Key Agreement Scheme Validation List

Last Update: 2/8/2012

KAS Validation List

Overview

This page provides technical information about implementations that have been validated as conforming to the Key Agreement Schemes and/or Key Confirmation using Finite Field Cryptography (FFC) or Elliptic Curve Cryptography (ECC) as specified in SP 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography, using tests described in The KAS Validation System (KASVS) User's Guide. The testing is handled by NVLAP-accredited Cryptographic And Security Testing (CST) Laboratories.

The implementations below consist of software, firmware, hardware, and any combination thereof. The National Institute of Standards and Technology (NIST) has made every attempt to provide complete and accurate information about the implementations described in this document. However, due to the possibility of changes made within individual companies, NIST cannot guarantee that this document reflects the current status of each product. It is the responsibility of the vendor to notify NIST of any necessary changes to its entry in the following list.

In addition to a general description of each implementation, this list mentions the features that were tested as conforming to the KAS; these features are listed below for each validation. The following notation is used to describe the implemented features that were successfully tested.

Legend for Description Field


ASSURANCES [[5.5.2][ #1 #2 #3]] [[5.6.2.1][ #1 #2 #3 #4]] [[5.6.2.2][ #1 #2 #3]] [[5.6.2.3][ #1 #2 #3 #4]] [[5.6.3.1][#1 #2 #3 #4 #5]] [[5.6.3.2.1] [5.6.3.2.2]]	These assurances determine the scope of validation testing performed for an IUT. Please refer to the listed sections in SP800-56A for detailed descriptions of these assurances. If an assurance is not applicable for an IUT, it will not be listed. For example, if an implements Ephemeral scheme, all of the assurances pertaining to static keys will be not applicable.
ALG([FFC] [ECC])	Finite Field Cryptography, Elliptic Curve Cryptography
For FFC, SCHEMES([HYBRID1] [MQV2] [EPHEM] [HYBRID1FLOW] [MQV1] [ONEFLOW] [STATIC]) For ECC, SCHEMES ([FULLUNIF] [FULLMQV] [EPHEMUNIF] [ONEPASSUNIF] [ONEPASSMQV] [ONEPASSDH] [STATICUNIF])	Key Agreement Schemes. Refer to SP800-56A for details on the specific schemes.
KAROLES([INITIATOR] [RESPONDER]	Key Agreement Roles
KCROLES([NA] [PROVIDER] [RECIPIENT])	Key Confirmation Roles. If Key Confirmation is not tested, indicate N/A.
KCTYPES([NA] [UNILATERAL] [BILATERAL])	Key Confirmation Types. If Key Confirmation is not tested, indicate N/A.
For FFC, PARAMSET([FA] [FB] [FC]) For ECC, PARAMSET([EA] [EB] [EC] [ED] [EE])	Parameter Sets supported by IUT. Refer to Section 5.5.1.1 Table 1 for the FFC Parameter Size Sets and Section 5.5.1.2 Table 2 for the ECC Parameter Size Sets.
For ECC, CURVE(....)	The NIST-recommended ECDSA curves supported by the IUT.
SHA(SHA1 SHA224 SHA256 SHA384 SHA512)	Hash functions supported by the IUT
If KC, MAC(CMAC, CCM, HMAC)	Only if Key Confirmation is supported, indicate the MACing algorithms tested.
KDF ([ASN.1] [CONCAT])	KDFs tested in the IUT

The KAS validation process requires the following prerequisite testing:

1. The underlying DSA and/or ECDSA algorithm’s functions determined by the assurances implemented. See KASVS Table 1 for the required functions, if any,
2. The supported SHA algorithm(s),
3. The supported MAC algorithms (CCM, CMAC, and/or HMAC) only if key confirmation is implemented, and
4. The supported random number generations including the approved RNG algorithms and the DRBG algorithm(s).

This list is ordered in reverse numerical order, by validation number. Thus, the more recent validations are located closer to the top of the list. The column after the Validation Date column contains information indicating what modes and features for these modes has been successfully tested.

