AWS-LC Cryptographic Module

Certificate details

Certificate ID #4631
Status active
Validation dates 06.10.2023 , 27.06.2025
Sunset date 05-10-2028
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat When operated in approved mode
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Description AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
Tested configurations
  • Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]
  • Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]
  • Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]
  • Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]
  • Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]
  • Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]
  • Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor with PAA [1]
  • Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor without PAA [1]
  • iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor with PAA [2]
  • iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor without PAA [2]
  • MacBook Air with MacOS 12.4 on Apple M1 processor with PAA [2]
  • MacBook Air with MacOS 12.4 on Apple M1 processor without PAA [2]
  • Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]
  • Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]
  • Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]
  • Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]
  • Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]
  • Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]
  • Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor with PAA [1]
  • Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor without PAA [1]
Vendor Amazon Web Services Inc. http://aws.amazon.com
Lab atsec information security corporation
Algorithms
  • AES-CBCA4731
  • AES-CCMA4731
  • AES-CMACA4731
  • AES-CTRA4731
  • AES-ECBA4732
  • AES-GCMA4732
  • AES-GMACA4732
  • AES-KWA4731
  • AES-KWPA4731
  • Counter DRBGA4731
  • ECDSA KeyGen (FIPS186-4)A4733
  • ECDSA KeyVer (FIPS186-4)A4733
  • ECDSA SigGen (FIPS186-4)A4733
  • ECDSA SigVer (FIPS186-4)A4733
  • HMAC-SHA-1A4733
  • HMAC-SHA2-224A4733
  • HMAC-SHA2-256A4733
  • HMAC-SHA2-384A4733
  • HMAC-SHA2-512A4733
  • KAS-ECC-SSC Sp800-56Ar3A4733
  • KDF TLSA4733
  • RSA KeyGen (FIPS186-4)A4733
  • RSA SigGen (FIPS186-4)A4733
  • RSA SigVer (FIPS186-4)A4733
  • SHA-1A4733
  • SHA2-224A4733
  • SHA2-256A4733
  • SHA2-384A4733
  • SHA2-512/256A4733
  • SHA2-512A4733
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES-, AES-256, CAST, DES, Triple-DES, HMAC, CMAC
Asymmetric Algorithms
RSA 2048, ECDH, ECDSA, ECC, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-3, MD4, MD5
Schemes
MAC
Protocols
TLS, TLS 1.0, TLS 1.2, TLS 1.3
Randomness
DRBG, RNG
Elliptic Curves
P-224, P-256, P-384, P-521
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM

Trusted Execution Environments
PSP, SSC
Vendor
Samsung, Qualcomm

Security level
Level 1, level 1
Side-channel analysis
timing attacks

Title FIPS 140-3 Non-Proprietary Security Policy
Author gburlea
Creation date D:20250218221320+00'00'
Modification date D:20250218221320+00'00'
Pages 36
Creator Microsoft Word

