Cryptographic Module Validation Program CMVP

Module Name

VaultIP

Standard

FIPS 140-2

Status

Active

Sunset Date

6/6/2026

Overall Level

2

Caveat

When operated in FIPS mode

Security Level Exceptions

• Physical Security: Level 3
• Mitigation of Other Attacks: N/A

Module Type

Hardware

Embodiment

Single Chip

Description

VaultIP is a Silicon IP Security Module with a secure asset store protecting all valuable assets on your device. It is a stand-alone Root of Trust that offers key management and crypto functions needed for platform and application security. VaultIP offers all security services to manage your device securely through its lifecycle. These include Secure Debug, Secure Provisioning, HUK and Identity protection and secure authentication services. Secure Boot and Communication protocols such as TLS can leverage VaultIP to secure the boot process and protect private communication keys.

Tested Configuration(s)

• Xilinx Zynq XC7Z045 FPGA

FIPS Algorithms

AES	Certs. #C1224 and #C1242
CKG	vendor affirmed
CVL	Cert. #C1224
DRBG	Cert. #C1224
ECDSA	Cert. #C1224
ENT	P
HMAC	Cert. #C1224
KBKDF	Cert. #C1224
KDA	vendor affirmed
KTS	AES Cert. #C1224; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS	AES Cert. #C1224 and AES Cert. #C1224; key establishment methodology provides 256 bits of encryption strength
RSA	Cert. #C1224
SHS	Cert. #C1224

Allowed Algorithms

EC Diffie-Hellman (CVL Cert. #C1224 with SP 800-56C, vendor affirmed, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength)

Hardware Versions

3.0.3

Firmware Versions

3.0.6