808bits

Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module

FIPS 140-3 certificate #4794 · Canonical Ltd. · data as of 2026-08-28
Active. Sunset date 2029-09-10, 1108 days away.
Caveat: Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11 of the Security Policy

Certificate

Certificate number4794
StandardFIPS 140-3
Statusactive
Sunset date2029-09-10
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCanonical Ltd. · website
Software versions3.0.5-0ubuntu0.1+Fips2.1

Module description

The Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3958
AES-CBCA3958
AES-CBCA3959
AES-CBCA3959
AES-CBCA3960
AES-CBCA3960
AES-CBCA3973
AES-CBCA3973
AES-CBCA3980
AES-CBCA3980
AES-CBCA3981
AES-CBCA3981
AES-CBCA3982
AES-CBCA3982
AES-CBC-CS1A3958
AES-CBC-CS1A3958
AES-CBC-CS1A3959
AES-CBC-CS1A3959
AES-CBC-CS1A3960
AES-CBC-CS1A3960
AES-CBC-CS1A3973
AES-CBC-CS1A3973
AES-CBC-CS1A3980
AES-CBC-CS1A3980
AES-CBC-CS1A3981
AES-CBC-CS1A3981
AES-CBC-CS1A3982
AES-CBC-CS1A3982
AES-CBC-CS2A3958
AES-CBC-CS2A3958
AES-CBC-CS2A3959
AES-CBC-CS2A3959
AES-CBC-CS2A3960
AES-CBC-CS2A3960
AES-CBC-CS2A3973
AES-CBC-CS2A3973
AES-CBC-CS2A3980
AES-CBC-CS2A3980
AES-CBC-CS2A3981
AES-CBC-CS2A3981
AES-CBC-CS2A3982
AES-CBC-CS2A3982
AES-CBC-CS3A3958
AES-CBC-CS3A3958
AES-CBC-CS3A3959
AES-CBC-CS3A3959
AES-CBC-CS3A3960
AES-CBC-CS3A3960
AES-CBC-CS3A3973
AES-CBC-CS3A3973
AES-CBC-CS3A3980
AES-CBC-CS3A3980
AES-CBC-CS3A3981
AES-CBC-CS3A3981
AES-CBC-CS3A3982
AES-CBC-CS3A3982
AES-CCMA3958
AES-CCMA3958
AES-CCMA3959
AES-CCMA3959
AES-CCMA3960
AES-CCMA3960
AES-CCMA3973
AES-CCMA3973
AES-CCMA3980
AES-CCMA3980
AES-CCMA3981
AES-CCMA3981
AES-CCMA3982
AES-CCMA3982
AES-CFB1A3958
AES-CFB1A3958
AES-CFB1A3959
AES-CFB1A3959
AES-CFB1A3960
AES-CFB1A3960
AES-CFB1A3973
AES-CFB1A3973
AES-CFB1A3980
AES-CFB1A3980
AES-CFB1A3981
AES-CFB1A3981
AES-CFB1A3982
AES-CFB1A3982
AES-CFB128A3958
AES-CFB128A3958
AES-CFB128A3959
AES-CFB128A3959
AES-CFB128A3960
AES-CFB128A3960
AES-CFB128A3973
AES-CFB128A3973
AES-CFB128A3980
AES-CFB128A3980
AES-CFB128A3981
AES-CFB128A3981
AES-CFB128A3982
AES-CFB128A3982
AES-CFB8A3958
AES-CFB8A3958
AES-CFB8A3959
AES-CFB8A3959
AES-CFB8A3960
AES-CFB8A3960
AES-CFB8A3973
AES-CFB8A3973
AES-CFB8A3980
AES-CFB8A3980
AES-CFB8A3981
AES-CFB8A3981
AES-CFB8A3982
AES-CFB8A3982
AES-CMACA3958
AES-CMACA3959
AES-CMACA3960
AES-CMACA3973
AES-CMACA3980
AES-CMACA3981
AES-CMACA3982
AES-CTRA3958
AES-CTRA3958
AES-CTRA3959
AES-CTRA3959
AES-CTRA3960
AES-CTRA3960
AES-CTRA3973
AES-CTRA3973
AES-CTRA3980
AES-CTRA3980
AES-CTRA3981
AES-CTRA3981
AES-CTRA3982
AES-CTRA3982
AES-ECBA3958
AES-ECBA3958
AES-ECBA3959
AES-ECBA3959
AES-ECBA3960
