808bits

AWS-LC Cryptographic Module

FIPS 140-3 certificate #4631 · Amazon Web Services Inc. · data as of 2026-08-28
Active. Sunset date 2028-10-05, 768 days away.
Caveat: When operated in approved mode

Certificate

Certificate number4631
StandardFIPS 140-3
Statusactive
Sunset date2028-10-05
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorAmazon Web Services Inc. · website
Software versionsAWS-LC FIPS 1.0.2 [1] and AWS-LC FIPS 1.1.0 [2]

Module description

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA2177
AES-CBCA2180
AES-CBCA2183
AES-CBCA2186
AES-CBCA2190
AES-CBCA2194
AES-CBCA4667
AES-CBCA4670
AES-CBCA4672
AES-CBCA4692
AES-CBCA4696
AES-CBCA4700
AES-CBCA4726
AES-CBCA4729
AES-CBCA4731
AES-CCMA2177
AES-CCMA2180
AES-CCMA2183
AES-CCMA2186
AES-CCMA2190
AES-CCMA2194
AES-CCMA4667
AES-CCMA4670
AES-CCMA4672
AES-CCMA4692
AES-CCMA4696
AES-CCMA4700
AES-CCMA4726
AES-CCMA4729
AES-CCMA4731
AES-CMACA2177
AES-CMACA2180
AES-CMACA2183
AES-CMACA2186
AES-CMACA2190
AES-CMACA2194
AES-CMACA4667
AES-CMACA4670
AES-CMACA4672
AES-CMACA4692
AES-CMACA4696
AES-CMACA4700
AES-CMACA4726
AES-CMACA4729
AES-CMACA4731
AES-CTRA2177
AES-CTRA2180
AES-CTRA2183
AES-CTRA2186
AES-CTRA2190
AES-CTRA2194
AES-CTRA4667
AES-CTRA4670
AES-CTRA4672
AES-CTRA4692
AES-CTRA4696
AES-CTRA4700
AES-CTRA4726
AES-CTRA4729
AES-CTRA4731
AES-ECBA2177
AES-ECBA2178
AES-ECBA2180
AES-ECBA2181
AES-ECBA2183
AES-ECBA2184
AES-ECBA2186
AES-ECBA2187
AES-ECBA2188
AES-ECBA2189
AES-ECBA2190
AES-ECBA2191
AES-ECBA2192
AES-ECBA2193
AES-ECBA2194
AES-ECBA2195
AES-ECBA2196
AES-ECBA2197
AES-ECBA4667
AES-ECBA4668
AES-ECBA4670
AES-ECBA4671
AES-ECBA4672
AES-ECBA4673
AES-ECBA4692
AES-ECBA4693
AES-ECBA4694
AES-ECBA4695
AES-ECBA4696
AES-ECBA4697
AES-ECBA4698
AES-ECBA4699
AES-ECBA4700
AES-ECBA4701
AES-ECBA4702
AES-ECBA4703
AES-ECBA4726
AES-ECBA4727
AES-ECBA4729
AES-ECBA4730
AES-ECBA4731
AES-ECBA4732
AES-GCMA2178
AES-GCMA2178
AES-GCMA2181
AES-GCMA2181
AES-GCMA2184
AES-GCMA2184
AES-GCMA2187
AES-GCMA2187
AES-GCMA2188
AES-GCMA2188
AES-GCMA2189
AES-GCMA2189
AES-GCMA2191
AES-GCMA2191
AES-GCMA2192
AES-GCMA2192
AES-GCMA2193
AES-GCMA2193
AES-GCMA2195
AES-GCMA2195
AES-GCMA2196
AES-GCMA2196
AES-GCMA2197
AES-GCMA2197
AES-GCMA4668
AES-GCMA4668
AES-GCMA4671
AES-GCMA4671
AES-GCMA4673
AES-GCMA4673
AES-GCMA4693
AES-GCMA4693
AES-GCMA4694
AES-GCMA4694
AES-GCMA4695
AES-GCMA4695
AES-GCMA4697
AES-GCMA4697
AES-GCMA4698
AES-GCMA4698
AES-GCMA4699
AES-GCMA4699
AES-GCMA4701
AES-GCMA4701
AES-GCMA4702
AES-GCMA4702
AES-GCMA4703
AES-GCMA4703
AES-GCMA4727
AES-GCMA4727
AES-GCMA4730
AES-GCMA4730
AES-GCMA4732
AES-GCMA4732
AES-GMACA2178
AES-GMACA2181
AES-GMACA2184
