Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4749

Details

Module Name
Crypto Module for Intel® Alder Point PCH Converged Security and Manageability Engine (CSME)
Standard
FIPS 140-3
Status
Active
Sunset Date
8/1/2026
Overall Level
2
Caveat
Interim Validation. When operated in approved mode. When initialized and configured as specified in Section 11 of the Security Policy.
Security Level Exceptions
  • Operational environment: N/A
  • Non-invasive security: N/A
  • Documentation requirements: N/A
  • Cryptographic module security policy: N/A
Module Type
Firmware-hybrid
Embodiment
Single Chip
Description
The Cryptographic Module for Intel® Converged Security and Manageability Engine(CSME) is a firmware-hybrid module. The module consists of both hardware and firmware. The hardware portion is the Converged Security Engine (CSE) and the firmware portion is the crypto driver process of the Manageability Engine (ME). The two portions form the cryptographic boundary and they combine as Converged Security and Manageability Engine (CSME) to perform cryptographic functions within the Alder Point PCH applications executing on the CSME OS.
Tested Configuration(s)
  • CSME OS with firmware version 16.1.25.2124 running on Alder Point PCH-M/P with Alder Lake M CPU
  • CSME OS with firmware version 16.1.25.2124 running on Alder Point PCH-M/P with Raptor Lake HX CPU
  • CSME OS with firmware version 16.1.25.2124 running on Alder Point PCH-S with Alder Lake S CPU
  • CSME OS with firmware version 16.1.25.2124 running on Alder Point PCH-S with Raptor Lake P CPU
  • CSME OS with firmware version 16.1.25.2124 running on Alder Point PCH-S with Raptor Lake S CPU
Approved Algorithms
AES-CBC
AES-CFB128
AES-CMAC
AES-CTR
AES-ECB
AES-GCM
AES-OFB
Counter DRBG
ECDSA KeyGen (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
KAS-ECC Sp800-56Ar3
KDF SP800-108
KTS-IFC
KTS-IFC
RSA Decryption Primitive
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA Signature Primitive
RSA SigVer (FIPS186-4)
SHA-1
SHA2-224
SHA2-256
SHA2-384
SHA2-512
Entropy
ENT (P)
Hardware Versions
4.6.0.0
Firmware Versions
5.2.0.0

Vendor

Intel Corporation
2200 Mission College Blvd.
Santa Clara, CA 95054
USA

Intel FIPS Office
fipsoffice@intel.com
Phone: 408-765-8080

Validation History

Date Type Lab
8/2/2024 Initial ATSEC INFORMATION SECURITY CORP