AWS-LC Cryptographic Module (dynamic)
AWS-LC Cryptographic Module (dynamic), from Amazon Web Services Inc., holds FIPS 140-3 certificate #4759 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys)
Certificate
| Certificate number | 4759 |
|---|---|
| Standard | FIPS 140-3 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Amazon Web Services Inc. · website |
| Software versions | AWS-LC FIPS 2.0.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms (37)
Tested configurations
- Amazon Linux 2 running Amazon EC2 c7g.metal with Graviton3 processor with PAA
- Amazon Linux 2 running Amazon EC2 c7g.metal with Graviton3 processor without PAA
- Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
- Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA
- Amazon Linux 2023 running Amazon EC2 c7g.metal with Graviton3 processor with PAA
- Amazon Linux 2023 running Amazon EC2 c7g.metal with Graviton3 processor without PAA
- Amazon Linux 2023 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
- Amazon Linux 2023 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA
- Ubuntu 22.04 running Amazon EC2 c7g.metal with Graviton3 processor with PAA
- Ubuntu 22.04 running Amazon EC2 c7g.metal with Graviton3 processor without PAA
- Ubuntu 22.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
- Ubuntu 22.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-08-14 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2024-08-14