This page was not yet optimized for use on mobile devices.
Amazon Linux 2023 NSS Cryptographic Module
Certificate #5014
Webpage information
Security policy
Symmetric Algorithms
AES, AES-, CAST, RC2, RC4, DES, Triple-DES, ChaCha20, Camellia, SEED, HMAC, HMAC-SHA-512, CBC-MAC, CMACAsymmetric Algorithms
ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSAHash functions
SHA-1, SHA-256, SHA-224, SHA-384, SHA-512, SHA3-256, MD5, PBKDF2, PBKDFSchemes
MACProtocols
SSL, TLS, TLS v1.2, TLS 1.2, TLS 1.3, IKEv2, IKEv1, IKERandomness
DRBG, RNG, RBGLibraries
NSSElliptic Curves
P-256, P-384, P-521, P-192Block cipher modes
ECB, CBC, CTR, GCMTrusted Execution Environments
PSP, SSCSecurity level
Level 1Side-channel analysis
Timing attacks, Timing attack, timing attacksStandards
FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-2, FIPS 180-4, FIPS 186-2, FIPS 186-5, FIPS140-3, FIPS180-4, FIPS186-5, FIPS197, FIPS198-1, SP 800-38A, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-135, SP 800-108, SP 800-132, PKCS#5, PKCS#7, PKCS#11, PKCS#12, PKCS 1, PKCS#1, RFC7627, RFC 5288, RFC8446, RFC 5996, RFC 3526, RFC 7919, X.509File metadata
| Creation date | D:20250501115344-04'00' |
|---|---|
| Modification date | D:20250501115344-04'00' |
| Pages | 52 |
| Creator | Microsoft® Word for Microsoft 365 |
| Producer | Microsoft® Word for Microsoft 365 |
Heuristics
CPE matches
References
No references are available for this certificate.
Updates
-
05.05.2025 The certificate was first processed.
New certificate
A new FIPS 140 certificate with the product name Amazon Linux 2023 NSS Cryptographic Module was processed.
Raw data
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 5014,
"dgst": "556da99bfbcef832",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": []
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:amazon:linux_2:-:*:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"2023"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 6
},
"ECDSA": {
"ECDSA": 49
}
},
"FF": {
"DH": {
"DH": 24,
"Diffie-Hellman": 6
},
"DSA": {
"DSA": 39
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 6
},
"CTR": {
"CTR": 6
},
"ECB": {
"ECB": 6
},
"GCM": {
"GCM": 27
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"NSS": {
"NSS": 62
}
},
"crypto_protocol": {
"IKE": {
"IKE": 1,
"IKEv1": 2,
"IKEv2": 24
},
"TLS": {
"SSL": {
"SSL": 2
},
"TLS": {
"TLS": 33,
"TLS 1.2": 12,
"TLS 1.3": 4,
"TLS v1.2": 3
}
}
},
"crypto_scheme": {
"MAC": {
"MAC": 14
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 16,
"P-256": 20,
"P-384": 22,
"P-521": 14
}
},
"eval_facility": {
"atsec": {
"atsec": 3
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"- PKCS 1": 3,
"DRBG 440": 1,
"HMAC SHA-256": 1,
"HMAC-SHA-1": 4,
"HMAC-SHA-512": 2,
"PKCS 1": 3,
"PKCS#1": 16,
"PKCS#11": 4,
"PKCS#12": 6,
"PKCS#5": 6,
"PKCS#7": 2,
"SHA- 256": 4,
"SHA- 384": 1,
"SHA-1": 19,
"SHA-224": 6,
"SHA-256": 21,
"SHA-384": 8,
"SHA-512": 9,
"SHA2-224": 8,
"SHA2-256": 10,
"SHA2-384": 10,
"SHA2-512": 9,
"SHA3-256": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 3
}
},
"hash_function": {
"MD": {
"MD5": {
"MD5": 19
}
},
"PBKDF": {
"PBKDF": 11,
"PBKDF2": 11
},
"SHA": {
"SHA1": {
"SHA-1": 19
},
"SHA2": {
"SHA-224": 6,
"SHA-256": 21,
"SHA-384": 8,
"SHA-512": 9
},
"SHA3": {
"SHA3-256": 1
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 36
