AWS-LC Cryptographic Module
AWS-LC Cryptographic Module, from Amazon Web Services Inc., holds FIPS 140-3 certificate #4631 at overall level 1. The validation is active, with a sunset date of 2028-10-05. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in approved mode
Certificate
| Certificate number | 4631 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2028-10-05 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Amazon Web Services Inc. · website |
| Software versions | AWS-LC FIPS 1.0.2 [1] and AWS-LC FIPS 1.1.0 [2] |
Module description
Quoted from the NIST CMVP entry for this certificate.
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms (30)
Tested configurations
- Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]
- Amazon Linux 2 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]
- Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]
- Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]
- Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]
- Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]
- Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor with PAA [1]
- Android 12 on Samsung Galaxy S20 with Qualcomm Cortex-A Snapdragon 865 processor without PAA [1]
- iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor with PAA [2]
- iOS 15.5 on Apple iPhone 12 with Apple A14 Bionic processor without PAA [2]
- MacBook Air with MacOS 12.4 on Apple M1 processor with PAA [2]
- MacBook Air with MacOS 12.4 on Apple M1 processor without PAA [2]
- Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA [1]
- Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA [1]
- Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA [1]
- Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA [1]
- Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor with PAA [1]
- Ubuntu 22.04 on Amazon EC2 c7g.metal with Graviton3 processor without PAA [1]
- Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor with PAA [1]
- Windows 10 on Dell Latitude 5430 with Intel Core i7 1255U processor without PAA [1]
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-10-06 | Initial | atsec information security corporation |
| 2025-06-27 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-10-06