808bits

Octopus Authentication Server Cryptographic Module

FIPS 140-2 certificate #4842 · Secret Double Octopus · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.

Certificate

Certificate number4842
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorSecret Double Octopus · website
Software versions3.0.8

Module description

The Octopus Authentication Server manages the authentication requests and the connection to the application on the mobile device to get the user approval.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
AESA3500
CKGvendor affirmed
CVLA3500
DRBGA3500
DSAA3500
ECDSAA3500
HMACA3500
KAS-RSA-SSCA3500
KAS-SSCA3500
KBKDFA3500
KDAA3500
KMACA3500
KTS
KTS
KTS
KTS
KTS-RSA
PBKDFA3500
RSAA3500
SHA-3A3500
SHSA3500
Triple-DESA3500

Tested configurations

  • Debian 11.5 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • Debian 11.5 running on Dell Inspiron 7591 with Intel i7(x64) without PAA
  • FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7(x64) without PAA
  • macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7(x64) with PAA
  • macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7(x64) without PAA (single-user mode)
  • Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7(x64) without PAA
  • Windows 10 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
  • Windows 10 running on Dell Inspiron 7591 with Intel i7(x64) without PAA

Validation history

DateTypeLab
2024-10-17InitialAcumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-10-17

Source documents