808bits

Kasten BoringCrypto

FIPS 140-2 certificate #4353 · Kasten, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized and configured as specified in Section 12.1 of the Security Policy and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number4353
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorKasten, Inc. · website
Software versionsae223d6138807a13006342edfeef32e813246b39

Module description

A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESC1063
CKGvendor affirmed
CVLC1063
DRBGC1063
ECDSAC1063
HMACC1063
KAS-SSCvendor affirmed
KTS
RSAC1063
SHSC1063
Triple-DESC1063

Allowed algorithms

NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Debian Linux 4.19.37 (Rodete) running on an HPE Z620 with Intel Xeon E5-2680 without PAA
  • Debian Linux 4.19.37 (Rodete) running on HPE Z620 with Intel Xeon E5-2680 with PAA
  • Ubuntu Linux 18.04 running on a Google Arcadia-Rome with AMD Rome with PAA
  • Ubuntu Linux 18.04 running on a Google Arcadia-Rome with AMD Rome without PAA
  • Ubuntu Linux 18.04 running on a Zaius P9 with POWER9 with PAA
  • Ubuntu Linux 18.04 running on a Zaius P9 with POWER9 without PAA (single-user mode)

Validation history

DateTypeLab
2022-11-03InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2022-11-03

Source documents