{"_type": "sec_certs.sample.fips.FIPSCertificate", "dgst": "4681639741f445ef", "cert_id": 5429, "web_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.WebData", "module_name": "AWS-LC Cryptographic Module (dynamic)", "validation_history": [{"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry", "date": "2026-07-20", "validation_type": "Initial", "lab": "atsec information security corporation"}], "vendor_url": "http://aws.amazon.com", "vendor": "Amazon Web Services Inc.", "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2026_040826_0807.pdf", "module_type": "Software", "standard": "FIPS 140-3", "status": "active", "level": 1, "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.", "exceptions": ["Physical security: N/A", "Non-invasive security: N/A"], "embodiment": "MultiChipStand", "description": "AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It \u0456s based on code from the Google BoringSSL project and the OpenSSL project.", "tested_conf": null, "hw_versions": null, "fw_versions": null, "sw_versions": null, "mentioned_certs": {}, "historical_reason": null, "date_sunset": "2029-08-13", "revoked_reason": null, "revoked_link": null}, "pdf_data": {"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData", "keywords": {"fips_cert_id": {}, "fips_security_level": {"Level": {"Level 1": 3}}, "fips_certlike": {"Certlike": {"HMAC-SHA-1": 2, "HMAC-SHA1": 2, "HMAC-SHA-3": 6, "HMAC- SHA1": 2, "SHA2-224": 6, "SHA2-256": 85, "SHA2-384": 7, "SHA2-512": 25, "SHA-1": 33, "SHA2- 224": 3, "SHA2- 512": 3, "SHA-3": 7, "SHA1": 2, "SHA-256": 21, "- PKCS 1": 1, "PKCS#1": 50, "AES-256": 8, "AES-128": 1, "AES-192": 1, "AES- 256": 1, "PKCS 1": 1}}, "vendor": {}, "eval_facility": {"atsec": {"atsec": 65}}, "symmetric_crypto": {"AES_competition": {"AES": {"AES-256": 8, "AES-128": 1, "AES-192": 1, "AES-": 2, "AES": 38}, "CAST": {"CAST": 258}}, "constructions": {"MAC": {"HMAC": 16, "CMAC": 2}}}, "asymmetric_crypto": {"ECC": {"ECDH": {"ECDH": 3}, "ECDSA": {"ECDSA": 81}, "ECC": {"ECC": 1}}, "FF": {"DH": {"Diffie-Hellman": 3}}}, "pq_crypto": {}, "hash_function": {"SHA": {"SHA1": {"SHA-1": 33, "SHA1": 2}, "SHA2": {"SHA-256": 21}, "SHA3": {"SHA-3": 7}}, "MD": {"MD4": {"MD4": 3}, "MD5": {"MD5": 4}}, "RIPEMD": {"RIPEMD-160": 6}, "PBKDF": {"PBKDF": 31, "PBKDF2": 5}}, "crypto_scheme": {"MAC": {"MAC": 18}, "KEX": {"Key Exchange": 2}, "KA": {"Key Agreement": 2}}, "crypto_protocol": {"SSH": {"SSH": 18}, "TLS": {"TLS": {"TLS": 64, "TLS 1.2": 3, "TLS 1.3": 4}}, "IKE": {"IKE": 1, "IKEv2": 1}, "IPsec": {"IPsec": 2}}, "randomness": {"PRNG": {"DRBG": 37}, "RNG": {"RBG": 2}}, "cipher_mode": {"ECB": {"ECB": 1}, "CBC": {"CBC": 2}, "CTR": {"CTR": 1}, "CFB": {"CFB": 1}, "OFB": {"OFB": 4}, "GCM": {"GCM": 9}, "CCM": {"CCM": 5}, "XTS": {"XTS": 11}}, "ecc_curve": {"NIST": {"P-224": 24, "P-256": 54, "P-384": 24, "P-521": 12, "secp256k1": 3}}, "crypto_engine": {}, "tls_cipher_suite": {}, "crypto_library": {}, "vulnerability": {}, "side_channel_analysis": {"SCA": {"timing attacks": 2}}, "device_model": {}, "tee_name": {"AMD": {"PSP": 5}, "IBM": {"SSC": 5}}, "os_name": {}, "cplc_data": {}, "ic_data_group": {}, "standard_id": {"FIPS": {"FIPS 140-3": 72, "FIPS 2": 16, "FIPS PUB 140-3": 2, "FIPS186-5": 98, "FIPS 186-5": 16, "FIPS186-4": 5, "FIPS 186-4": 9, "FIPS 198-1": 7, "FIPS 180-4": 7, "FIPS 197": 1, "FIPS 202": 1}, "NIST": {"SP 800-38A": 5, "SP 800-38C": 2, "SP 800-38B": 2, "SP 800-38D": 3, "SP 800-38F": 3, "SP 800-38E": 3, "SP 800-90A": 1, "SP 800-56A": 