808bits

Amazon Linux 2023 Kernel Cryptographic API

FIPS 140-3 certificate #4808 · Amazon Web Services, Inc. · data as of 2026-08-28
Historical. Replaced by certificate #5369. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy.

Certificate

Certificate number4808
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorAmazon Web Services, Inc. · website
Software versionskernel 6.1.41-64.118.amzn2023, 6.1.41-64.118.fips.amzn2023; libkcapi 1.4.0-105.amzn2023

Module description

The Amazon Linux 2023 Kernel Cryptographic API provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA4551
AES-CBCA4554
AES-CBCA4557
AES-CBCA4558
AES-CBCA4561
AES-CBCA4563
AES-CBCA4566
AES-CBC-CS3A4551
AES-CBC-CS3A4554
AES-CBC-CS3A4557
AES-CBC-CS3A4558
AES-CBC-CS3A4566
AES-CCMA4551
AES-CCMA4554
AES-CCMA4557
AES-CCMA4558
AES-CCMA4566
AES-CFB128A4551
AES-CFB128A4554
AES-CFB128A4558
AES-CFB128A4566
AES-CMACA4551
AES-CMACA4554
AES-CMACA4557
AES-CMACA4558
AES-CMACA4566
AES-CTRA4551
AES-CTRA4554
AES-CTRA4557
AES-CTRA4558
AES-CTRA4561
AES-CTRA4563
AES-CTRA4566
AES-ECBA4551
AES-ECBA4552
AES-ECBA4553
AES-ECBA4554
AES-ECBA4555
AES-ECBA4556
AES-ECBA4557
AES-ECBA4558
AES-ECBA4559
AES-ECBA4560
AES-ECBA4561
AES-ECBA4563
AES-ECBA4564
AES-ECBA4565
AES-ECBA4566
AES-ECBA4567
AES-ECBA4568
AES-GCMA4551
AES-GCMA4552
AES-GCMA4553
AES-GCMA4554
AES-GCMA4555
AES-GCMA4556
AES-GCMA4558
AES-GCMA4559
AES-GCMA4560
AES-GCMA4563
AES-GCMA4564
AES-GCMA4565
AES-GCMA4566
AES-GCMA4567
AES-GCMA4568
AES-GMACA4551
AES-GMACA4554
AES-GMACA4558
AES-GMACA4566
AES-KWA4551
AES-KWA4554
AES-KWA4558
AES-KWA4566
AES-OFBA4551
AES-OFBA4554
AES-OFBA4558
AES-OFBA4566
AES-XTS Testing Revision 2.0A4551
AES-XTS Testing Revision 2.0A4554
AES-XTS Testing Revision 2.0A4557
AES-XTS Testing Revision 2.0A4558
AES-XTS Testing Revision 2.0A4561
AES-XTS Testing Revision 2.0A4563
AES-XTS Testing Revision 2.0A4566
Counter DRBGA4551
Counter DRBGA4552
Counter DRBGA4553
Counter DRBGA4554
Counter DRBGA4555
Counter DRBGA4556
Counter DRBGA4558
Counter DRBGA4559
Counter DRBGA4560
Counter DRBGA4563
Counter DRBGA4564
Counter DRBGA4565
Counter DRBGA4566
Counter DRBGA4567
Counter DRBGA4568
ECDSA KeyGen (FIPS186-4)A4551
Hash DRBGA4551
Hash DRBGA4569
Hash DRBGA4570
Hash DRBGA4571
HMAC DRBGA4551
HMAC DRBGA4569
HMAC DRBGA4570
HMAC DRBGA4571
HMAC-SHA-1A4551
HMAC-SHA-1A4557
HMAC-SHA-1A4569
HMAC-SHA-1A4570
HMAC-SHA-1A4571
HMAC-SHA2-224A4551
HMAC-SHA2-224A4557
HMAC-SHA2-224A4561
HMAC-SHA2-224A4562
HMAC-SHA2-224A4569
HMAC-SHA2-224A4570
HMAC-SHA2-224A4571
HMAC-SHA2-256A4551
HMAC-SHA2-256A4557
HMAC-SHA2-256A4561
HMAC-SHA2-256A4562
HMAC-SHA2-256A4569
HMAC-SHA2-256A4570
HMAC-SHA2-256A4571
HMAC-SHA2-384A4551
HMAC-SHA2-384A4557
HMAC-SHA2-384A4562
HMAC-SHA2-384A4569
HMAC-SHA2-384A4570
HMAC-SHA2-384A4571
HMAC-SHA2-512A4551
HMAC-SHA2-512A4557
HMAC-SHA2-512A4562
HMAC-SHA2-512A4569
HMAC-SHA2-512A4570
HMAC-SHA2-512A4571
HMAC-SHA3-224A4551
HMAC-SHA3-224A4557
HMAC-SHA3-256A4551
HMAC-SHA3-256A4557
HMAC-SHA3-384A4551
HMAC-SHA3-384A4557
HMAC-SHA3-512A4551
HMAC-SHA3-512A4557
KAS-ECC-SSC Sp800-56Ar3A4551
KAS-FFC-SSC Sp800-56Ar3A4551
RSA SigVer (FIPS186-4)A4551
RSA SigVer (FIPS186-4)A4569
RSA SigVer (FIPS186-4)A4570
RSA SigVer (FIPS186-4)A4571
Safe Primes Key GenerationA4551
SHA-1A4551
SHA-1A4557
SHA-1A4569
SHA-1A4570
SHA-1A4571
SHA2-224A4551
SHA2-224A4557
SHA2-224A4561
SHA2-224A4562
SHA2-224A4569
SHA2-224A4570
SHA2-224A4571
SHA2-256A4551
SHA2-256A4557
SHA2-256A4561
SHA2-256A4562
SHA2-256A4569
SHA2-256A4570
SHA2-256A4571
SHA2-384A4551
SHA2-384A4557
SHA2-384A4562
SHA2-384A4569
SHA2-384A4570
SHA2-384A4571
SHA2-512A4551
SHA2-512A4557
SHA2-512A4562
SHA2-512A4569
SHA2-512A4570
SHA2-512A4571
SHA3-224A4551
SHA3-224A4557
SHA3-256A4551
SHA3-256A4557
SHA3-384A4551
SHA3-384A4557
SHA3-512A4551
SHA3-512A4557

Tested configurations

  • Amazon Linux 2023 on EC2 c6i.metal running on Intel Xeon Platinum 8375C with PAA
  • Amazon Linux 2023 on EC2 c6i.metal running on Intel Xeon Platinum 8375C without PAA
  • Amazon Linux 2023 on EC2 c7g.metal running on AWS Graviton3 with PAA
  • Amazon Linux 2023 on EC2 c7g.metal running on AWS Graviton3 without PAA
  • SnowOS 1.0 on AWS Snowball running on AMD EPYC 7702 with PAA
  • SnowOS 1.0 on AWS Snowball running on AMD EPYC 7702 without PAA
  • SnowOS 1.0 on AWS Snowblade running on Intel Xeon Gold 6314U with PAA
  • SnowOS 1.0 on AWS Snowblade running on Intel Xeon Gold 6314U without PAA
  • SnowOS 1.0 on AWS Snowcone running on Intel Atom C3558 with PAA
  • SnowOS 1.0 on AWS Snowcone running on Intel Atom C3558 without PAA

Validation history

DateTypeLab
2024-09-23Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-09-23

Source documents