Corelight Cryptographic Module
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys. This validation entry is a non-security relevant modification to Cert. #3273.
Certificate
| Certificate number | 3978 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Corelight Inc. · website |
| Software versions | 2.2 |
Module description
Corelight's Network Detection and Response (NDR) solutions transform raw traffic into comprehensive evidence and actionable insights that accelerate incident response and unlock powerful hunting capabilities in SIEM platforms. The module delivers core cryptographic functions for robust algorithm support, secure key management, data integrity, and secure communications.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 4750 |
| CKG | vendor affirmed |
| DRBG | 1631 |
| DSA | 1273 |
| ECDSA | 1185 |
| HMAC | 3164 |
| RSA | 2594 |
| SHS | 3893 |
| Triple-DES | 2524 |
Tested configurations
- CentOS 7.3 running on a Dell Optiplex 755 with an Intel Celeron processor (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-07-12 | Initial | AEGISOLVE, Inc. |
| 2022-10-12 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2021-07-12, 2022-10-12