Module Name
Cisco FIPS Object Module
Caveat
No assurance of the minimum strength of generated SSPs (e.g., keys).
Security Level Exceptions
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Module Type
Firmware-hybrid
Embodiment
Multi-Chip Stand Alone
Description
The Cisco FIPS Object Module (FOM) is a firmware hybrid library that provides cryptographic services to a vast array of Cisco's networking and collaboration products. The module provides FIPS 140 validated cryptographic algorithms for services such as IPSEC, SRTP, SSH, TLS, 802.1x, etc. The module does not directly implement any of these protocols, instead, it provides the cryptographic primitives and functions to allow a developer to implement the various protocols.
Tested Configuration(s)
- Linux 4.4 running on Cisco Catalyst 9300 with Intel Xeon D-1526 (Broadwell) with PAA
- Linux 4.5 running on Cisco Unified Computing System (UCS) with Intel Xeon Gold 6244 (Cascade Lake) with PAA
- Linux 5.4 running on ISR 4321 with Intel Atom C2558 (Silvermont) with PAA
Approved Algorithms
AES-XTS Testing Revision 2.0
KAS-ECC CDH-Component SP800-56Ar3
Safe Primes Key Generation
Safe Primes Key Verification
