808bits

AWS-LC Cryptographic Module (dynamic)

FIPS 140-3 certificate #4759 · Amazon Web Services Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5429. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys)

Certificate

Certificate number4759
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorAmazon Web Services Inc. · website
Software versionsAWS-LC FIPS 2.0.0

Module description

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA4484
AES-CBCA4487
AES-CBCA4489
AES-CBCA4493
AES-CBCA4497
AES-CBCA4501
AES-CCMA4484
AES-CCMA4487
AES-CCMA4489
AES-CCMA4492
AES-CCMA4497
AES-CCMA4501
AES-CMACA4484
AES-CMACA4487
AES-CMACA4489
AES-CMACA4493
AES-CMACA4497
AES-CMACA4501
AES-CTRA4484
AES-CTRA4487
AES-CTRA4489
AES-CTRA4493
AES-CTRA4497
AES-CTRA4501
AES-ECBA4484
AES-ECBA4485
AES-ECBA4486
AES-ECBA4487
AES-ECBA4488
AES-ECBA4489
AES-ECBA4490
AES-ECBA4493
AES-ECBA4494
AES-ECBA4495
AES-ECBA4496
AES-ECBA4497
AES-ECBA4498
AES-ECBA4499
AES-ECBA4500
AES-ECBA4501
AES-ECBA4502
AES-ECBA4503
AES-ECBA4504
AES-GCMA4485
AES-GCMA4485
AES-GCMA4486
AES-GCMA4486
AES-GCMA4488
AES-GCMA4488
AES-GCMA4490
AES-GCMA4490
AES-GCMA4494
AES-GCMA4494
AES-GCMA4495
AES-GCMA4495
AES-GCMA4496
AES-GCMA4496
AES-GCMA4498
AES-GCMA4498
AES-GCMA4499
AES-GCMA4499
AES-GCMA4500
AES-GCMA4500
AES-GCMA4502
AES-GCMA4502
AES-GCMA4503
AES-GCMA4503
AES-GCMA4504
AES-GCMA4504
AES-GMACA4485
AES-GMACA4486
AES-GMACA4488
AES-GMACA4490
AES-GMACA4494
AES-GMACA4495
AES-GMACA4496
AES-GMACA4498
AES-GMACA4499
AES-GMACA4500
AES-GMACA4502
AES-GMACA4503
AES-GMACA4504
AES-KWA4484
AES-KWA4487
AES-KWA4489
AES-KWA4493
AES-KWA4497
AES-KWA4501
AES-KWPA4484
AES-KWPA4487
AES-KWPA4489
AES-KWPA4493
AES-KWPA4497
AES-KWPA4501
AES-XTS Testing Revision 2.0A4484
AES-XTS Testing Revision 2.0A4487
AES-XTS Testing Revision 2.0A4489
AES-XTS Testing Revision 2.0A4493
AES-XTS Testing Revision 2.0A4497
AES-XTS Testing Revision 2.0A4501
Counter DRBGA4484
Counter DRBGA4487
Counter DRBGA4489
Counter DRBGA4493
Counter DRBGA4497
Counter DRBGA4501
ECDSA KeyGen (FIPS186-5)A4483
ECDSA KeyGen (FIPS186-5)A4491
ECDSA KeyGen (FIPS186-5)A4492
ECDSA KeyGen (FIPS186-5)A4505
ECDSA KeyGen (FIPS186-5)A4506
ECDSA KeyGen (FIPS186-5)A4507
ECDSA KeyGen (FIPS186-5)A4508
ECDSA KeyVer (FIPS186-5)A4483
ECDSA KeyVer (FIPS186-5)A4491
ECDSA KeyVer (FIPS186-5)A4492
ECDSA KeyVer (FIPS186-5)A4505
ECDSA KeyVer (FIPS186-5)A4506
ECDSA KeyVer (FIPS186-5)A4507
ECDSA KeyVer (FIPS186-5)A4508
ECDSA SigGen (FIPS186-5)A4483
ECDSA SigGen (FIPS186-5)A4491
ECDSA SigGen (FIPS186-5)A4492
ECDSA SigGen (FIPS186-5)A4505
ECDSA SigGen (FIPS186-5)A4506
ECDSA SigGen (FIPS186-5)A4507
ECDSA SigGen (FIPS186-5)A4508
ECDSA SigVer (FIPS186-4)A4483
ECDSA SigVer (FIPS186-4)A4491
ECDSA SigVer (FIPS186-4)A4492
ECDSA SigVer (FIPS186-4)A4505
ECDSA SigVer (FIPS186-4)A4506
ECDSA SigVer (FIPS186-4)A4507
ECDSA SigVer (FIPS186-4)A4508
ECDSA SigVer (FIPS186-5)A4483
ECDSA SigVer (FIPS186-5)A4491
ECDSA SigVer (FIPS186-5)A4492
ECDSA SigVer (FIPS186-5)A4505
ECDSA SigVer (FIPS186-5)A4506
ECDSA SigVer (FIPS186-5)A4507
ECDSA SigVer (FIPS186-5)A4508
HMAC-SHA-1A4483
HMAC-SHA-1A4491
HMAC-SHA-1A4492
HMAC-SHA-1A4505
HMAC-SHA-1A4506
HMAC-SHA-1A4507
HMAC-SHA-1A4508
HMAC-SHA2-224A4483
HMAC-SHA2-224A4491
HMAC-SHA2-224A4492
HMAC-SHA2-224A4505
HMAC-SHA2-224A4506
HMAC-SHA2-224A4507
HMAC-SHA2-224A4508
HMAC-SHA2-256A4483
HMAC-SHA2-256A4491
HMAC-SHA2-256A4492
HMAC-SHA2-256A4505
HMAC-SHA2-256A4506
HMAC-SHA2-256A4507
HMAC-SHA2-256A4508
HMAC-SHA2-384A4483
