About STM32 Cryptographic Library Certified by FIPS

[Woody]

Our product requires FIPS certification, and the chip is stm32u595. I found that the stm32 cortex-m33 core already has a library certified by the CAVP algorithm, but the version of the STM32CubeExpansion_Crypto-V4.2.0 library does not match the certified version.

Where can I download the certified version 4.0.0 build1 ?
Because the client and FIPS certification require code review, can you provide the source code?

 

Cryptographic Algorithm Validation Program | CSRC

Data brief - X-CUBE-CRYPTOLIB - STM32 cryptographic library software expansion for STM32Cube

 

[Saket_Om]

Hello @Woody 

Thank you for bringing this issue to our attention.

I reported this internally.

Internal ticket number: 210626 (This is an internal tracking number and is not accessible or usable by customers).

[Saket_Om]

Hello @Woody 

All X-Cube Cryptolib package v4.x.x available on ST.Com, except specific notice in the package release note, includes the certified version of the libraries.

please check the middleware release note, all is already written inside it about included library files certification status.

[Woody]

the FIPS certified CryptoLib version is 4.0.0 build1, unable to find on the page, please help me confirm

Thanks,

ref link: 

X-CUBE-CRYPTOLIB - STM32 cryptographic firmware library software expansion for STM32Cube - STMicroelectronics