},
"RNG": {
"RBG": 2,
"RNG": 2
}
},
"side_channel_analysis": {
"SCA": {
"Timing attack": 1,
"Timing attacks": 2,
"timing attacks": 1
}
},
"standard_id": {
"FIPS": {
"FIPS 140-3": 61,
"FIPS 180-4": 4,
"FIPS 186-2": 1,
"FIPS 186-4": 14,
"FIPS 186-5": 1,
"FIPS 198-1": 4,
"FIPS PUB 140-3": 2,
"FIPS140-3": 1,
"FIPS180-4": 1,
"FIPS186-2": 2,
"FIPS186-4": 28,
"FIPS186-5": 1,
"FIPS197": 1,
"FIPS198-1": 1
},
"NIST": {
"SP 800-108": 1,
"SP 800-132": 5,
"SP 800-135": 3,
"SP 800-38A": 11,
"SP 800-38B": 2,
"SP 800-38D": 6,
"SP 800-38F": 7,
"SP 800-56A": 3,
"SP 800-56C": 1,
"SP 800-90A": 1
},
"PKCS": {
"PKCS 1": 3,
"PKCS#1": 8,
"PKCS#11": 2,
"PKCS#12": 3,
"PKCS#5": 3,
"PKCS#7": 1
},
"RFC": {
"RFC 3526": 1,
"RFC 5288": 2,
"RFC 5996": 1,
"RFC 7919": 1,
"RFC7627": 4,
"RFC8446": 2
},
"X509": {
"X.509": 1
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 70,
"AES-": 9
},
"CAST": {
"CAST": 73
},
"RC": {
"RC2": 3,
"RC4": 3
}
},
"DES": {
"3DES": {
"Triple-DES": 5
},
"DES": {
"DES": 6
}
},
"constructions": {
"MAC": {
"CBC-MAC": 2,
"CMAC": 6,
"HMAC": 19,
"HMAC-SHA-512": 1
}
},
"djb": {
"ChaCha": {
"ChaCha20": 3
}
},
"miscellaneous": {
"Camellia": {
"Camellia": 5
},
"SEED": {
"SEED": 5
}
}
},
"tee_name": {
"AMD": {
"PSP": 5
},
"IBM": {
"SSC": 2
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"policy_metadata": {
"/CreationDate": "D:20250501115344-04\u002700\u0027",
"/Creator": "Microsoft\u00ae Word for Microsoft 365",
"/ModDate": "D:20250501115344-04\u002700\u0027",
"/Producer": "Microsoft\u00ae Word for Microsoft 365",
"pdf_file_size_bytes": 653804,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
"http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar1.pdf",
"http://www.atsec.com/",
"https://docs.aws.amazon.com/linux/al2023/ug/fips-mode.html",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"http://www.ietf.org/rfc/rfc3447.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://doi.org/10.6028/NIST.FIPS.140-3",
"http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
"http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 52
}
},
"state": {
"_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
"module_download_ok": true,
"module_extract_ok": true,
"policy_convert_garbage": false,
"policy_convert_ok": true,
"policy_download_ok": true,
"policy_extract_ok": true,
"policy_pdf_hash": "41c81599c46044b14873b930346149d9f9a2f35a3fcecacc123dba99ba9b3c82",
"policy_txt_hash": "291e6a13a3860ba390eafaf7e0131233695424fda1c77a58940a624fcc904727"
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy.",
"certificate_pdf_url": null,
"date_sunset": "2030-05-01",
"description": "The Amazon Linux 2023 NSS Cryptographic Module provides a C language application program interface designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSLv3, TLS, IKEv2, PKCS#5, PKCS#7, PKCS#11, PKCS#12, S/MIME, X.509 v3 certificates, and other security standards supporting FIPS 140-3 validated cryptographic algorithms.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Amazon Linux 2023 NSS Cryptographic Module",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": null,
"tested_conf": null,
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-05-02",
"lab": "ATSEC INFORMATION SECURITY CORP",
"validation_type": "Initial"
}
],
"vendor": "Amazon Web Services, Inc.",
"vendor_url": "http://www.amazon.com"
}
}