IOS Common Cryptographic Module (IC2M): FIPS 140-2 cert #4222

IOS Common Cryptographic Module (IC2M), from Cisco Systems, Inc., holds FIPS 140-2 certificate #4222 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	4222
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Firmware
Embodiment	Multi-Chip Stand Alone
Vendor	Cisco Systems, Inc. · website
Firmware versions	Rel5a

Module description

Quoted from the NIST CMVP entry for this certificate.

The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly. Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.

Security level exceptions

Mitigation of Other Attacks: N/A

Approved algorithms (12)

Algorithm	CAVP certificates
AES	A1462
CKG	vendor affirmed
CVL	A1462
DRBG	A1462
ECDSA	A1462
HMAC	A1462
KAS-SSC	A1462
KBKDF	A1462
KTS
RSA	A1462
SHS	A1462
Triple-DES	A1462

Allowed algorithms

RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

IOS-XE 17.3 running on a Cisco ASR1K RP2 with an Intel Xeon L52XX
IOS-XE 17.3 running on a Cisco ASR1K RP3 with an Intel Xeon D-15XX
IOS-XE 17.3 running on a Cisco ISR 4321 with an Intel Atom C25XX

Validation history

Date	Type	Lab
2022-05-09	Initial	Acumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2022-05-09

IOS Common Cryptographic Module (IC2M)