Nupeye wallet uses the secure 256-bit Advanced Encryption Standard (AES) for encrypting information in your wallet. This is the same encryption method that many government organizations require to protect their data. On specific platforms, Nupeye AES encryption is also FIPS (Federal Information Processing Standard) compliant:.

Module Name
AWS Key Management Service HSM
Standard
FIPS 140-2
Status
Active
Overall Level
2
Caveat
Security Level Exceptions
  • Cryptographic Module Specification: Level 3
  • Roles, Services, and Authentication: Level 3
  • Physical Security: Level 3
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Hardware
Embodiment
Multi-Chip Stand Alone
Description
The Amazon AWS Key Management Service HSM is a multi-chip standalone hardware cryptographic appliance designed to provide dedicated cryptographic functions to meet the security and scalability requirements of the AWS Key Management Service (KMS). The cryptographic boundary is defined as the secure chassis of the appliance. All key materials are maintained exclusively in volatile memory in the appliance and are erased immediately upon detection of physical tampering.
Approved Algorithms
AES Cert. #4527
CKG vendor affirmed
CVL Certs. #1209
DRBG Cert. #1487
ECDSA Cert. #1102
HMAC Cert. #2987
KAS-SSC vendor affirmed
KBKDF Cert. #133
KDA vendor affirmed
KTS AES Cert. #4527
KTS vendor affirmed
RSA Cert. #2464
SHS Cert. #3708
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)

Amazon Linux 2 OpenSSL Cryptographic Module

Module Name
Amazon Linux 2 OpenSSL Cryptographic Module
Standard
FIPS 140-2
Status
Active
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Amazon Linux 2 OpenSSL Crypto Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for the applications running on Amazon Linux 2.
Tested Configuration(s)
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 with PAA
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 without PAA (single-user mode)
Approved Algorithms
AES Certs. #C523, #C524 and #C525
CVL Cert. #C523
DRBG Certs. #C523, #C524, #C525 and #C526
DSA Cert. #C523
ECDSA Cert. #C523
HMAC Certs. #C523, #C524, #C525 and #C526
KTS AES Certs. #C523, #C524 and #C525; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Certs. #C523, #C524 and #C525 and HMAC Certs. #C523, #C524, #C525 and #C526; key establishment methodology provides 128 or 256 bits of encryption strength
KTS Triple-DES Cert. #C523 and HMAC Certs. #C523, #C524, #C525 and #C526; key establishment methodology provides 112 bits of encryption strength
RSA Cert. #C523
SHS Certs. #C523, #, #C525 #
Triple-DES Cert. #C523
Allowed Algorithms
Diffie-Hellman (CVL Cert. #C523 with CVL Cert. #C523, key agreement; key establishment methodology provides between 112 and 220 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C523 with CVL Cert. #C523, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Amazon Linux 2 Libgcrypt Cryptographic Module

Module Name
Amazon Linux 2 Libgcrypt Cryptographic Module
Standard
FIPS 140-2
Status
Active
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Amazon Linux 2 Libgcrypt Cryptographic Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for the applications running on Amazon Linux 2.
Tested Configuration(s)
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 (single-user mode)
Approved Algorithms
AES Cert. #C693
DRBG Cert. #C693
DSA Cert. #C693
HMAC Cert. #C693
RSA Cert. #C693
SHS Cert. #C693
Triple-DES Cert. #C693
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
1.0

FIPS

Nupeye wallet uses the secure 256-bit Advanced Encryption Standard (AES) for encrypting information in your wallet. This is the same encryption method that many government organizations require to protect their data. On specific platforms, Nupeye wallet’s AES encryption is also FIPS (Federal Information Processing Standard) compliant:

FIPS Certification
Nupeye wallet uses Apple cryptographic libraries that have received certificates and been validated as conforming to the Advanced Encryption Standard (AES) Algorithm, as specified in Federal Information Processing Standard Publication 197, Advanced Encryption Standard. Please see the Advanced Encryption Standard Algorithm Validation List for more information and the full list of supported hardware and OS versions. Note that Apple’s older iOS and macOS platforms may be compliant as well.

The key used to encrypt your information is generated from your password. Nupeye wallet does not store your password in your wallet file, or anywhere on your mobile device or your Mac or PC (with one possible exception, if the user chooses to use a convenience technology such as Apple’s Touch ID with Nupeye wallet, then the password could be stored in a secure area protected by the device’s secure enclave).

AWS Nitro Card Security Engine

Module Name
AWS Nitro Card Security Engine
Standard
FIPS 140-2
Status
Active
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Mitigation of Other Attacks: N/A
Module Type
Firmware-Hybrid
Embodiment
Multi-Chip Stand Alone
Description
The AWS Nitro Card Security Engine is a multi-chip standalone firmware-hybrid module. The Approved cryptographic services provided by the module are: - Data encryption / decryption utilizing symmetric ciphers, i.e. AES algorithms. - Computation of hash values, i.e. SHA-256, SHA-512. - Message authentication utilizing HMAC-SHA256, HMAC-SHA512, hashing algorithms.
Tested Configuration(s)
  • Carbon Linux (Linux kernel 4.9.32) running on Cortex ARMv8 with AL5+
Approved Algorithms
AES Cert. #C997
HMAC Cert. #C2168
SHS Cert. #C997
Allowed Algorithms
N/A
Hardware Versions
AL5+
Firmware Versions
HAL-rel-3.2-uemu-fips