HMAC-SHA2-384A4491
HMAC-SHA2-384A4492
HMAC-SHA2-384A4505
HMAC-SHA2-384A4506
HMAC-SHA2-384A4507
HMAC-SHA2-384A4508
HMAC-SHA2-512A4483
HMAC-SHA2-512A4491
HMAC-SHA2-512A4492
HMAC-SHA2-512A4505
HMAC-SHA2-512A4506
HMAC-SHA2-512A4507
HMAC-SHA2-512A4508
HMAC-SHA2-512/256A4483
HMAC-SHA2-512/256A4491
HMAC-SHA2-512/256A4492
HMAC-SHA2-512/256A4505
HMAC-SHA2-512/256A4506
HMAC-SHA2-512/256A4507
HMAC-SHA2-512/256A4508
KAS-ECC-SSC Sp800-56Ar3A4483
KAS-ECC-SSC Sp800-56Ar3A4491
KAS-ECC-SSC Sp800-56Ar3A4492
KAS-ECC-SSC Sp800-56Ar3A4505
KAS-ECC-SSC Sp800-56Ar3A4506
KAS-ECC-SSC Sp800-56Ar3A4507
KAS-ECC-SSC Sp800-56Ar3A4508
KDA HKDF Sp800-56Cr1A4483
KDA HKDF Sp800-56Cr1A4491
KDA HKDF Sp800-56Cr1A4492
KDA HKDF Sp800-56Cr1A4505
KDA HKDF Sp800-56Cr1A4506
KDA HKDF Sp800-56Cr1A4507
KDA HKDF Sp800-56Cr1A4508
KDF SSHA4483
KDF SSHA4491
KDF SSHA4492
KDF SSHA4505
KDF SSHA4506
KDF SSHA4507
KDF SSHA4508
KDF TLSA4483
KDF TLSA4491
KDF TLSA4492
KDF TLSA4505
KDF TLSA4506
KDF TLSA4507
KDF TLSA4508
PBKDFA4483
PBKDFA4491
PBKDFA4492
PBKDFA4505
PBKDFA4506
PBKDFA4507
PBKDFA4508
RSA KeyGen (FIPS186-5)A4483
RSA KeyGen (FIPS186-5)A4491
RSA KeyGen (FIPS186-5)A4492
RSA KeyGen (FIPS186-5)A4505
RSA KeyGen (FIPS186-5)A4506
RSA KeyGen (FIPS186-5)A4507
RSA KeyGen (FIPS186-5)A4508
RSA SigGen (FIPS186-5)A4483
RSA SigGen (FIPS186-5)A4491
RSA SigGen (FIPS186-5)A4492
RSA SigGen (FIPS186-5)A4505
RSA SigGen (FIPS186-5)A4506
RSA SigGen (FIPS186-5)A4507
RSA SigGen (FIPS186-5)A4508
RSA SigVer (FIPS186-4)A4483
RSA SigVer (FIPS186-4)A4491
RSA SigVer (FIPS186-4)A4492
RSA SigVer (FIPS186-4)A4505
RSA SigVer (FIPS186-4)A4506
RSA SigVer (FIPS186-4)A4507
RSA SigVer (FIPS186-5)A4483
RSA SigVer (FIPS186-5)A4491
RSA SigVer (FIPS186-5)A4492
RSA SigVer (FIPS186-5)A4505
RSA SigVer (FIPS186-5)A4506
RSA SigVer (FIPS186-5)A4507
RSA SigVer (FIPS186-5)A4508
SHA-1A4483
SHA-1A4491
SHA-1A4492
SHA-1A4505
SHA-1A4506
SHA-1A4507
SHA-1A4508
SHA2-224A4483
SHA2-224A4491
SHA2-224A4492
SHA2-224A4505
SHA2-224A4506
SHA2-224A4507
SHA2-224A4508
SHA2-256A4483
SHA2-256A4491
SHA2-256A4492
SHA2-256A4505
SHA2-256A4506
SHA2-256A4507
SHA2-256A4508
SHA2-384A4483
SHA2-384A4491
SHA2-384A4492
SHA2-384A4505
SHA2-384A4506
SHA2-384A4507
SHA2-384A4508
SHA2-512A4483
SHA2-512A4491
SHA2-512A4492
SHA2-512A4505
SHA2-512A4506
SHA2-512A4507
SHA2-512A4508
SHA2-512/256A4483
SHA2-512/256A4491
SHA2-512/256A4492
SHA2-512/256A4505
SHA2-512/256A4506
SHA2-512/256A4507
SHA2-512/256A4508

Tested configurations

  • Amazon Linux 2 running Amazon EC2 c7g.metal with Graviton3 processor with PAA
  • Amazon Linux 2 running Amazon EC2 c7g.metal with Graviton3 processor without PAA
  • Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
  • Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA
  • Amazon Linux 2023 running Amazon EC2 c7g.metal with Graviton3 processor with PAA
  • Amazon Linux 2023 running Amazon EC2 c7g.metal with Graviton3 processor without PAA
  • Amazon Linux 2023 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
  • Amazon Linux 2023 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA
  • Ubuntu 22.04 running Amazon EC2 c7g.metal with Graviton3 processor with PAA
  • Ubuntu 22.04 running Amazon EC2 c7g.metal with Graviton3 processor without PAA
  • Ubuntu 22.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
  • Ubuntu 22.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA

Validation history

DateTypeLab
2024-08-14Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-14

Source documents