and Certifications Team
SecurityCertifications@gemalto.com

6.3.2 (Firmware)

The Luna IS cryptographic library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module's firmware or associated co-processor.

• • AMCC 440EPx Power PC (PPC440EPx) Embedded Processor

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3
  • MAC prerequisite: AES #4977, TDES #2574
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Clint Winebrenner
cwinebre@cisco.com
919.392.6520

6.0 (Firmware)

The Cisco FIPS Object Module (FOM) is a software library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Apple A10 on iOS 10.x

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3304
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1787

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.15063.674

The Microsoft Windows Virtual TPM implementations provide cryptography algorithms to support the Virtual TPM functionality for Hyper-V

• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Hub w/ Windows 10 (x64)

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #3271
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1734, KAS #150

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.16299

The Microsoft Windows Virtual TPM implementations provide cryptography algorithms to support the Virtual TPM functionality for Hyper-V

• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 3 w/ 10 Pro Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Education Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5285 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Enterprise Fall Creators Update (x64)
• • AMD A4 with AES-NI and without SHA Extensions w/ HP Compaq Pro 6305 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows Server Datacenter (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Panasonic Toughbook w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Atom x7 with AES-NI and without SHA Extensions w/ Microsoft Surface 3 with LTE w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s w/ Windows 10 Fall Creators Update (x86)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Windows Server Datacenter on Hyper-V on Windows Server (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 S Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Windows 10 Pro Fall Creators Update on Hyper-V on Windows Server 2016 (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows Server (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book 2 w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Windows Server on Hyper-V on Windows Server (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows Server Datacenter (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows Server (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5290 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Datacenter Core (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Standard Core (x64)

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #3270
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1733, KAS #149

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.15063.674

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Hub w/ Windows 10 (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4902, HMAC #3269
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1732, KAS #148

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.15254

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Qualcomm Snapdragon 810 (A57, A53) w/ Microsoft Lumia 950 XL w/ Windows 10 Mobile (ARMv7)
• • Qualcomm Snapdragon 808 (A57, A53) w/ Microsoft Lumia 950 w/ Windows 10 Mobile (ARMv7)
• • Qualcomm Snapdragon 820 (Kryo) w/ HP Elite x3 w/ Windows 10 Mobile (ARMv7)
• • Qualcomm Snapdragon 212 (A7) w/ Microsoft Lumia 650 w/ Windows 10 Mobile (ARMv7)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4901, HMAC #3268
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1731, KAS #147

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.16299

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MTw/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s w/ W
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Education Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5285 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 3 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Windows Server Datacenter on Hyper-V on Windows Server (x64)
• • Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows Server Datacenter (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book 2 w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Panasonic Toughbook w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 S Fall Creators Update (x64)
• • AMD A4 with AES-NI and without SHA Extensions w/ HP Compaq Pro 6305 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows Server Datacenter (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Windows Server on Hyper-V on Windows Server (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Windows 10 Pro Fall Creators Update on Hyper-V on Windows Server 2016 (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows Server (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows Server (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Fall Creators Update (x64)
• • Intel Atom x7 with AES-NI and without SHA Extensions w/ Microsoft Surface 3 with LTE w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s w/ Windows 10 Fall Creators Update (x86)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5290 w/ Windows 10 Pro Fall Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Datacenter Core (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R740 Server w/ Windows Server Standard Core (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4897, HMAC #3267
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1730, KAS #146

Susan Scotten
susan.scotten@hpe.com
1-916-540-1109

16.04 (Firmware)

Crypto library to support Aruba Campus Swtich Series (2930F, 2930M, 3810M and 5400R).

• • Freescale P2020 Dual Core
• • Dual Core ARM Coretex

• Counter:
  • MACs: CMAC-AES-128
  • MAC prerequisite: AES #4850
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1705

William Cheng
William.cheng@mediatek.com
+1-858-731-9200
Fax: +1-858-731-9201

MingHsien Hsieh
minghsien.hsieh@mediatek.com
+886-3-567-0766
Fax: +886-3-578-7610

MTK CryptoCoreV1.0 S Core

The MTK CryptoCore cryptographic module (hereafter referred to as “the module”) is designed to provide foundational security services for the platform, including secure boot, secure life cycle state, platform identity and key management. It offers high-throughput cryptography operations, suitable for a diverse set of use cases.

• • N/A

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #4789
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Manoj Maskara
mmaskara@vmware.com
650-427-1000
Fax: 650-475-5001

Michael McKay
mmckay@vmware.com
650-427-3615
Fax: 650-475-5001

1.0.0

The VMware BC-FJA (Bouncy Castle FIPS Java API) is a software cryptographic module that provides cryptographic functions and services to various VMware applications via a well-defined Java-language application programming interface (API).

• • Intel Xeon E5 w/ Windows Server 2012 R2 with JRE 1.8 on ESXi 6.5

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4560, HMAC #3171
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1637, KAS #136
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4560, HMAC #3171
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1637, KAS #136
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4560, HMAC #3171
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1637, KAS #136
  • Supports Zero Length IVs

David Hook
dgh@bouncycastle.org
+61438170390

Jon Eaves
jon@bouncycastle.org
+61417502969

1.0.1

The Bouncy Castle FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.

• • Intel Xeon Processor X5670 w/ Java SE Runtime Environment 7 on Red Hat Enterprise Linux 7.3 on VMware ESXi 5.5
• • Intel Xeon Processor X5670 w/ Java SE Runtime Environment 8 on Red Hat Enterprise Linux 7.3 on VMware ESXi 5.5

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4759, HMAC #3170
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1636, KAS #135
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4759, HMAC #3170
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1636, KAS #135
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4759, HMAC #3170
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1636, KAS #135
  • Supports Zero Length IVs

Security and Certifications Team
SecurityCertifications@gemalto.com

7.0.1 (Firmware)

The K7 Cryptographic Library provides a broad suite of high-performance cryptographic operations and functionality to SafeNet Luna Hardware Security Modules.

