Arm TrustZone® CryptoCell 312 (CRYPTOCELL) is compliant with the protocol specifications and standards shown in the following table.
| Algorithm family | Identification code | Document title |
|---|---|---|
| TRNG | NIST SP 800-90B | Recommendation for the Entropy Sources Used for Random Bit Generation |
| BSI AIS-31 | Functionality Classes and Evaluation Methodology for True Random Number Generators | |
| FIPS 140-2 | Security Requirements for Cryptographic Modules | |
| PRNG | NIST SP 800-90A | Recommendation for Random Number Generation Using Deterministic Random Bit Generators |
| Stream cipher | Chacha | ChaCha, a variant of Salsa20, Daniel J. Bernstein, January 28th 2008 |
| MAC | Poly1305 |
The Poly1305-AES message-authentication code, Daniel J. Bernstein Cryptography in NaCl, Daniel J. Bernstein |
| Key agreement | SRP | The Secure Remote Password Protocol, Thomas Wu, November 11th 1997 |
| Key derivation | NIST SP 800-108 | Recommendation for Key Derivation Using Pseudorandom Functions. |
| AES | FIPS-197 | Advanced Encryption Standard (AES). Compliant with 128 bits, 192 bits, and 256 bits key size. |
| NIST SP 800-38A | Recommendation for Block Cipher Modes of Operation - Methods and Techniques | |
| NIST SP 800-38B | Recommendation for Block Cipher Modes of Operation: The CMAC Mode for Authentication | |
| NIST SP 800-38C | Recommendation for Block Cipher Modes of Operation: The CCM Mode for Authentication and Confidentiality | |
| ISO/IEC 9797-1 | AES CBC-MAC per ISO/IEC 9797-1 MAC algorithm 1 | |
| IEEE 802.15.4-2011 | IEEE Standard for Local and metropolitan area networks - Part 15.4: Low-Rate Wireless Personal Area Networks (LR-WPANs), Annex B.4: Specification of generic CCM* mode of operation | |
| Hash | FIPS 180-4 | Secure Hash Standard (SHA1, SHA-224, SHA-256) |
| RFC2104 | HMAC: Keyed-Hashing for Message Authentication | |
| RSA | PKCS#1 | Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications v1.5/2.1. RSA signature verification supported up to key sizes of 4096 bits. RSA key generation supported up to key sizes of 3072 bits. |
| Diffie-Hellman | ANSI X9.42 | Public Key Cryptography for the Financial Services Industry: Agreement of Symmetric Keys Using Discrete Logarithm Cryptography |
| PKCS#3 | Diffie-Hellman Key-Agreement Standard | |
| ECC | ANSI X9.63 | Public Key Cryptography for the Financial Services Industry - Key Agreement and Key Transport Using Elliptic Curve Cryptography |
| IEEE 1363 | Standard Specifications for Public-Key Cryptography | |
| ANSI X9.62 | Public Key Cryptography For The Financial Services Industry: The Elliptic Curve Digital Signature Algorithm (ECDSA) | |
| Ed25519 | Edwards-curve, Ed25519: high-speed high-security signatures, Daniel J. Bernstein, Niels Duif, Tanja Lange, Peter Schwabe, and Bo-Yin Yang | |
| Curve25519 | Montgomery curve, Curve25519: new Diffie-Hellman speed records, Daniel J. Bernstein | |
| FIPS 186-4 | Digital Signature Standard (DSS) | |
| SEC 2 | Recommended Elliptic Curve Domain Parameters, Certicom Research | |
| NIST SP 800-56A rev. 2 | Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography |