Module Name
BoringCrypto SoC
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Security Level Exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.
Tested Configuration(s)
- Google prodimage with Linux 4.15.0 running on Ampere Altra SoC with ARM Neoverse N1 CPU with PAA
- Google prodimage with Linux 4.15.0 running on Ampere Altra SoC with ARM Neoverse N1 CPU without PAA (single-user mode)
- Google prodimage with Linux 5.4.99 running on Google IN762 SoC with Aarch64 ARMv8 CPU with PAA
- Google prodimage with Linux 5.4.99 running on Google IN762 SoC with Aarch64 ARMv8 CPU without PAA
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
853ca1ea1168dff08011e5d42d94609cc0ca2e27