U.S. flag   An unofficial archive of your favorite United States government website

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #3652

Details

Module Name
Amazon Linux 2 Libreswan Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
5/7/2025
Validation Dates
05/08/2020
Overall Level
1
Caveat
When operated in FIPS mode with module Amazon Linux 2 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3646 operating in FIPS mode and Amazon Linux 2 OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #3553 operating in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Amazon Linux 2 Libreswan Cryptographic Module implements IKE protocol version 1 and version 2.
Tested Configuration(s)
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5 with PAA
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5 without PAA (single-user mode)
FIPS Algorithms
AES Certs. #C803 and #C804
CVL Certs. #C803 and #C807
DRBG Cert. #C803
DSA Cert. #C803
ECDSA Cert. #C803
HMAC Certs. #C523, #C524, #C525, #C526 and #C803
RSA Cert. #C803
SHS Cert. #C803
Triple-DES Cert. #C803
Allowed Algorithms
Diffie-Hellman (CVL Cert. #C803 with CVL Cert. #C807, key agreement; key establishment methodology provides between 112 bits and 202 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C803 with CVL Cert. #C807, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG
Software Versions
1.0

Vendor

Amazon Web Services, Inc.
1918 8th Ave.
Seattle, WA 98121
USA

Samartha Chandrashekar
amazon-linux-fips-external@amazon.com
 Raghuram Kota
amazon-linux-fips-external@amazon.com

Related Files

Security Policy
Consolidated Certificate

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0