• • PowerPC 476

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4753, TDES #2525, HMAC #3166
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Leo Dorrendorf
leo.dorrendorf@arm.com
+972-52-6818594
Fax: +972-73-2558808

Udi Maor
udi.maor@arm.com
+972-54-4205101
Fax: +972-73-2558808

CC 712 TEE

ARM TrustZone CryptoCell is a security engine with root of trust and cryptographic accelerator capabilities. It is provided to customers as Silicon IP and accompanying firmware. The customer integrates the silicon into the host CPU hardware, and uses the firmware to drive the silicon and provide high-level functions.

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #4749
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Yossi Talmi
yossi.talmi@nuvoton.com
+972-9-9702364
Fax: +972-9-9702001

Oren Tanami
oren.tanami@nuvoton.com
+972-9-9702390
Fax: +972-9-9702001

LAG019

Nuvoton NPCT7xx TPM (Trusted Platform Module), security processor with embedded firmware compliant with TPM Library Family 2.0, Level 00, Revision 01.16

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3161
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1628

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

ST33HTPH2028AAF3

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3124
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

ST33HTPH2028AHB9

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3122
  • Counter Location: Before Fixed Data
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

ST33HTPH2E28AHB4

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3120
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

ST33HTPH2E28AHB8

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • N/A

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #3118
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

SafeLogic Inside Sales
sales@safelogic.com
(844) 436-2797

3.0.1

CryptoComply Java is a comprehensive suite of FIPS Approved algorithms implemented in pure Java.

• • Intel® Xeon® X5670 w/ OpenJDK 1.7 on CentOS 6 on HP ProLiant DL360 G7 Server

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4702, TDES #2494, HMAC #3114
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1600, KAS #130
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4702, HMAC #3114
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1600, KAS #130
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4702, TDES #2494, HMAC #3114
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1600, KAS #130
  • Supports Zero Length IVs

Clint Winebrenner
cwinebre@cisco.com
919.392.6250

6.0 (Firmware)

The Cisco FIPS Object Module (FOM) is a firmware library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Intel Xeon on VMware ESXi 5.5

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3096
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1583

Clint Winebrenner
cwinebre@cisco.com
919.392.6250

6.0 (Firmware)

The Cisco FIPS Object Module (FOM) is a firmware library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Intel Xeon

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3095
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1581

Yin Ling Liong
yliong@qti.qualcomm.com
858-651-7034
Fax: 858-845-1523

TZ.BF.4.0.6-00128

QSEE Kernel Crypto API provides software crypto functionalities to the QSEE Kernel

• • Snapdragon 835 w/ Qualcomm Secure Execution Environment (QSEE)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-256
  • MAC prerequisite: AES #4474
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1455

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.15063

The Microsoft Windows Virtual TPM implementations provide cryptography algorithms to support the Virtual TPM functionality for Hyper-V

• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Education Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Pro Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 3 w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Windows 10 Pro Creators Update on Hyper-V on Windows Server 2016 (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5285 w/ Windows 10 Pro Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows 10 Pro Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows 10 Pro Creators Update (x64)
• • AMD A4 with AES-NI and without SHA Extensions w/ HP Compaq Pro 6305 w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Panasonic Toughbook w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Creators Update with Windows Hyper-V enabled (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ HP ProDesk 600 G2 w/ Windows 10 Enterprise Creators Update with Windows Hyper-V enabled (x64)

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #3062
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1556, KAS #128

Mike Grimm
FIPS@microsoft.com
800-Microsoft

10.0.15063

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Education Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Laptop w/ Windows 10 S Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Pro Creators Update (x64)
• • Intel Core m3 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Pro 3 w/ Windows 10 Pro Creators Update (x64)
• • Intel Atom x7 with AES-NI and without SHA Extensions w/ Microsoft Surface 3 w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Atom x7 with AES-NI and without SHA Extensions w/ Microsoft Surface 3 with LTE w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Studio w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Microsoft Surface Hub w/ Windows 10 Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Windows 10 Pro Creators Update on Hyper-V on Windows Server 2016 (x64)
• • Qualcomm Snapdragon 808 (A57, A53) w/ Microsoft Lumia 950 w/ Windows 10 Mobile Creators Update (ARMv7)
• • Qualcomm Snapdragon 810 (A57, A53) w/ Microsoft Lumia 950 XL w/ Windows 10 Mobile Creators Update (ARMv7)
• • Qualcomm Snapdragon 212 (A7) w/ Microsoft Lumia 650 w/ Windows 10 Mobile Creators Update (ARMv7)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell Latitude 5285 w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i3 without AES-NI and SHA Extensions w/ Dell Inspiron 660s w/ Windows 10 Creators Update (x86)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell Precision Tower 5810MT w/ Windows 10 Pro Creators Update (x64)
• • Intel Xeon with AES-NI and without SHA Extensions w/ Dell PowerEdge R630 Server w/ Windows 10 Pro Creators Update (x64)
• • Qualcomm Snapdragon 820 (Kryo) w/ HP Elite x3 w/ Windows 10 Mobile Creators Update (ARMv7)
• • AMD A4 with AES-NI and without SHA Extensions w/ HP Compaq Pro 6305 w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ HP Pro x2 612 G2 Detachable PC with LTE w/ Windows 10 Enterprise Creators Update (x64)
• • Intel Pentium with AES-NI and SHA Extensions w/ HP Slimline Desktop w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Panasonic Toughbook w/ Windows 10 Pro Creators Update (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ HP ProDesk 600 G2 w/ Windows 10 Enterprise Creators Update with Windows Hyper-V enabled (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows 10 Enterprise Creators Update with Windows Hyper-V enabled (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4624, HMAC #3061
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1555, KAS #127

Clint Winebrenner
cwinebre@cisco.com
919.392.6250

Rel5 (Firmware)

The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.

