Table of Contents
Advertisement
2.7.3 Mixed Mode Algorithm Implementations
A list of cryptographic algorithms used by the module while operating in the
Mixed Mode is provided in Table 8.
Algorithm
43
44
AES
256-bit ECB
mode
AES 128-bit CTR mode
AES 128-bit CBC mode
47
SHA
-1
SHA-256
HMAC SHA-1
48
RSA 2048-bit PKCS
#1 v1.5 Signature Verification Verifies the signature of a new firmware image
RSA 2048-bit PKCS #1 v1.5 Signature Generation
RSA 2048-bit FIPS 186-4 Key Generation
43
AES – Advanced Encryption System
44
ECB – Electronic Code Book
45
SP – Special Publication
46
CTR - Counter
47
SHA – Secure Hash Algorithm
48
PKCS – Public Key Cryptographic Standard
This document may be freely reproduced and distributed whole and intact including this Copyright notice.
Table 8 – Mixed Mode Security Functions
Provides encryption for multiple services
including with the SP
(Cert # 1209)
AES in CTR mode used in remote SSH
sessions.
AES in CBC mode used in remote SSH
sessions.
Provides hashing for multiple services
including, digital signature verification (Used
with HMAC SHA-1 (Cert # 2636), RSA 2048-
bit (Cert # 2074)). Used as part o the SSH
KDF (Cert #866).
Provides hashing for multiple services
including, digital signature verification (Used
with RSA 2048 (Cert # 2074)) and as part of
the SSH Key Derivation Function (Used with
(Cert # 866)). SHA-256 is also used with RSA
2048 Signature Generation and ECDSA
Signature Generation (Cert #905).
Provides integrity during a SSH session; Used
with SHA-1 (Cert # 3330)
to be loaded onto the ETD; Used with SHA-1
and SHA-256 (Cert # 3330)
Performs session establishment in support of
SSH.
Performs Key Generation in support of SSH
© Copyright 2017 Oracle Corporation
Implementation Description
45
800-90A CTR
Certificate
Number
46
DRBG
4039
4039
4039
3330
3330
2636
2074
2074
2074
Page 30 of 51
Advertisement
Table of Contents