Key Agreement Scheme Validated Implementations


Validation No.	Vendor	Implementation	Operational Environment	Val. Date	Description/Notes
30	Covia Labs 465 Fairchild Dr. Suite 130 Mountain View, CA 94043 USA -Michael Wenocur TEL: 650-351-6444 FAX: 650-564-9740	CCCM Library Version 1.0	Intel Pentium 4 w/ Ubuntu Linux version 11	1/26/2012	ECC: (FUNCTIONS INCLUDED IN IMPLEMENTATION: KPG Partial Validation ) SCHEMES [ FullUnified ( No_KC < KCRole(s): Recipient > < KARole(s): Initiator / Responder > ) ( EB: P-224 SHA224 SHA256 HMAC ) ( EC: P-256 SHA256 SHA384 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] SHS Val#1665 ECDSA Val#265 DRBG Val#158 "The cccmLib is a dynamically linked library whose sole use is to serve as a cryptographic engine to the Covia Labs Connector application. In particular the cccmLib will provide the underlying functionality needed to implement secured communications and an encrypted file system."
29	SafeNet, Inc. 20 Colonnade Road Suite 200 Ottawa, ON K2E 7M6 Canada -Chris Brych TEL: 613 221 5081 FAX: 613 723 5079 -Laurie Smith TEL: 613 221 5026 FAX: 613 723 5079	Luna K5 Cryptographic Library Version 4.8.7 (Firmware)	StrongARM II 80219	12/16/2011	ECC: (FUNCTIONS INCLUDED IN IMPLEMENTATION: ) SCHEMES [ EphemeralUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: K-233 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: B-283 SHA256 SHA384 SHA512 HMAC ) ( ED: K-409 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EB: K-233 SHA224 SHA256 SHA384 SHA512 ) ( EC: B-283 SHA256 SHA384 SHA512 ) ( ED: K-409 SHA384 SHA512 ) ( EE: P-521 ) ) ] SHS Val#1671 ECDSA Val#269 RNG Val#998 "The Luna K5 Cryptographic Library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module''s firmware and associated co-processor."
28	Motorola Solutions, Inc. 1301 East Algonquin Road Schaumburg, IL 60196 USA -Kirk Mathews TEL: 847-576-4101	Motorola Solutions µMace KAS Version R00.00.01_KAS (Firmware) Part # AT58Z04	Motorola µMace AT58Z04	11/17/2011	ECC: (FUNCTIONS INCLUDED IN IMPLEMENTATION: Partial Validation ) SCHEMES [ FullMQV ( No_KC < KARole(s): Initiator / Responder > ) ( ED: P-384 SHA384 ) ] [ EphemeralUnified ( ED: P-384 SHA384 ) ) ] ECDSA Val#263 DRBG Val#154 "The µMace cryptographic processor is used in security modules embedded in Motorola Solutions security products."
27	NEC Corporation 1753 Shimonumabe Nakahara-ku Kawasaki-si, Kanagawa 211-8666 Japan -NEC Corporation TEL: +81-44-455-8326	iPASOLINK Diffie-Hellman AES Version 01.00 (Firmware)	MPC8314CVRAFDA;	10/13/2011	FFC: (FUNCTIONS INCLUDED IN IMPLEMENTATION: DPG KPG ) SCHEMES [ dhEphem ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ] SHS Val#1610 DSA Val#574 RNG Val#873 "Key generation for iPASOLINK MODEM Card"
26	N/A	N/A	N/A	9/30/2011	N/A
25	Certicom Corp. 4701 Tahoe Blvd Building A Missisauga, ON L4W 0B5 Canada -Certicom Sales TEL: 905-507-4220 FAX: 905.507.4230 -Kris Orr TEL: 289.261.4104 FAX: 905.507.4230	Security Builder FIPS Core Version 6.0	64-bit Intel Core i5-2300 w/ RedHat Linux 5.6; 32-bit Intel Core i7 w/ RedHat Linux 5.6; 32-bit Intel Pentium III w/ QNX 6.5; ARM Cortex A9 MPCore w/ QNX 6.6; Intel Core 2 Duo w/ Mac OS X 10.5; 32-bit Intel Core i5-2300 w/ Windows 7	9/20/2011	FFC: (FUNCTIONS INCLUDED IN IMPLEMENTATION: DPG KPG Key Regeneration ) SCHEMES [ Hybrid1 ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ) FC: SHA256 HMAC ) ] [ dhEphem ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ( FB: SHA256 ) ( FC: SHA256 ) ] [ dhHybirdOneFlow ( No_KC < KARole(s): Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ( FC: SHA256 HMAC ) ] [ dhOneFlow ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ( FB: SHA256 ) ( FC: SHA256 ) ] [ dhStatic ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ( FC: SHA256 HMAC ) ] SHS Val#1571 DSA Val#563 RNG Val#949 DRBG Val#127 ECC: (FUNCTIONS INCLUDED IN IMPLEMENTATION: DPG KPG Key Regeneration ) SCHEMES [ FullUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA256 HMAC ) ( EB: P-224 SHA256 HMAC ) ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] [ FullMQV ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] [ EphemeralUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassUnified ( No_KC < KARole(s) Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 P-224 ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] [ OnePassMQV ( No_KC < KARole(s): Initiator Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ OnePassDH ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 ) ( ED: P-384 SHA384 SHA512 ) ( EE: P-521 ) ) ] [ StaticUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] SHS Val#1571 ECDSA Val#242 RNG Val#949 DRBG Val#127 "Security Builder FIPS Core provides application developers with cryptographics tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom''s PKI, IPSec SSL and DRM modules." 10/01/11: Update implementation information; 01/19/12: Added new tested information;
24	SafeNet, Inc. 20 Colonnade Road Suite 200 Ottawa, ON K2E 7M6 Canada -Chris Brych TEL: 613-221-5081 FAX: 613-723-5079 -Laurie Smith TEL: 613-221-5026 FAX: 613-723-5079	Luna G4 Version 4.8.7 (Firmware)	StrongARM-11 80200 600 MHz	9/6/2011	ECC: SCHEMES [ EphemeralUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: K-233 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: B-283 SHA256 SHA384 SHA512 HMAC ) ( ED: K-409 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EB: K-233 SHA224 SHA256 SHA384 SHA512 ) ( EC: B-283 SHA256 SHA384 SHA512 ) ( ED: K-409 SHA384 SHA512 ) ( EE: P-521 ) ) ] SHS Val#1567 ECDSA Val#241 RNG Val#947 "The Luna PCM/PCM KE/CA4 offer dedicated hardware key management to protect sensitive cryptographic keys from attack. Digital sign/verify operations are performed in the HSM to increase performance and maintain security. Cryptographic keys are backed up by a FIPS-approved algorithm and can be stored in software or replicated on one or more tokens."
23	SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Chris Brych TEL: 613.221-5081 FAX: 613.723.5079 -Laurie Smith TEL: 613.221-5026 FAX: 613.723.5079	Luna K6 Cryptographic Library Version 6.2.1 (Firmware)	AMCC PowerPC 440EPx	8/3/2011	ECC: SCHEMES [ EphemeralUnified ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 ) ( ED: P-384 SHA384 SHA512 ) ( EE: P-521 ) ) ] SHS Val#1537 DRBG Val#114 "The K6 Cryptographic Library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module''s firmware or associated co-processor." 11/08/11: Update implementation information; 01/05/12: Correction made to the tested information;
22	SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Jack Young TEL: 408-392-0319 FAX: 408-392-9131	SPYRUS FIPS Sector-based Encryption Module Version 03.00.0C (Firmware) Part # 8800740013F	NXP LPC3131	6/16/2011	ECC: ASSURANCES < 5.5.2: #1 > < 5.6.2.1: #1 > < 5.6.2.3: #3 > < 5.6.3.1: #5 > SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( EC: P-256 SHA256 ) ( ED: P-384 SHA384 ) ( EE: P-521 ) ) ] SHS Val#1483 ECDSA Val#220 DRBG Val#104 "The Spyrus FIPS Sector-based Encryption Module is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 06/27/11: Update implementation information;