• • MIPS64
• • Intel Atom
• • Intel Xeon on ESXi 5.5
• • PPC405
• • PPCe500
• • PPCe5500
• • Intel Core i3
• • Intel Pentium
• • Intel Xeon
• • PPC465

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #3034
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Futurex Security Certifications
certifications@futurex.com
830-980-9782

6.2.0.0 (Firmware)

The Crypto Library includes HMAC, CMAC, SP 800-90 DRBG, ECDSA, SHA, RSA, ECC, KDF, GCM, AES, and TDES algorithms for use in the Futurex cryptographic module.

• • TI AM3352

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3
  • MAC prerequisite: AES #4564
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Kelvin Desplanque
kdesplan@cisco.com
6137887216

6.0 (Firmware)

The Cisco FIPS Object Module (FOM) is firmware that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Intel Xeon

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #3013
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1509

Kelvin Yiu
kelvinyi@amazon.com

Ken Beer
nbeer@amazon.com

1.0.0 (Firmware)

The AWS Key Management Service Cryptographic Algorithm Library provides cryptographic functionality for the AWS Key Management Service Hardware Security Module.

• • Intel Xeon E5-2640v4

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4527, HMAC #2987
  • Counter Location: After Fixed Data, Before Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1487
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4527, HMAC #2987
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1487
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4527, HMAC #2987
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1487
  • Supports Zero Length IVs

Steve Weingart
steve.weingart@hpe.com
512-319-2480

ArubaInstant 6.5.1.0-4.3.1 (Firmware)

Aruba Instant cryptographic module provided by Aruba RAP-108/109 and AP-214/215/224/225/274/275/277 hardware.

• • Freescale QorIQ P1010 800MHz
• • Freescale QorIQ P1020 800MHz
• • Qualcomm QCA9344 500MHz

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2569
  • Counter Location: Before Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Steve Weingart
steve.weingart@hpe.com
512-319-2480

ArubaInstant 6.5.1.0-4.3.1 (Firmware)

Aruba Instant cryptographic module provided by Aruba RAP-108/109 and AP-214/215/224/225/274/275/277 hardware.

• • Freescale QorIQ P1010 800MHz
• • Freescale QorIQ P1020 800MHz
• • Qualcomm QCA9344 500MHz

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #2569
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Kelvin Yiu
kelvinyi@amazon.com

Ken Beer
kenbeer@amazon.com

1.0.0 (Firmware)

The AWS Key Management Service Key Derivation Function Library provides KDF functionality for the AWS Key Management Service Hardware Security Module.

• • Intel Xeon E5-2640v4

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2987
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1487

Luis Luciani
luis.luciani@hpe.com
281-518-6762

Edward Newman
edward.newman@hpe.com
281-514-2713

iLO 5 v1.11 (Firmware)

HPE Integrated Lights-Out (iLO) management built into HPE Proliant servers is an autonomous management subsystem embedded directly on the server. iLO monitors each server’s overall "health", reports issues, and provides a means for setup and managing of power and thermal settings.

• • Cortex A9

• Feedback:
  • MACs: HMAC-SHA-512
  • MAC prerequisite: HMAC #2985
  • Supports Zero Length IVs

Kasra Akhavan-Toyserkani
kakhavan@comtechefdata.com
(240) 243-1837
Fax: (240) 243-1853

Parag Patel
ppatel@comtechefdata.com
(240) 243-1876
Fax: (240) 243-1853

2.2.4 (Firmware)

The Comtech EF Data FIPS Security Module features an FPGA to perform bulk encryption/decryption for Ethernet data traffic via Comtech Satellite Modems, as well as firmware to provide the cryptographic functions needed to act as a endpoint for TLS management and control traffic.

• • AMCC PowerPC 440EP

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2663
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Jeff Ebert
jebert@ssni.com
16697704000
Fax: 18667760015

130-0117-01.ESM 82136+98519 (Firmware)

Silver Spring Networks Endpoint Security Module provides acceleration and off-load of standard cryptographic algorithms and secure network protocols, key storage and generation, bootloader and firmware verification, and encrypted data storage. It is included in the SoC designed for SSN's Gen5 endpoint and infrastructure products.

• • ESM instruction manager processor embedded in SSN ARNIE SoC

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2963
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1448, KAS #118

Brian Wood
be.wood@samsung.com
+1-973-440-9125

Bumhan Kim
bumhan.kim@samsung.com.
+82-10-4800-6711

2.0

Provides general purpose key management services to user-space applications on the mobile platform.

• • Qualcomm MSM8998 w/ Android 7.0
• • Samsung Electronics Exynos8895 w/ Android 7.0
• • Samsung Electronics Exynos8890 w/ Android 7.0
• • Samsung Electronics Exynos7420 w/ Android 7.0
• • Qualcomm MSM8996 w/ Android 7.0
• • Samsung Electronics Exynos7870 w/ Android 7.1

• Counter:
  • MACs: HMAC-SHA-512
  • MAC prerequisite: HMAC #2944
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Security and Certifications Team
SecurityCertifications@gemalto.com

Sylvain Lhostis
Sylvain.Lhostis@gemalto.com
+33 (0)4 42 36 60 62

Infineon SLE78 M7892 chip family 4.0 (Firmware)

MultiAppIDV4.0 is a highly secured smartcard platform compliant with the Javacard 3.0.4, GP 2.2.1, Amdt D standards, designed to operate with the Infineon SLE78 M7892 chips. It supports: TDES, AES, AES-CMAC, SHA1-224-256-384-512, RSA, RSA CRT, ECDSA, ECC CDH, KDF SP800-108 & DRBG SP800-90A algorithms.

