Projects
Cryptographic Algorithm Validation Program
Cryptographic Algorithm Validation Program CAVP
Description
A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.
Version
7f02881e96e51f1873afcf384d02f782b48967ca
Vendor
Google LLC
1600 Amphitheatre Parkway Mountain View, CA 94043 USA
Contacts
Adam Langley
security@chromium.org
Validations
Number
Date
Operating Environments
Algorithm Capabilities
C1314
10/28/2019
- Android 10 (32-bit) on Qualcomm Snapdragon 670 with PAA
- Android 10 (32-bit) on Qualcomm Snapdragon 670 without PAA
- Android 10 (32-bit) on Qualcomm Snapdragon 845 with PAA
- Android 10 (32-bit) on Qualcomm Snapdragon 845 without PAA
- Android 10 (32-bit) on Qualcomm Snapdragon 855 with PAA
- Android 10 (32-bit) on Qualcomm Snapdragon 855 without PAA
- Android 10 (64-bit) on Qualcomm Snapdragon 670 with PAA
- Android 10 (64-bit) on Qualcomm Snapdragon 670 without PAA
- Android 10 (64-bit) on Qualcomm Snapdragon 845 with PAA
- Android 10 (64-bit) on Qualcomm Snapdragon 845 without PAA
- Android 10 (64-bit) on Qualcomm Snapdragon 855 with PAA
- Android 10 (64-bit) on Qualcomm Snapdragon 855 without PAA
-
AES-CBC
- Direction: Decrypt, Encrypt
- Key Length: 128, 192, 256
-
AES-CTR
- Direction: Encrypt
- Key Length: 128, 192, 256
-
AES-ECB
- Direction: Decrypt, Encrypt
- Key Length: 128, 192, 256
-
AES-GCM
- Direction: Decrypt, Encrypt
- IV Generation: External
- Key Length: 128, 192, 256
- Tag Length: 32, 64, 96, 104, 112, 120, 128
- IV Length: 96
- Payload Length: 104, 256, 320
- AAD Length: 0, 64, 256, 320
-
AES-GMAC
- Direction: Decrypt, Encrypt
- IV Generation: External
- Key Length: 128, 192, 256
- Tag Length: 32, 64, 96, 104, 112, 120, 128
- IV Length: 96
- AAD Length: 0, 64, 256, 320
-
AES-KW
- Direction: Decrypt, Encrypt
- Cipher: Cipher
- Key Length: 128, 192, 256
- Payload Length: 128, 192, 512, 1344, 4096
Prerequisites:
-
AES-KWP
- Direction: Decrypt, Encrypt
- Cipher: Cipher
- Key Length: 128, 192, 256
- Payload Length: 128, 200, 456, 4096
Prerequisites:
-
Counter DRBG
- Prediction Resistance: No
- Capabilities:
- Mode: AES-256
- Derivation Function Enabled: No
- Additional Input: 0-384
- Entropy Input: 384
- Nonce: 0
- Personalization String Length: 0-384
- Returned Bits: 512
Prerequisites:
-
ECDSA KeyGen (186-4)
- Curve: P-224, P-256, P-384, P-521
- Secret Generation Mode: Testing Candidates
Prerequisites:
-
ECDSA KeyVer (186-4)
- Curve: P-224, P-256, P-384, P-521
-
ECDSA SigGen (186-4)
- Capabilities:
- Curve: P-224
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-256
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-384
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-521
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
Prerequisites:
-
ECDSA SigGen (186-4)
- Component
- Capabilities:
- Curve: P-224
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-256
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-384
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-521
- Hash Algorithm: SHA2-224, SHA2-256, SHA2-384, SHA2-512
Prerequisites:
-
ECDSA SigVer (186-4)
- Capabilities:
- Curve: P-224
- Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-256
- Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-384
- Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
- Capabilities:
- Curve: P-521
- Hash Algorithm: SHA-1, SHA2-224, SHA2-256, SHA2-384, SHA2-512
Prerequisites:
-
HMAC-SHA-1
- MAC: 80, 96, 128, 160
- Key sizes < block size
- Key size = block size
- Key sizes > block size
