ExtraHop Cryptographic Module

Certificate

Module description

The ExtraHop Cryptographic Module 2.0 is a cryptographic library embedded in the ExtraHop Reveal(x) 360 application software. The ExtraHop Cryptographic Module 2.0 offers symmetric encryption/decryption, digital signature generation/verification, hashing, cryptographic key generation, random number generation, message authentication, and key establishment functions to secure data-at-rest/data-in-flight and to support secure communications protocols (including SSH and TLS 1.2/1.3).

Security level exceptions

• Physical security: N/A
• Non-invasive security: N/A
• Mitigation of other attacks: N/A

Approved algorithms

Allowed algorithms

AES (Cert. A4978, key unwrapping. Per IG D.G.; Symmetric key unwrapping);RSA ( Cert. A4978, key unencapsulation. Per IG D.G.; Asymmetric key unencapsulation);SHA-1 ( Cert. A4978, secure hashing.; Digital signature generation in TLS v1.0/1.1);Triple-DES ( Cert. A4978, key unwrapping. Per IG D.G.; Symmetric key unwrapping)

Tested configurations

• Debian 9 running on a Dell PowerEdge R440 with an Intel® Xeon Silver 4214R with PAA
• Debian 9 running on a Dell PowerEdge R440 with an Intel® Xeon Silver 4214R without PAA

Validation history

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

• 2026-08-21: first observed by this tracker, status active
• Validation dates on record: 2024-01-30

Source documents

• NIST certificate page
• Security policy (PDF)
• Consolidated certificate (PDF)