808bits

KMF/Wave/Traffic CryptR

FIPS 140-2 certificate #4360 · Motorola Solutions, Inc. · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode and initialized to overall Level 2 per Sections 2.1 and 9.2 of the Security Policy. No assurance of the minimum strength of generated keys

Certificate

Certificate number4360
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorMotorola Solutions, Inc. · website
Hardware versionsP/Ns CLN8566A, Rev. 0x1 and CLN1875A, Rev. 0x1
Firmware versionsR03.07.04 with or without AES128 R01.00.01, AES256 R01.00.03, and/or ADP/DES-CBC/DES-ECB/DES-OFB/DES-XL/DVI-XL/DVP-XL R01.00.00

Module description

The Module provides encryption and decryption services for secure key management, Over-the-Air-Rekeying (OTAR), and secure voice/data traffic for Motorola's Key Management Facility (KMF) and Motorola's Wave System. In the Wave System, the Module is referred to as the Wave CryptR/Traffic CryptR. In the Astro System, the Module is referred to as the KMF CryptR. The KMF and the KMF CryptR combine to provide cryptographic services for Motorola’s APCO-25 compliant Astro™ radio systems.

Security level exceptions

  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC489, C490, C491, C492
CKGvendor affirmed
CVLC496
DRBGC494
ECDSAC495
HMACC493
KASA1761
KTS
KTS
KTS
SHSC493

Allowed algorithms

AES (Cert. #C489, key unwrapping; key establishment methodology provides 128 bits of encryption strength); AES (Cert. #C490, key unwrapping; key establishment methodology provides 256 bits of encryption strength); AES (Cert. #C491, key unwrapping; key establishment methodology provides 256 bits of encryption strength); AES MAC (AES Cert. #C492, vendor affirmed; P25 AES OTAR)

Tested configurations

  • N/A

Validation history

DateTypeLab
2022-11-08InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-11-08

Source documents