Module Name
Linux Kernel FIPS Object Module (KFOM) Cryptographic Module
Caveat
No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Security Level Exceptions
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Module Type
Firmware-hybrid
Embodiment
MultiChipStand
Description
The Cisco Linux Kernel FIPS Object Module (KFOM) is a firmware hybrid cryptographic library that serves the operating system kernel. It does not implement any security protocols, instead only allowing for Linux kernel applications access to using approved algorithms.
Approved Algorithms
AES-XTS Testing Revision 2.0
KAS-ECC CDH-Component SP800-56Ar3