kbrain

HID/Mercury FIPS Provider for OpenSSL 3

[email protected] - FIPS 140 #4923

activeLevel 1

The HID/Mercury FIPS Provider for OpenSSL 3 is a secure cryptographic module that enhances the cryptographic capabilities of HID and Mercury intelligent controllers, complying with the FIPS 140-3 standard. It integrates seamlessly with OpenSSL 3 to offer advanced encryption, decryption, hashing, and key management functions, ensuring high performance and robust security. Designed to meet stringent industry requirements, this provider ensures that all cryptographic operations are executed securely and efficiently, making it ideal for applications demanding the highest level of security assurance.

Key facts

Scheme
FIPS 140
Certificate
4923
Standard
FIPS 140-3
Security level
Level 1
Status
active
Vendor
[email protected]
Module type
Software
Embodiment
Multi-Chip Stand Alone
Lab
Acumen Security
First validated
December 18, 2024
Sunset date
July 10, 2029
Caveat
No assurance of the minimum strength of generated SSPs (e.g., keys).

Algorithms

  • AES-CBC
  • AES-CBC-CS1
  • AES-CBC-CS2
  • AES-CBC-CS3
  • AES-CCM
  • AES-CFB1
  • AES-CFB128
  • AES-CFB8
  • AES-CMAC
  • AES-CTR
  • AES-ECB
  • AES-GCM
  • AES-GMAC
  • AES-KW
  • AES-KWP
  • AES-OFB
  • AES-XTS Testing Revision 2.0
  • Counter DRBG
  • DSA KeyGen (FIPS186-4)
  • DSA PQGGen (FIPS186-4)
  • DSA PQGVer (FIPS186-4)
  • DSA SigGen (FIPS186-4)
  • DSA SigVer (FIPS186-4)
  • ECDSA KeyGen (FIPS186-4)
  • ECDSA KeyVer (FIPS186-4)
  • ECDSA SigGen (FIPS186-4)
  • ECDSA SigVer (FIPS186-4)
  • EDDSA KeyGen
  • EDDSA KeyVer
  • EDDSA SigGen
  • EDDSA SigVer
  • Hash DRBG
  • HMAC DRBG
  • HMAC-SHA-1
  • HMAC-SHA2-224
  • HMAC-SHA2-256
  • HMAC-SHA2-384
  • HMAC-SHA2-512
  • HMAC-SHA2-512/224
  • HMAC-SHA2-512/256
  • HMAC-SHA3-224
  • HMAC-SHA3-256
  • HMAC-SHA3-384
  • HMAC-SHA3-512
  • KAS-ECC CDH-Component SP800-56Ar3
  • KAS-ECC-SSC Sp800-56Ar3
  • KAS-FFC-SSC Sp800-56Ar3
  • KAS-IFC-SSC
  • KDA HKDF SP800-56Cr2
  • KDA OneStep SP800-56Cr2
  • KDA TwoStep SP800-56Cr2
  • KDF ANS 9.42
  • KDF ANS 9.63
  • KDF SP800-108
  • KDF SSHA4481
  • KMAC-128
  • KMAC-256
  • KTS-IFC
  • PBKDF
  • RSA KeyGen (FIPS186-4)
  • RSA SigGen (FIPS186-4)
  • RSA SigGen (FIPS186-5)
  • RSA Signature Primitive
  • RSA SigVer (FIPS186-4)
  • RSA SigVer (FIPS186-5)
  • Safe Primes Key Generation
  • Safe Primes Key Verification
  • SHA-1
  • SHA2-224
  • SHA2-256
  • SHA2-384
  • SHA2-512
  • SHA2-512/224
  • SHA2-512/256
  • SHA3-224
  • SHA3-256
  • SHA3-384
  • SHA3-512
  • SHAKE-128
  • SHAKE-256
  • TLS v1.2 KDF RFC7627
  • TLS v1.3 KDF

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain