IBM Cloud Object Storage System’s™ FIPS Cryptographic Module
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2599 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | IBM · website |
| Software versions | 1.1 |
Module description
The IBM Cloud Object Storage System’s™ FIPS Object Module is a full featured general purpose cryptographic library that is distributed as a component of ClevOS™ FIPS Edition, the underlying technology for IBM Cloud Object Store Appliances.
Security level exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 3611, 3612, 4422, 5229, C1674 |
| DRBG | 941, 942, 1428, 1995, C1674 |
| DSA | 1006, 1007, 1186, 1355, C1674 |
| ECDSA | 743, 744, 1071, 1358, C1674 |
| HMAC | 2318, 2319, 2935, 3461, C1674 |
| RSA | 1858, 1859, 2409, 2794, C1674 |
| SHS | 2984, 2985, 3640, 4209, C1674 |
| Triple-DES | 2011, 2012, 2380, 2644, C1674 |
Other algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- ClevOS 3.12.2.40-FIPS-EDITION running on Intel Xeon with PAA
- ClevOS 3.12.2.40-FIPS-EDITION running on Intel Xeon without PAA
- ClevOS 3.14.10-FIPS-EDITION running on Intel Xeon with PAA
- ClevOS 3.14.10-FIPS-EDITION running on Intel Xeon without PAA (single-user mode)
- ClevOS 3.8.0-FIPS-EDITION running on Intel Xeon with PAA
- ClevOS 3.8.0-FIPS-EDITION running on Intel Xeon without PAA
- ClevOS 3.8.2.19-FIPS-EDITION running on Intel Xeon with PAA
- ClevOS 3.8.2.19-FIPS-EDITION running on Intel Xeon without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-04-01 | Initial | CYGNACOM SOLUTIONS INC |
| 2016-04-12 | Update | CYGNACOM SOLUTIONS INC |
| 2017-03-31 | Update | CYGNACOM SOLUTIONS INC |
| 2018-03-27 | Update | CYGNACOM SOLUTIONS INC |
| 2020-06-04 | Update | CYGNACOM SOLUTIONS INC |
| 2021-03-18 | Update | CYGNACOM SOLUTIONS INC |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-04-01, 2016-04-12, 2017-03-31, 2018-03-27, 2020-06-04, 2021-03-18