21	SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Jack Young TEL: 408-392-0319 FAX: 408-392-9131	SPYRUS FIPS Sector-based Encryption Module Version 03.00.0C (Firmware) Part # 8800740012F	NXP LPC3131	6/16/2011	ECC: ASSURANCES < 5.5.2: #1 > < 5.6.2.1: #3 > < 5.6.2.1: #1 > < 5.6.2.3: #3 > < 5.6.3.1: #5 > SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( EC: P-256 SHA256 ) ( ED: P-384 SHA384 ) ( EE: P-521 ) ) ] SHS Val#1482 ECDSA Val#219 DRBG Val#103 "The Spyrus FIPS Sector-based Encryption Module is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 06/27/11: Update implementation information;
20	SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Jack Young TEL: 408-392-0319 FAX: 408-392-9131	SPYRUS FIPS Sector-based Encryption Module Version 03.00.0C (Firmware) Part # 8800740010F	NXP LPC3131	6/16/2011	ECC: ASSURANCES < 5.5.2: #1 > < 5.6.2.1: #3 > < 5.6.2.1: #1 > < 5.6.2.3: #3 > < 5.6.3.1: #5 > SCHEMES [ OnePassDH ( EC: P-256 SHA256 ) ( ED: P-384 SHA384 ) ( EE: P-521 ) ) ] SHS Val#1481 ECDSA Val#218 DRBG Val#102 "The Spyrus FIPS Sector-based Encryption Module is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 06/27/11: Update implementation information;
19	SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Jack Young TEL: 408-392-0319 FAX: 408-392-9131	SPYRUS FIPS Sector-based Encryption Module Version 03.00.0C (Firmware) Part # 880074009F	NXP LPC3131	6/16/2011	ECC: ASSURANCES < 5.5.2: #1 > < 5.6.2.1: #3 > < 5.6.2.1: #1 > < 5.6.2.3: #3 > < 5.6.3.1: #5 > SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( EC: P-256 SHA256 ) ( ED: P-384 SHA384 ) ( EE: P-521 ) ) ] SHS Val#1474 ECDSA Val#217 DRBG Val#101 "The Spyrus FIPS Sector-based Encryption Module is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 06/27/11: Update implementation information;
18	SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Jack Young TEL: 408-392-0319 FAX: 408-392-9131	SPYRUS FIPS Sector-based Encryption Module Version 03.00.0C (Firmware) Part # 880074007F	NXP LPC3131	6/16/2011	ECC: ASSURANCES < 5.5.2: #1 > < 5.6.2.1: #3 > < 5.6.2.1: #1 > < 5.6.2.3: #3 > < 5.6.3.1: #5 > SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( EC: P-256 SHA256 ) ( ED: P-384 SHA384 ) ( EE: P-521 ) ) ] SHS Val#1471 ECDSA Val#216 DRBG Val#100 "The Spyrus FIPS Sector-based Encryption Module is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 06/27/11: Update implementation information;
17	SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Jack Young TEL: 408-392-0319 FAX: 408-392-9131	SPYRUS FIPS Sector-based Encryption Module Version 03.00.0C (Firmware) Part # 880074006F	NXP LPC3131	6/16/2011	ECC: ASSURANCES < 5.5.2: #1 > < 5.6.2.1: #3 > < 5.6.2.1: #1 > < 5.6.2.3: #3 > < 5.6.3.1: #5 > SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassDH ( EC: P-256 SHA256 ) ( ED: P-384 SHA384 ) ( EE: P-521 ) ) ] SHS Val#1468 ECDSA Val#215 DRBG Val#99 "The Spyrus FIPS Sector-based Encryption Module is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 06/27/11: Update implementation information;