Prerequisites:
-
HMAC-SHA2-224
- MAC: 112, 128, 160, 192, 224
- Key sizes < block size
- Key size = block size
- Key sizes > block size
Prerequisites:
-
HMAC-SHA2-256
- MAC: 128, 192, 256
- Key sizes < block size
- Key size = block size
- Key sizes > block size
Prerequisites:
-
HMAC-SHA2-384
- MAC: 192, 256, 320, 384
- Key sizes < block size
- Key sizes > block size
- Key size = block size
Prerequisites:
-
HMAC-SHA2-512
- MAC: 256, 320, 384, 448, 512
- Key sizes < block size
- Key size = block size
- Key sizes > block size
Prerequisites:
-
KAS-ECC Component
- Function: Key Pair Generation
- Scheme:
- Ephemeral Unified:
- KAS Role: Initiator, Responder
- Shared Secret Computation:
- Parameter Set:
- EB:
- Hash Algorithm: SHA2-224
- Curve: P-224
- EC:
- Hash Algorithm: SHA2-256
- Curve: P-256
- ED:
- Hash Algorithm: SHA2-384
- Curve: P-384
- EE:
- Hash Algorithm: SHA2-512
- Curve: P-521
Prerequisites:
-
KDF TLS
- TLS Version: v1.0/1.1, v1.2
- Hash Algorithm: SHA2-256, SHA2-384, SHA2-512
Prerequisites:
-
RSA KeyGen (186-4)
- Capabilities:
- Key Generation Mode: B.3.3
- Properties:
- Modulo: 2048
- Primality Tests: C.2
- Properties:
- Modulo: 3072
- Primality Tests: C.2
- Public Exponent Mode: Fixed
- Fixed Public Exponent: 10001
- Private Key Format: Standard
Prerequisites:
-
RSA SigGen (186-4)
- Capabilities:
- Signature Type: PKCS 1.5
- Properties:
- Modulo: 2048
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Properties:
- Modulo: 3072
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Capabilities:
- Signature Type: PKCSPSS
- Properties:
- Modulo: 2048
- Hash Pair:
- Hash Algorithm: SHA2-224
- Salt Length: 224
- Hash Pair:
- Hash Algorithm: SHA2-256
- Salt Length: 256
- Hash Pair:
- Hash Algorithm: SHA2-384
- Salt Length: 384
- Hash Pair:
- Hash Algorithm: SHA2-512
- Salt Length: 512
- Properties:
- Modulo: 3072
- Hash Pair:
- Hash Algorithm: SHA2-224
- Salt Length: 224
- Hash Pair:
- Hash Algorithm: SHA2-256
- Salt Length: 256
- Hash Pair:
- Hash Algorithm: SHA2-384
- Salt Length: 384
- Hash Pair:
- Hash Algorithm: SHA2-512
- Salt Length: 512
Prerequisites:
-
RSA SigVer (186-4)
- Capabilities:
- Signature Type: PKCS 1.5
- Properties:
- Modulo: 1024
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Properties:
- Modulo: 2048
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Properties:
- Modulo: 3072
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Hash Pair:
- Capabilities:
- Signature Type: PKCSPSS
- Properties:
- Modulo: 2048
- Hash Pair:
- Hash Algorithm: SHA2-224
- Salt Length: 224
- Hash Pair:
- Hash Algorithm: SHA2-256
- Salt Length: 256
- Hash Pair:
- Hash Algorithm: SHA2-384
- Salt Length: 384
- Hash Pair:
- Hash Algorithm: SHA2-512
- Salt Length: 512
- Properties:
- Modulo: 3072
- Hash Pair:
- Hash Algorithm: SHA2-224
- Salt Length: 224
- Hash Pair:
- Hash Algorithm: SHA2-256
- Salt Length: 256
- Hash Pair:
- Hash Algorithm: SHA2-384
- Salt Length: 384
- Hash Pair:
- Hash Algorithm: SHA2-512
- Salt Length: 512
- Public Exponent Mode: Fixed
- Fixed Public Exponent: 10001
Prerequisites:
-
SHA-1
- Message Length: 0-51200 Increment 8
-
SHA-224
- Message Length: 0-51200 Increment 8
-
SHA-256
- Message Length: 0-51200 Increment 8
-
SHA-384
- Message Length: 0-102400 Increment 8
-
SHA-512
- Message Length: 0-102400 Increment 8
-
TDES-CBC
- Direction: Decrypt, Encrypt
- Keying Option: 1
-
TDES-ECB
- Direction: Decrypt, Encrypt
- Keying Option: 1
Created October 05, 2016, Updated June 22, 2020