Nutanix Cryptographic Module for BoringSSL
Caveat: When installed, initialized and configured as specified in Section 12.1 of the Security Policy and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 4118 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Nutanix, Inc. · website |
| Software versions | ae223d6138807a13006342edfeef32e813246b39 |
Module description
The Nutanix Cryptographic Module for BoringSSL is a suite of FIPS Approved algorithms used for TLS and other cryptographic functions.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A2612 |
| CKG | vendor affirmed |
| CVL | A2612 |
| DRBG | A2612 |
| ECDSA | A2612 |
| HMAC | A2612 |
| KAS-SSC | vendor affirmed |
| KTS | |
| RSA | A2612 |
| SHS | A2612 |
| Triple-DES | A2612 |
Allowed algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- CentOS 7 running on Nutanix NX-3040-G7 with Intel® Xeon® Silver 4208 with PAA
- CentOS 7 running on Nutanix NX-3040-G7 with Intel® Xeon® Silver 4208 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-12-28 | Initial | Acumen Security |
| 2022-09-22 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2021-12-28, 2022-09-22