808bits

Mocana Cryptographic Suite B Module

FIPS 140-3 certificate #4761 · DigiCert, Inc. · data as of 2026-10-21

Mocana Cryptographic Suite B Module, from DigiCert, Inc., holds FIPS 140-3 certificate #4761 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5321. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. No assurance of the minimum strength of generated SSPs (e.g., keys). When operated in approved mode

Certificate

Certificate number4761
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorDigiCert, Inc. · website
Software versions7.0.0f_u1

Module description

Quoted from the NIST CMVP entry for this certificate.

The Mocana Cryptographic Module is the engine of Mocana's Device Security Framework - a software framework that secures all aspects of a system. The Device Security Framework helps applications and device designers reduce development costs and dramatically enhance cryptographic performance. For details see www.mocana.com.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (50)

AlgorithmCAVP certificates
AES-CBCA4653
AES-CCMA4653
AES-CFB128A4653
AES-CMACA4653
AES-CTRA4653
AES-ECBA4653
AES-GCMA4654, A4655
AES-GMACA4654, A4655
AES-OFBA4653
AES-XTS Testing Revision 2.0A4653
Counter DRBGA4653
DSA KeyGen (FIPS186-4)A4653
DSA PQGGen (FIPS186-4)A4653
DSA PQGVer (FIPS186-4)A4653
DSA SigGen (FIPS186-4)A4653
DSA SigVer (FIPS186-4)A4653
ECDSA KeyGen (FIPS186-4)A4653
ECDSA KeyVer (FIPS186-4)A4653
ECDSA SigGen (FIPS186-4)A4653
ECDSA SigVer (FIPS186-4)A4653
EDDSA KeyGenA4653
EDDSA KeyVerA4653
EDDSA SigGenA4653
EDDSA SigVerA4653
HMAC-SHA-1A4653
HMAC-SHA2-224A4653
HMAC-SHA2-256A4653
HMAC-SHA2-384A4653
HMAC-SHA2-512A4653
HMAC-SHA3-224A4653
HMAC-SHA3-256A4653
HMAC-SHA3-384A4653
HMAC-SHA3-512A4653
KAS-ECC Sp800-56Ar3A4653
KAS-FFC Sp800-56Ar3A4653
KDF SP800-108A4653
RSA KeyGen (FIPS186-4)A4653
RSA SigGen (FIPS186-4)A4653
RSA SigVer (FIPS186-4)A4653
SHA-1A4653
SHA2-224A4653
SHA2-256A4653
SHA2-384A4653
SHA2-512A4653
SHA3-224A4653
SHA3-256A4653
SHA3-384A4653
SHA3-512A4653
SHAKE-128A4653
SHAKE-256A4653

Tested configurations

  • Buildroot Linux 2020.02.01 (32-bit) running on Honeywell Cordless Ultra with an Ingenic X2000 (without PAA)
  • Buildroot Linux 2020.02.01 (32-bit) running on Ultra Charge & Communication Base with an Ingenic X1600E (without PAA)
  • Yocto Linux 3.1 (32-bit) running on Xerox Alexandra Platform with an ARM Cortex A53 (without PAA))
  • Yocto Linux 3.1 (32-bit) running on Xerox Explorer 6.5 with an Intel Atom E3950 (with PAA)
  • Yocto Linux 3.1 (32-bit) running on Xerox Explorer 6.5 with an Intel Atom E3950 (without PAA)
  • Yocto Linux 3.1 (32-bit) running on Xerox Explorer 8.0 with an Intel Atom x6413E (with PAA)
  • Yocto Linux 3.1 (32-bit) running on Xerox Explorer 8.0 with an Intel Atom x6413E (without PAA)

Validation history

DateTypeLab
2024-08-14InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-14

Source documents