• • Infineon SLE78 M7892 chip family

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #4457
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Satya Das
510 623-1000

1.0 (Firmware)

Attivo Networks is an award winning provider of inside-the-network threat detection, attack analysis and forensics.

• • Intel® Xeon® CPU E5-2620 v2 @ 2.10GHz
• • Intel® Xeon® CPU E5-2630 v3 @ 2.4GHz

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4417, TDES #2379, HMAC #2933
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1426, KAS #113
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4417, TDES #2379, HMAC #2933
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1426, KAS #113
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4417, TDES #2379, HMAC #2933
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1426, KAS #113
  • Supports Zero Length IVs

Global Certification Team
certteam@cisco.com

6.0 (Firmware)

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Cavium CN52xx
• • Intel Xeon X5650
• • Intel Xeon E5-2609 v3
• • Intel Xeon E5-2680 v3
• • Marvell A390

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2931
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1422

Brian Wood
be.wood@samsung.com
+1-973-440-9125

Jung Ha Paik
jungha.paik@samsung.com
+82-10-8861-0858

2.0

Provide general purpose cryptographic services to TrustZone applications on the mobile platform for the protection of data in transit.

• • Samsung Electronics Exynos8895 w/ Kinibi 400A (32-bit)
• • Qualcomm MSM8998 w/ QSEE 4.0 (32-bit)
• • Qualcomm MSM8998 w/ QSEE 4.0 (64-bit)
• • Samsung Electronics Exynos7870 w/ Kinibi 310 (32-bit)

• Counter:
  • MACs: HMAC-SHA-512
  • MAC prerequisite: HMAC #2916
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

49.00 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2878
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

49.01 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 and version 2.0 specifications.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2877
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

4A.00 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 2.0 specification.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2875
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Fabien ARRIVE
fabien.arrive@st.com
+33 223 470 633
Fax: +33 223 470 400

4A.01 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 2.0 specification.

• • SecureCore SC300

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2873
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Christian Rosadini
christian.rosadini@magnetimarelli.com
+39 051 615 7945

Cosimo Senni
cosimo.senni@magnetimarelli.com
+39 051 615 7945

1.0.0 (Firmware)

Implementation of Crypto-Library according to Autosar-CAL interface

• • ARM Cortex-M3
• • AURIX TC275 TriCore CPU

• Counter:
  • MACs: CMAC-AES-128
  • MAC prerequisite: AES #4322
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Roland Ebrecht
Roland.Ebrecht@infineon.com
+49-821-25851-68
Fax: +49-821-25851-40

Thomas Hoffmann
Thomas.Hoffmann@infineon.com
+49-821-25851-24
Fax: +49-821-25851-40

SLB 9670 7.80 (Firmware)

Infineon Trusted Platform Module 2.0 SLB9670 is an implementation according to the TPM Main Specification Version 2.0 Revision 01.16 Errata Version 1.4 by Trusted Computing Group.

• • Infineon SLB 9670 security controller IC

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2852
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1375, KAS #106

Roland Ebrecht
Roland.Ebrecht@infineon.com
+49-821-25851-68
Fax: +49-821-25851-40

Thomas Hoffmann
Thomas.Hoffmann@infineon.com
+49-821-25851-24
Fax: +49-821-25851-40

SLB 9660/9665 5.80 (Firmware)

Infineon Trusted Platform Module 2.0 SLB 9660/ SLB 9665 is an implementation according to the TPM Main Specification Version 2.0 Revision 01.16 Errata Version 1.4 by Trusted Computing Group.

• • Infineon SLB 9660 or SLB 9665 security controller IC

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2851
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1374, KAS #105

William W. Burnham
william.burnham@socom.mil
(813) 826-2282

2.0

KEYW, in coordination with the United States Special Operations Command (USSOCOM), has developed a Federal Information Processing Standard 140-2 certified, standards-based Suite B Cryptographic Algorithms library that provides an advanced layer of encrypted data-in-transit communications and data-at-rest encryption for the BlackBerry ecosystem.

• • Qualcomm Snapdragon 801 w/ BlackBerry OS 10.3
• • Qualcomm Snapdragon S4 w/ BlackBerry OS 10.3
• • Intel Xeon w/ Microsoft Windows Server 2012 R2 (64-bit)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4312, HMAC #2119
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4312, HMAC #2119
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: N/A
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4312, HMAC #2119
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

Dominic Gagnon
dgagnon@distech-controls.com
450-444-9898 Ext.231
Fax: 450-444-0770

François Gervais
fgervais@distech-controls.com
450-444-9898 Ext.263
Fax: 450-444-0770

1.0 (Firmware)

The Distech Java Cryptographic Library is a general purpose cryptographic library used by Distech Controls products including the Eclypse series of controllers.

• • AM335x Cortex-A8 (ARMv7) /w NEON

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4306, HMAC #2842
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1367, KAS #103
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4306, HMAC #2842
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1367, KAS #103
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4306, HMAC #2842
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1367, KAS #103
  • Supports Zero Length IVs

Eric Betts
betts@vmware.com
408-891-0590

Michael McKay
mmckay@vmware.com
408-891-0590

BC FIPS 1.0.0

The VMware Java JCE (Java Cryptographic Extension) Module (VMware JCE Module) is a software cryptographic module containing a set of cryptographic functions.

