808bits

wolfCrypt

FIPS 140-2 certificate #3389 · wolfSSL Inc. · data as of 2026-10-21

wolfCrypt, from wolfSSL Inc., holds FIPS 140-2 certificate #3389 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. When entropy is externally loaded, no assurance of the minimum strength of generated keys.

Certificate

Certificate number3389
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorwolfSSL Inc. · website
Software versions4.0, 4.0.1, 4.1.0, 4.2.0, 4.3.0, 4.3.2, 4.3.2a, 4.3.2b, 4.3.2c, 4.3.4, 4.4.1, 4.4.1a, 4.4.2, 4.5.2, 4.5.4, 4.5.4a, 4.5.4b, 4.6.1 and 4.6.2

Module description

Quoted from the NIST CMVP entry for this certificate.

wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (11)

AlgorithmCAVP certificates
AES5446, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
CVL1891, 1892, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
DRBG2131, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
DSA1401, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
ECDSA1451, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
HMAC3604, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
KAS-SSCA894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2420, A2421, A2422, A2423, A2460, A2465, A2790, A3234, A3412, A4369
RSA2922, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
SHA-345, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
SHS4365, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746
Triple-DES2736, A894, A902, A949, A1103, A1180, A1261, A1565, A2119, A2790, A3234, A3412, A4369, C663, C1051, C1438, C1568, C1727, C1746

