Module Name
Communication Cryptographic Library (CCL)
Validation Dates
03/02/2017;06/28/2018
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys. The module generates keys whose strengths are modified by available entropy
Security Level Exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The CCL is a dynamically linked library implemented using the C programming language with an external Java interface. Application developers wishing to use the CCL can use the CCL's Application Programming Interface (API) to perform AES, ECDSA, HMAC, DRBG, SHA256 and SHA512 security related functions. It also includes non-validated legacy services to support DES encryption while operating in the Non-Approved mode of operation.
Tested Configuration(s)
- Android 6.0 running on a Nexus 5X (single-user mode)
FIPS Algorithms
AES |
Cert. #3985 |
DRBG |
Cert. #1178 |
ECDSA |
Cert. #882 |
HMAC |
Cert. #2601 |
KTS |
AES Cert. #3985; key establishment methodology provides between 128 and 256 bits of encryption strength |
SHS |
Cert. #3290 |
Software Versions
Product Number 039-5804-200 Rev 3.0