Module Name
Chainguard FIPS Provider for OpenSSL
Caveat
When operated in approved mode; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
- Physical security: N/A
- Non-invasive security: N/A
Embodiment
MultiChipStand
Description
The Chainguard FIPS Provider for OpenSSL is defined as a software module in a multi-chip standalone embodiment. It provides a C language application program interface (API) for use by other applications that require cryptographic functionality. The module consists of one software component, the "FIPS provider", which implements FIPS requirements, and the cryptographic functionality provided to the operator.
Approved Algorithms
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Deterministic ECDSA SigGen (FIPS186-5)
Safe Primes Key Generation
Safe Primes Key Verification