AES-ECBA3960
AES-ECBA3971
AES-ECBA3971
AES-ECBA3973
AES-ECBA3973
AES-ECBA3978
AES-ECBA3978
AES-ECBA3980
AES-ECBA3980
AES-ECBA3981
AES-ECBA3981
AES-ECBA3982
AES-ECBA3982
AES-ECBA3984
AES-ECBA3984
AES-ECBA3985
AES-ECBA3985
AES-ECBA3986
AES-ECBA3986
AES-ECBA3987
AES-ECBA3987
AES-GCMA3961
AES-GCMA3961
AES-GCMA3974
AES-GCMA3974
AES-GCMA3975
AES-GCMA3975
AES-GCMA3976
AES-GCMA3976
AES-GCMA3988
AES-GCMA3988
AES-GCMA3989
AES-GCMA3989
AES-GCMA3990
AES-GCMA3990
AES-GCMA3994
AES-GCMA3994
AES-GCMA3995
AES-GCMA3995
AES-GCMA3996
AES-GCMA3996
AES-GCMA3997
AES-GCMA3997
AES-GCMA3998
AES-GCMA3998
AES-GCMA3999
AES-GCMA3999
AES-GCMA4000
AES-GCMA4000
AES-GCMA4001
AES-GCMA4001
AES-GCMA4002
AES-GCMA4002
AES-GMACA3961
AES-GMACA3974
AES-GMACA3975
AES-GMACA3976
AES-GMACA3988
AES-GMACA3989
AES-GMACA3990
AES-GMACA3994
AES-GMACA3995
AES-GMACA3996
AES-GMACA3997
AES-GMACA3998
AES-GMACA3999
AES-GMACA4000
AES-GMACA4001
AES-GMACA4002
AES-KWA3958
AES-KWA3958
AES-KWA3959
AES-KWA3959
AES-KWA3960
AES-KWA3960
AES-KWA3973
AES-KWA3973
AES-KWA3980
AES-KWA3980
AES-KWA3981
AES-KWA3981
AES-KWA3982
AES-KWA3982
AES-KWPA3958
AES-KWPA3958
AES-KWPA3959
AES-KWPA3959
AES-KWPA3960
AES-KWPA3960
AES-KWPA3973
AES-KWPA3973
AES-KWPA3980
AES-KWPA3980
AES-KWPA3981
AES-KWPA3981
AES-KWPA3982
AES-KWPA3982
AES-OFBA3958
AES-OFBA3958
AES-OFBA3959
AES-OFBA3959
AES-OFBA3960
AES-OFBA3960
AES-OFBA3973
AES-OFBA3973
AES-OFBA3980
AES-OFBA3980
AES-OFBA3981
AES-OFBA3981
AES-OFBA3982
AES-OFBA3982
AES-XTS Testing Revision 2.0A3958
AES-XTS Testing Revision 2.0A3958
AES-XTS Testing Revision 2.0A3959
AES-XTS Testing Revision 2.0A3959
AES-XTS Testing Revision 2.0A3960
AES-XTS Testing Revision 2.0A3960
AES-XTS Testing Revision 2.0A3973
AES-XTS Testing Revision 2.0A3973
AES-XTS Testing Revision 2.0A3980
AES-XTS Testing Revision 2.0A3980
AES-XTS Testing Revision 2.0A3981
AES-XTS Testing Revision 2.0A3981
AES-XTS Testing Revision 2.0A3982
AES-XTS Testing Revision 2.0A3982
Counter DRBGA3970
ECDSA KeyGen (FIPS186-4)A3962
ECDSA KeyGen (FIPS186-4)A3966
ECDSA KeyGen (FIPS186-4)A3977
ECDSA KeyGen (FIPS186-4)A3983
ECDSA KeyGen (FIPS186-4)A3993
ECDSA KeyGen (FIPS186-4)A4003
ECDSA KeyGen (FIPS186-4)A4004
ECDSA KeyGen (FIPS186-4)A4005
ECDSA KeyVer (FIPS186-4)A3962
ECDSA KeyVer (FIPS186-4)A3966
ECDSA KeyVer (FIPS186-4)A3977
ECDSA KeyVer (FIPS186-4)A3983
ECDSA KeyVer (FIPS186-4)A3993
ECDSA KeyVer (FIPS186-4)A4003
ECDSA KeyVer (FIPS186-4)A4004
ECDSA KeyVer (FIPS186-4)A4005
ECDSA SigGen (FIPS186-4)A3962
ECDSA SigGen (FIPS186-4)A3964
ECDSA SigGen (FIPS186-4)A3966
ECDSA SigGen (FIPS186-4)A3967
ECDSA SigGen (FIPS186-4)A3972
ECDSA SigGen (FIPS186-4)A3977
