Cryptographic Module Validation Program CMVP

Module Name

Security Builder FIPS Java Module

Standard

FIPS 140-2

Status

Historical

 Historical Reason

186-2 transition

Overall Level

1

Caveat

When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Security Level Exceptions

• Physical Security: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The Security Builder FIPS Java Module is a standards-based cryptographic toolkit written in Java. It supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into Java-based applications. The Security Builder FIPS Java Module is intended for use by developers who want government level security and can also be used in conjunction with other Certicom developer toolkits including Security Builder PKI and Security Builder SSL.

Tested Configuration(s)

• CentOS 7.0 with Java JRE 1.8.0 running on a Dell PowerEdge 2950 (single-user mode) [3]
• Red Hat Linux AS 5.5 32-bit [1, 2]
• Red Hat Linux AS 5.5 64-bit [1, 2]
• Solaris 10 64-bit [1, 2]
• Sun Java Runtime Environments (JRE) 1.5.0 and 1.6.0 running on Solaris 10 32-bit [1, 2]
• Windows 2008 Server 64-bit [1, 2]
• Windows Vista 32-bit [1, 2]
• Windows Vista 64-bit [1, 2]

Approved Algorithms

AES	Certs. #1411 and #3465
DRBG	Certs. #52 and #852
DSA	Certs. #455 and #978
ECDSA	Certs. #179 and #702
HMAC	Certs. #832 and #2210
KAS	Certs. #8, #61 and #62
RSA	Certs. #687 and #1776
SHS	Certs. #1281 and #2860
Triple-DES	Certs. #964 and #1954

Other Algorithms

RNG; ARC2; ARC4; MD2; MD4; MD5; HMAC-MD5; DES; DESX; ECIES; ECQV; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); ECMQV (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); NDRNG

Software Versions

2.8 [1], 2.8.7 [2], 2.8.8 [3]