808bits

Canonical Ltd. Ubuntu 22.04 Libgcrypt Cryptographic Module

FIPS 140-3 certificate #4793 · Canonical Ltd. · data as of 2026-08-28
Active. Sunset date 2029-09-09, 1107 days away.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified Section 11 in the Security Policy.

Certificate

Certificate number4793
StandardFIPS 140-3
Statusactive
Sunset date2029-09-09
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCanonical Ltd. · website
Software versions1.9.4-3ubuntu3+Fips1.2

Module description

The Canonical Ltd. Ubuntu 22.04 libgcrypt is a software library implementing general purpose cryptographic algorithms

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3700
AES-CBCA3701
AES-CBCA3703
AES-CBCA3704
AES-CCMA3700
AES-CCMA3701
AES-CCMA3703
AES-CCMA3704
AES-CFB128A3700
AES-CFB128A3701
AES-CFB128A3703
AES-CFB128A3704
AES-CFB8A3700
AES-CFB8A3701
AES-CFB8A3703
AES-CFB8A3704
AES-CMACA3700
AES-CMACA3701
AES-CMACA3703
AES-CMACA3704
AES-CTRA3700
AES-CTRA3701
AES-CTRA3703
AES-CTRA3704
AES-ECBA3700
AES-ECBA3701
AES-ECBA3703
AES-ECBA3704
AES-KWA3700
AES-KWA3701
AES-KWA3703
AES-KWA3704
AES-OFBA3700
AES-OFBA3701
AES-OFBA3703
AES-OFBA3704
AES-XTS Testing Revision 2.0A3700
AES-XTS Testing Revision 2.0A3701
AES-XTS Testing Revision 2.0A3703
AES-XTS Testing Revision 2.0A3704
Counter DRBGA3700
Counter DRBGA3701
Counter DRBGA3703
Counter DRBGA3704
ECDSA KeyGen (FIPS186-4)A3700
ECDSA KeyGen (FIPS186-4)A3701
ECDSA KeyGen (FIPS186-4)A3703
ECDSA KeyGen (FIPS186-4)A3704
ECDSA KeyGen (FIPS186-4)A3705
ECDSA KeyVer (FIPS186-4)A3700
ECDSA KeyVer (FIPS186-4)A3701
ECDSA KeyVer (FIPS186-4)A3703
ECDSA KeyVer (FIPS186-4)A3704
ECDSA KeyVer (FIPS186-4)A3705
ECDSA SigGen (FIPS186-4)A3700
ECDSA SigGen (FIPS186-4)A3701
ECDSA SigGen (FIPS186-4)A3703
ECDSA SigGen (FIPS186-4)A3704
ECDSA SigGen (FIPS186-4)A3705
ECDSA SigVer (FIPS186-4)A3700
ECDSA SigVer (FIPS186-4)A3701
ECDSA SigVer (FIPS186-4)A3703
ECDSA SigVer (FIPS186-4)A3704
ECDSA SigVer (FIPS186-4)A3705
Hash DRBGA3700
Hash DRBGA3701
Hash DRBGA3703
Hash DRBGA3704
Hash DRBGA3705
HMAC DRBGA3700
HMAC DRBGA3701
HMAC DRBGA3703
HMAC DRBGA3704
HMAC DRBGA3705
HMAC-SHA-1A3699
HMAC-SHA-1A3700
HMAC-SHA-1A3701
HMAC-SHA-1A3702
HMAC-SHA-1A3703
HMAC-SHA-1A3704
HMAC-SHA-1A3705
HMAC-SHA2-224A3700
HMAC-SHA2-224A3701
HMAC-SHA2-224A3703
HMAC-SHA2-224A3704
HMAC-SHA2-224A3705
HMAC-SHA2-256A3700
HMAC-SHA2-256A3701
HMAC-SHA2-256A3703
HMAC-SHA2-256A3704
HMAC-SHA2-256A3705
HMAC-SHA2-384A3700
HMAC-SHA2-384A3701
HMAC-SHA2-384A3703
HMAC-SHA2-384A3704
