Ubuntu 20.04 AWS Kernel Crypto API Cryptographic Module
Caveat: When operated in FIPS mode. The module generates random strings whose strengths are modified by available entropy
Certificate
| Certificate number | 4132 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Canonical Ltd. · website |
| Software versions | 3.0 |
Module description
The Ubuntu 20.04 AWS Kernel Crypto API module is a software module running as part of the operating system kernel that provides general purpose cryptographic services.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A623, A624, A625, A626, A627, A628, A629, A630, A631, A632, A633, A634, A635, A636, A637, A638, A639, A640, A641, A642, A644 |
| DRBG | A616, A617, A618, A619, A622, A626, A627, A628, A629, A630, A631, A635, A636, A637, A638, A639, A644 |
| HMAC | A616, A617, A618, A643, A644 |
| KTS | |
| KTS | |
| KTS | |
| RSA | A616, A617, A618, A644 |
| SHA-3 | A643 |
| SHS | A616, A617, A618, A644 |
| Triple-DES | A619, A620, A621, A622, A641, A642, A644 |
Allowed algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU with PAA
- Ubuntu 20.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 CPU without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-01-13 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2022-01-13