Module Name
Self-Defending Key Management Service™
Historical Reason
Moved to historical list due to sunsetting
Caveat
The module generates cryptographic keys whose strengths are modified by available entropy. When operated in FIPS mode
Security Level Exceptions
- Roles, Services, and Authentication: Level 3
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
Fortanix Self-Defending Key Management Service™ (SDKMS) is the world’s first cloud service secured with Intel® SGX and built using Fortanix’s patented Runtime Encryption Technology. With SDKMS, you can securely generate, store, and use cryptographic keys and certificates, as well as secrets, or any blob of data. You can integrate with SDKMS using legacy cryptographic interfaces or using its native RESTful interface. SDKMS ensures that you remain in complete control over your keys and secrets. It provides access control to users and applications to enforce authorized access to keys.
Tested Configuration(s)
- Ubuntu 16.04 running on a General purpose x86 based server (SuperMicro SYS-5019S-MR) with Intel® Xeon® CPU E3-1230 V5 @3.40GHz with PAA
- Ubuntu 16.04 running on a General purpose x86 based server (SuperMicro SYS-5019S-MR) with Intel® Xeon® CPU E3-1230 V5 @3.40GHz without PAA (single-user mode)
Approved Algorithms
| AES |
Certs. #5328, #5329, #5379 and #5380 |
| CKG |
vendor affirmed |
| CVL |
Certs. #1818 and #1822 |
| DRBG |
Certs. #2072 and #2073 |
| ECDSA |
Certs. #1418 and #1419 |
| HMAC |
Certs. #3526 and #3527 |
| KDF |
Certs. #191 and #195 |
| KTS |
AES Cert. #5328 and HMAC Cert. #3526; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #5329 and HMAC Cert. #3527; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #5379; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #5380; key establishment methodology provides between 128 and 256 bits of encryption strength |
| RSA |
Certs. #2876 and #2877 |
| SHS |
Certs. #4280 and #4281 |
Allowed Algorithms
HMAC-MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 bits of encryption strength)
Software Versions
2.0.596 and 2.0.NOAESNI-182
