IOS Common Cryptographic Module (IC2M)
Certificate
| Certificate number | 2301 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Firmware versions | Rel 3(1.5.2) |
Module description
The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.
Security level exceptions
- Mitigation of Other Attacks: N/A
- Tested: Cisco ASR1K 1NG, Cisco ISR 4451-X, Cisco ISR 4441, Cisco ASR1K RP2 and Cisco ASR1K 2KP (kingpin) with processor Intel Xeon on IOS XE3.10
- Cisco ISR 3925E and Cisco ISR 3945E with processor Intel Xeon on IOS 15.3
- Cisco ASR1K RP1 with processor Freescale SC8548H on IOS XE3.10
- Cisco ISR c2951, Cisco ISR c3925 and Cisco ISR c3945 with processor Freescale 8752E on IOS 15.3
- Cisco ISR 1921 with processor Cavium CN5020 on IOS 15.3
- Cisco ISR 1941 and Cisco ISR 2900 with processor Cavium CN5220 on IOS 15.3
- Cisco Catalyst 4K with processor MPC8572C on IOS XE 3.6
- Cisco Catalyst 3750x and Cisco Catalyst 3560x with processor Power-PC 405 on IOS 15.2
- Cisco Catalyst 3650 with processor AMCC PowerPC 405EX on IOS XE3.6
- Cisco Catalyst 2960 with processor Cavium CN5230 on IOS 15.2
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 2783, 2817 |
| CVL | 252, 253 |
| DRBG | 481 |
| ECDSA | 493 |
| HMAC | 1764 |
| RSA | 1471 |
| SHS | 2338, 2361 |
| Triple-DES | 1670, 1671, 1688 |
Other algorithms
DES; Diffie-Hellman (CVL Cert. #252, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #252, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); HMAC-MD5; MD2; MD5; NDRNG; RC2; RC4; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength); SEAL
Validation history
| Date | Type | Lab |
|---|---|---|
| 2014-12-18 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2015-06-12 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2014-12-18, 2015-06-12