Cryptographic Module Validation Program

Cryptographic Module Validation Program CMVP

Certificate #3107

Historical - The referenced cryptographic module should not be included by Federal Agencies in new procurements. Agencies may make a risk determination on whether to continue using this module based on their own assessment of where and how it is used.

Details

Module Name

Carbon Black Cryptographic Module

Standard

FIPS 140-2

Status

Historical

Historical Reason

Moved to historical list due to sunsetting

Overall Level

Caveat

When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. This validation entry is a non-security relevant modification to Cert. #2038.

Security Level Exceptions

Physical Security: N/A
Mitigation of Other Attacks: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The Carbon Black Cryptographic Module delivers core cryptographic functions (including Suite B algorithms) to Cb Response and Cb Protection. These products rely on the Carbon Black Cryptographic Module for secure key management, data integrity, data at rest encryption, and secure communications.

Tested Configuration(s)

Windows Server 2008 R2 on a Dell OptiPlex 755 (single-user mode)

Approved Algorithms

AES	Cert. #2273
CVL	Cert. #44
DRBG	Cert. #281
DSA	Cert. #709
ECDSA	Cert. #368
HMAC	Cert. #1391
RSA	Cert. #1166
SHS	Cert. #1954
Triple-DES	Cert. #1420

Allowed Algorithms

EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Software Versions

1.0

Vendor

Carbon Black, Inc.
1100 Winter St.
Waltham, MA 02451
USA

Damon Cabanillas
dcabanillas@carbonblack.com

Related Files

Security Policy
Consolidated Certificate

Validation History

Date	Type	Lab
1/9/2018	Initial	ACUMEN SECURITY, LLC
2/13/2018	Update	ACUMEN SECURITY, LLC