AES-GMACA2187
AES-GMACA2188
AES-GMACA2189
AES-GMACA2191
AES-GMACA2192
AES-GMACA2193
AES-GMACA2195
AES-GMACA2196
AES-GMACA2197
AES-GMACA4671
AES-GMACA4673
AES-GMACA4693
AES-GMACA4694
AES-GMACA4695
AES-GMACA4697
AES-GMACA4698
AES-GMACA4699
AES-GMACA4701
AES-GMACA4702
AES-GMACA4703
AES-GMACA4727
AES-GMACA4730
AES-GMACA4732
AES-KWA2177
AES-KWA2180
AES-KWA2183
AES-KWA2186
AES-KWA2190
AES-KWA2194
AES-KWA4667
AES-KWA4670
AES-KWA4672
AES-KWA4692
AES-KWA4696
AES-KWA4700
AES-KWA4726
AES-KWA4729
AES-KWA4731
AES-KWPA2177
AES-KWPA2180
AES-KWPA2183
AES-KWPA2186
AES-KWPA2190
AES-KWPA2194
AES-KWPA4667
AES-KWPA4670
AES-KWPA4672
AES-KWPA4692
AES-KWPA4696
AES-KWPA4700
AES-KWPA4726
AES-KWPA4729
AES-KWPA4731
Counter DRBGA2177
Counter DRBGA2180
Counter DRBGA2183
Counter DRBGA2186
Counter DRBGA2190
Counter DRBGA2194
Counter DRBGA4667
Counter DRBGA4670
Counter DRBGA4672
Counter DRBGA4692
Counter DRBGA4696
Counter DRBGA4700
Counter DRBGA4726
Counter DRBGA4729
Counter DRBGA4731
ECDSA KeyGen (FIPS186-4)A2182
ECDSA KeyGen (FIPS186-4)A2185
ECDSA KeyGen (FIPS186-4)A2198
ECDSA KeyGen (FIPS186-4)A2199
ECDSA KeyGen (FIPS186-4)A2200
ECDSA KeyGen (FIPS186-4)A4666
ECDSA KeyGen (FIPS186-4)A4674
ECDSA KeyGen (FIPS186-4)A4704
ECDSA KeyGen (FIPS186-4)A4705
ECDSA KeyGen (FIPS186-4)A4706
ECDSA KeyGen (FIPS186-4)A4725
ECDSA KeyGen (FIPS186-4)A4733
ECDSA KeyVer (FIPS186-4)A2182
ECDSA KeyVer (FIPS186-4)A2185
ECDSA KeyVer (FIPS186-4)A2198
ECDSA KeyVer (FIPS186-4)A2199
ECDSA KeyVer (FIPS186-4)A2200
ECDSA KeyVer (FIPS186-4)A4666
ECDSA KeyVer (FIPS186-4)A4674
ECDSA KeyVer (FIPS186-4)A4704
ECDSA KeyVer (FIPS186-4)A4705
ECDSA KeyVer (FIPS186-4)A4706
ECDSA KeyVer (FIPS186-4)A4725
ECDSA KeyVer (FIPS186-4)A4733
ECDSA SigGen (FIPS186-4)A2182
ECDSA SigGen (FIPS186-4)A2185
ECDSA SigGen (FIPS186-4)A2198
ECDSA SigGen (FIPS186-4)A2199
ECDSA SigGen (FIPS186-4)A2200
ECDSA SigGen (FIPS186-4)A4666
ECDSA SigGen (FIPS186-4)A4674
ECDSA SigGen (FIPS186-4)A4704
ECDSA SigGen (FIPS186-4)A4705
ECDSA SigGen (FIPS186-4)A4706
ECDSA SigGen (FIPS186-4)A4725
ECDSA SigGen (FIPS186-4)A4733
ECDSA SigVer (FIPS186-4)A2182
ECDSA SigVer (FIPS186-4)A2185
ECDSA SigVer (FIPS186-4)A2198
ECDSA SigVer (FIPS186-4)A2199
ECDSA SigVer (FIPS186-4)A2200
ECDSA SigVer (FIPS186-4)A4666
ECDSA SigVer (FIPS186-4)A4666
ECDSA SigVer (FIPS186-4)A4674
ECDSA SigVer (FIPS186-4)A4674
ECDSA SigVer (FIPS186-4)A4704
ECDSA SigVer (FIPS186-4)A4704
ECDSA SigVer (FIPS186-4)A4705
ECDSA SigVer (FIPS186-4)A4705
ECDSA SigVer (FIPS186-4)A4706
ECDSA SigVer (FIPS186-4)A4706
ECDSA SigVer (FIPS186-4)A4725
ECDSA SigVer (FIPS186-4)A4725
ECDSA SigVer (FIPS186-4)A4733