16	Francotyp Postalia GmbH Triftweg 21-26 Birkenwerder, 16547 Germany -Dirk Rosenau TEL: +49/3303/525/616 FAX: +49/3303/525/07/616	FP mCryptoLibrary - KAS Version 1.1 (Firmware)	Maxim IC0400	6/16/2011	FFC: SCHEMES [ dhEphem ( KARole(s): Responder ) ( FB: SHA256 ) ] SHS Val#1346 DSA Val#522 DRBG Val#61 "The firmware implementation of the FPmCryptoLibrary, which runs on an embedded hardware module, with a Maxim IC0400 processor. The cryptographic algortihm implementation is used in context of security critical services."
15	N/A	N/A	N/A	6/7/2011	N/A
14	Certicom Corp. 5520 Explorer Drive., 4th Floor Mississauga, Ontario L4W 5L1 Canada -Atsushi Yamada TEL: 905-501-3884 FAX: 905-508-4230 -Kris Orr TEL: 605-501-3804 FAX: 908-507-4230	Security Builder® FIPS Core Version 5.6	ARMv7 w/ QNX Neutrino 6.6	4/8/2011	FFC: ASSURANCES < 5.5.2: #1 , #3 > < 5.6.2.1: #1 , #3 > < 5.6.2.2: #1 > < 5.6.2.3: #1 > < 5.6.3.1: , #4 , #5 > < 5.6.3.2: #1 , #2 > SCHEMES [ Hybrid1 ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ) FC: SHA256 HMAC ) ] [ dhEphem ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ( FB: SHA256 ) ( FC: SHA256 ) ] [ dhHybirdOneFlow ( No_KC < KARole(s): Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ( FC: SHA256 HMAC ) ] [ dhOneFlow ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ( FB: SHA256 ) ( FC: SHA256 ) ] [ dhStatic ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ( FC: SHA256 HMAC ) ] SHS Val#1422 DSA Val#500 RNG Val#863 ECC: ASSURANCES < 5.5.2: #3 > < 5.6.2.1: #1 , #3 > < 5.6.2.1: #1 > < 5.6.2.3: #1 > < 5.6.3.1: #4 #5 > < 5.6.3.2: #1 > SCHEMES [ FullUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ FullMQV ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ EphemeralUnified ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ) ] [ OnePassUnified ( No_KC < KARole(s) Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ OnePassMQV ( No_KC < KARole(s): Initiator Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ OnePassDH ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 ) ( ED: P-384 SHA384 SHA512 ) ( EE: P-521 ) ) ] [ StaticUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] SHS Val#1422 DSA Val#500 ECDSA Val#200 RNG Val#863 DRBG Val#82 "Security Builder® FIPS Core provides application developpers with cryptographics tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom''s PKI, IPSec SSL and DRM modules."
13	Research in Motion 295 Phillip Street Waterloo, Ontario N2L 3W8 Canada -Security Certifications Team TEL: 519-888-7465 X72921 FAX: 519-888-9852	BlackBerry Tablet Cryptographic Library Version 5.6	ARMv7 w/ BlackBerry Tablet OS	4/8/2011	FFC: ASSURANCES < 5.5.2: #1 , #3 > < 5.6.2.1: #1 , #3 > < 5.6.2.2: #1 > < 5.6.2.3: #1 > < 5.6.3.1: , #4 , #5 > < 5.6.3.2: #1 , #2 > SCHEMES [ Hybrid1 ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ) FC: SHA256 HMAC ) ] [ dhEphem ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ( FB: SHA256 ) ( FC: SHA256 ) ] [ dhHybirdOneFlow ( No_KC < KARole(s): Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ( FC: SHA256 HMAC ) ] [ dhOneFlow ( KARole(s): Initiator / Responder ) ( FA: SHA256 ) ( FB: SHA256 ) ( FC: SHA256 ) ] [ dhStatic ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA256 HMAC ) ( FB: SHA256 HMAC ) ( FC: SHA256 HMAC ) ] SHS Val#1421 DSA Val#499 RNG Val#862 ECC: ASSURANCES < 5.5.2: #3 > < 5.6.2.1: #1 , #3 > < 5.6.2.1: #1 > < 5.6.2.3: #1 > < 5.6.3.1: #4 #5 > < 5.6.3.2: #1 > SCHEMES [ FullUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ FullMQV ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ EphemeralUnified ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ) ] [ OnePassUnified ( No_KC < KARole(s) Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ OnePassMQV ( No_KC < KARole(s): Initiator Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ OnePassDH ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 ) ( ED: P-384 SHA384 SHA512 ) ( EE: P-521 ) ) ] [ StaticUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 HMAC ) ( EC: P-256 SHA256 SHA384 SHA512 HMAC ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] SHS Val#1421 DSA Val#499 RNG Val#862 "The BlackBerry Tablet Cryptographic Library is the software module that provides advanced cryptographic functionality to BlackBerry Tablets."
12	Memory Experts International Inc. 15 Buteau, Suite 100 Gatineau, Quebec J8Z 1V4 Canada -Larry Hamid TEL: 819-595-3069 FAX: 819-595-3353	Bluefly Processor Firmware Version 2.4 (Firmware)	Bluefly Processor	6/7/2011	FFC: SCHEMES [ dhEphem ( KARole(s): Responder ) ( FC: SHA256 ) ] SHS Val#1456 DSA Val#519 RNG Val#884 "The Bluefly processor is a cryptographic and authentication engine for Personal Portable Security Devices (PPSDs). It provides secure storage, digital identity functions, and multifactor user authentication for USB-based peripherals."
11	Memory Experts International Inc. 15 Buteau, Suite 100 Gatineau, Quebec J8Z 1V4 Canada -Larry Hamid TEL: 819-595-3069 FAX: 819-595-3353	Bluefly Processor Firmware Version 2.3 (Firmware)	Bluefly Processor	2/24/2011	FFC: ASSURANCES < 5.5.2: #3 > < 5.6.2.3: #1 > SCHEMES [ dhEphem ( KARole(s): Responder ) ( FC: SHA256 ) ] SHS Val#1394 DSA Val#485 RNG Val#848 "The Bluefly processor is a cryptographic and authentication engine for Personal Portable Security Devices (PPSDs). It provides secure storage, digital identity functions, and multifactor user authentication for USB-based peripherals."
10	Fortress Technologies, Inc. 1 Technology Park Drive Westford, MA 01886 USA -Cerification Director TEL: 978-923-6400 FAX: 978-923-6498	Fortress KAS Implementation Version 1.0 (Firmware)	AMD Alchemy MIPS Processor	12/6/2010	FFC: SCHEMES [ dhEphem ( KARole(s): Initiator / Responder ) ( FC: SHA256 ) ] SHS Val#1357 DRBG Val#66 ECC: SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ( ED: P-384 SHA384 HMAC ) ) ] SHS Val#1357 DRBG Val#66 "Fortress KAS Implementation version 1.0 from Fortress Technologies, Inc."
9	Memory Experts International Inc. 227 Montcalm Suite 101 & 202 Gatineau, Quebec J8Y 3B9 Canada -Darren Krahn TEL: 819-595-3069 FAX: 819-595-3353	Bluefly Processor Firmware Version 2.2 (Firmware)	Bluefly Processor	8/30/2010	FFC: ASSURANCES < 5.5.2: #3 > < 5.6.2.3: #1 > SCHEMES [ dhEphem ( KARole(s): Responder ) ( FC: SHA256 ) ] SHS Val#1315 RNG Val#795 "The Bluefly processor is a cryptographic and authentication engine for Personal Portable Security Devices (PPSDs). It provides secure storage, digital identity functions, and multifactor user authentication for USB-based peripherals."
8	Certicom Corp. 5520 Explorer Drive., 4th Floor Mississauga, Ontario L4W 5L1 Canada -Rob Williams TEL: 289-261-4187 FAX: 905-507-4230 -Atsushi Yamada TEL: 289-261-4184 FAX: 905-507-4230	Security Builder GSE-J Crypto Core Version 2.8	Intel Pentium D w/ Red Hat Enterprise Linux AS 5.5 with SUN JRE 1.5.0; Intel Pentium D w/ Red Hat Enterprise Linux AS 5.5 with SUN JRE 1.6.0; Intel Xeon w/ Red Hat Enterprise Linux AS 5.5 x64 with SUN JRE 1.5.0; Intel Xeon w/ Red Hat Enterprise Linux AS 5.5 x64 with SUN JRE 1.6.0; SPARC v9 w/ Sun Solaris 10 (32-bit) with SUN JRE 1.5.0; SPARC v9 w/ Sun Solaris 10 (32-bit) with SUN JRE 1.6.0; SPARC