wolfCrypt
wolfCrypt, from wolfSSL Inc., holds FIPS 140-2 certificate #2425 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2425 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | wolfSSL Inc. · website |
| Software versions | 3.6.0, 3.6.1, 3.6.6, 3.11.2, 3.12.2, 3.12.4, 3.12.6 and 3.14.2 |
Module description
Quoted from the NIST CMVP entry for this certificate.
wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms (6)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3157, 3330, 3417, 3490, 3508, 4635, 4643, 4772, 5244, 5325, 5447 |
| DRBG | 650, 775, 821, 863, 875, 1561, 1566, 1651, 2006, 2055, 2132 |
| HMAC | 1990, 2121, 2175, 2228, 2241, 3068, 3075, 3183, 3471, 3523, 3605 |
| RSA | 1602, 1710, 1749, 1791, 1803, 2530, 2534, 2612, 2804, 2853, 2923 |
| SHS | 2614, 2763, 2823, 2882, 2893, 3799, 3806, 3915, 4222, 4277, 4366 |
| Triple-DES | 1800, 1901, 1928, 1966, 1972, 2465, 2470, 2535, 2652, 2687, 2737 |
Other algorithms
RSA (non-compliant); Diffie-Hellman; EC Diffie-Hellman; MD5; AES GCM (non-compliant); DES; RC4; RIPEMD-160; HMAC-MD5
Tested configurations
- Android 4.4 running on a Samsung Galaxy S5
- Android Dalvik 4.2.2 running on a MXT-700-NC 7” Touch Panel
- Debian 8.7.0 running on Intel® x64 Server System R1304SP
- Debian 8.8 running on CA PAM 304L Server
- FreeRTOS 7.6 running on uTrust TS Reader
- iOS 8.1 running on an iPhone 6
- Linux 3.0 (SLES 11 SP4, 64-bit) on Microsoft Hyper-V 2012R2 Core running on Dell® PowerEdge™ r630
- Linux 3.0 (SLES 11 SP4, 64-bit) on VMWare ESXi 5.5.0 running on Dell® PowerEdge r630™
- Linux 3.0 (SLES 11 SP4, 64-bit) running on Imprivata OneSign
- Linux 3.13.0 (Ubuntu) running on a HP EliteBook
- Linux 4.1.15 running on a NX-1200 NetLinx NX Integrated Controller
- Linux 4.4 (SLES 12 SP3, 64-bit) on Microsoft Hyper-V 2016 Core running on Dell® PowerEdge™ r720
- Linux 4.4 (SLES 12 SP3, 64-bit) on VMWare ESXi 6.5.0 running on Dell® PowerEdge™ r420
- NET+OS v7.6 running on Sigma IV infusion pump
- Windows 10 Pro running on Dell™ Latitude™ 7480
- Windows 7 (64-bit) on VMWare ESXi 5.5.0 running on Dell® PowerEdge™ r630
- Windows 7 (64-bit) running on Sony Vaio Pro
- Windows 7 Professional SP1 running on Dell Latitude E6520 Laptop
- Windows Server 2012R2 running on CA Technologies PAMHAF995 (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2015-08-11 | Initial | UL Verification Services, Inc. |
| 2015-09-15 | Update | UL Verification Services, Inc. |
| 2015-09-30 | Update | UL Verification Services, Inc. |
| 2015-11-18 | Update | UL Verification Services, Inc. |
| 2016-06-23 | Update | UL Verification Services, Inc. |
| 2017-08-11 | Update | UL Verification Services, Inc. |
| 2017-08-25 | Update | UL Verification Services, Inc. |
| 2017-10-20 | Update | UL Verification Services, Inc. |
| 2018-03-27 | Update | UL Verification Services, Inc. |
| 2018-04-06 | Update | UL Verification Services, Inc. |
| 2018-06-07 | Update | UL Verification Services, Inc. |
| 2018-10-15 | Update | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2015-08-11, 2015-09-15, 2015-09-30, 2015-11-18, 2016-06-23, 2017-08-11, 2017-08-25, 2017-10-20, 2018-03-27, 2018-04-06, 2018-06-07, 2018-10-15