Broadcom FIPS Object Module for OpenSSL: FIPS 140-2 cert #3941

Broadcom FIPS Object Module for OpenSSL, from Broadcom Inc., holds FIPS 140-2 certificate #3941 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3941
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-Chip Stand Alone
Vendor	Broadcom Inc. · website
Software versions	1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Broadcom FIPS Module for OpenSSL is a general-purpose cryptographic module integrated in Broadcom’s products and Whitebox switches running Broadcom Network Operating Systems to provide FIPS 140-2 validated cryptography for the protection of sensitive information.

Security level exceptions

Roles, Services, and Authentication: Level 2
Physical Security: N/A
Design Assurance: Level 3
Mitigation of Other Attacks: N/A

Approved algorithms (11)

Algorithm	CAVP certificates
AES	A844
CKG	vendor affirmed
CVL	A844
DRBG	A844
DSA	A844
ECDSA	A844
HMAC	A844
KAS-SSC	vendor affirmed
RSA	A844
SHS	A844
Triple-DES	A844

Allowed algorithms

RSA (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

EFOS 3 (Ethernet Fabric OS) running on BES-53248 with Intel® Atom(TM) CPU C2338 with PAA
EFOS 3 (Ethernet Fabric OS) running on BES-53248 with Intel® Atom™ CPU C2338 without PAA (single user mode)

Validation history

Date	Type	Lab
2021-06-02	Initial	Acumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2021-06-02

Broadcom FIPS Object Module for OpenSSL