HMAC-SHA2-384A3705
HMAC-SHA2-512A3700
HMAC-SHA2-512A3701
HMAC-SHA2-512A3703
HMAC-SHA2-512A3704
HMAC-SHA2-512A3705
HMAC-SHA2-512/224A3700
HMAC-SHA2-512/224A3701
HMAC-SHA2-512/224A3703
HMAC-SHA2-512/224A3704
HMAC-SHA2-512/224A3705
HMAC-SHA2-512/256A3700
HMAC-SHA2-512/256A3701
HMAC-SHA2-512/256A3703
HMAC-SHA2-512/256A3704
HMAC-SHA2-512/256A3705
HMAC-SHA3-224A3700
HMAC-SHA3-224A3701
HMAC-SHA3-224A3705
HMAC-SHA3-256A3700
HMAC-SHA3-256A3701
HMAC-SHA3-256A3705
HMAC-SHA3-384A3700
HMAC-SHA3-384A3701
HMAC-SHA3-384A3705
HMAC-SHA3-512A3700
HMAC-SHA3-512A3701
HMAC-SHA3-512A3705
PBKDFA3700
PBKDFA3701
PBKDFA3703
PBKDFA3704
PBKDFA3705
RSA KeyGen (FIPS186-4)A3700
RSA KeyGen (FIPS186-4)A3701
RSA KeyGen (FIPS186-4)A3703
RSA KeyGen (FIPS186-4)A3704
RSA KeyGen (FIPS186-4)A3705
RSA SigGen (FIPS186-4)A3700
RSA SigGen (FIPS186-4)A3701
RSA SigGen (FIPS186-4)A3703
RSA SigGen (FIPS186-4)A3704
RSA SigGen (FIPS186-4)A3705
RSA Signature PrimitiveA3700
RSA Signature PrimitiveA3701
RSA Signature PrimitiveA3703
RSA Signature PrimitiveA3704
RSA Signature PrimitiveA3705
RSA SigVer (FIPS186-4)A3700
RSA SigVer (FIPS186-4)A3701
RSA SigVer (FIPS186-4)A3703
RSA SigVer (FIPS186-4)A3704
RSA SigVer (FIPS186-4)A3705
SHA-1A3699
SHA-1A3700
SHA-1A3701
SHA-1A3702
SHA-1A3703
SHA-1A3704
SHA-1A3705
SHA2-224A3700
SHA2-224A3701
SHA2-224A3703
SHA2-224A3704
SHA2-224A3705
SHA2-256A3700
SHA2-256A3701
SHA2-256A3703
SHA2-256A3704
SHA2-256A3705
SHA2-384A3700
SHA2-384A3701
SHA2-384A3703
SHA2-384A3704
SHA2-384A3705
SHA2-512A3700
SHA2-512A3701
SHA2-512A3703
SHA2-512A3704
SHA2-512A3705
SHA2-512/224A3700
SHA2-512/224A3701
SHA2-512/224A3703
SHA2-512/224A3704
SHA2-512/224A3705
SHA2-512/256A3700
SHA2-512/256A3701
SHA2-512/256A3703
SHA2-512/256A3704
SHA2-512/256A3705
SHA3-224A3700
SHA3-224A3701
SHA3-224A3705
SHA3-256A3700
SHA3-256A3701
SHA3-256A3705
SHA3-384A3700
SHA3-384A3701
SHA3-384A3705
SHA3-512A3700
SHA3-512A3701
SHA3-512A3705
SHAKE-128A3700
SHAKE-128A3701
SHAKE-128A3705
SHAKE-256A3700
SHAKE-256A3701
SHAKE-256A3705

Tested configurations

  • Ubuntu 22.04 LTS 64-bit on IBM z15 with IBM z15 with PAI
  • Ubuntu 22.04 LTS 64-bit on IBM z15 with IBM z15 without PAI
  • Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA
  • Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA
  • Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 with PAA
  • Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 without PAA

Validation history

DateTypeLab
2024-09-10Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-09-10

Source documents