808bits

fips certificate tracker

Every NIST CMVP FIPS 140 certificate as a fast, linkable page. Status moves are derived by diffing snapshots of the NIST lists, which NIST itself does not date. Data as of 2026-08-28.

5494 certificates
1181 active (689 on 140-3, 492 on 140-2)
4288 historical
25 revoked
Of the 1181 active certificates, 492 still validate against FIPS 140-2. All 492 move to the historical list on 2026-09-21, 23 days from now; the rest are FIPS 140-3 and sunset five years after their own validation dates. See the full list.

recent changes rss

  1. 2026-08-28 Motorola BoringCrypto Android 14 (Motorola Mobility LLC) left the implementation-under-test list
  2. 2026-08-28 CIQ Linux Kernel 6.18 Kernel Crypto API (Ctrl IQ, Inc) left the implementation-under-test list
  3. 2026-08-28 PGP Cryptographic Engine (Kernel Mode) (Broadcom Inc) appeared on the implementation-under-test list
  4. 2026-08-28 Sansec HSM Cryptographic Module (Sansec Technology Co., Ltd.) left the modules-in-process list
  5. 2026-08-28 Qualcomm® Pseudo Random Number Generator (Qualcomm Technologies, Inc.) left the modules-in-process list
  6. 2026-08-28 Marvell LS2 HSM Family (Marvell Semiconductor, Inc.) left the modules-in-process list
  7. 2026-08-28 F5OS-A Cryptographic Module (F5, Inc.) left the modules-in-process list
  8. 2026-08-28 IDPrime PIV 4.1 FIDO 2.1 on IDcore 3230 (Thales) moved from Pending Review to Review
  9. 2026-08-28 SUSE Linux Enterprise Kernel Crypto API Cryptographic Module (SUSE LLC) moved from Comment Resolution - Lab to Comment Resolution - CMVP
  10. 2026-08-28 Trusted Platform Module ST33TPHF2XSPI / ST33TPHF2XI2C (STMicroelectronics) moved from Pending Review to Review

cve cross-reference

16 certificates have high-confidence CVE associations in their module family, matched heuristically against NVD. How matching works and what it does not claim.

  1. 4109 3 CVEs Purity Encryption Module Pure Storage, Inc.
  2. 4129 1 CVE Cisco Aironet 1562e/i/d/ps, 2802e/i, 3802e/i/p, 4800 and... Cisco Systems, Inc.
  3. 4150 12 CVEs Intel® Converged Security and Manageability Engine (CSME)... Intel Corporation
  4. 4158 12 CVEs Cryptographic Module for Intel® Converged Security and... Intel Corporation
  5. 4278 1 CVE Cisco Catalyst 9115AXI/AXE, 9120AXI/AXE/AXP, 9130AXI/AXE and... Cisco Systems, Inc.
  6. 4282 37 CVEs OpenSSL FIPS Provider The OpenSSL Project
  7. 4361 16 CVEs FortiAnalyzer 6.2 Fortinet, Inc.
  8. 4362 17 CVEs FortiManager 6.2 Fortinet, Inc.
  9. 4493 1 CVE Oracle Cloud Infrastructure for BoringCrypto Oracle Corporation
  10. 4641 1 CVE SonicWall Network Security Manager Appliance SonicWall, Inc.
  11. 4669 1 CVE RapidIdentity FIPS Cryptographic Module Identity Automation
  12. 4811 37 CVEs OpenSSL FIPS Provider The OpenSSL Project
  13. 4867 1 CVE Forcepoint Next Generation Firewall Forcepoint
  14. 4937 3 CVEs Purity Encryption Module Pure Storage, Inc.
  15. 4968 4 CVEs SUSE Rancher Kubernetes Cryptographic Library SUSE LLC
  16. 5032 36 CVEs Intel® QuickAssist Technology (QAT) Provider Intel Corporation

browse

  1. f012026-09-21The FIPS 140-2 sunset492 active certificates and counting down
  2. f02Certificate status changesobserved moves to historical, revocations, new validations
  3. f03Modules in processthe validation queue, phase by phase
  4. f04Implementations under testmodules in lab testing, before submission
  5. f05Vendorsevery vendor and their certificates
  6. f06About this trackersources, cadence, methodology, what we leave out