808bits

F5® Device Cryptographic Module

FIPS 140-2 certificate #3450 · F5 Networks · data as of 2026-08-28
Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS Mode and configured as specified in the section 8 of the Security Policy with tamper evident labels contained in F5-ADD-BIG-FIPS140 kit and installed as indicated in the Security Policy section 4.

Certificate

Certificate number3450
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeHardware
EmbodimentMulti-Chip Stand Alone
VendorF5 Networks · website
Hardware versionsBIG-IP i4000, BIG-IP i5000, BIG-IP i5820-DF, BIG-IP i7000, BIG-IP i7820-DF, BIG-IP i10800, BIG-IP i11800-DS, BIG-IP i15800, BIG-IP 4000, BIG-IP 5250v-F, BIG-IP 7000, BIG-IP 7200v-F, BIG-IP 10200v-F, BIG-IP 10350v-F, VIPRION B2250, VIPRION B4450
Firmware versions13.1.1 EHF

Module description

F5® Device Cryptographic Module, Application Delivery Controller and Firewall software running on F5 BIG-IP and VIPRION hardware.

Security level exceptions

  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C63, C64, C65, C67, C68, C69, C70, C71, C75
CKG
CVLC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C63, C64, C65, C67, C68, C69, C70, C71, C75
DRBGC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C64, C65, C67, C68, C69, C70, C71, C75
ECDSAC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C63, C64, C65, C67, C68, C69, C70, C71, C75
HMACC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C63, C64, C65, C67, C68, C69, C70, C71, C75
KTS
KTS
KTS
KTS
RSAC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C63, C64, C65, C67, C68, C69, C70, C71, C75
SHSC2, C33, C34, C35, C36, C37, C40, C41, C42, C43, C44, C45, C46, C47, C48, C49, C52, C53, C54, C55, C57, C58, C62, C63, C64, C65, C67, C68, C69, C70, C71, C75

Allowed algorithms

EC Diffie-Hellman (CVL Certs. #C 2, #C 33, #C 34, #C 35, #C 36, #C 37, #C 40, #C 41, #C 42, #C 43, #C 44, #C 45, #C 46, #C 47, #C 48, #C 49, #C 52, #C 53, #C 54, #C 55, #C 57, #C 58, #C 62, #C 63, #C 64, #C 65, #C 67, #C 68, #C 69, #C 70, #C 71 and #C 75 with #C 2, #C 33, #C 34, #C 35, #C 36, #C 37, #C 40, #C 41, #C 42, #C 43, #C 44, #C 45, #C 46, #C 47, #C 48, #C 49, #C 52, #C 53, #C 54, #C 55, #C 57, #C 58, #C 62, #C 63, #C 64, #C 65, #C 67, #C 68, #C 69, #C 70, #C 71 and #C 75, key agreement; key establishment methodology provides 128 or 192 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

  • N/A

Validation history

DateTypeLab
2019-05-02Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-05-02

Source documents