808bits

IOS Common Cryptographic Module (IC2M)

FIPS 140-3 certificate #4752 · Cisco Systems, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5356. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim Validation. When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)

Certificate

Certificate number4752
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeFirmware
EmbodimentMulti-Chip Stand Alone
VendorCisco Systems, Inc. · website
Firmware versionsRel5b

Module description

The IC2M module provides the FIPS validated cryptographic algorithms for services requiring those algorithms. The module does not implement any protocols directly; Instead, it provides the cryptographic primitives and functions to allow IOS to implement those various protocols.

Security level exceptions

  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA4354
AES-CFB128A4354
AES-CMACA4354
AES-ECBA4354
AES-GCMA4354
AES-GMACA4354
AES-KWA4354
Counter DRBGA4354
ECDSA KeyGen (FIPS186-4)A4354
ECDSA KeyVer (FIPS186-4)A4354
ECDSA SigGen (FIPS186-4)A4354
ECDSA SigVer (FIPS186-4)A4354
HMAC-SHA-1A4354
HMAC-SHA2-256A4354
HMAC-SHA2-384A4354
HMAC-SHA2-512A4354
KAS-ECC-SSC Sp800-56Ar3A4354
KAS-FFC-SSC Sp800-56Ar3A4354
KDF IKEv2A4354
KDF SNMPA4354
KDF SRTPA4354
KDF SSHA4354
RSA KeyGen (FIPS186-4)A4354
RSA SigGen (FIPS186-4)A4354
RSA SigVer (FIPS186-4)A4354
Safe Primes Key GenerationA4354
SHA-1A4354
SHA2-256A4354
SHA2-384A4354
SHA2-512A4354
TLS v1.2 KDF RFC7627A4354
TLS v1.3 KDFA4354

Tested configurations

  • IOS-XE 17.12 running on Cisco Aggregated Services Router (ASR) 1001-HX with Intel Xeon E3-1125C v2 processor

Validation history

DateTypeLab
2024-08-07InitialGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-07

Source documents