Allowed algorithms

NDRNG

Tested configurations

  • Android 11 running on Samsung Galaxy S20 5G with a Qualcomm Snapdragon 865 SoC with PAA
  • Android 11 running on Samsung Galaxy S20 5G with a Qualcomm Snapdragon 865 SoC without PAA
  • Android 13.0 running on Samsung Galaxy S22 with a Qualcomm Snapdragon 8 SoC with PAA
  • Android 6.0 (Linux 4.1) running on RICOH IM C6000 with a Freescale i.MX6 Quad/DualLite with PAA
  • Android 6.0 (Linux 4.1) running on RICOH IM C6000 with a Freescale i.MX6 Quad/DualLite without PAA
  • Android 8.1 (Linux 4.4) running on EchoNous Kosmos® Bridge with a Qualcomm Snapdragon 835 (APQ8098 / MSM8998) with PAA
  • Android 8.1 (Linux 4.4) running on EchoNous Kosmos® Bridge with a Qualcomm Snapdragon 835 (APQ8098 / MSM8998) without PAA
  • CentOS 7.9 on host Vmware ESXi 6.7 running on HP ProLiant DL360 with Intel® Xeon™ X5650 with PAA
  • CentOS 7.9 on host Vmware ESXi 6.7 running on HP ProLiant DL360 with Intel® Xeon™ X5650 without PAA
  • CMSIS-RTOS2 v2.1.3 running on Alto™ with Silicon Labs EFM32G (Gecko)
  • CodeOS v1.4 running on Series CR2700 Code Reader(s) with CodeCorp CT8200 (ARM FA626TE)
  • Debian GNU/Linux 8 (jessie) running on a Corning 1LAN-SDDP-24POE with a Broadcom BCM5634
  • Debian GNU/Linux 8 (jessie) running on an ufiSpace Cloud and Data Center Switch S7810-54QS with an Intel® Atom™ C2558 @ 2.40GHz
  • Endace Crypto Firmware 1.0 running on EndaceProbe 2184 with Intel® Xeon® Gold 6338N CPU @2.20GHz with PAA
  • Endace Crypto Firmware 1.0 running on EndaceProbe 92C8 with Intel® Xeon® Gold 6230N CPU @2.30GHz with PAA
  • Endace Crypto Firmware 1.0 running on EndaceProbe 94C8 with Intel® Xeon® Gold 5418N CPU @1.80GHz with PAA
  • Endace-Crypto-Firmware-1.0 running on EndaceProbe 2144 with Intel® Xeon® Silver 4316 CPU @2.30GHz with PAA
  • FreeBSD 10.3 on VMWare ESXi 7.0 running on a Supermicro X11DPH-I with an Intel® Xeon® Silver 4210 @ 2.20GHz
  • Fusion Embedded RTOS 5.0 running on Classone® IP Radio Gateway with Analog Devices ADSP-BF516 (BlackFin)
  • HP Imaging & Printing Linux 4.9 running on HP PN 3PZ95-60002 with ARM Cortex-A72 with PAA
  • HP Imaging & Printing Linux 4.9 running on HP PN 3PZ95-60002 with ARM Cortex-A72 without PAA
  • iOS 14 running on iPhone 12 with Apple A14 Bionic with PAA
  • iOS 14 running on iPhone 12 with Apple A14 Bionic without PAA
  • Janteq iMX8QM Linux 5.4 running on FLIP2 with i.MX8 Quad Max SoC with PAA
  • Janteq S5L Linux 4.9 running on Maximo with Ambarella S5L SoC with PAA
  • Janteq Zynq Linux 4.19 running on Bronte3 with Xilinx Zynq Ultrascale+ with PAA
  • Janteq Zynq Linux 5.4 running on AviTr3 with Xilinx Zynq-7000 SoC with PAA
  • Linux 3.10 (CentOS 7) running on a Beckman Coulter PROService RAP BOX with an Intel® Atom™ CPU D525 @ 1.80GHz with PAA
  • Linux 3.10 (CentOS 7) running on a Beckman Coulter PROService RAP BOX with an Intel® Atom™ CPU D525 @ 1.80GHz without PAA
  • Linux 4.12 running on HP PageWide XL with an Intel® Core™ i3 - 7101 with PAA
  • Linux 4.12 running on HP PageWide XL with an Intel® Core™ i3 – 7101 without PAA
  • Linux 4.12 Yocto Standard running on Metasys® SNC Series Network Control Engine with Freescale i.MX6 DualLite ARMv7 Cortex-A9 (x2) without PAA
  • Linux 4.12 Yocto Standard running on Metasys® SNC Series Network Control Engine with Freescale i.MX6 DualLite ARMv7 Cortex-A9 x2 with PAA
  • Linux 4.14 running on Lenovo Xclarity Controller with an ARM Cortex A9 (x2) with PAA
  • Linux 4.14 running on Lenovo Xclarity Controller with an ARM Cortex A9 (x2) without PAA
  • Linux 4.14 running on SEL-2742S with an ARMv8 Cortex A53 with PAA
  • Linux 4.14 running on SEL-2742S with an ARMv8 Cortex A53 without PAA
  • Linux 4.4 (Ubuntu 16.04 LTS) running on Intel Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 with PAA
  • Linux 4.4 (Ubuntu 16.04 LTS) running on Intel Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 without PAA
  • Linux 4.9 running on ZOLL Communications Module with a Freescale i.MX7 Dual ARM Cortex-A7 with PAA
  • Linux 4.9 running on ZOLL Communications Module with a Freescale i.MX7 Dual ARM Cortex-A7 without PAA
  • Linux 5.15 on VMWare ESXi 7.0 running on a Supermicro X11DPH-I with an Intel® Xeon® Silver 4210 @2.20GHz
  • Linux 5.4 running on a Dell PowerEdge R340 Rack Server with an Intel® Xeon® E-2244G with PAA
  • Linux 5.4 running on a Dell PowerEdge R340 Rack Server with an Intel® Xeon® E-2244G without PAA
  • Linux 5.4 running on a LiveAction LiveNX Appliance with an Intel® Xeon® Gold 5218 CPU @2.30GHz
  • Linux 5.4 running on an iSTAR physical access controller with a Freescale i.MX7 Dual Arm Cortex A-7 with PAA
  • Linux 5.4 running on an iSTAR physical access controller with a Freescale i.MX7 Dual Arm Cortex A-7 without PAA
  • Linux IPHO00550F22 4.1 running on a Corning 1LAN-SDAN-7691 with a Broadcom BCM6858
  • Linux IPHO00559B23 3.4 running on a Corning 1LAN-SDAN-7290 with a Broadcom BCM6838
  • Linux socfpga Cyclone V running on SEL 2700 Series 24-Port Ethernet Switch with an ARMv7 rev0, Cortex A-9
  • macOS Monterey 12.5 running on a Macbook Air with an Apple M1 with PAA
  • macOS Monterey 12.5 running on a Macbook Air with an Apple M1 without PAA
  • macOS Monterey 12.5 running on a Macbook Pro with an Apple M1 Max with PAA
  • macOS Monterey 12.5 running on a Macbook Pro with an Intel® Core™ i7-8569U @ 2.80Ghz with PAA
  • Net+OS v7.6 running on a Sigma IV Infusion Pump with a Digi International NS9210
  • NetBSD Rev 6.0.1 running on RICOH IM C2500 with an Intel® Atom® E3930
  • NetBSD Rev 6.0.1 running on RICOH IM C6000 with an Intel® Atom® E3940
  • Nucleus 3.0 version 2013.08.1 running on XL200 Radio with Freescale Vybrid VF500
  • OpenRTOS v10.1.1 running on STMicroelectronics STM32L4R9I-DISCO (Discovery Kit) with a STMicroelectronics STM32L4x
  • QNX 6.5 running on Zebra ZQ630 with an ARM9®
  • QNX 6.6 running on Zebra ZT610 with an ARM® Cortex®-A9
  • QNX 7.0 running on Zebra ZD621 with an ARM® Cortex®-A7
  • QNX 7.0 running on Zebra ZT421 with an ARM® Cortex®-A7 (x2)
  • SUSE Linux Enterprise Server on VMWare ESXi 6.7.0 running on Dell PowerEdge T340 with an Intel® Xeon® E-2234 with PAA
  • SUSE Linux Enterprise Server on VMWare ESXi 6.7.0 running on Dell PowerEdge T340 with an Intel® Xeon® E-2234 without PAA
  • Swoop Kernel 1.5 running on Skipper with a Xilinx Zynq Ultrascale+ XCZU9EG™ ARM® Cortex®-A53
  • Vortec Scheduler running on Avaya MP160 with an StarCore SC3850 DSP Core
  • Vx Works 7.0 running on G450 Media Gateway with an NXP T1024
  • VxWorks 5.5 running on ML6416E with Marvell Poncat2 Sheeva™
  • VxWorks 6.9 running on G430 Media Gateway with an NXP MPC8560
  • VxWorks 6.9 running on Sectéra vIPer™ Phone with TNETV1050
  • VxWorks 7 SR0630 running on F-16 WASP with Intel® Core™ i7-5850EQ @ 2.70GHz
  • Windows 10 Enterprise running on Radar FCL Package Utility with Intel® Core™ i7-7820 @2.9GHz x 4 with PAA
  • Windows 10 Enterprise running on Radar FCL Package Utility with Intel® Core™ i7-7820 @2.9GHz x 4 without PAA
  • Windows 10 Pro running on a Dell Precision 3570 with an Intel® Core™ i7-1255U @ 1.70 Ghz
  • Windows 10 Pro running on Lenovo Thinkpad T470 with an Intel® Core™ i7-7600 with PAA
  • Windows 10 Pro running on Lenovo Thinkpad T470 with an Intel® Core™ i7-7600 without PAA
  • Windows 10 running on Intel® Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 with PAA
  • Windows 10 running on Intel® Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 without PAA
  • Windows 11 Enterprise running on a Dell Latitude 7410 with an Intel® Core™ i7-10610U @ 1.80Ghz with PAA
  • Windows CE 6.0 running on HP LaserJet Enterprise with an ARM Cortex-A8
  • Windows Server 2016 Standard running on Dell PowerEdge R430 with an Intel® Xeon® E5-2603 with PAA
  • Windows Server 2016 Standard running on Dell PowerEdge R430 with an Intel® Xeon® E5-2603 without PAA
  • Windows Server 2019 running on HPE ProLiant DL360 with an Intel® Xeon® Silver 4116 with PAA
  • Windows Server 2019 running on HPE ProLiant DL360 with an Intel® Xeon® Silver 4116 without PAA
  • Yocto (dunfell) 3.1 running on a LinkGuard with an AMD GX-412TC SoC with PAA
  • Yocto (dunfell) 3.1 running on a LinkGuard with an AMD GX-412TC SoC without PAA (single-user mode)