ECDSA SigGen (FIPS186-4)A3979
ECDSA SigGen (FIPS186-4)A3983
ECDSA SigGen (FIPS186-4)A3993
ECDSA SigGen (FIPS186-4)A4003
ECDSA SigGen (FIPS186-4)A4004
ECDSA SigGen (FIPS186-4)A4005
ECDSA SigVer (FIPS186-4)A3962
ECDSA SigVer (FIPS186-4)A3964
ECDSA SigVer (FIPS186-4)A3966
ECDSA SigVer (FIPS186-4)A3967
ECDSA SigVer (FIPS186-4)A3972
ECDSA SigVer (FIPS186-4)A3977
ECDSA SigVer (FIPS186-4)A3979
ECDSA SigVer (FIPS186-4)A3983
ECDSA SigVer (FIPS186-4)A3993
ECDSA SigVer (FIPS186-4)A4003
ECDSA SigVer (FIPS186-4)A4004
ECDSA SigVer (FIPS186-4)A4005
Hash DRBGA3970
HMAC DRBGA3970
HMAC-SHA-1A3962
HMAC-SHA-1A3977
HMAC-SHA-1A3983
HMAC-SHA-1A3993
HMAC-SHA-1A4003
HMAC-SHA-1A4004
HMAC-SHA-1A4005
HMAC-SHA2-224A3962
HMAC-SHA2-224A3977
HMAC-SHA2-224A3983
HMAC-SHA2-224A3993
HMAC-SHA2-224A4003
HMAC-SHA2-224A4004
HMAC-SHA2-224A4005
HMAC-SHA2-256A3962
HMAC-SHA2-256A3963
HMAC-SHA2-256A3977
HMAC-SHA2-256A3983
HMAC-SHA2-256A3993
HMAC-SHA2-256A4003
HMAC-SHA2-256A4004
HMAC-SHA2-256A4005
HMAC-SHA2-384A3962
HMAC-SHA2-384A3977
HMAC-SHA2-384A3983
HMAC-SHA2-384A3993
HMAC-SHA2-384A4003
HMAC-SHA2-384A4004
HMAC-SHA2-384A4005
HMAC-SHA2-512A3962
HMAC-SHA2-512A3977
HMAC-SHA2-512A3983
HMAC-SHA2-512A3993
HMAC-SHA2-512A4003
HMAC-SHA2-512A4004
HMAC-SHA2-512A4005
HMAC-SHA2-512/224A3962
HMAC-SHA2-512/224A3977
HMAC-SHA2-512/224A3983
HMAC-SHA2-512/224A3993
HMAC-SHA2-512/224A4003
HMAC-SHA2-512/224A4004
HMAC-SHA2-512/224A4005
HMAC-SHA2-512/256A3962
HMAC-SHA2-512/256A3977
HMAC-SHA2-512/256A3983
HMAC-SHA2-512/256A3993
HMAC-SHA2-512/256A4003
HMAC-SHA2-512/256A4004
HMAC-SHA2-512/256A4005
HMAC-SHA3-224A3964
HMAC-SHA3-224A3972
HMAC-SHA3-224A3979
HMAC-SHA3-256A3964
HMAC-SHA3-256A3972
HMAC-SHA3-256A3979
HMAC-SHA3-384A3964
HMAC-SHA3-384A3972
HMAC-SHA3-384A3979
HMAC-SHA3-512A3964
HMAC-SHA3-512A3972
HMAC-SHA3-512A3979
KAS-ECC-SSC Sp800-56Ar3A3962
KAS-ECC-SSC Sp800-56Ar3A3968
KAS-ECC-SSC Sp800-56Ar3A3977
KAS-ECC-SSC Sp800-56Ar3A3983
KAS-ECC-SSC Sp800-56Ar3A3993
KAS-ECC-SSC Sp800-56Ar3A4003
KAS-ECC-SSC Sp800-56Ar3A4004
KAS-ECC-SSC Sp800-56Ar3A4005
KAS-FFC-SSC Sp800-56Ar3A3992
KDA HKDF Sp800-56Cr1A3969
KDA OneStep SP800-56Cr2A3965
KDF ANS 9.42A3962
KDF ANS 9.42A3964
KDF ANS 9.42A3972
KDF ANS 9.42A3977
KDF ANS 9.42A3979
KDF ANS 9.42A3983
KDF ANS 9.42A3993
KDF ANS 9.42A4003
KDF ANS 9.42A4004
KDF ANS 9.42A4005
KDF ANS 9.63A3962
KDF ANS 9.63A3977
KDF ANS 9.63A3983
KDF ANS 9.63A3993
KDF ANS 9.63A4003
KDF ANS 9.63A4004
KDF ANS 9.63A4005
KDF SP800-108A3991
KDF SSHA3971
KDF SSHA3978
KDF SSHA3984
KDF SSHA3985
KDF SSHA3986
KDF SSHA3987
KMAC-128A3964
KMAC-128A3972
KMAC-128A3979
KMAC-256A3964
KMAC-256A3972
KMAC-256A3979
PBKDFA3962
PBKDFA3964
