COMPLIANCE_EN.md

Certification and Compliance

Important

Passing the test vectors does not mean that each cryptographic module and algorithm implementation is fully validated. These CAVP (Cryptographic Algorithm Validation Program) test vector validations have no legal effect and merely indicate that the cryptographic algorithm 'operates normally.'

NIST CAVP is a validation process for individual algorithms. For use in actual production environments, CMVP (Cryptographic Module Validation Program) validation according to FIPS 140-2/3 is required. In other words, CAVP certification is a mandatory prerequisite for CMVP certification.

RNG SP 800-90A Rev. 1 (B, C)

NIST CAVP - Random Number Generators

• Hash DRBG
• HMAC DRBG
• CTR DRBG

KCMVP

• Hash DRBG
• HMAC DRBG
• CTR DRBG

SHA2 (FIPS 180-4)

NIST CAVP - Secure Hashing

• SHA-224
• SHA-256
• SHA-384
• SHA-512

KCMVP

• SHA-224
• SHA-256
• SHA-384
• SHA-512

SHA3 (FIPS 202)

NIST CAVP - Secure Hashing

• SHA-3 224
• SHA-3 256
• SHA-3 384
• SHA-3 512
• XOF (SHAKE128)
• XOF (SHAKE256)

KCMVP

• SHA-3 224
• SHA-3 256
• SHA-3 384
• SHA-3 512

HKDF (SP 800-108)

NIST CAVP - Key Derivation

• HKDF SHA-2
• HKDF SHA-3

HMAC (FIPS 198-1)

NIST CAVP - Keyed-Hash Message Authentication Code

• HMAC

KCMVP

• HMAC (SHA-2)
• HMAC (SHA-3)

Digital Signature (Composite)

Post-Quantum-Cryptography/KAT/MLDSA (FIPS 204)

• ML-DSA-44 KeyPair generation
• ML-DSA-44 Sign/Verify
• ML-DSA-65 KeyPair generation
• ML-DSA-65 Sign/Verify
• ML-DSA-87 KeyPair generation
• ML-DSA-87 Sign/Verify