Tera2 PCoIP Zero Client Processors

Certificate #4435

Webpage information ?

Status active
Validation dates 15.02.2023 , 22.05.2023
Sunset date 21-09-2026
Standard FIPS 140-2
Security level 1
Type Hardware
Embodiment Multi-Chip Embedded
Caveat When configured and initialized as specified in the Security Policy
Exceptions
  • Mitigation of Other Attacks: N/A
Description PC-over-IP (PCoIP) technology delivers a secure, high-definition and highly responsive computing experience. It uses advanced display compression to provide end-users with on-premises or cloud-based virtual machines as a convenient alternative to local computers. This virtual workspace architecture compresses, encrypts, and transmits only pixels to a broad range of software clients, mobile clients, thin clients, and stateless PCoIP Zero Clients, providing a highly secure enterprise environment.
Version (Hardware) TERA2140 (Part No. K4B1G1646G-BCH9 and MX29GL256ELT2I-90Q); TERA2321 (Part No. K4B2G1646B-HCH9 and MX25L25635EMI-12G)
Version (Firmware) 21.01.5-FIPS
Vendor HP Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Document information ?

Security policy

Symmetric Algorithms
AES, AES-, DES, HMAC
Asymmetric Algorithms
RSA-OAEP, ECDH, ECDSA, ECC, Diffie-Hellman, DH
Hash functions
SHA-1, SHA-384, SHA3, SHA3-256, MD5, PBKDF2, PBKDF
Schemes
Key Agreement
Protocols
SSH, TLS, TLS 1.1, TLS v1.2
Randomness
DRBG
Elliptic Curves
P-224, P-256, P-384, P-521, curve P-384
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM

Vendor
Samsung

Security level
Level 1, level 1
Certification process
out of scope, mechanisms (as allowed at level 1), and all requirements regarding authentication are thus out of scope. In all cases, module operators accessing the module via any one of its operator interfaces

Standards
FIPS 140-2, FIPS PUB 197, FIPS PUB 186-4, FIPS PUB 198-1, FIPS PUB 202, FIPS PUB 180-4, FIPS140-2, NIST SP 800-38D, NIST SP 800-90B, NIST SP 800-132, RFC11, RFC 5288

File metadata

Title: FIPS 140-2 Non-Proprietary Security Policy
Subject: Tera2 PCoIP Zero Client Processors
Author: Corsec Security, Inc.
Creation date: D:20230313102407+01'00'
Modification date: D:20230313102407+01'00'
Pages: 38
Creator: Microsoft® Word 2019
Producer: Microsoft® Word 2019

References

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

  • 26.06.2023 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The validation_history property was updated, with the [[1, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2023-05-22', 'validation_type': 'Update', 'lab': 'DEKRA Testing and Certification S.A.U'}]] values inserted.
    • The vendor_url property was set to http://www.hp.com.
    • The vendor property was set to HP Inc..

    The PDF extraction data was updated.

    • The policy_metadata property was updated, with the {'pdf_file_size_bytes': 1319379, '/Author': 'Corsec Security, Inc.', '/CreationDate': "D:20230313102407+01'00'", '/ModDate': "D:20230313102407+01'00'", '/Producer': 'Microsoft® Word 2019', '/Title': 'FIPS 140-2 Non-Proprietary Security Policy', 'pdf_hyperlinks': {'_type': 'Set', 'elements': ['https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14570', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13593', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13591', 'mailto:info@corsec.com', 'https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13592', 'http://www.hp.com/', 'https://csrc.nist.gov/Projects/cryptographic-module-validation-program/Validated-Modules/Search', 'http://www.corsec.com/', 'https://csrc.nist.gov/projects/cryptographic-module-validation-program']}} data.

    The computed heuristics were updated.

    • The cpe_matches property was set to None.

    The state was updated.

    • The policy_pdf_hash property was set to 60be00319b2031385b2b8754f902fd40092ce14678c41cd10c63ec5454be48ca.
    • The policy_txt_hash property was set to a6a422b2f9da83b3443f79bf6b2063f3c3f350dddab2713af49a72ac83ee47d6.
  • 12.03.2023 The certificate data changed.
    Certificate changed

    The web extraction data was updated.

