Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5401

Details

Module Name
Palo Alto Networks Core Crypto Module
Standard
FIPS 140-3
Status
Active
Sunset Date
7/25/2029
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section 11.1 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The Palo Alto Networks Core Crypto Module is a software cryptographic module that can run on various environments.
Approved Algorithms
AES-CBC
AES-CBC
AES-GCM
AES-GCM
Counter DRBG
Counter DRBG
ECDSA KeyGen (FIPS186-4)
ECDSA KeyGen (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
ECDSA SigVer (FIPS186-4)
HMAC-SHA2-256
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-384
KAS-ECC-SSC Sp800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigVer (FIPS186-4)
RSA SigVer (FIPS186-4)
Safe Primes Key Generation
Safe Primes Key Generation
Safe Primes Key Verification
Safe Primes Key Verification
SHA-1
SHA-1
SHA2-224
SHA2-224
SHA2-256
SHA2-256
SHA2-384
SHA2-384
SHA2-512
SHA2-512
TLS v1.2 KDF RFC7627
TLS v1.2 KDF RFC7627

Vendor

Palo Alto Networks
3000 Tannery Way
Santa Clara, CA 95008
USA

Amir Shahhosseini
[email protected]
Phone: 408-753-4000
Jake Bajic
[email protected]
Phone: 408-753-4000

Validation History

Date Type Lab
7/13/2026 Initial Leidos Accredited Testing & Evaluation (AT&E) Lab