Module Name
DocuSign Signature Appliance
Validation Dates
03/18/2021
Caveat
When operated in FIPS mode. This module contains the embedded module eToken 5105 validated to FIPS 140-2 under Cert. #1883 operating in FIPS mode. No assurance of the minimum strength of generated keys
Security Level Exceptions
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
The DocuSign Signature Appliance is a digital signature appliance that is connected to the organizational network and manages all signature keys and certificates of organization's end-users. End-users will connect securely to the appliance from their PC for the purpose of signing documents and data. The DocuSign Signature Appliance also enables organization using AES based encryption keys for encrypting/decrypting data.
FIPS Algorithms
AES |
Certs. #C1251 and #C1252 |
CKG |
vendor affirmed |
CVL |
Cert. #C1252 |
DRBG |
Certs. #98 and #C1251 |
HMAC |
Certs. #C1251 and #C1252 |
KTS |
AES Cert. #C1251 and AES Cert. #C1251; key establishment methodology provides 128 bits of encryption strength |
KTS |
AES Cert. #C1252 and HMAC Cert. #C1252; key establishment methodology provides 128 or 256 bits of encryption strength |
PBKDF |
vendor affirmed |
RSA |
Cert. #C1251 |
SHS |
Certs. #1465, #C1251 and #C1252 |
Triple-DES |
Cert. #C1251 |
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength); Triple-DES (Cert. #C1251, key unwrapping; key establishment methodology provides 112 bits of encryption strength)
Firmware Versions
9.3.9.20