Module Name
TippingPoint Crypto Core FIPS Object Module for OpenSSL
Historical Reason
Moved to historical list due to sunsetting
Caveat
When built, installed, protected and initialized as assumed by the Crypto Officer role and as specified in the provided Security Policy. Appendix A of the provided Security Policy specifies the actual distribution tar file containing the source code of this module. There shall be no additions, deletions or alterations to the tar file contents as used during module build. The distribution tar file shall be verified as specified in Appendix A of the provided Security Policy. Installation and protection shall be completed as specified in Appendix A of the provided Security Policy. Initialization shall be invoked as per Section 4 of the provided Security Policy. Any deviation from specified verification, protection, installation and initialization procedures will result in a non FIPS 140-2 compliant module.
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Embodiment
Multi-chip standalone
Description
The TippingPoint Crypto Core OpenSSL is a software library which provides FIPS 140-2 approved cryptographic algorithms and services for TippingPoint security products.
Tested Configuration(s)
- Android 2.2 (gcc Compiler Version 4.4.0) [1], Android 2.2 running on Qualcomm QSD8250 (ARMv7) with NEON (gcc Compiler Version 4.4.0) [1], Microsoft Windows 7 (32 bit) (Microsoft 32 bit C/C++ Optimizing Compiler Version 16.00) [1], uCLinux 0.9.29 (gcc Compiler Version 4.2.1) [1], Fedora 14 running on Intel Core i5 with PAA (gcc Compiler Version 4.5.1) [1], HP-UX 11i (32 bit) (HP C/aC++ B3910B) [1], HP-UX 11i (64 bit) (HP C/aC++ B3910B) [1], Ubuntu 10.04 (32 bit) (gcc Compiler Version 4.1.3) [1], Ubuntu 10.04 (64 bit) (gcc Compiler Version 4.1.3) [1], Android 3.0 (gcc Compiler Version 4.4.0) [1], Linux 2.6.27 (gcc Compiler Version 4.2.4) [1], Microsoft Windows 7 (64 bit) (Microsoft C/C++ Optimizing Compiler Version 16.00) [1], Ubuntu 10.04 running on Intel Core i5 with PAA (32 bit) (gcc Compiler Version 4.1.3) [1], Linux 2.6.33 (gcc Compiler Version 4.1.0) [1], Android 2.2 running on OMAP 3530 (ARMv7) with NEON (gcc Compiler Version 4.1.0) [1], VxWorks 6.8 (gcc Compiler Version 4.1.2) [1], Linux 2.6 (gcc Compiler Version 4.3.2) [1], Linux 2.6.32 (gcc Compiler Version 4.3.2) [1], Oracle Solaris 10 (32 bit) (gcc Compiler Version 3.4.3) [1], Oracle Solaris 10 (64 bit) (gcc Compiler Version 3.4.3) [1], Oracle Solaris 11(32 bit) (gcc Compiler Version 4.5.2) [1], Oracle Solaris 11 (64 bit) (gcc Compiler Version 4.5.2) [1], Oracle Solaris 11 running on Intel Xeon 5675 with PAA (32 bit) (gcc Compiler Version 4.5.2) [1], Oracle Solaris 11 running on Intel Xeon 5675 with PAA (64 bit) (gcc Compiler Version 4.5.2) [1], Oracle Linux 5 (64 bit) (gcc Compiler Version 4.1.2) [1], CascadeOS 6.1 (32 bit) (gcc Compiler Version 4.4.5) [1], CascadeOS 6.1 (64 bit) (gcc Compiler Version 4.4.5) [1], Oracle Linux 5 running on Intel Xeon 5675 with PAA (gcc Compiler Version 4.1.2) [1], Oracle