IOS Common Cryptographic Module (IC2M) Rel5
Certificate
| Certificate number | 2388 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-chip standalone |
| Vendor | Cisco Systems, Inc. · website |
| Firmware versions | Rel 5 |
Module description
The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.
Security level exceptions
- Mitigation of Other Attacks: N/A
- Tested: Cisco ASR1K RP2 with processor Intel Xeon on IOS XE3.13
- Cisco ASR1K RP1 with processor Freescale SC8548H on IOS XE3.13
- Cisco ISR 2951 with processor Freescale 8752E on IOS 15.4
- Cisco ISR 1921 with processor Cavium CN5020 on IOS 15.4
- Cisco ISR 2921 with processor Cavium CN5220 on IOS 15.4
- Cisco ISR 891 with processor MPC8358E on IOS 15.4
- ESR 5940 with processor MPC8572C on IOS 15.4
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 2783, 2817, 3278, 4583 |
| CVL | 252, 253, 1257, 1258 |
| DRBG | 481, 1592 |
| ECDSA | 493, 1122 |
| HMAC | 1764, 3034 |
| KBKDF | 49, 139 |
| KTS | |
| KTS | |
| RSA | 1471, 2500 |
| SHS | 2338, 2361 |
| Triple-DES | 1670, 1671, 1688, 2436 |
Other algorithms
Diffie-Hellman (CVL Certs. #252 and #1257, key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #252 and #1257, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- Cisco ASR1K RP1 with processor Freescale SC8548H on IOS XE3.13
- Cisco ASR1K RP1 with processor Intel Xeon on IOS 16.3.2
- Cisco ASR1K RP2 with processor Intel Xeon on IOS XE3.13
- Cisco Catalyst 3560CX with processor PPC 465 on IOS 15.2(4)E
- Cisco Catalyst 3850 with processor MIPS64 on IOS-XE 16.3.2
- Cisco Catalyst 4000 with SUP8LE with processor PPC e5500 on IOS-XE 3.90E
- Cisco Catalyst 6000 with SUP6T with processor Intel Core i3 on IOS 15.4(1)SY1
- Cisco Catalyst 6840 with processor Intel Pentium on IOS 15.4
- Cisco Catalyst 6k with Sup2T with processor PPC e500 on IOS 15.4(1)SY1
- Cisco IE2000 with processor PPC 405 on IOS 15.2(4)E
- Cisco ISR 1921 with processor Cavium CN5020 on IOS 15.4
- Cisco ISR 2921 with processor Cavium CN5220 on IOS 15.4
- Cisco ISR 2951 with processor Freescale 8752E on IOS 15.4
- Cisco ISR 4321 with processor Intel Atom on IOS 16.3.2
- Cisco ISR 891 with processor MPC8358E on IOS 15.4
- ESR 5940 with processor MPC8572C on IOS 15.4
Validation history
| Date | Type | Lab |
|---|---|---|
| 2015-05-28 | Initial | Acumen Security |
| 2017-11-20 | Update | Acumen Security |
| 2018-07-31 | Update | Acumen Security |
| 2020-07-01 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2015-05-28, 2017-11-20, 2018-07-31, 2020-07-01