• • Intel Xeon E5 w/ NSX Controller 6.3.0 OS with Java JRE 1.7 running on VMware vSphere Hypervisor (ESXi) 6.0
• • Intel Xeon E5 w/ NSX Edge 6.3.0 OS with Java JRE 1.7 running on VMware vSphere Hypervisor (ESXi) 6.0
• • Intel Xeon E5 w/ NSX Manager 6.3.0 OS with Java JRE 1.7 running on VMware vSphere Hypervisor (ESXi) 6.0

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4252, HMAC #2788
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1330, KAS #97
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4252, HMAC #2788
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1330, KAS #97
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4252, HMAC #2788
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1330, KAS #97
  • Supports Zero Length IVs

Certification Director
fortressinfo@gd-ms.com
770-689-2040
Fax: 781-455-5555

2.0 (Firmware)

The Fortress KAS Implementation suite works in unison to provide security to your wireless and wired networks.

• • RMI Alchemy MIPS Processor
• • Broadcom XLS Processor

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #889
  • Counter Location: After Fixed Data, Before Fixed Data
  • R Length: 8, 16 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #66

William Sandberg-Maitland
smaitland@spyrus.com
613-298-3416
Fax: 408-392-0319

A51-315 1.0 (Firmware)

The SPYCOS 3.0 microSDHC(TM) TrustedFlash Module provides AES-ECB encryption and supporting KDF services to protect encrypted user assets in a FIPS 140-2 Level 3 physically protected flash memory.

• • N/A

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #1913
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #658

Clint Winebrenner
cwinebre@cisco.com
1 919 392 6520

11.7

tbd

• • Snapdragon 820 w/ Android version 6

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2779
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1320

Global Certification Team
certteam@cisco.com

6.2

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • Cavium Octeon MIPS64 w/ Linux 2.6
• • Cavium Octeon MIPS64 w/ Linux 3.10

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2772
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1317

Global Certification Team
certteam@cisco.com

6.2

The Cisco FIPS Object Module is a software library that provides cryptographic services to a vast array of Cisco's networking and collaboration products.

• • ARMv8 w/ Android 3.10
• • ARMv8 w / Apple iOS 9
• • Intel Xeon w/ FreeBSD 10.3
• • Intel Core i5 without AES-Ni w/ Windows 10
• • Intel Core i5 with AES-Ni w/ Windows 10
• • Cavium Octeon MIPS64 w/ Linux 2.6
• • Intel Core i5 without AES-Ni w/ Linux 3.10
• • Intel Core i5 with AES-Ni w/ Linux 3.10

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2271
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1316

Eric Betts
betts@vmware.com
408-891-0590

Michael McKay
mmckay@vmware.com
408-891-0590

BC FIPS 1.0.0

The VMware Java JCE (Java Cryptographic Extension) Module (VMware JCE Module) is a software cryptographic module containing a set of cryptographic functions.

• • Intel Xeon E5 w/ NSX Controller 6.3.0 OS with Java JRE 1.7 running on VMware vSphere Hypervisor (ESXi) 6.0
• • Intel Xeon E5 w/ NSX Edge 6.3.0 OS with Java JRE 1.7 running on VMware vSphere Hypervisor (ESXi) 6.0
• • Intel Xeon E5 w/ NSX Manager 6.3.0 OS with Java JRE 1.7 running on Vmware vSphere Hypervisor (ESXi) 6.0

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4153, HMAC #2721
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1261, KAS #96
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4153, HMAC #2721
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1261, KAS #96
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4153, HMAC #2721
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1261, KAS #96
  • Supports Zero Length IVs

GOYET Christophe
c.goyet@oberthur.com
+1 703 322 8951
Fax: N/C

BOUKYOUD Saïd
s.boukyoud@oberthur.com
+33 1 78 14 72 58
Fax: +33 1 78 14 70 20

HW = '30' with FW = '5F01' and HW = '40' with FW = '6001' build114_22 (Firmware)

ID-One Cosmo V8.1 is a dual interface (ISO 7816 & ISO 14443) smartcard chip compliant with Javacard 3.0.4 and GlobalPlatform 2.2.1 which includes a KDF implementation fully compliant with NIST SP800-108.

• • ID-One PIV on Cosmo V8.1

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #4108
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-56A

Certification Team
certteam@cisco.com

1.0

TBD

• • Apple A8 w/ iOS 9.3

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2701
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1248

Futurex Security Certifications
certifications@futurex.com
830-980-9782

6.2.0.0 (Firmware)

The Crypto Library includes CMAC, DRBG, GCM, KDF TLS, KDF CMAC, and KWP algorithms for use in the Futurex cryptographic module.

• • Intel i7-620UE

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3
  • MAC prerequisite: AES #4117
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Christian Rosadini
christian.rosadini@magnetimarelli.com
+39 051 615 7945

Cosimo Senni
cosimo.senni@magnetimarelli.com
+39 051 615 7945

1.0.0

Implementation of Crypto-Library according to Autosar-CAL interface

• • Arm Cortex-M3 w/ n/a

• Counter:
  • MACs: CMAC-AES-128
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Tim Myers
FIPS@microsoft.com
800-Microsoft

10.0.14393

The Microsoft Windows Virtual TPM implementations provide cryptography algorithms to support the Virtual TPM functionality for Hyper-V

• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Microsoft Surface Pro 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Microsoft Surface Pro 3 w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i5 with AES-NI and PCLMULQDQ and SSSE 3 w/ Microsoft Surface Pro 4 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i5 with AES-NI and PCLMULQDQ and SSSE 3 w/ Microsoft Surface Pro 4 w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Microsoft Surface Book w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Microsoft Surface Book w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Pro Anniversary Update (x64)
• • AMD A4 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • AMD A4 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Server 2016 Standard (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Server 2016 Standard (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Server 2016 Datacenter (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Storage Server 2016 (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise LTSB Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise LTSB Anniversary Update (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Server 2016 with Windows Hyper-V enabled (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell OptiPlex 3040 w/ Windows Server 2016 with Windows Hyper-V enabled (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ HP ProDesk 600 G2 w/ Windows Server 2016 Datacenter with Windows Hyper-V enabled (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows Server 2016 Datacenter with Windows Hyper-V enabled (x64)

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #2661
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1222, KAS #93

Tim Myers
FIPS@microsoft.com
800-Microsoft

10.0.14393

The Microsoft Windows Kernel Mode Cryptographic Primitives Library -- Cryptography Next Generation (CNG) -- is a general purpose, software-based, cryptographic module which provides FIPS 140-2 Level 1 cryptography.

• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface Pro 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface Pro 3 w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i5 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface Pro 4 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i5 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface Pro 4 w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface Book w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface Book w/ Windows 10 Pro Anniversary Update (x64)
• • Intel Atom x7 with AES-NI and PCLMULQDQ and SSSE 3 w/Microsoft Surface 3 w/ Windows 10 Anniversary Update (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Pro Anniversary Update (x64)
• • AMD A4 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise Anniversary Update (x64)
• • AMD A4 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Server 2016 Standard (x64)
• • Intel Core i3 without AES-NI or PCLMULQDQ or SSSE 3 w/ Windows 10 Enterprise Anniversary Update (x86)
• • Intel Core i3 without AES-NI or PCLMULQDQ or SSSE 3 w/ Windows 10 Pro Anniversary Update (x86)
• • Intel Core i3 without AES-NI or PCLMULQDQ or SSSE 3 w/ Windows 10 Anniversary Update (x86)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Anniversary Update (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Server 2016 Standard (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Server 2016 Datacenter (x64)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows Storage Server 2016 (x64)
• • Qualcomm Snapdragon 808 (A57, A53) w/Microsoft Lumia 950 w/ Windows 10 Mobile Anniversary Update (ARMv7)
• • Intel Xeon with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise LTSB Anniversary Update (x64)
• • Intel Core i3 without AES-NI or PCLMULQDQ or SSSE 3 w/ Windows 10 Enterprise LTSB Anniversary Update (x86)
• • Intel Core i7 with AES-NI and PCLMULQDQ and SSSE 3 w/ Windows 10 Enterprise LTSB Anniversary Update (x64)
• • Qualcomm Snapdragon 820 (Kryo) w/ Windows 10 Mobile Anniversary Update (ARMv7)
• • Qualcomm Snapdragon 212 (A7) w/ Microsoft Lumia 650 w/ Windows 10 Mobile Anniversary Update (ARMv7)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ HP ProDesk 600 G2 w/ Windows Server 2016 Datacenter with Windows Hyper-V enabled (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows Server 2016 Datacenter with Windows Hyper-V enabled (x64)
• • Intel Core i7 with AES-NI and without SHA Extensions w/ Microsoft Surface Book w/ Windows Server 2016 with Windows Hyper-V enabled (x64)
• • Intel Core i5 with AES-NI and without SHA Extensions w/ Dell OptiPlex 3040 w/ Windows Server 2016 with Windows Hyper-V enabled (x64)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4064, HMAC #2651
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-90A
  • K prerequisite: DRBG #1217, KAS #92

Butz Huang
bhuang@enovatech.net
886-3-5772767#24
Fax: 886-3-5772770

Chung-Yen Chiu
cychiu@enovatech.net
886-3-5772767
Fax: 886-3-5772770

xF and xN

The X-Wall MX+ is a SATA-to-SATA realtime single chip cryptographic module capable of encrypting entire disk (or SSD) with SATA Gen3 (6Gbps)/Gen2 (3 Gbps)/Gen1 (1.5Gbps) performance. It includes RSA2048 Key Generation/Signature/Verification, HASH-DRBG RNG, HMAC, CMAC, SHA256 and AES CBC/XTS/ECB symmetric ciphers.

• • N/A

• Feedback:
  • MACs: CMAC-AES-256, HMAC-SHA-256
  • MAC prerequisite: AES #4026, HMAC #2627
  • Counter Location: After Iteration Data
  • R Length: 8 bits
  • K prerequisite: DRBG #1201

Satya Das
510 623-1000

1.0

Attivo Networks is an award winning provider of inside-the-network threat detection, attack analysis and forensics.

• • Intel(R) Xeon(R) CPU E5-2620 v2 @2.10GHz w/ Open JDK 1.8 on CentOS 6.5 Intel 64-bit on ESXi 5.5.0

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4049, HMAC #2644
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1213
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4049, HMAC #2644
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1213
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #4049, HMAC #2644
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1213
  • Supports Zero Length IVs

Global Certification Team
certteam@cisco.com

Rel 1 (1.0.0) (Firmware)

IOS Common Cryptographic Module within cat4k

• • Freescale MPC8572E

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #1622
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #403

Dr. Gesa Ott
hsm@utimaco.com
49 241-1696-200
Fax: 49 241-1696-199

Dieter Bong
hsm@utimaco.com
49 241-1696-200
Fax: 49 241-1696-199

Texas Instruments TMS320C6416T hash1.0.10.1 (Firmware)

SM-KDF implements key expansion according to SP800-108 as part of the Secure Messaging protocol in order to allow confidential and authenticated communication.

• • Texas Instruments DSP TMS320C6416T

• Feedback:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2628
  • Supports Zero Length IVs

Cisco Certification Team
certteam@cisco.com

2.0 (Firmware)

IOS Common Crypto Module

• • Freescale P5040

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #2620
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1196

Global Certification Team
certteam@cisco.com

2.0 (Firmware)

IOS Common Crypto Module

• • APM86392

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #2600
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1177

Global Certification Team
certteam@cisco.com

RelV 1.0

IOS Common Crypto Module for Virtual use

• • Intel Atom w/ IOS XE 3.16 on ESXi 5
• • Intel Xeon w/ IOS XE 3.16 on ESXi 5

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #2604
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Olivier COLLART
olivier.collart@st.com
+32 272 450 77
Fax: +32 272 451 43

Xavier BOUSSIN
xavier.boussin@st.com
+33 223 470 695
Fax: +33 223 470 400

47.08 (Firmware)

ST Microelectronics Trusted Platform Module is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key generation and random number generation as defined by the Trusted Computing Group (TCG) version 1.2 specification.

