Skip to content
This repository was archived by the owner on Apr 15, 2026. It is now read-only.

Commit 36e5998

Browse files
ethanolivertroygithub-actions[bot]
ethanolivertroy
authored and
github-actions[bot]
committed
docs: Update validation report [skip ci]
1 parent d4cba78 commit 36e5998

4 files changed

Lines changed: 130 additions & 4 deletions

File tree

‎reports/archive/validation-summary-20260309-072714.md‎

Lines changed: 126 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,126 @@
1+
# Cryptographic Module Validation Report
2+
3+
**Generated:** 2026-03-09T07:27:14.361216Z
4+
**Total Modules:** 3
5+
6+
---
7+
8+
## Summary
9+
10+
| Metric | Count |
11+
|--------|-------|
12+
| Total Modules | 3 |
13+
| Compliant | 3 |
14+
| Non-Compliant | 0 |
15+
| Warnings | 4 |
16+
17+
## Action Required (POA&M)
18+
19+
| Module | Certificate | Status | Issue |
20+
|--------|-------------|--------|-------|
21+
| openssl-fips-provider | #4282 | None | Module name may not match CMVP record: declared='OpenSSL FIPS Provider', CMVP='C |
22+
| legacy-tls-library | #2345 | Historical | Certificate #2345 is HISTORICAL. Document in POA&M and plan for replacement per |
23+
| aws-kms-hsm | #4523 | None | Module name may not match CMVP record: declared='AWS Key Management Service HSM' |
24+
25+
---
26+
27+
## Module Inventory by Data Classification
28+
29+
### Data in Transit (DIT)
30+
31+
- **openssl-fips-provider** (#4282) - TLS 1.3 encryption for API endpoints
32+
- **legacy-tls-library** (#2345) - TLS encryption for legacy application - migration planned
33+
34+
### Data at Rest (DAR)
35+
36+
- **aws-kms-hsm** (#4523) - Envelope encryption key management for data at rest
37+
38+
### Data in Use (DIU)
39+
40+
*No modules registered for this classification*
41+
42+
---
43+
44+
## Validation Details
45+
46+
<details>
47+
<summary>Full Validation Log (JSON)</summary>
48+
49+
```json
50+
{
51+
"timestamp": "2026-03-09T07:27:14.361216Z",
52+
"totalModules": 3,
53+
"validModules": 3,
54+
"invalidModules": 0,
55+
"warningsCount": 4,
56+
"errors": [],
57+
"warnings": [
58+
{
59+
"module": "openssl-fips-provider",
60+
"file": "modules/data-in-transit/openssl-fips-provider.yaml",
61+
"message": "Module name may not match CMVP record: declared='OpenSSL FIPS Provider', CMVP='Cryptographic Module Validation Program CMVP'"
62+
},
63+
{
64+
"module": "legacy-tls-library",
65+
"file": "modules/data-in-transit/legacy-tls-library.yaml",
66+
"message": "Certificate #2345 is HISTORICAL. Document in POA&M and plan for replacement per FedRAMP policy."
67+
},
68+
{
69+
"module": "legacy-tls-library",
70+
"file": "modules/data-in-transit/legacy-tls-library.yaml",
71+
"message": "FIPS 140-2 modules will not be acceptable after September 21, 2026. Consider planning migration to FIPS 140-3."
72+
},
73+
{
74+
"module": "aws-kms-hsm",
75+
"file": "modules/data-at-rest/aws-kms.yaml",
76+
"message": "Module name may not match CMVP record: declared='AWS Key Management Service HSM', CMVP='Cryptographic Module Validation Program CMVP'"
77+
}
78+
],
79+
"results": [
80+
{
81+
"module": "openssl-fips-provider",
82+
"file": "modules/data-in-transit/openssl-fips-provider.yaml",
83+
"valid": true,
84+
"certificateNumber": 4282,
85+
"cmvpStatus": null,
86+
"errors": [],
87+
"warnings": [
88+
"Module name may not match CMVP record: declared='OpenSSL FIPS Provider', CMVP='Cryptographic Module Validation Program CMVP'"
89+
]
90+
},
91+
{
92+
"module": "legacy-tls-library",
93+
"file": "modules/data-in-transit/legacy-tls-library.yaml",
94+
"valid": true,
95+
"certificateNumber": 2345,
96+
"cmvpStatus": "Historical",
97+
"errors": [],
98+
"warnings": [
99+
"Certificate #2345 is HISTORICAL. Document in POA&M and plan for replacement per FedRAMP policy.",
100+
"FIPS 140-2 modules will not be acceptable after September 21, 2026. Consider planning migration to FIPS 140-3."
101+
]
102+
},
103+
{
104+
"module": "aws-kms-hsm",
105+
"file": "modules/data-at-rest/aws-kms.yaml",
106+
"valid": true,
107+
"certificateNumber": 4523,
108+
"cmvpStatus": null,
109+
"errors": [],
110+
"warnings": [
111+
"Module name may not match CMVP record: declared='AWS Key Management Service HSM', CMVP='Cryptographic Module Validation Program CMVP'"
112+
]
113+
}
114+
]
115+
}
116+
```
117+
118+
</details>
119+
120+
---
121+
122+
## References
123+
124+
- [NIST CMVP](https://csrc.nist.gov/projects/cryptographic-module-validation-program)
125+
- [FedRAMP Policy for Cryptographic Module Selection](https://www.fedramp.gov/resources/documents/)
126+
- [FIPS 140-3 Standard](https://csrc.nist.gov/publications/detail/fips/140/3/final)

‎reports/latest/validation-results.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"timestamp": "2026-03-02T07:25:47.968239Z",
2+
"timestamp": "2026-03-09T07:27:14.361216Z",
33
"totalModules": 3,
44
"validModules": 3,
55
"invalidModules": 0,

‎reports/latest/validation-summary.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"timestamp": "2026-03-02T07:25:47.968239Z",
2+
"timestamp": "2026-03-09T07:27:14.361216Z",
33
"summary": {
44
"total": 3,
55
"compliant": 0,

‎reports/latest/validation-summary.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Cryptographic Module Validation Report
22

3-
**Generated:** 2026-03-02T07:25:47.968239Z
3+
**Generated:** 2026-03-09T07:27:14.361216Z
44
**Total Modules:** 3
55

66
---
@@ -48,7 +48,7 @@
4848

4949
```json
5050
{
51-
"timestamp": "2026-03-02T07:25:47.968239Z",
51+
"timestamp": "2026-03-09T07:27:14.361216Z",
5252
"totalModules": 3,
5353
"validModules": 3,
5454
"invalidModules": 0,

0 commit comments

Comments
 (0)