808bits

Canonical Ltd. Ubuntu 22.04 Libgcrypt Cryptographic Module

FIPS 140-3 certificate #4793 · Canonical Ltd. · data as of 2026-10-09

Canonical Ltd. Ubuntu 22.04 Libgcrypt Cryptographic Module, from Canonical Ltd., holds FIPS 140-3 certificate #4793 at overall level 1. The validation is active, with a sunset date of 2029-09-09. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2029-09-09, 1065 days away.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified Section 11 in the Security Policy.

Certificate

Certificate number4793
StandardFIPS 140-3
Statusactive
Sunset date2029-09-09
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCanonical Ltd. · website
Software versions1.9.4-3ubuntu3+Fips1.2

Module description

Quoted from the NIST CMVP entry for this certificate.

The Canonical Ltd. Ubuntu 22.04 libgcrypt is a software library implementing general purpose cryptographic algorithms

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (46)

AlgorithmCAVP certificates
AES-CBCA3700, A3701, A3703, A3704
AES-CCMA3700, A3701, A3703, A3704
AES-CFB128A3700, A3701, A3703, A3704
AES-CFB8A3700, A3701, A3703, A3704
AES-CMACA3700, A3701, A3703, A3704
AES-CTRA3700, A3701, A3703, A3704
AES-ECBA3700, A3701, A3703, A3704
AES-KWA3700, A3701, A3703, A3704
AES-OFBA3700, A3701, A3703, A3704
AES-XTS Testing Revision 2.0A3700, A3701, A3703, A3704
Counter DRBGA3700, A3701, A3703, A3704
ECDSA KeyGen (FIPS186-4)A3700, A3701, A3703, A3704, A3705
ECDSA KeyVer (FIPS186-4)A3700, A3701, A3703, A3704, A3705
ECDSA SigGen (FIPS186-4)A3700, A3701, A3703, A3704, A3705
ECDSA SigVer (FIPS186-4)A3700, A3701, A3703, A3704, A3705
Hash DRBGA3700, A3701, A3703, A3704, A3705
HMAC DRBGA3700, A3701, A3703, A3704, A3705
HMAC-SHA-1A3699, A3700, A3701, A3702, A3703, A3704, A3705
HMAC-SHA2-224A3700, A3701, A3703, A3704, A3705
HMAC-SHA2-256A3700, A3701, A3703, A3704, A3705
HMAC-SHA2-384A3700, A3701, A3703, A3704, A3705
HMAC-SHA2-512A3700, A3701, A3703, A3704, A3705
HMAC-SHA2-512/224A3700, A3701, A3703, A3704, A3705
HMAC-SHA2-512/256A3700, A3701, A3703, A3704, A3705
HMAC-SHA3-224A3700, A3701, A3705
HMAC-SHA3-256A3700, A3701, A3705
HMAC-SHA3-384A3700, A3701, A3705
HMAC-SHA3-512A3700, A3701, A3705
PBKDFA3700, A3701, A3703, A3704, A3705
RSA KeyGen (FIPS186-4)A3700, A3701, A3703, A3704, A3705
RSA SigGen (FIPS186-4)A3700, A3701, A3703, A3704, A3705
RSA Signature PrimitiveA3700, A3701, A3703, A3704, A3705
RSA SigVer (FIPS186-4)A3700, A3701, A3703, A3704, A3705
SHA-1A3699, A3700, A3701, A3702, A3703, A3704, A3705
SHA2-224A3700, A3701, A3703, A3704, A3705
SHA2-256A3700, A3701, A3703, A3704, A3705
SHA2-384A3700, A3701, A3703, A3704, A3705
SHA2-512A3700, A3701, A3703, A3704, A3705
SHA2-512/224A3700, A3701, A3703, A3704, A3705
SHA2-512/256A3700, A3701, A3703, A3704, A3705
SHA3-224A3700, A3701, A3705
SHA3-256A3700, A3701, A3705
SHA3-384A3700, A3701, A3705
SHA3-512A3700, A3701, A3705
SHAKE-128A3700, A3701, A3705
SHAKE-256A3700, A3701, A3705

Tested configurations

  • Ubuntu 22.04 LTS 64-bit on IBM z15 with IBM z15 with PAI
  • Ubuntu 22.04 LTS 64-bit on IBM z15 with IBM z15 without PAI
  • Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA
  • Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA
  • Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 with PAA
  • Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 without PAA

Validation history

DateTypeLab
2024-09-10Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-09-10

Source documents