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4631,
  "dgst": "b567edd38e178dac",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-256A4733",
        "HMAC-SHA2-384A4733",
        "#A2183",
        "#A2191",
        "AES-CMACA4731",
        "#A2185",
        "#A4729",
        "SHA2-224A4733",
        "#A4667",
        "RSA KeyGen (FIPS186-4)A4733",
        "ECDSA SigGen (FIPS186-4)A4733",
        "ECDSA SigVer (FIPS186-4)A4733",
        "#A4725",
        "#A2182",
        "#A4726",
        "#A2192",
        "#A2196",
        "#A2188",
        "HMAC-SHA2-224A4733",
        "HMAC-SHA2-256A4733",
        "AES-KWA4731",
        "#A4731",
        "#A2200",
        "#A4728",
        "#A2187",
        "#A4694",
        "#A4673",
        "#A2179",
        "#A2181",
        "#A4669",
        "#A4701",
        "#A4698",
        "#A2194",
        "#A4692",
        "#A4704",
        "#A2186",
        "#A2199",
        "AES-CCMA4731",
        "KAS-ECC-SSC Sp800-56Ar3A4733",
        "#A4674",
        "AES-CBCA4731",
        "#A4730",
        "KDF TLSA4733",
        "#A4695",
        "#A4672",
        "#A4702",
        "#A4696",
        "#A2184",
        "#A4668",
        "AES-ECBA4732",
        "#A2195",
        "#A2189",
        "SHA2-384A4733",
        "#A4703",
        "#A4666",
        "#A4697",
        "#A4705",
        "#A4727",
        "ECDSA KeyVer (FIPS186-4)A4733",
        "#A2193",
        "#A4706",
        "#A4693",
        "ECDSA KeyGen (FIPS186-4)A4733",
        "#A4700",
        "RSA SigGen (FIPS186-4)A4733",
        "AES-CTRA4731",
        "#A2177",
        "#A4671",
        "RSA SigVer (FIPS186-4)A4733",
        "#A4670",
        "SHA2-512/256A4733",
        "AES-KWPA4731",
        "AES-GCMA4732",
        "#A4699",
        "AES-GMACA4732",
        "#A4732",
        "#A2178",
        "#A2197",
        "#A2190",
        "#A2180",
        "#A2198",
        "Counter DRBGA4731",
        "HMAC-SHA2-512A4733",
        "#A4733",
        "SHA2-512A4733",
        "HMAC-SHA-1A4733",
        "SHA-1A4733"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 27,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 5
          },
          "ECDH": {
            "ECDH": 2
          },
          "ECDSA": {
            "ECDSA": 19
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 4
          },
          "DSA": {
            "DSA": 1
          }
        },
        "RSA": {
          "RSA 2048": 2
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 6
        },
        "CCM": {
          "CCM": 5
        },
        "CFB": {
          "CFB": 2
        },
        "CTR": {
          "CTR": 4
        },
        "ECB": {
          "ECB": 4
        },
        "GCM": {
          "GCM": 13
        },
        "OFB": {
          "OFB": 2
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 29,
            "TLS 1.0": 1,
            "TLS 1.2": 4,
            "TLS 1.3": 5
          }
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 6
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 12,
          "P-256": 18,
          "P-384": 2,
          "P-521": 12
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 37
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES 256": 2,
          "AES key 128": 1,
          "AES-256": 1,
          "HMAC-SHA-1": 2,
          "PKCS#1": 2,
          "RSA 2048": 2,
          "SHA-1": 5,
          "SHA-3": 1,
          "SHA2- 224": 1,
          "SHA2- 256": 2,
          "SHA2- 384": 1,
          "SHA2- 512": 1,
          "SHA2-224": 4,
          "SHA2-256": 14,
          "SHA2-384": 5,
          "SHA2-512": 4,
          "SHA2-512 2048": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 2
          },
          "MD5": {
            "MD5": 3
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA3": {
            "SHA-3": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 19
        },
        "RNG": {
          "RNG": 1
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 1": 24,
          "FIPS 140-3": 45,
          "FIPS 186-4": 7,
          "FIPS PUB 140-3": 2,
          "FIPS140-3": 1,
          "FIPS180-4": 3,
          "FIPS186-4": 2,
          "FIPS197": 10,
          "FIPS198-1": 3
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC5288": 1,
          "RFC8446": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 53,
            "AES-": 1,
            "AES-256": 1
          },
          "CAST": {
            "CAST": 2
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 3
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 4,
            "HMAC": 13
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        },
        "IBM": {
          "SSC": 3
        }
      },
      "tls_cipher_suite": {},
      "vendor": {
        "Qualcomm": {
          "Qualcomm": 2
        },
        "Samsung": {
          "Samsung": 2
        }
      },
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "RSA SigVer (FIPS186-4)A4733",
        "SHA2-256A4733",
        "HMAC-SHA2-384A4733",
        "SHA2-512/256A4733",
        "AES-CMACA4731",
        "AES-KWPA4731",
        "SHA2-224A4733",
        "AES-ECBA4732",
        "AES-GCMA4732",
        "RSA KeyGen (FIPS186-4)A4733",