Validation history

DateTypeLab
2019-03-04InitialUL Verification Services, Inc.
2019-05-31UpdateUL Verification Services, Inc.
2019-10-22UpdateUL Verification Services, Inc.
2020-01-06UpdateUL Verification Services, Inc.
2020-03-26UpdateUL Verification Services, Inc.
2020-04-22UpdateUL Verification Services, Inc.
2020-07-06UpdateUL Verification Services, Inc.
2020-08-27UpdateUL Verification Services, Inc.
2021-01-29UpdateUL Verification Services, Inc.
2021-03-24UpdateUL Verification Services, Inc.
2021-04-14UpdateUL Verification Services, Inc.
2021-08-30UpdateUL Verification Services, Inc.
2022-02-14UpdateUL Verification Services, Inc.
2022-03-14UpdateUL Verification Services, Inc.
2023-02-15UpdateUL Verification Services, Inc.
2023-04-26UpdateUL Verification Services, Inc.
2023-09-13UpdateUL Verification Services, Inc.
2024-01-26UpdateUL Verification Services, Inc.
2024-02-15UpdateUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-03-04, 2019-05-31, 2019-10-22, 2020-01-06, 2020-03-26, 2020-04-22, 2020-07-06, 2020-08-27, 2021-01-29, 2021-03-24, 2021-04-14, 2021-08-30, 2022-02-14, 2022-03-14, 2023-02-15, 2023-04-26, 2023-09-13, 2024-01-26, 2024-02-15

Source documents