Nutanix Cryptographic Module for BoringSSL
Caveat: The module generates cryptographic keys whose strengths are modified by available entropy.
Certificate
| Certificate number | 3541 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Nutanix, Inc. · website |
| Software versions | 66005f41fbc3529ffe8d007708756720529da20d |
Module description
The Nutanix Cryptographic Module for BoringSSL is a suite of FIPS Approved algorithms used for TLS and other cryptographic functions.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 5612, C1256, A1229 |
| CKG | vendor affirmed |
| CVL | 2033, 2034, 2035, C1256, A1229 |
| DRBG | 2253, C1256, A1229 |
| ECDSA | 1520, C1256, A1229 |
| HMAC | 3743, C1256, A1229 |
| KTS | |
| RSA | 3020, C1256, A1229 |
| SHS | 4509, C1256, A1229 |
| Triple-DES | 2825, C1256, A1229 |
Allowed algorithms
EC Diffie-Hellman (CVL Certs. #2033, #2035, #C1256 and #A1229; key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- CentOS 7.5 running on Nutanix NX-3360-G6 with an Intel Xeon 4116 with PAA (clang Compiler Version 6.0.1)
- CentOS 7.5 running on Nutanix NX-3360-G6 with an Intel Xeon 4116 without PAA (clang Compiler Version 6.0.1)
- CentOS 7.9 on Nutanix AHV Hypervisor v7.0 running on Nutanix NX-3060-G7 Appliance with an Intel® Xeon® Gold 6234 with PAA (clang Compiler Version 6.0.1)
- CentOS 7.9 on Nutanix AHV Hypervisor v7.0 running on Nutanix NX-3060-G7 Appliance with an Intel® Xeon® Gold 6234 without PAA (clang Compiler Version 6.0.1)
- Debian Linux 4.9.0 running on Intel Xeon E5-2680 with PAA (clang Compiler Version 6.0.1)
- Debian Linux 4.9.0 running on Intel Xeon E5-2680 without PAA (clang Compiler Version 6.0.1)
- Ubuntu Linux 18.04 running on POWER9 with PAA (clang Compiler Version 6.0.1)
- Ubuntu Linux 18.04 running on POWER9 without PAA (clang Compiler Version 6.0.1) (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2019-10-01 | Initial | Acumen Security |
| 2019-11-14 | Update | Acumen Security |
| 2020-05-26 | Update | Acumen Security |
| 2021-06-02 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2019-10-01, 2019-11-14, 2020-05-26, 2021-06-02