808bits

Hypori Cryptographic Module for BoringSSL

FIPS 140-2 certificate #3620 · Hypori Inc. · data as of 2026-09-03

Hypori Cryptographic Module for BoringSSL, from Hypori Inc., holds FIPS 140-2 certificate #3620 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in Section 12.1 of the Security Policy and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. This validation entry is a non-security-relevant modification to Cert. #3318

Certificate

Certificate number3620
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorHypori Inc. · website
Software versions66005f41fbc3529ffe8d007708756720529da20d

Module description

Quoted from the NIST CMVP entry for this certificate.

A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (10)

AlgorithmCAVP certificates
AES5612, C1446
CKGvendor affirmed
CVL2033, 2034, 2035, C1446
DRBG2253, C1446
ECDSA1520, C1446
HMAC3743, C1446
KTS
RSA3020, C1446
SHS4509, C1446
Triple-DES2825, C1446

Allowed algorithms

EC Diffie-Hellman (CVL Certs. #2033 and #2034; key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C1446; key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Android 9 on QEMU 2.6 on Red Hat Enterprise Linux 7 running on Intel Xeon Gold 6140 with PAA (clang Compiler Version 6.0.1) (single-user mode)
  • Debian Linux 4.9.0 running on Intel Xeon E5-2680 with PAA (clang Compiler Version 6.0.1)
  • Debian Linux 4.9.0 running on Intel Xeon E5-2680 without PAA (clang Compiler Version 6.0.1)
  • Ubuntu Linux 18.04 running on POWER9 with PAA (clang Compiler Version 6.0.1)
  • Ubuntu Linux 18.04 running on POWER9 without PAA (clang Compiler Version 6.0.1)

Validation history

DateTypeLab
2020-02-21InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2022-02-17UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2020-02-21, 2022-02-17

Source documents