1, "SP 800-56C": 1, "SP 800-135": 2, "SP 800-132": 5, "SP 800-90B": 1}, "PKCS": {"PKCS 1": 1, "PKCS#1": 25}, "RFC": {"RFC5288": 1, "RFC8446": 1, "RFC 4253": 1, "RFC 6668": 1, "RFC 5288": 1, "RFC 3526": 1, "RFC 4106": 1, "RFC 7296": 1}}, "javacard_version": {}, "javacard_api_const": {}, "javacard_packages": {}, "certification_process": {}}, "policy_metadata": {"pdf_file_size_bytes": 891318, "pdf_is_encrypted": false, "pdf_number_of_pages": 63, "/Producer": "Microsoft\u00ae Word for Microsoft 365", "/Creator": "Microsoft\u00ae Word for Microsoft 365", "/CreationDate": "D:20260720145011-04'00'", "/ModDate": "D:20260720145011-04'00'", "pdf_hyperlinks": {"_type": "Set", "elements": ["https://www.ietf.org/rfc/rfc3526.txt", "https://github.com/aws/aws-lc/archive/refs/tags/AWS-LC-FIPS-2.0.0.zip./", "https://datatracker.ietf.org/doc/html/rfc4106", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf", "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements", "http://www.atsec.com/", "https://www.ietf.org/rfc/rfc3447.txt", "https://datatracker.ietf.org/doc/html/rfc7296", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197-upd1.pdf", "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf", "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf", "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf", "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf", "https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf"]}}}, "heuristics": {"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics", "algorithms": {"_type": "Set", "elements": ["SHA2-512/256A4508", "HMAC-SHA2-512A4508", "AES-XTS Testing Revision 2.0A4501", "SHA2-256A4508", "ECDSA KeyVer (FIPS186-5)A4508", "RSA SigVer (FIPS186-5)A4508", "AES-GCMA4504", "SHA-1A4508", "SHA2-224A4508", "AES-GMACA4504", "AES-KWPA4501", "AES-CCMA4501", "HMAC-SHA2-512/256A4508", "ECDSA SigVer (FIPS186-4)A4508", "HMAC-SHA2-256A4508", "ECDSA SigVer (FIPS186-5)A4508", "KAS-ECC-SSC Sp800-56Ar3A4508", "RSA SigVer (FIPS186-4)A4508", "HMAC-SHA2-224A4508", "PBKDFA4508", "HMAC-SHA-1A4508", "SHA2-512A4508", "Counter DRBGA4501", "AES-ECBA4504", "HMAC-SHA2-384A4508", "ECDSA SigGen (FIPS186-5)A4508", "ECDSA KeyGen (FIPS186-5)A4508", "AES-CTRA4501", "AES-KWA4501", "RSA KeyGen (FIPS186-5)A4508", "KDA HKDF Sp800-56Cr1A4508", "AES-CBCA4501", "RSA SigGen (FIPS186-5)A4508", "SHA2-384A4508", "KDF TLSA4508", "AES-CMACA4501", "KDF SSHA4508"]}, "extracted_versions": {"_type": "Set", "elements": ["-"]}, "cpe_matches": null, "verified_cpe_matches": null, "related_cves": null, "policy_prunned_references": {"_type": "Set", "elements": []}, "module_prunned_references": {"_type": "Set", "elements": []}, "policy_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "module_processed_references": {"_type": "sec_certs.sample.certificate.References", "directly_referenced_by": null, "indirectly_referenced_by": null, "directly_referencing": null, "indirectly_referencing": null}, "direct_transitive_cves": null, "indirect_transitive_cves": null}, "state": {"_type": "sec_certs.sample.fips.InternalState", "module": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": null, "txt_hash": null, "json_hash": null}, "policy": {"_type": "sec_certs.sample.document_state.DocumentState", "download_ok": true, "convert_ok": true, "extract_ok": true, "source_hash": "f3848155226edbf10489e3bf64c776496b22e4b3cbfeebdfb7269fdf4752addc", "txt_hash": "cb7ffbd6ee3b4c4917f41f06489a76d5f72991fe7ca482c51b5d5fc62d965b12", "json_hash": null}}}