F5® Device Cryptographic Module
F5® Device Cryptographic Module, from F5 Networks, holds FIPS 140-2 certificate #3142 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 3142 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 2 |
| Module type | Hardware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | F5 Networks · website |
| Hardware versions | BIG-IP i4000, BIG-IP i5000, BIG-IP i7000, BIG-IP 4000, BIG-IP 7000, BIG-IP 10350F, VIPRION B2250, VIPRION B4450 |
| Firmware versions | 13.1.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
F5® Device Cryptographic Module, Application Delivery Controller and Firewall software running on F5 BIG-IP and VIPRION hardware.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms (8)
| Algorithm | CAVP certificates |
|---|---|
| AES | 4821, 4822, 4823, 4824, 4825, 4827, 4828, 4829, 4830, 4831, 4832, 4833, 4834, 4836, 4837, 4838 |
| CKG | |
| CVL | 1442, 1443, 1444, 1445, 1446, 1447, 1448, 1449, 1450, 1451, 1454, 1455, 1456, 1457, 1459, 1460, 1461, 1462, 1463, 1464, 1465, 1466, 1467, 1468, 1469, 1470, 1473, 1474, 1475, 1476, 1477, 1478 |
| DRBG | 1680, 1681, 1682, 1683, 1684, 1686, 1687, 1688, 1689, 1690, 1691, 1692, 1693, 1695, 1696, 1697 |
| ECDSA | 1218, 1219, 1220, 1221, 1222, 1224, 1225, 1226, 1227, 1228, 1229, 1230, 1231, 1233, 1234, 1235 |
| HMAC | 3222, 3223, 3224, 3225, 3226, 3228, 3229, 3230, 3231, 3232, 3233, 3234, 3235, 3237, 3238, 3239 |
| RSA | 2641, 2642, 2643, 2644, 2645, 2647, 2648, 2649, 2650, 2651, 2652, 2653, 2654, 2656, 2657, 2658 |
| SHS | 3963, 3964, 3965, 3966, 3967, 3969, 3970, 3971, 3972, 3973, 3974, 3975, 3976, 3978, 3979, 3980 |
Allowed algorithms
EC Diffie-Hellman (CVL Certs. #1442, #1444, #1446, #1448, #1450, #1454, #1456, #1459, #1461, #1463, #1465, #1467, #1469, #1473, #1475 and #1477 with CVL Certs. #1443, #1445, #1447, #1449, #1451, #1455, #1457, #1460, #1462, #1464, #1466, #1468, #1470, #1474, #1476 and #1478, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 128 and 256 bits of encryption strength)
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2018-02-28 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2018-02-28