        "AES-GMACA4732",
        "ECDSA SigGen (FIPS186-4)A4733",
        "SHA2-384A4733",
        "ECDSA SigVer (FIPS186-4)A4733",
        "HMAC-SHA2-224A4733",
        "AES-CCMA4731",
        "HMAC-SHA2-256A4733",
        "AES-KWA4731",
        "Counter DRBGA4731",
        "KAS-ECC-SSC Sp800-56Ar3A4733",
        "ECDSA KeyVer (FIPS186-4)A4733",
        "AES-CBCA4731",
        "HMAC-SHA2-512A4733",
        "ECDSA KeyGen (FIPS186-4)A4733",
        "RSA SigGen (FIPS186-4)A4733",
        "SHA2-512A4733",
        "AES-CTRA4731",
        "HMAC-SHA-1A4733",
        "SHA-1A4733",
        "KDF TLSA4733"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4669",
        "#A4701",
        "#A4696",
        "#A4698",
        "#A2183",
        "#A2191",
        "#A4670",
        "#A2184",
        "#A4668",
        "#A2185",
        "#A4729",
        "#A2194",
        "#A4667",
        "#A4692",
        "#A2195",
        "#A4699",
        "#A4704",
        "#A2186",
        "#A2189",
        "#A4732",
        "#A2178",
        "#A4703",
        "#A2182",
        "#A4666",
        "#A4726",
        "#A2192",
        "#A4725",
        "#A2197",
        "#A2188",
        "#A4697",
        "#A2196",
        "#A2190",
        "#A2180",
        "#A2198",
        "#A4705",
        "#A4727",
        "#A2199",
        "#A4674",
        "#A4731",
        "#A2193",
        "#A4706",
        "#A4693",
        "#A4730",
        "#A2200",
        "#A4700",
        "#A4733",
        "#A4728",
        "#A2187",
        "#A4694",
        "#A4695",
        "#A2177",
        "#A4672",
        "#A4671",
        "#A4673",
        "#A2179",
        "#A4702",
        "#A2181"
      ]
    },
    "policy_metadata": {
      "/Author": "gburlea",
      "/CreationDate": "D:20250218221320+00\u002700\u0027",
      "/Creator": "Microsoft Word",
      "/ModDate": "D:20250218221320+00\u002700\u0027",
      "/Title": "FIPS 140-3 Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 492792,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://github.com/awslabs/aws-lc/archive/refs/tags/AWS-LC-FIPS-1.1.0.zip",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "http://www.ietf.org/rfc/rfc3447.txt",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38G.pdf",
          "https://github.com/awslabs/aws-lc/archive/refs/tags/AWS-LC-FIPS-1.0.2.zip",
          "http://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar2.pdf",
          "http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "http://csrc.nist.gov/publications/drafts/800-90/sp800-90b_second_draft.pdf",
          "http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar1.pdf",
          "http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 36
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "149c139d67994aa304faa58db9940495b61028129ff3407b31f159845df7ec89",
      "source_hash": "5ebfb767db03b78ba7fff39adc3ee7882277420e389c0ddc4d88737c1d15e3ca",
      "txt_hash": "4f6fb6e5754e8497db2583267395596c43060a00c889be02148eabf9fb3892cc"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2023_011123_0711.pdf",
    "date_sunset": "2028-10-05",
    "description": "AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It \u0456s based on code from the Google BoringSSL project and the OpenSSL project.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "AWS-LC Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "AWS-LC FIPS 1.0.2 [1] and AWS-LC FIPS 1.1.0 [2]",
    "tested_conf": [
      "Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]",
      "Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]",
      "Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]",
      "Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]",
      "Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]",
      "Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]",
      "Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor with PAA [1]",
      "Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor without PAA [1]",
      "iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor with PAA [2]",
      "iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor without PAA [2]",
      "MacBook Air with MacOS 12.4 on Apple M1 processor with PAA [2]",
      "MacBook Air with MacOS 12.4 on Apple M1 processor without PAA [2]",
      "Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]",
      "Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]",
      "Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]",
      "Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]",
      "Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]",
      "Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]",
      "Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor with PAA [1]",
      "Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor without PAA [1]"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2023-10-06",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-06-27",
        "lab": "atsec information security corporation",
        "validation_type": "Update"
      }
    ],
    "vendor": "Amazon Web Services Inc.",
    "vendor_url": "http://aws.amazon.com"
  }
}