ECDSA SigVer (FIPS186-4)A4733
HMAC-SHA-1A2182
HMAC-SHA-1A2185
HMAC-SHA-1A2198
HMAC-SHA-1A2199
HMAC-SHA-1A2200
HMAC-SHA-1A4666
HMAC-SHA-1A4674
HMAC-SHA-1A4704
HMAC-SHA-1A4705
HMAC-SHA-1A4706
HMAC-SHA-1A4725
HMAC-SHA-1A4733
HMAC-SHA2-224A2182
HMAC-SHA2-224A2185
HMAC-SHA2-224A2198
HMAC-SHA2-224A2199
HMAC-SHA2-224A2200
HMAC-SHA2-224A4666
HMAC-SHA2-224A4674
HMAC-SHA2-224A4704
HMAC-SHA2-224A4705
HMAC-SHA2-224A4706
HMAC-SHA2-224A4725
HMAC-SHA2-224A4733
HMAC-SHA2-256A2179
HMAC-SHA2-256A2182
HMAC-SHA2-256A2185
HMAC-SHA2-256A2198
HMAC-SHA2-256A2199
HMAC-SHA2-256A2200
HMAC-SHA2-256A4666
HMAC-SHA2-256A4669
HMAC-SHA2-256A4674
HMAC-SHA2-256A4704
HMAC-SHA2-256A4705
HMAC-SHA2-256A4706
HMAC-SHA2-256A4725
HMAC-SHA2-256A4728
HMAC-SHA2-256A4733
HMAC-SHA2-384A2182
HMAC-SHA2-384A2185
HMAC-SHA2-384A2198
HMAC-SHA2-384A2199
HMAC-SHA2-384A2200
HMAC-SHA2-384A4666
HMAC-SHA2-384A4674
HMAC-SHA2-384A4704
HMAC-SHA2-384A4705
HMAC-SHA2-384A4706
HMAC-SHA2-384A4725
HMAC-SHA2-384A4733
HMAC-SHA2-512A2182
HMAC-SHA2-512A2185
HMAC-SHA2-512A2198
HMAC-SHA2-512A2199
HMAC-SHA2-512A2200
HMAC-SHA2-512A4666
HMAC-SHA2-512A4674
HMAC-SHA2-512A4704
HMAC-SHA2-512A4705
HMAC-SHA2-512A4706
HMAC-SHA2-512A4725
HMAC-SHA2-512A4733
KAS-ECC-SSC Sp800-56Ar3A2182
KAS-ECC-SSC Sp800-56Ar3A2185
KAS-ECC-SSC Sp800-56Ar3A2198
KAS-ECC-SSC Sp800-56Ar3A2199
KAS-ECC-SSC Sp800-56Ar3A2200
KAS-ECC-SSC Sp800-56Ar3A4666
KAS-ECC-SSC Sp800-56Ar3A4704
KAS-ECC-SSC Sp800-56Ar3A4705
KAS-ECC-SSC Sp800-56Ar3A4706
KAS-ECC-SSC Sp800-56Ar3A4725
KAS-ECC-SSC Sp800-56Ar3A4733
KDF TLSA2182
KDF TLSA2185
KDF TLSA2198
KDF TLSA2199
KDF TLSA2200
KDF TLSA4666
KDF TLSA4674
KDF TLSA4704
KDF TLSA4705
KDF TLSA4706
KDF TLSA4725
KDF TLSA4733
RSA KeyGen (FIPS186-4)A2182
RSA KeyGen (FIPS186-4)A2185
RSA KeyGen (FIPS186-4)A2198
RSA KeyGen (FIPS186-4)A2199
RSA KeyGen (FIPS186-4)A2200
RSA KeyGen (FIPS186-4)A4666
RSA KeyGen (FIPS186-4)A4674
RSA KeyGen (FIPS186-4)A4704
RSA KeyGen (FIPS186-4)A4705
RSA KeyGen (FIPS186-4)A4706
RSA KeyGen (FIPS186-4)A4725
RSA KeyGen (FIPS186-4)A4733
RSA SigGen (FIPS186-4)A2182
RSA SigGen (FIPS186-4)A2185
RSA SigGen (FIPS186-4)A2198
RSA SigGen (FIPS186-4)A2199
RSA SigGen (FIPS186-4)A2200
RSA SigGen (FIPS186-4)A4666
RSA SigGen (FIPS186-4)A4674
RSA SigGen (FIPS186-4)A4704
RSA SigGen (FIPS186-4)A4705
RSA SigGen (FIPS186-4)A4706
RSA SigGen (FIPS186-4)A4725
RSA SigGen (FIPS186-4)A4733
RSA SigVer (FIPS186-4)A2182
RSA SigVer (FIPS186-4)A2185
RSA SigVer (FIPS186-4)A2198
RSA SigVer (FIPS186-4)A2199
RSA SigVer (FIPS186-4)A2200
RSA SigVer (FIPS186-4)A4666
RSA SigVer (FIPS186-4)A4674
RSA SigVer (FIPS186-4)A4704
RSA SigVer (FIPS186-4)A4705
RSA SigVer (FIPS186-4)A4706
