Nutanix Cryptographic Module for BoringSSL
Nutanix Cryptographic Module for BoringSSL, from Nutanix, Inc., holds FIPS 140-2 certificate #4584 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When installed, initialized and configured as specified in Section 12.1 of the Security Policy and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 4584 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Nutanix, Inc. · website |
| Software versions | ae223d6138807a13006342edfeef32e813246b39 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Nutanix Cryptographic Module for BoringSSL is a suite of FIPS Approved algorithms used for TLS and other cryptographic functions.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms (11)
| Algorithm | CAVP certificates |
|---|---|
| AES | A2612 |
| CKG | vendor affirmed |
| CVL | A2612 |
| DRBG | A2612 |
| ECDSA | A2612 |
| HMAC | A2612 |
| KAS-SSC | vendor affirmed |
| KTS | |
| RSA | A2612 |
| SHS | A2612 |
| Triple-DES | A2612 |
Allowed algorithms
NDRNG.
Tested configurations
- CentOS 7 running on Nutanix NX-3040-G7 with Intel® Xeon® Silver 4208 with PAA
- CentOS 7 running on Nutanix NX-3040-G7 with Intel® Xeon® Silver 4208 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-09-06 | Initial | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2023-09-06