U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

This is an archive
(replace .gov by .rip)

Cryptographic Module Validation Program CMVP

Certificate #3553

Details

Module Name
Amazon Linux 2 OpenSSL Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
10/22/2024
Validation Dates
10/23/2019
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Amazon Linux 2 OpenSSL Crypto Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for the applications running on Amazon Linux 2.
Tested Configuration(s)
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 with PAA
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 without PAA (single-user mode)
FIPS Algorithms
AES Certs. #C523, #C524 and #C525
CVL Cert. #C523
DRBG Certs. #C523, #C524, #C525 and #C526
DSA Cert. #C523
ECDSA Cert. #C523
HMAC Certs. #C523, #C524, #C525 and #C526
KTS AES Certs. #C523, #C524 and #C525; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Certs. #C523, #C524 and #C525 and HMAC Certs. #C523, #C524, #C525 and #C526; key establishment methodology provides 128 or 256 bits of encryption strength
KTS Triple-DES Cert. #C523 and HMAC Certs. #C523, #C524, #C525 and #C526; key establishment methodology provides 112 bits of encryption strength
RSA Cert. #C523
SHS Certs. #C523, #C524, #C525 and #C526
Triple-DES Cert. #C523
Allowed Algorithms
Diffie-Hellman (CVL Cert. #C523 with CVL Cert. #C523, key agreement; key establishment methodology provides between 112 and 220 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C523 with CVL Cert. #C523, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
1.0

Vendor

Amazon Web Services, Inc.
1918 8th Ave.
Seattle, WA 98121
USA

Samartha Chandrashekar
amazon-linux-fips-external@amazon.com
Raghuram Kota
amazon-linux-fips-external@amazon.com

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0