Linux 6 (gcc Compiler Version 4.4.6) [1], Oracle Linux 6 running on Intel Xeon 5675 with PAA (gcc Compiler Version 4.4.6) [1], Oracle Solaris 11 (32 bit) (Sun C Version 5.12) [1], Oracle Solaris 11 (64 bit) (Sun C Version 5.12) [1], Android 4.0 (gcc Compiler Version 4.4.3) [1], Apple iOS 5.1 (gcc Compiler Version 4.2.1) [1], Microsoft Windows CE 6.0 (Microsoft C/C++ Optimizing Compiler Version 15.00 for ARM) [1], Microsoft Windows CE 5.0 (Microsoft C/C++ Optimizing Compiler Version 13.10 for ARM) [1], Linux 2.6 (gcc Compiler Version 4.1.0) [1], DSP Media Framework 1.4 (TMS320C6x C/C++ Compiler v6.0.13) [1], Android 4.0 running on TI OMAP 3 (ARMv7) with NEON (gcc Compiler Version 4.4.3) [1], NetBSD 5.1 (gcc Compiler Version 4.1.3) [1], Microsoft Windows 7 running on Intel Core i5-2430M (64-bit) with PAA (Microsoft C/C++ Optimizing Compiler Version 16.00 for x64) [1], Android 4.1 running on TI DM3730 (ARMv7) (gcc Compiler Version 4.6) [1], Android 4.1 running on TI DM3730 (ARMv7) with NEON (gcc Complier Version 4.6) [1], Android 4.2 running on Nvidia Tegra 3 (ARMv7) (gcc Compiler Version 4.6) [1], Android 4.2 running on Nvidia Tegra 3 (ARMv7) with Neon (gcc Compiler Version 4.6) [1], Windows Embedded Compact 7 running on Freescale i.MX53xA (ARMv7) with NEON (Microsoft C/C++ Optimizing Compiler Version 15.00.20720) [1], Windows Embedded Compact 7 running on Freescale i.MX53xD (ARMv7) with NEON (Microsoft C/C++ Optimizing Compiler Version 15.00.20720) [1], Android 4.0 running on Qualcomm Snapdragon APQ8060 (ARMv7) with NEON (gcc compiler Version 4.4.3) [1], Apple OS X 10.7 running on Intel Core i7-3615QM (Apple LLVM version 4.2) [1], Apple iOS 5.0 running on ARM Cortex A8 (ARMv7) with NEON (gcc Compiler Version 4.2.1) [1], OpenWRT 2.6 running on MIPS 24Kc (gcc Compiler Version 4.6.3) [1], QNX 6.4 running on Freescale i.MX25 (ARMv4) (gcc Compiler Version 4.3.3) [1], Apple iOS 6.1 running on Apple A6X SoC (ARMv7s) (gcc Compiler Version 4.2.1) [1], eCos 3 running on Freescale i.MX27 926ejs (ARMv5TEJ) (gcc Compiler Version 4.3.2) [1], Ubuntu 13.04 running on AM335x Cortex-A8 (ARMv7) (gcc Compiler Version 4.7.3) [1], Ubuntu 13.04 running on AM335x Cortex-A8 (ARMv7) with NEON (gcc Compiler Version 4.7.3) [1], Linux 3.8 running on ARM926 (ARMv5TEJ) (gcc Compiler Version 4.7.3) [1], iOS 6.0 running on Apple A5 / ARM Cortex-A9 (ARMv7) without NEON (gcc Compiler Version 4.2.1) [1], iOS 6.0 running on Apple A5 / ARM Cortex-A9 (ARMv7) with NEON (gcc Compiler Version 4.2.1) [1], Linux 2.6 running on Freescale e500v2 (PPC) (gcc Compiler Version 4.4.1) [1], AcanOS 1.0 running on Intel Core i7-3612QE (x86) without PAA (gcc Compiler Version 4.6.2) [1], AcanOS 1.0 running on Intel Core i7-3612QE (x86) with PAA (gcc Compiler Version 4.6.2) [1], AcanOS 1.0 running on Feroceon 88FR131 (ARMv5) (gcc Compiler Version 4.5.3) [1], FreeBSD 8.4 running on Intel Xeon E5440 (x86) without PAA (gcc Compiler Version 4.2.1) [1], FreeBSD 9.1 running on Xeon E5-2430L (x86) without PAA (gcc Compiler Version 4.2.1) [1], FreeBSD 9.1 running on Xeon E5-2430L (x86) with PAA (gcc Compiler Version 4.2.1) [1], ArbOS 5.3 running on Xeon E5645 (x86) without PAA (gcc Compiler Version 4.1.2) [1], Linux ORACLESP 2.6 running on ASPEED AST-Series (ARMv5) (gcc Compiler Version 4.4.5) [1], Linux ORACLESP 2.6 running on Emulex PILOT3 (ARMv5) (gcc Compiler Version 4.4.5) [1], ArbOS 5.3 running on Xeon E5645 (x86) with PAA (gcc Compiler Version 4.1.2) [1], FreeBSD 9.2 running on Xeon E5-2430L (x86) without PAA (gcc Compiler Version 4.2.1) [1], FreeBSD 9.2 running on Xeon E5-2430L (x86) with PAA (gcc Compiler Version 4.2.1) [1], FreeBSD 10.0 running on Xeon E5-2430L (x86) without PAA (clang Compiler Version 3.3) [1], FreeBSD 10.0 running on Xeon E5-2430L (x86) with PAA (clang Compiler Version 3.3) [1], FreeBSD 8.4 running on Intel Xeon E5440 (x86) 32-bit (gcc Compiler Version 4.2.1) [1], Vmware Horizon Workspace 2.1 under vSphere ESXi 5.5 running on Intel Xeon E3-1220 (x86) without PAA (gcc Compiler Version 4.5.1) [1], Vmware Horizon Workspace 2.1 under vSphere ESXi 5.5 running on Intel Xeon E3-1220 (x86) with PAA (gcc Compiler Version 4.5.1) [1], QNX 6.5 running on Freescale i.MX25 (ARMv4) (gcc Compiler Version 4.3.3) [1], CentOS 5.6 64-bit running on Intel Xeon E5-2620v3 (gcc Compiler Version 4.1.2) [1], CentOS 5.6 64-bit running on Intel Xeon E5-2690v3 (gcc Compiler Version 4.1.2) [1], Linux Yocto 4.4 on 440T running on an Intel Core i3-3220 without PAA (gcc Compiler Version 5.3.0) [2], Linux Yocto 4.4 on 2200T running on an Intel Xeon E5-2620 with PAA (gcc Compiler Version 5.3.0) [2], Linux Yocto 4.4 on 8200TX running on an Intel Xeon E5-2648L v3 with PAA (gcc Compiler Version 5.3.0) [2], Linux Yocto 4.4 on 8400TX running on an Intel Xeon E5-2648L v3 with PAA (gcc Compiler Version 5.3.0) [2], Linux Yocto 4.4 on VMware ESXi 6.5 hypervisor running on an HP ProLiant DL360 without PAA (gcc Compiler Version 5.3.0) [2], CentOS 5.6 64-bit running on Intel Xeon E5-2620v4 (gcc Compiler Version 4.1.2) [1] (single-user mode)
Approved Algorithms
AES |
Certs. #1884, #2116, #2234, #2342, #2394, #2484, #2824, #2929, #3281, #4703 and #C418 |
CVL |
Certs. #10, #12, #24, #36, #49, #53, #71, #85, #260, #331, #464, #1346 and #C418 |
DRBG |
Certs. #157, #229, #264, #292, #316, #342, #485, #540, #739, #1601 and #C418 |
DSA |
Certs. #589, #661, #693, #734, #748, #764, #853, #870, #938, #1245 and #C418 |
ECDSA |
Certs. #264, #270, #315, #347, #378, #383, #394, #413, #496, #528, #634, #1161 and #C418 |
HMAC |
Certs. #1126, #1288, #1363, #1451, #1485, #1526, #1768, #1856, #2078, #3115 and #C418 |
RSA |
Certs. #960, #1086, #1145, #1205, #1237, #1273, #1477, #1535, #1678, #2563 and #C418 |
SHS |
Certs. #1655, #1840, #1923, #2019, #2056, #2102, #2368, #2465, #2719, #3850 and #C418 |
Triple-DES |
Certs. #1223, #1346, #1398, #1465, #1492, #1522, #1695, #1742, #1868, #2495 and #C418 |
Other Algorithms
EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength, non-compliant less than 112 bits); RSA (key wrapping)
Software Versions
2.0.8 [1] and 2.0.13 [2]