808bits

Ubuntu Strongswan Cryptographic Module

FIPS 140-2 certificate #2978 · Canonical Ltd. · data as of 2026-10-21

Ubuntu Strongswan Cryptographic Module, from Canonical Ltd., holds FIPS 140-2 certificate #2978 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to dependency on certificate #2888. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module Ubuntu OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #2888 operating in FIPS mode and with module Ubuntu Kernel Crypto API Cryptographic Module validated to FIPS140-2 under Cert. #2962 operating in FIPS mode

Certificate

Certificate number2978
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCanonical Ltd. · website
Software versions1.0 and 1.1

Module description

Quoted from the NIST CMVP entry for this certificate.

Ubuntu Strongswan Cryptographic Module provides cryptographic services for the Internet Key Exchange (IKE) protocol in the Ubuntu Operating System user space.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (8)

AlgorithmCAVP certificates
AES4354, 4355, 4356, 4357, 4358, 4359, 4360, 4361, 4370, 4371, 4372, 4373, 4374, 4375
CVL1053, 1054, 1056, 1057, 1059, 1060, 1062, 1063, 1065, 1067, 1068, 1069, 1154, 1155, 1156, 1157, 1158, 1159, 1160
DRBG1390, 1391, 1392, 1393, 1394, 1395, 1396, 1397
ECDSA1031, 1032, 1033, 1034, 1035, 1036, 1037
HMAC2895, 2896, 2897, 2898, 2899, 2900, 2901, 2970, 2971, 2972, 2973, 2974, 2976, 2977
RSA2351, 2352, 2353, 2354, 2355, 2356, 2357
SHS3593, 3594, 3595, 3596, 3597, 3598, 3599, 3687, 3688, 3689, 3690, 3691, 3693, 3694
Triple-DES2355, 2356, 2357

Allowed algorithms

Diffie-Hellman (CVL Certs. #1053, #1056, #1059, #1062, #1065, #1067 and #1069; key agreement; key establishment methodology provides between 112 and 192 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #1053, #1054, #1056, #1057, #1059, #1060, #1063, #1065, #1067, #1068 and #1069; key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG

Tested configurations

  • Ubuntu 16.04 LTS 64-bit Little Endian running on IBM Power System 8001-22C with PAA
  • Ubuntu 16.04 LTS 64-bit Little Endian running on IBM Power System 8001-22C without PAA
  • Ubuntu 16.04 LTS 64-bit Little Endian running on IBM Power System 8247-22L with PAA
  • Ubuntu 16.04 LTS 64-bit Little Endian running on IBM Power System 8247-22L without PAA
  • Ubuntu 16.04 LTS 64-bit Little Endian running on IBM Power System 8335-GTB with PAA
  • Ubuntu 16.04 LTS 64-bit Little Endian running on IBM Power System 8335-GTB without PAA
  • Ubuntu 16.04 LTS 64-bit running on IBM z13 with PAI
  • Ubuntu 16.04 LTS 64-bit running on IBM z13 without PAI (single-user mode)
  • Ubuntu 16.04 LTS 64-bit running on Supermicro SYS-5018R-WR with PAA
  • Ubuntu 16.04 LTS 64-bit running on Supermicro SYS-5018R-WR without PAA

Validation history

DateTypeLab
2017-07-31Initialatsec information security corporation
2019-08-27Updateatsec information security corporation
2021-10-18Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2017-07-31, 2019-08-27, 2021-10-18

Source documents