• • SecureCore SC300

• Counter:
  • MACs: CMAC-AES-256, HMAC-SHA-1
  • MAC prerequisite: HMAC #2614
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: N/A

Steve Weingart
steve.weingart@hpe.com
512-318-2480

ArubaOS 6.5.1 (Firmware)

The Aruba MOVE Architecture forms the core network infrastructure for supporting mobile and wireless computing devices. The system enables enterprise-scale 802.11 wireless LANs (Wi-Fi), secure remote VPNs, and mobility-optimized wired networks.

• • Freescale IPQ8068

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #2610
  • Counter Location: After Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Sylvain Bonfardin
sylvain.Bonfardin@nxp.com
408-564-2354

Ron Burnett
ron.burnett@nxp.com
+44(0)1316037380

P60D145 0503.0101.0108 (Firmware)

SP 800-108 based AES Key derivation mechanism for Secure Messaging (Enc/Dec/MAC) standardized as Global Platform SCP03.

• • P6022y VB (NXP P60-2)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #3997
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

William W. Burnham
william.burnham@socom.mil
(813) 826-2282

2.0

KEYW, in coordination with the United States Special Operations Command (USSOCOM), has developed a Federal Information Processing Standard 140-2 certified, standards-based Suite B Cryptographic Algorithms library that provides an advanced layer of encrypted data-in-transit communications and data-at-rest encryption for the BlackBerry ecosystem.

• • Qualcomm Snapdragon 801 w/ BlackBerry OS 10.3

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #3992, HMAC #2119
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #3992, HMAC #2119
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: N/A
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #3992, HMAC #2119
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

PENG Jie
pengjie@ftsafe.com
+8610 62304466-419
Fax: +8610 62304477

WenSheng Ju
wensheng@ftsafe.com
+8610 62304466-527
Fax: +8610 62304477

1.0.1 (Firmware)

The implementation of hash algorithm consists of 3 parts: 1) Initialization, 2) Grouping operation. Recovering the data is needed when the datea is not grouped in integer times, and 3) Holding the results of all the data. The implementation of CMAC refers to SP800-38B. SP800-108 KDF uses pseudorandom function in counter mode.

• • M7893 (Infineon Technologies AG& SLx78)

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #3920
  • Counter Location: After Fixed Data, Before Fixed Data
  • R Length: 8, 16, 24, 32 bits

Luther Martin
support@voltage.com
(408)886-3200
Fax: (408)886-3201

5.0

The Voltage Cryptographic Module provides the Validated algorithms used by the HP SecureMail, HP SecureFile and HP SecureData families of products.

• • CPUCPU Intel Xeon E5-2600 v2 w/o AES-NI, model NS7 X1 w/ HP NonStop TNS/X L15.08.00 - OSS

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2529
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1115

Luther Martin
support@voltage.com
(408)886-3200
Fax: (408)886-3201

5.0

The Voltage Cryptographic Module provides the Validated algorithms used by the HP SecureMail, HP SecureFile and HP SecureData families of products.

• • CPU Intel Xeon E5-2600 v2 w/o AES-NI, model NS7 X1 w/ HP NonStop TNS/X L15.08.00 - Guardian

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2528
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1114

Global Certification Team
certteam@cisco.com

2.1 (Firmware)

IOS Common Crypto Module

• • Intel Atom
• • Freescale P102X

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #2377
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #953

Frederic GARNIER
Frederic.Garnier@gemalto.com
+33 442364368
Fax: +33 442366953

Carlos Romero-liceras
Carlos.Romero-liceras@ gemalto.com
+33 442365666
Fax: +33 442365545

NXP P60 FM Version 2.1 (Firmware)

TOP DL V2.1 is a highly secured smartcard platform compliant with the Javacard 2.2.2, GP 2.1.1 & GP 2.2 Amdt D standards, designed to operate with the NXP P60xx chip. It supports: TDES, AES, AES-CMAC, SHA1-224-256-384-512, RSA, RSA CRT, ECDSA, ECC CDH, KDF SP800-108 & DRBG SP800-90A algorithms.

• • NXP SmartMX2 P60 chip family

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #3543
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Steve Weingart
Steve.Weingart@hpe.com
512-319-2480

AOS_VMC_6.4.2.0-3.0-FIPS (Firmware)

Linux on Intel

• • Intel x86, i7

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #2494
  • Counter Location: After Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Luther Martin
support@voltage.com
(408)886-3200
Fax: (408)886-3201

5.0

The Voltage Cryptographic Module provides the Validated algorithms used by the HP SecureMail, HP SecureFile and HP SecureData families of products.

• • CPU Intel Itanium 9300, model NB54000c w/ HP NonStop TNS/E J06.19.00 - Guardian
• • CPU Intel Xeon E5-2600 v2 with AES-NI, model NS7 X1 w/ HP NonStop TNS/X L15.08.00 – Guardian

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2493
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1088

Dr. Ron Burnett
ron.burnett@nxp.com
+44 131 603 6320
Fax: +44 131 777 8150

P60D144 001 (Firmware)

SP 800-108 based AES Key derivation mechanism for Secure Messaging (Enc/Dec/MAC) standardized as Global Platform SCP'03.

