Greymatter.io Cryptographic Module for ZTN Platform
Greymatter.io Cryptographic Module for ZTN Platform, from Greymatter.io Inc., holds FIPS 140-3 certificate #5285 at overall level 1. The validation is active, with a sunset date of 2029-07-22. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: No assurance of the minimum strength of generated SSPs (e.g., keys). When operated in approved mode.
Certificate
| Certificate number | 5285 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-07-22 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | MultiChipStand |
| Vendor | Greymatter.io Inc. · website |
| Software versions | 2022061300 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Greymatter.io Cryptographic Module for ZTN Platform provides support for Greymatter.io's enterprise platform, which delivers secure, zero trust networking, observability, and automated service mesh connectivity for applications and APIs across multi-cloud and hybrid environments.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (28)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A2811 |
| AES-CCM | A2811 |
| AES-CTR | A2811 |
| AES-ECB | A2811 |
| AES-GCM | A2811 |
| AES-KW | A2811 |
| AES-KWP | A2811 |
| Counter DRBG | A2811 |
| ECDSA KeyGen (FIPS186-4) | A2811 |
| ECDSA KeyVer (FIPS186-4) | A2811 |
| ECDSA SigGen (FIPS186-4) | A2811 |
| ECDSA SigVer (FIPS186-4) | A2811 |
| HMAC-SHA-1 | A2811 |
| HMAC-SHA2-224 | A2811 |
| HMAC-SHA2-256 | A2811 |
| HMAC-SHA2-384 | A2811 |
| HMAC-SHA2-512 | A2811 |
| KAS-ECC-SSC Sp800-56Ar3 | A2811 |
| KDF TLS | A2811 |
| RSA KeyGen (FIPS186-4) | A2811 |
| RSA SigGen (FIPS186-4) | A2811 |
| RSA SigVer (FIPS186-4) | A2811 |
| SHA-1 | A2811 |
| SHA2-224 | A2811 |
| SHA2-256 | A2811 |
| SHA2-384 | A2811 |
| SHA2-512 | A2811 |
| SHA2-512/256 | A2811 |
Tested configurations
- Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 32-bit with PAA
- Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 32-bit without PAA
- Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 64-bit with PAA
- Android 13 running on Google Pixel 4a with Qualcomm Snapdragon 730 64-bit without PAA
- Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 32-bit with PAA
- Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 32-bit without PAA
- Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 64-bit with PAA
- Android 13 running on Google Pixel 4XL with Qualcomm Snapdragon 855 64-bit without PAA
- Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 32-bit with PAA
- Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 32-bit without PAA
- Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 64-bit with PAA
- Android 13 running on Google Pixel 5a with Qualcomm Snapdragon 765 64-bit without PAA
- Android 13 running on Google Pixel 6 Pro with Google Tensor 32-bit with PAA
- Android 13 running on Google Pixel 6 Pro with Google Tensor 32-bit without PAA
- Android 13 running on Google Pixel 6 Pro with Google Tensor 64-bit with PAA
- Android 13 running on Google Pixel 6 Pro with Google Tensor 64-bit without PAA
- Android 13 running on Google Pixel 7 Pro with Google Tensor G2 32-bit with PAA
- Android 13 running on Google Pixel 7 Pro with Google Tensor G2 32-bit without PAA
- Android 13 running on Google Pixel 7 Pro with Google Tensor G2 64-bit with PAA
- Android 13 running on Google Pixel 7 Pro with Google Tensor G2 64-bit without PAA
- Debian Linux 5.17.11 (Rodete) running on n2d with AMD EPYC 7B12 with PAA
- Debian Linux 5.17.11 (Rodete) running on n2d with AMD EPYC 7B12 without PAA
- Google Prodimage with Linux 4.15.0 running on n1 with Intel Xeon E5 2696 v4 with PAA
- Google Prodimage with Linux 4.15.0 running on n1 with Intel Xeon E5 2696 v4 without PAA
- Google Prodimage with Linux 4.15.0 running on Tau t2a with Ampere Altra with PAA
- Google Prodimage with Linux 4.15.0 running on Tau t2a with Ampere Altra without PAA
- Google Prodimage with Linux 5.10.120 running on IN762 with PAA
- Google Prodimage with Linux 5.10.120 running on IN762 without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-05-21 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2026-05-21