Table of Contents
Advertisement
Algorithm
AES 128-bit CTR mode
AES 128-bit CBC mode
41
SHA
-1
SHA-256
HMAC SHA-1
42
RSA 2048-bit PKCS
#1 v1.5 Signature Verification Verifies the signature of a new firmware image
RSA 2048-bit PKCS #1 v1.5 Signature Generation
RSA 2048-bit FIPS 186-4 Key Generation
Elliptic-Curve P-256 Key Pair Generation
Elliptic-Curve P-256 DSA (ECDSA)
SSH Key Derivation
Note: The SSH protocol has not been reviewed or
tested by the CAVP and CMVP
SP800-90A CTR DRBG
40
CTR - Counter
41
SHA – Secure Hash Algorithm
42
PKCS – Public Key Cryptographic Standard
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
AES in CTR mode used in remote SSH
sessions.
AES in CBC mode used in remote SSH
sessions.
Provides hashing for multiple services
including, digital signature verification (Used
with HMAC SHA-1 (Cert # 2636), RSA 2048-
bit (Cert # 2074)); User data hashing; Used as
part of the SSH KDF (Cert #866).
Provides hashing for multiple services
including, digital signature verification (Used
with RSA 2048 (Cert # 2074)) and as part of
the SSH Key Derivation Function (Used with
Cert #866). SHA-256 is also used with RSA
2048 Signature Generation and ECDSA
Signature Generation (Cert #905).
Provides integrity during a SSH session; Used
with SHA-1 (Cert # 3330)
to be loaded onto the ETD; Used with SHA-1
(Cert #3330) and SHA-256 (Cert # 3330)
Performs session establishment in support of
SSH.
Performs Key Generation in support of SSH
Performs Key Generation in support of SSH
with NIST curve P-256
Performs session establishment in support of
SSH, with NIST curve P-256
SSH Key Derivation (SP800-135 rev1; Section
5.2)
Generates random numbers for nonces and keys
for multiple services including SSH
© Copyright 2017 Oracle Corporation
Implementation Description
Certificate
Number
4039
4039
3330
3330
2636
2074
2074
2074
905
905
866
1209
Page 29 of 51
Advertisement
Table of Contents