v9 w/ Sun Solaris 10 (64-bit) with SUN JRE 1.5.0; SPARC v9 w/ Sun Solaris 10 (64-bit) with SUN JRE 1.6.0; Intel Xeon w/ MS-Windows Vista SP2 (32-bit) with SUN JRE 1.5.0; Intel Xeon w/ MS-Windows Vista SP2 (32-bit) with SUN JRE 1.6.0; Intel Xeon w/ MS-Windows Vista SP2 (64-bit) with SUN JRE 1.5.0; Intel Xeon w/ MS-Windows Vista SP2 (64-bit) with SUN JRE 1.6.0; Intel Xeon w/ MS-Windows 2008 Server SP2 (64-bit) with JRE 1.5.0; Intel Xeon w/ MS-Windows 2008 Server SP2 (64-bit) with JRE 1.6.0	6/30/2010	FFC: ASSURANCES < 5.5.2: #2 > < 5.6.2.1: #1 , #3 > < 5.6.2.2: #1 > < 5.6.2.3: #1 > SCHEMES [ Hybrid1 ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA1 CCM ) ] [ dhEphem ( KARole(s): Initiator / Responder ) ( FA: SHA1 ) ] [ dhHybirdOneFlow ( No_KC < KARole(s): Responder > ) ( FA: SHA1 CCM ) ] [ dhOneFlow ( KARole(s): Initiator / Responder ) ( FA: SHA1 ) ] [ dhStatic ( No_KC < KARole(s): Initiator / Responder > ) ( FA: SHA1 CCM ) ] SHS Val#1281 DSA Val#455 RNG Val#773 DRBG Val#52 ECC: ASSURANCES < 5.5.2: #2 > < 5.6.2.1: #1 , #3 > < 5.6.2.1: #1 > < 5.6.2.3: #1 > SCHEMES [ FullUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 CCM ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 CCM ) ( EC: P-256 SHA256 SHA384 SHA512 CCM ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] [ FullMQV ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 CCM ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 CCM ) ( EC: P-256 SHA256 SHA384 SHA512 CCM ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] [ EphemeralUnified ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 CCM ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 CCM ) ( EC: P-256 SHA256 SHA384 SHA512 CCM ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ) ] [ OnePassUnified ( No_KC < KARole(s) Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 CCM ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 P-224 ) ( EC: P-256 SHA256 SHA384 SHA512 CCM ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] [ OnePassMQV ( No_KC < KARole(s): Initiator Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 CCM ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 CCM ) ( EC: P-256 SHA256 SHA384 SHA512 CCM ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 ) ] [ OnePassDH ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 ) ( EB: P-224 SHA224 SHA256 SHA384 SHA512 ) ( EC: P-256 SHA256 SHA384 SHA512 ) ( ED: P-384 SHA384 SHA512 ) ( EE: P-521 ) ) ] [ StaticUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EA: P-192 SHA1 SHA224 SHA256 SHA384 SHA512 CCM ) ( EB: P-192 SHA224 SHA256 SHA384 SHA512 CCM ) ( EC: P-256 SHA256 SHA384 SHA512 CCM ) ( ED: P-384 SHA384 SHA512 HMAC ) ( EE: P-521 HMAC ) ] SHS Val#1281 DSA Val#455 ECDSA Val#179 RNG Val#773 DRBG Val#52 "Java cryptographic toolkit." 10/12/10: Update vendor information; 08/30/11: Update implementation information;
7	Memory Experts International Inc. 227 Montcalm Suite 101 & 202 Gatineau, Quebec J8Y 3B9 Canada -Larry Hamid TEL: 819-595-3069 FAX: 819-595-3353	Bluefly Processor Firmware Version 2.1 (Firmware)	Bluefly Processor	4/26/2010	FFC: ASSURANCES < 5.5.2: #3 > < 5.6.2.3: #1 > SCHEMES [ dhEphem ( KARole(s): Responder ) ( FC: SHA256 ) ] SHS Val#1220 RNG Val#735 "The Bluefly processor is a cryptographic and authentication engine for Personal Portable Security Devices (PPSDs). It provides secure storage, digital identity functions, and multifactor user authentication for USB-based peripherals."
6	Memory Experts International Inc. 227 Montcalm Suite 101 & 202 Gatineau, Quebec J8Y 3B9 Canada -Larry Hamid TEL: 819-595-3069 FAX: 819-595-3353	Bluefly Processor Firmware Version 2.0 (Firmware)	Bluefly Processor	3/17/2010	FFC: ASSURANCES < 5.5.2: #3 > < 5.6.2.3: #1 > SCHEMES [ dhEphem ( KARole(s): Responder ) ( FC: SHA256 ) ] SHS Val#1186 RNG Val#720 "The Bluefly processor is a cryptographic and authentication engine for Personal Portable Security Devices (PPSDs). It provides secure storage, digital identity functions, and multifactor user authentication for USB-based peripherals."
5	Cavium Networks 805 E Middlefield Road Mountain View, CA 94109 USA -TA Ramanujam TEL: 650-623-7039 FAX: 650-625-9751	NITROX XL CN16XX-NFBE Version 1.0 (Firmware)	Cavium Networks OCTEON CN52XX Processor with NITROX CN16XX Security Processor	1/7/2010	ECC: ASSURANCES < 5.5.2: #3 > < 5.6.2.1: #3 > < 5.6.2.1: #1 > < 5.6.3.1: #5 > SCHEMES [ StaticUnified ( No_KC < KARole(s): Initiator / Responder > ) ( EE: P-521 ) ] SHS Val#1165 DRBG Val#32 "NITROX XL CN16XX-NFBE HSM (Hardware Security Module) Adapter family."
4	Renesas Technology America, Inc. 450 Holger Way San Jose, CA 95134 USA -Murthy Vedula TEL: 408-382-7615 FAX: 408-382-7700	Auth_ffc Version BOS_AE57C1_v_2.1_1012 (Firmware) Part # AE57C1, Version 19	Renesas AE57C1	10/9/2009	FFC: ASSURANCES < 5.5.2: #3 > < 5.6.2.1: #1 , #4 > < 5.6.2.2: #1 , #3 > < 5.6.3.1: , #4 > SCHEMES [ dhStatic ( KC < KCRole(s): Recipient > < KCType(s): Unilateral > < KARole(s): Responder > ) ( FC: SHA256 HMAC ) ] SHS Val#982 RNG Val#585 "Renesas BOS software development framework is a mask ROM used for prototyping and mass production of embedded smart chip systems based on AE4XC/AE5XC/N2xx devices. BOS provides authentication and secure program download mechanism. Users can develop embedded applications using the BOS cryptographic, communication, and OS application interfaces."
3	Pitney Bowes, Inc. 35 Waterview Drive Shelton, CT 06484-8000 USA -Robert Sisson TEL: 203-924-3061 FAX: 203-924-3518	appKAS Version 01.00.0004 (Firmware)	Sigma ASIC	8/17/2009	ECC: ASSURANCES < 5.5.2: #3 > < 5.6.2.3: #4 > SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ) ] SHS Val#650 DRBG Val#20 "The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) is designed in compliance with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."
2	Memory Experts International Inc. 227 Montcalm Suite 101 & 202 Gatineau, Quebec J8Y 3B9 Canada -Larry Hamid TEL: 819-595-3069 FAX: 819-595-3353	Bluefly Processor Firmware Version 1.3 (Firmware)	Bluefly Processor	6/26/2009	FFC: ASSURANCES < 5.5.2: #3 > < 5.6.2.3: #1 > SCHEMES [ dhEphem ( KARole(s): Responder ) ( FC: SHA256 ) ] SHS Val#1042 RNG Val#622 "The Bluefly processor is a cryptographic and authentication engine for Personal Portable Security Devices (PPSDs). It provides secure storage, digital identity functions, and multifactor user authentication for USB-based peripherals."
1	Pitney Bowes, Inc. 35 Waterview Drive Shelton, CT 06484-8000 USA -Robert Sisson TEL: 203-924-3061 FAX: 203-924-3518	Sigma ASIC - PSDApp Version 03.00.0049 (Firmware)	Sigma ASIC	5/28/2009	ECC: SCHEMES [ EphemeralUnified ( EC: P-256 SHA256 HMAC ) ) ] SHS Val#650 DRBG Val#13 "The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) is designed in compliance with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."

Need Assistance?

Computer Security Division
National Institute of Standards and Technology