808bits

Microsoft Azure Linux Kernel Crypto API

FIPS 140-2 certificate #4277 · Microsoft Corporation · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode

Certificate

Certificate number4277
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorMicrosoft Corporation · website
Software versions1.0 and 2.0

Module description

The Microsoft Azure Linux Kernel Crypto API Cryptographic Module is a general-purpose, software-based cryptographic module. The module provides general purpose cryptographic services that leverage FIPS 140-2-approved cryptographic algorithms. The module runs as part of the operating system kernel, provides cryptographic services to kernel applications through a C language Application Program Interface (API), and provides cryptographic services to user applications through an AF_ALG socket interface. The module is implemented as a set of shared libraries and binary files.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA1755, A3494
CVLA1755, A3494
DRBGA1755, A3494
ENT
HMACA1755, A3494
KAS-SSCA1755, A3494
KTS
KTS
KTS
RSAA1755, A3494
SHA-3A1755, A3494
SHSA1755, A3494
Triple-DESA1755, A3494

Tested configurations

  • Microsoft Azure Linux 1.0 on Azure Host Hypervisor running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL with PAA
  • Microsoft Azure Linux 1.0 on Azure Host Hypervisor running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL without PAA
  • Microsoft Azure Linux 1.0 running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL with PAA
  • Microsoft Azure Linux 1.0 running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL without PAA
  • Microsoft Azure Linux 2.0 on Azure Host Hypervisor running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL with PAA
  • Microsoft Azure Linux 2.0 on Azure Host Hypervisor running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL without PAA
  • Microsoft Azure Linux 2.0 running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL with PAA
  • Microsoft Azure Linux 2.0 running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL without PAA

Validation history

DateTypeLab
2022-08-15InitialLeidos Accredited Testing & Evaluation (AT&E) Lab
2024-03-01UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-08-15, 2024-03-01

Source documents