Module Name
RapidIdentity FIPS Cryptographic Module
Historical Reason
Moved to historical list due to sunsetting
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Security Level Exceptions
Embodiment
Multi-Chip Stand Alone
Description
The RapidIdentity FIPS Cryptographic Module is a cryptographic engine for Windows, iOS, and Android. The module delivers core cryptographic functions to Identity Automation’s RapidIdentity MFA Server and MFA Mobile app which provide a variety of authentication methods. The RapidIdentity FIPS Cryptographic Module leverages industry leading, FIPS approved cryptographic algorithms provided by the Bouncy Castle FIPS .NET APIs.
Tested Configuration(s)
- Android 11 with Xamarin.Android 11.1.0.26 running on Realme RMX3461 with Qualcomm Snapdragon 778G SM7325
- iOS 15.5 with Xamarin.iOS 15.2.0.17 running on Apple iPhone 7 with Apple A10 Fusion
- Windows Server 2016 with .NET Framework 4.6 running on Dell Latitude 3410 with Intel(R) Core(TM) i5-10210U (single-user mode)
Approved Algorithms
| AES |
Cert. #A2698 |
| CKG |
vendor affirmed |
| CVL |
Cert. #A2698 |
| DRBG |
Cert. #A2698 |
| DSA |
Cert. #A2698 |
| ECDSA |
Cert. #A2698 |
| HMAC |
Cert. #A2698 |
| KAS |
Cert. #A2698 |
| KAS |
KAS-SSC Cert. #A2698, CVL Cert. #A2698 |
| KAS |
KAS-SSC Cert. #A2698, KDA Cert. #A2698 |
| KAS-SSC |
Cert. #A2698 |
| KDA |
Cert. #A2698 |
| KMAC |
SHA-3 Cert. #A2698 |
| KTS |
AES Cert. #A2698; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple- DES Cert. #A2698; key establishment methodology provides 112 bits of encryption strength |
| KTS-RSA |
Cert. #A2698; key establishment methodology provides 112 or 128 bits of encryption strength |
| PBKDF |
Cert. #A2698 |
| RSA |
Cert. #A2698 |
| SHA-3 |
Cert. #A2698 |
| SHS |
Cert. #A2698 |
| Triple- DES |
Cert. #A2698 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)