• • NXP P60

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #3780
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Florence DEFRANCE
Florence.defrance@gemalto.com
+33 442366734
Fax: +33 442365792

Arnaud LOTIGIER
Arnaud.lotigier@gemalto.com
+33 442366074
Fax: +33 442365545

IFX SLE78CFX3000PH 1.2 (Firmware)

IDCore 30 rev B is a highly secured smartcard platform compliant with Javacard 2.2.2, Global Platform 2.1.1 & 2.2 Amendment D standards, designed to operate with Infineon SLE78 chip family. The library implements TDEA, AES, AES-CMAC, SHA1-224-256-384-512, RSA, RSA CRT, ECDSA, ECC CDH, SP800-108 KDF and SP800-90A DRBG.

• • Infineon SLE78 chip family

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256
  • MAC prerequisite: AES #3779
  • Counter Location: In the Middle of Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Steve Weingart
steve.weingart@hpe.com
512-319-2480

AOS_VMC_6.4.2.0-3.0-FIPS (Firmware)

Linux on Intel

• • Intel x86, i7

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384
  • MAC prerequisite: HMAC #2474
  • Counter Location: After Fixed Data
  • R Length: 16 bits
  • SPs used to generate K: N/A

Global Certification Team
certteam@cisco.com

10 (Firmware)

Encryption card algorithm implementation used within the Cisco Optical Networking Solution (ONS) and Network Convergence System (NCS) 2000 Series products.

• • Freescale PowerPC e500 Core

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: HMAC #2471
  • Counter Location: After Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1041

David Hook
dgh@bouncycastle.org
+61438170390

Jon Eaves
jon@bouncycastle.org
+61417502969

1.0.0

The Bouncy Castle FIPS Java API is a comprehensive suite of FIPS Approved algorithms implemented in pure Java. All key sizes and modes have been implemented to allow flexibility and efficiency, and additional algorithms are available in non-approved operation as well.

• • Intel Xeon E5 v3 w/ Java SE Runtime Env 7 on Solaris 11 on vSphere 6
• • Intel Xeon E5 v3 w/ Java SE Runtime Env 8 on Centos 6.4 on vSphere 6
• • Intel Xeon E5-2697 V3 w/ Ubuntu 14.04 LTS on VMWare ESXi 6.0

• Counter:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #3756, TDES #2090, HMAC #2458
  • Counter Location: After Fixed Data, Before Fixed Data, In the Middle of Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1031, KAS #73
• Double Pipeline Iteration:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #3756, TDES #2090, HMAC #2458
  • R Length: 8, 16, 24, 32 bits
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1031, KAS #73
• Feedback:
  • MACs: CMAC-AES-128, CMAC-AES-192, CMAC-AES-256, CMAC-TDES3, HMAC-SHA-1, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512
  • MAC prerequisite: AES #3756, TDES #2090, HMAC #2458
  • Counter Location: After Fixed Data, After Iteration Data, Before Iteration Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: SP 800-56A, SP 800-56B, SP 800-90A
  • K prerequisite: DRBG #1031, KAS #73
  • Supports Zero Length IVs

Hemant Chaskar
hemant.chaskar@airtightnetworks.com
(650) 961-1111
Fax: (650) 961-1169

7.2.FIPS.04 (Firmware)

Implementation performs wireless intrusion detection and prevention. It monitors radio channels to ensure conformance of wireless activity to security policy. It mitigates various types of wireless security violations such as rogue wireless networks, unauthorized wireless connections, network mis-configurations and DoS attacks.

• • Qualcomm AR9558

• Counter:
  • MACs: HMAC-SHA-1
  • MAC prerequisite: HMAC #2465
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: N/A

Luther Martin
support@voltage.com
(408)886-3200
Fax: (408)886-3201

5.0

The Voltage Cryptographic Module provides the Validated algorithms used by the HP SecureMail, HP SecureFile and HP SecureData families of products.

• • CPU Intel Itanium 9300, model NB54000c w/ HP NonStop TNS/E J06.19.00 - OSS
• • CPU Intel Xeon E5-2600 v2 with AES-NI, model NS7 X1 w/ HP NonStop TNS/X L15.08.00 – OSS

• Counter:
  • MACs: HMAC-SHA-256
  • MAC prerequisite: HMAC #2461
  • Counter Location: Before Fixed Data
  • R Length: 32 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #1033

sales@thalesesec.com
sales@thalesesec.com
888-744-4976

ICG00146-00-01

The nShield algorithm X library provides cryptographic functionality for Thales nShield Hardware Security Modules.

• • N/A

• Counter:
  • MACs: CMAC-AES-256
  • MAC prerequisite: AES #3664
  • Counter Location: Before Fixed Data
  • R Length: 8 bits
  • SPs used to generate K: SP 800-90A
  • K prerequisite: DRBG #985

Joseph Gan
joseph.gan@v-key.com
+65 6471 2524
Fax: +65 6471 2526

3.6.0

A software cryptographic module residing within a trusted virtual machine, V-OS that provides a secure sandboxed operating environment. The Module provides symmetric ciphers including AES and Triple DES, asymmetric cipher RSA, secure hash functions SHA-1 and SHA-256, random number generation, message authentication and key derivation and storage.

• • ARMv7A w/ VOS 3.6.0 on Android 4.4.2 w/ Android
• • ARMv8 w/ VOS 3.6.0 on iOS 7.0.4 w/ iOS

• Counter:
  • MACs: HMAC-SHA-1, HMAC-SHA-256
  • MAC prerequisite: HMAC #2425
  • Counter Location: Before Fixed Data
  • R Length: 8, 16, 24, 32 bits
  • SPs used to generate K: N/A

sales@thalesesec.com
sales@thalesesec.com
888-744-4976

1.0 (Firmware)

The nShield algorithm X library provides cryptographic functionality for Thales nShield Hardware Security Modules.