RSA SigVer (FIPS186-4)A4725
RSA SigVer (FIPS186-4)A4733
SHA-1A2182
SHA-1A2185
SHA-1A2198
SHA-1A2199
SHA-1A2200
SHA-1A4666
SHA-1A4674
SHA-1A4704
SHA-1A4705
SHA-1A4706
SHA-1A4725
SHA-1A4733
SHA2-224A2182
SHA2-224A2185
SHA2-224A2198
SHA2-224A2199
SHA2-224A2200
SHA2-224A4666
SHA2-224A4674
SHA2-224A4704
SHA2-224A4705
SHA2-224A4706
SHA2-224A4725
SHA2-224A4733
SHA2-256A2179
SHA2-256A2182
SHA2-256A2185
SHA2-256A2198
SHA2-256A2199
SHA2-256A2200
SHA2-256A4666
SHA2-256A4669
SHA2-256A4674
SHA2-256A4704
SHA2-256A4705
SHA2-256A4706
SHA2-256A4725
SHA2-256A4728
SHA2-256A4733
SHA2-384A2182
SHA2-384A2185
SHA2-384A2198
SHA2-384A2199
SHA2-384A2200
SHA2-384A4666
SHA2-384A4674
SHA2-384A4704
SHA2-384A4705
SHA2-384A4706
SHA2-384A4725
SHA2-384A4733
SHA2-512A2182
SHA2-512A2185
SHA2-512A2198
SHA2-512A2199
SHA2-512A2200
SHA2-512A4666
SHA2-512A4674
SHA2-512A4704
SHA2-512A4705
SHA2-512A4706
SHA2-512A4725
SHA2-512A4733
SHA2-512/256A2182
SHA2-512/256A2185
SHA2-512/256A2198
SHA2-512/256A2199
SHA2-512/256A2200
SHA2-512/256A4666
SHA2-512/256A4674
SHA2-512/256A4704
SHA2-512/256A4705
SHA2-512/256A4706
SHA2-512/256A4725
SHA2-512/256A4733

Tested configurations

  • Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]
  • Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]
  • Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]
  • Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]
  • Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]
  • Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]
  • Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor with PAA [1]
  • Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor without PAA [1]
  • iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor with PAA [2]
  • iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor without PAA [2]
  • MacBook Air with MacOS 12.4 on Apple M1 processor with PAA [2]
  • MacBook Air with MacOS 12.4 on Apple M1 processor without PAA [2]
  • Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]
  • Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]
  • Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]
  • Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]
  • Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]
  • Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]
  • Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor with PAA [1]
  • Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor without PAA [1]

Validation history

DateTypeLab
2023-10-06Initialatsec information security corporation
2025-06-27Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2023-10-06

Source documents