This page was not yet optimized for use on mobile devices.

AWS-LC Cryptographic Module (static)

Certificate #4816

Webpage information ?

Status	active
Validation dates	01.10.2024
Sunset date	30-09-2029
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)
Exceptions	Physical security: N/A Non-invasive security: N/A Documentation requirements: N/A Cryptographic module security policy: N/A
Description	AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
Vendor	Amazon Web Services Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy ?

Security target PDF TXT

Symmetric Algorithms

AES-128, AES-192, AES-256, AES, AES-, CAST, HMAC, HMAC-RIPEMD-160

Asymmetric Algorithms

ECDH, ECDSA, Diffie-Hellman

Hash functions

SHA-1, SHA-3, MD4, MD5, RIPEMD-160, PBKDF, PBKDF2

Schemes

MAC

Protocols

SSH, TLS, TLS 1.2, TLS 1.3

Randomness

DRBG, RBG

Elliptic Curves

P-224, P-256, P-384, P-521, secp256k1

Block cipher modes

OFB, GCM, CCM, XTS

Trusted Execution Environments

PSP, SSC

Security level

Level 1

Side-channel analysis

timing attacks, Fault Induction

Standards

FIPS 140-3, FIPS 2, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS 180-4, SP 800-56A, SP 800-56C, SP 800-135, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-38D, PKCS 1, PKCS#1, RFC5288, RFC8446, RFC 4253, RFC 6668, RFC 5288

File metadata

Author	Hawes, David J. (Fed)
Creation date	D:20240930081824-04'00'
Modification date	D:20240930082100-04'00'
Pages	60
Creator	Acrobat PDFMaker 24 for Word
Producer	Adobe PDF Library 24.3.144

Heuristics ?

No heuristics are available for this certificate.

References ?

No references are available for this certificate.

Updates ?

08.10.2024 The certificate was first processed.

New certificate

A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4816,
  "dgst": "21445af8f7acc5de",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 2
          },
          "ECDSA": {
            "ECDSA": 105
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 5
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CCM": {
          "CCM": 12
        },
        "GCM": {
          "GCM": 25
        },
        "OFB": {
          "OFB": 3
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "SSH": {
          "SSH": 32
        },
        "TLS": {
          "TLS": {
            "TLS": 76,
            "TLS 1.2": 5,
            "TLS 1.3": 4
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 6
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 92,
          "P-256": 116,
          "P-384": 94,
          "P-521": 110,
          "secp256k1": 2
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 62
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 7,
          "AES 256": 1,
          "AES-128": 8,
          "AES-192": 8,
          "AES-256": 15,
          "HMAC-SHA-1": 28,
          "HMAC-SHA-3": 4,
          "HMAC-SHA1": 4,
          "PKCS 1": 7,
          "PKCS#1": 8,
          "SHA-1": 45,
          "SHA-3": 4,
          "SHA2- 256": 3,
          "SHA2- 384": 13,
          "SHA2- 512": 1,
          "SHA2-224": 39,
          "SHA2-256": 68,
          "SHA2-384": 35,
          "SHA2-512": 59
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 3
          }
        },
        "PBKDF": {
          "PBKDF": 28,
          "PBKDF2": 6
        },
        "RIPEMD": {
          "RIPEMD-160": 3
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 45
          },
          "SHA3": {
            "SHA-3": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 43
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {
        "FI": {
          "Fault Induction": 2
        },
        "SCA": {
          "timing attacks": 2
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 66,
          "FIPS 180-4": 42,
          "FIPS 186-4": 14,
          "FIPS 186-5": 65,
          "FIPS 198-1": 42,
          "FIPS 2": 15,
          "FIPS PUB 140-3": 1,
          "FIPS186-4": 25,
          "FIPS186-5": 85
        },
        "NIST": {
          "SP 800-132": 11,
          "SP 800-135": 14,
          "SP 800-38A": 31,
          "SP 800-38B": 6,
          "SP 800-38C": 6,
          "SP 800-38D": 26,
          "SP 800-38E": 7,
          "SP 800-38F": 12,
          "SP 800-56A": 7,
          "SP 800-56C": 7,
          "SP 800-90A": 6
        },
        "PKCS": {
          "PKCS 1": 7,
          "PKCS#1": 4
        },
        "RFC": {
          "RFC 4253": 1,
          "RFC 5288": 1,
          "RFC 6668": 1,
          "RFC5288": 1,
          "RFC8446": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 81,
            "AES-": 2,
            "AES-128": 8,
            "AES-192": 8,
            "AES-256": 15
          },
          "CAST": {
            "CAST": 37
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 25,
            "HMAC-RIPEMD-160": 1
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 2
        },
        "IBM": {
          "SSC": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Hawes, David J. (Fed)",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20240930081824-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 24 for Word",
      "/Keywords": "",
      "/ModDate": "D:20240930082100-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 24.3.144",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 765187,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://github.com/aws/aws-lc/archive/refs/tags/AWS-LC-FIPS-2.0.0.zip./",
          "http://www.atsec.com/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 60
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "ef1e501b010ba8db4fd3f09071d61f7774c52da57f03e98909af42e806152657",
    "policy_txt_hash": "a38dfc3fb6f076a322e6463c5874d60ebaacbc6d0287b35f4022162bf09a50cc"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)",
    "certificate_pdf_url": null,
    "date_sunset": "2029-09-30",
    "description": "AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It \u0456s based on code from the Google BoringSSL project and the OpenSSL project.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "AWS-LC Cryptographic Module (static)",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-10-01",
        "lab": "ATSEC INFORMATION SECURITY CORP",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Amazon Web Services Inc.",
    "vendor_url": "http://aws.amazon.com"
  }
}