PBKDFA3972
PBKDFA3977
PBKDFA3979
PBKDFA3983
PBKDFA3993
PBKDFA4003
PBKDFA4004
PBKDFA4005
RSA KeyGen (FIPS186-4)A3962
RSA KeyGen (FIPS186-4)A3977
RSA KeyGen (FIPS186-4)A3983
RSA KeyGen (FIPS186-4)A3993
RSA KeyGen (FIPS186-4)A4003
RSA KeyGen (FIPS186-4)A4004
RSA KeyGen (FIPS186-4)A4005
RSA SigGen (FIPS186-4)A3962
RSA SigGen (FIPS186-4)A3977
RSA SigGen (FIPS186-4)A3983
RSA SigGen (FIPS186-4)A3993
RSA SigGen (FIPS186-4)A4003
RSA SigGen (FIPS186-4)A4004
RSA SigGen (FIPS186-4)A4005
RSA SigVer (FIPS186-4)A3962
RSA SigVer (FIPS186-4)A3977
RSA SigVer (FIPS186-4)A3983
RSA SigVer (FIPS186-4)A3993
RSA SigVer (FIPS186-4)A4003
RSA SigVer (FIPS186-4)A4004
RSA SigVer (FIPS186-4)A4005
Safe Primes Key GenerationA3992
Safe Primes Key VerificationA3992
SHA-1A3962
SHA-1A3977
SHA-1A3983
SHA-1A3993
SHA-1A4003
SHA-1A4004
SHA-1A4005
SHA2-224A3962
SHA2-224A3977
SHA2-224A3983
SHA2-224A3993
SHA2-224A4003
SHA2-224A4004
SHA2-224A4005
SHA2-256A3962
SHA2-256A3963
SHA2-256A3977
SHA2-256A3983
SHA2-256A3993
SHA2-256A4003
SHA2-256A4004
SHA2-256A4005
SHA2-384A3962
SHA2-384A3977
SHA2-384A3983
SHA2-384A3993
SHA2-384A4003
SHA2-384A4004
SHA2-384A4005
SHA2-512A3962
SHA2-512A3977
SHA2-512A3983
SHA2-512A3993
SHA2-512A4003
SHA2-512A4004
SHA2-512A4005
SHA2-512/224A3962
SHA2-512/224A3977
SHA2-512/224A3983
SHA2-512/224A3993
SHA2-512/224A4003
SHA2-512/224A4004
SHA2-512/224A4005
SHA2-512/256A3962
SHA2-512/256A3977
SHA2-512/256A3983
SHA2-512/256A3993
SHA2-512/256A4003
SHA2-512/256A4004
SHA2-512/256A4005
SHA3-224A3964
SHA3-224A3972
SHA3-224A3979
SHA3-256A3964
SHA3-256A3972
SHA3-256A3979
SHA3-384A3964
SHA3-384A3972
SHA3-384A3979
SHA3-512A3964
SHA3-512A3972
SHA3-512A3979
SHAKE-128A3964
SHAKE-128A3972
SHAKE-128A3979
SHAKE-256A3964
SHAKE-256A3972
SHAKE-256A3979
TLS v1.2 KDF RFC7627A3962
TLS v1.2 KDF RFC7627A3977
TLS v1.2 KDF RFC7627A3983
TLS v1.2 KDF RFC7627A3993
TLS v1.2 KDF RFC7627A4003
TLS v1.2 KDF RFC7627A4004
TLS v1.2 KDF RFC7627A4005
TLS v1.3 KDFA3969

Tested configurations

  • Ubuntu 22.04 on IBM z15 with IBM z15 processor with PAI
  • Ubuntu 22.04 on IBM z15 with IBM z15 processor without PAI
  • Ubuntu 22.04 running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 processor with PAA
  • Ubuntu 22.04 running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 processor without PAA
  • Ubuntu 22.04 running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 processor with PAA
  • Ubuntu 22.04 running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 processor without PAA

Validation history

DateTypeLab
2024-09-11Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-09-11

Source documents