808bits

IBM DataPower FIPS Provider

FIPS 140-3 certificate #4789 · IBM · data as of 2026-10-09

IBM DataPower FIPS Provider, from IBM, holds FIPS 140-3 certificate #4789 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement. Observed moving to historical on 2026-09-08.
Caveat: Interim validation. When operated in approved mode.

Certificate

Certificate number4789
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorIBM · website
Software versions3.0.9-B3346E1D91BA83B7BAB52F472F3E6A0D

Module description

Quoted from the NIST CMVP entry for this certificate.

The IBM DataPower FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (66)

AlgorithmCAVP certificates
AES-CBCA4357, A4358, A4359
AES-CBC-CS1A4357, A4358, A4359
AES-CBC-CS2A4357, A4358, A4359
AES-CBC-CS3A4357, A4358, A4359
AES-CCMA4357, A4358, A4359
AES-CFB1A4357, A4358, A4359
AES-CFB128A4357, A4358, A4359
AES-CFB8A4357, A4358, A4359
AES-CMACA4357, A4358, A4359
AES-CTRA4357, A4358, A4359
AES-ECBA4357, A4358, A4359, A4370, A4377, A4378, A4379, A4380
AES-GCMA4360, A4363, A4364, A4371, A4372, A4373, A4374, A4375, A4376
AES-GMACA4360, A4363, A4364, A4371, A4372, A4373, A4374, A4375, A4376
AES-KWA4357, A4358, A4359
AES-KWPA4357, A4358, A4359
AES-OFBA4357, A4358, A4359
AES-XTS Testing Revision 2.0A4357, A4358, A4359
Counter DRBGA4356
ECDSA KeyGen (FIPS186-5)A4361, A4365, A4366, A4367, A4368
ECDSA KeyVer (FIPS186-5)A4361, A4365, A4366, A4367, A4368
ECDSA SigGen (FIPS186-5)A4361, A4362, A4365, A4366, A4367, A4368
ECDSA SigVer (FIPS186-5)A4361, A4362, A4365, A4366, A4367, A4368
Hash DRBGA4356
HMAC DRBGA4356
HMAC-SHA-1A4361, A4365, A4366, A4367, A4368
HMAC-SHA2-224A4361, A4365, A4366, A4367, A4368
HMAC-SHA2-256A4361, A4365, A4366, A4367, A4368
HMAC-SHA2-384A4361, A4365, A4366, A4367, A4368
HMAC-SHA2-512A4361, A4365, A4366, A4367, A4368
HMAC-SHA2-512/224A4361, A4365, A4366, A4367, A4368
HMAC-SHA2-512/256A4361, A4365, A4366, A4367, A4368
HMAC-SHA3-224A4362
HMAC-SHA3-256A4362
HMAC-SHA3-384A4362
HMAC-SHA3-512A4362
KAS-ECC-SSC Sp800-56Ar3A4361, A4365, A4366, A4367, A4368
KAS-FFC-SSC Sp800-56Ar3A4383
KDA HKDF Sp800-56Cr1A4355
KDA OneStep SP800-56Cr2A4382
KDA TwoStep SP800-56Cr2A4382
KDF ANS 9.42A4361, A4362, A4365, A4366, A4367, A4368
KDF ANS 9.63A4361, A4362, A4365, A4366, A4367, A4368
KDF SP800-108A4381
KDF SSHA4370, A4377, A4378, A4379, A4380
PBKDFA4361, A4362, A4365, A4366, A4367, A4368
RSA KeyGen (FIPS186-5)A4361, A4365, A4366, A4367, A4368
RSA SigGen (FIPS186-5)A4361, A4362, A4365, A4366, A4367, A4368
RSA SigVer (FIPS186-4)A4361, A4365, A4366, A4367, A4368
RSA SigVer (FIPS186-5)A4361, A4362, A4365, A4366, A4367, A4368
Safe Primes Key GenerationA4383
Safe Primes Key VerificationA4383
SHA-1A4361, A4365, A4366, A4367, A4368
SHA2-224A4361, A4365, A4366, A4367, A4368
SHA2-256A4361, A4365, A4366, A4367, A4368
SHA2-384A4361, A4365, A4366, A4367, A4368
SHA2-512A4361, A4365, A4366, A4367, A4368
SHA2-512/224A4361, A4365, A4366, A4367, A4368
SHA2-512/256A4361, A4365, A4366, A4367, A4368
SHA3-224A4362
SHA3-256A4362
SHA3-384A4362
SHA3-512A4362
SHAKE-128A4362
SHAKE-256A4362
TLS v1.2 KDF RFC7627A4361, A4365, A4366, A4367, A4368
TLS v1.3 KDFA4355

Tested configurations

  • CentOS Stream 8 running on IBM DataPower Gateway X3 with Intel Xeon Gold 6326 with PAA
  • CentOS Stream 8 running on IBM DataPower Gateway X3 with Intel Xeon Gold 6326 without PAA

Validation history

DateTypeLab
2024-09-06Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
  • 2026-09-08: observed moving from active to historical
  • Validation dates on record: 2024-09-06

Source documents