808bits

Amazon Linux 2 Kernel Crypto API Cryptographic Module

FIPS 140-2 certificate #4593 · Amazon Web Services, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module Amazon Linux 2 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #4565 operating in FIPS mode

Certificate

Certificate number4593
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorAmazon Web Services, Inc. · website
Software versions1.0

Module description

The Linux kernel Crypto API implemented in the Amazon Linux 2 provides services operating inside the Linux kernel with various ciphers, message digests and an approved random number generator.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA3671, A3672, A3673, A3675, A3676, A3677, A3678, A3679, A3680, C911, C912, C913, C914, C915, C917
DRBGA3671, A3672, A3673, A3676, A3679, C911, C913, C915, C918, C919, C920, C921
HMACA3671, A3672, A3673, A3674, A3678, A3681, A3741, C803, C918, C919, C920, C921, C923
KTS
KTS
RSAA3673, C918, C919, C920, C921, C923
SHA-3A3674, C923
SHSA3671, A3672, A3673, A3678, A3681, C918, C919, C920, C921
Triple-DESA3673, C923

Allowed algorithms

NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Amazon Linux 2 running on Amazon EC2 c6g.metal with Graviton 2 with PAA
  • Amazon Linux 2 running on Amazon EC2 c6g.metal with Graviton 2 without PAA (single-user mode)
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 with PAA
  • Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5-2686 without PAA

Validation history

DateTypeLab
2023-09-12Initialatsec information security corporation
2023-11-13Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2023-09-12, 2023-11-13

Source documents