Module Name
Axis Cryptographic Module
Historical Reason
Moved to historical list due to sunsetting
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Security Level Exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Embodiment
Multi-Chip Stand Alone
Description
The Axis cryptographic module based on OpenSSL is a general-purpose cryptographic library that provides FIPS 140-2 approved cryptographic algorithms serving secure communication for Axis network products.
Tested Configuration(s)
- AXIS OS 11 (11.9) running AXIS P3265-LVE Dome Camera with an ARM Cortex A-53 with PAA
- AXIS OS 11 (11.9) running AXIS P3265-LVE Dome Camera with an ARM Cortex A-53 without PAA
- AXIS OS 11 (11.9) running AXIS Q6135-LE PTZ Network Camera with an ARM Cortex A-9 with PAA
- AXIS OS 11 (11.9) running AXIS Q6135-LE PTZ Network Camera with an ARM Cortex A-9 without PAA
- AXIS OS 12 (12.2) running AXIS A1610 Network Door Controller with an ARM Cortex A-9 with PAA
- AXIS OS 12 (12.2) running AXIS A1610 Network Door Controller with an ARM Cortex A-9 without PAA
- AXIS OS 12 (12.2) running AXIS C1310-E Mk II Network Horn Speaker with an ARM Cortex A-53 with PAA
- AXIS OS 12 (12.2) running AXIS C1310-E Mk II Network Horn Speaker with an ARM Cortex A-53 without PAA
- AXIS OS 12 (12.2) running AXIS M3125-LVE Dome Camera with an ARM Cortex A-53 with PAA
- AXIS OS 12 (12.2) running AXIS M3125-LVE Dome Camera with an ARM Cortex A-53 without PAA
- AXIS OS 12 (12.2) running AXIS Q1728 Block Camera with an ARM Cortex A-55 with PAA
- AXIS OS 12 (12.2) running AXIS Q1728 Block Camera with an ARM Cortex A-55 without PAA (single-user mode)
Approved Algorithms
| AES |
Cert. #A5198 |
| CKG |
vendor affirmed |
| CVL |
Cert. #A5198 |
| DRBG |
Cert. #A5198 |
| DSA |
Cert. #A5198 |
| ECDSA |
Cert. #A5198 |
| HMAC |
Cert. #A5198 |
| KAS-RSA-SSC |
Cert. #A5198 |
| KAS-SSC |
Cert. #A5198 |
| KBKDF |
Cert. #A5198 |
| KDA |
Cert. #A5198 |
| KMAC |
Cert. #A5198 |
| KTS |
AES Cert. #A5198; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #A5198 and AES Cert. #A5198; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Cert. #A5198 and HMAC Cert. #A5198; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #A5198 and HMAC Cert. #A5198; key establishment methodology provides 112 bits of encryption strength |
| KTS-RSA |
Cert. #A5198; key establishment methodology provides between 112 and 256 bits of encryption strength |
| PBKDF |
Cert. #A5198 |
| RSA |
Cert. #A5198 |
| SHA-3 |
Cert. #A5198 |
| SHS |
Cert. #A5198 |
| Triple-DES |
Cert. #A5198 |