    • The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/February 2023_010323_0649.pdf.
  • 26.02.2023 The certificate was first processed.
    New certificate

    A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4435,
  "dgst": "6a0e55841e2e1485",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHS#A1111",
        "KTS#A1111",
        "AES#A1113",
        "PBKDF#A1111",
        "DRBG#A1111",
        "RSA#A1111",
        "ECDSA#A1111",
        "KAS-SSC#A1111",
        "AES#A1111",
        "SHA-3#A2048",
        "CVL#A1112",
        "HMAC#A1111",
        "CVL#A1111"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "21.01.5"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 4
          },
          "ECDH": {
            "ECDH": 13
          },
          "ECDSA": {
            "ECDSA": 13
          }
        },
        "FF": {
          "DH": {
            "DH": 2,
            "Diffie-Hellman": 3
          }
        },
        "RSA": {
          "RSA-OAEP": 1
        }
      },
      "certification_process": {
        "OutOfScope": {
          "mechanisms (as allowed at level 1), and all requirements regarding authentication are thus out of scope. In all cases, module operators accessing the module via any one of its operator interfaces": 1,
          "out of scope": 1
        }
      },
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CFB": {
          "CFB": 2
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 10
        },
        "OFB": {
          "OFB": 3
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 1
        },
        "TLS": {
          "TLS": {
            "TLS": 53,
            "TLS 1.1": 1,
            "TLS v1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 16,
          "P-256": 14,
          "P-384": 27,
          "P-521": 14,
          "curve P-384": 1
        }
      },
      "eval_facility": {},
      "fips_cert_id": {
        "Cert": {
          "#1": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES GCM IV56": 1,
          "AES-GCM 1": 1,
          "AES-GCM 256": 2,
          "AES-GCM IV57": 1,
          "AES12": 1,
          "AES18": 1,
          "CVL25": 1,
          "DRBG28": 1,
          "Diffie-Hellman 33": 1,
          "Diffie-Hellman 34": 1,
          "HMAC30": 2,
          "RSA39": 1,
          "SHA-1": 6,
          "SHA-340": 1,
          "SHA-384": 1,
          "SHA2- 256": 1,
          "SHA2-224": 8,
          "SHA2-256": 8,
          "SHA2-384": 6,
          "SHA2-512": 5,
          "SHA2-512 2048": 1,
          "SHA3": 1,
          "SHA3 1": 1,
          "SHA3-256": 3,
          "SHS41": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 4,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "PBKDF": {
          "PBKDF": 4,
          "PBKDF2": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 6
          },
          "SHA2": {
            "SHA-384": 1
          },
          "SHA3": {
            "SHA3": 2,
            "SHA3-256": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 14
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-2": 17,
          "FIPS PUB 180-4": 1,
          "FIPS PUB 186-4": 3,
          "FIPS PUB 197": 3,
          "FIPS PUB 198-1": 1,
          "FIPS PUB 202": 1,
          "FIPS140-2": 2
        },
        "NIST": {
          "NIST SP 800-132": 1,
          "NIST SP 800-38D": 6,
          "NIST SP 800-90B": 2
        },
        "RFC": {
          "RFC 5288": 1,
          "RFC11": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 11,
            "AES-": 1
          }
        },
        "DES": {
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 8
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {
        "Samsung": {
          "Samsung": 2
        }
      },
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Corsec Security, Inc.",
      "/CreationDate": "D:20230313102407+01\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word 2019",
      "/ModDate": "D:20230313102407+01\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word 2019",
      "/Subject": "Tera2 PCoIP Zero Client Processors",
      "/Title": "FIPS 140-2 Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 1319379,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13592",
          "http://www.hp.com/",
          "http://www.corsec.com/",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=14570",
          "mailto:info@corsec.com",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13591",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/Validated-Modules/Search",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=13593"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 38
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "60be00319b2031385b2b8754f902fd40092ce14678c41cd10c63ec5454be48ca",
    "policy_txt_hash": "a6a422b2f9da83b3443f79bf6b2063f3c3f350dddab2713af49a72ac83ee47d6"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When configured and initialized as specified in the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/February 2023_010323_0649.pdf",
    "date_sunset": "2026-09-21",
    "description": "PC-over-IP (PCoIP) technology delivers a secure, high-definition and highly responsive computing experience. It uses advanced display compression to provide end-users with on-premises or cloud-based virtual machines as a convenient alternative to local computers. This virtual workspace architecture compresses, encrypts, and transmits only pixels to a broad range of software clients, mobile clients, thin clients, and stateless PCoIP Zero Clients, providing a highly secure enterprise environment.",
    "embodiment": "Multi-Chip Embedded",
    "exceptions": [
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": "21.01.5-FIPS",
    "historical_reason": null,
    "hw_versions": "TERA2140 (Part No. K4B1G1646G-BCH9 and MX29GL256ELT2I-90Q); TERA2321 (Part No. K4B2G1646B-HCH9 and MX25L25635EMI-12G)",
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Tera2 PCoIP Zero Client Processors",
    "module_type": "Hardware",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-02-15",
        "lab": "DEKRA Testing and Certification S.A.U",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-05-22",
        "lab": "DEKRA Testing and Certification S.A.U",
        "validation_type": "Update"
      }
    ],
    "vendor": "HP Inc.",
    "vendor_url": "http://www.hp.com"
  }
}