808bits

Amazon Linux 2023 Kernel Cryptographic API

FIPS 140-3 certificate #4808 · Amazon Web Services, Inc. · data as of 2026-10-21

Amazon Linux 2023 Kernel Cryptographic API, from Amazon Web Services, Inc., holds FIPS 140-3 certificate #4808 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5369. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy.

Certificate

Certificate number4808
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorAmazon Web Services, Inc. · website
Software versionskernel 6.1.41-64.118.amzn2023, 6.1.41-64.118.fips.amzn2023; libkcapi 1.4.0-105.amzn2023

Module description

Quoted from the NIST CMVP entry for this certificate.

The Amazon Linux 2023 Kernel Cryptographic API provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (38)

AlgorithmCAVP certificates
AES-CBCA4551, A4554, A4557, A4558, A4561, A4563, A4566
AES-CBC-CS3A4551, A4554, A4557, A4558, A4566
AES-CCMA4551, A4554, A4557, A4558, A4566
AES-CFB128A4551, A4554, A4558, A4566
AES-CMACA4551, A4554, A4557, A4558, A4566
AES-CTRA4551, A4554, A4557, A4558, A4561, A4563, A4566
AES-ECBA4551, A4552, A4553, A4554, A4555, A4556, A4557, A4558, A4559, A4560, A4561, A4563, A4564, A4565, A4566, A4567, A4568
AES-GCMA4551, A4552, A4553, A4554, A4555, A4556, A4558, A4559, A4560, A4563, A4564, A4565, A4566, A4567, A4568
AES-GMACA4551, A4554, A4558, A4566
AES-KWA4551, A4554, A4558, A4566
AES-OFBA4551, A4554, A4558, A4566
AES-XTS Testing Revision 2.0A4551, A4554, A4557, A4558, A4561, A4563, A4566
Counter DRBGA4551, A4552, A4553, A4554, A4555, A4556, A4558, A4559, A4560, A4563, A4564, A4565, A4566, A4567, A4568
ECDSA KeyGen (FIPS186-4)A4551
Hash DRBGA4551, A4569, A4570, A4571
HMAC DRBGA4551, A4569, A4570, A4571
HMAC-SHA-1A4551, A4557, A4569, A4570, A4571
HMAC-SHA2-224A4551, A4557, A4561, A4562, A4569, A4570, A4571
HMAC-SHA2-256A4551, A4557, A4561, A4562, A4569, A4570, A4571
HMAC-SHA2-384A4551, A4557, A4562, A4569, A4570, A4571
HMAC-SHA2-512A4551, A4557, A4562, A4569, A4570, A4571
HMAC-SHA3-224A4551, A4557
HMAC-SHA3-256A4551, A4557
HMAC-SHA3-384A4551, A4557
HMAC-SHA3-512A4551, A4557
KAS-ECC-SSC Sp800-56Ar3A4551
KAS-FFC-SSC Sp800-56Ar3A4551
RSA SigVer (FIPS186-4)A4551, A4569, A4570, A4571
Safe Primes Key GenerationA4551
SHA-1A4551, A4557, A4569, A4570, A4571
SHA2-224A4551, A4557, A4561, A4562, A4569, A4570, A4571
SHA2-256A4551, A4557, A4561, A4562, A4569, A4570, A4571
SHA2-384A4551, A4557, A4562, A4569, A4570, A4571
SHA2-512A4551, A4557, A4562, A4569, A4570, A4571
SHA3-224A4551, A4557
SHA3-256A4551, A4557
SHA3-384A4551, A4557
SHA3-512A4551, A4557

Tested configurations

  • Amazon Linux 2023 on EC2 c6i.metal running on Intel Xeon Platinum 8375C with PAA
  • Amazon Linux 2023 on EC2 c6i.metal running on Intel Xeon Platinum 8375C without PAA
  • Amazon Linux 2023 on EC2 c7g.metal running on AWS Graviton3 with PAA
  • Amazon Linux 2023 on EC2 c7g.metal running on AWS Graviton3 without PAA
  • SnowOS 1.0 on AWS Snowball running on AMD EPYC 7702 with PAA
  • SnowOS 1.0 on AWS Snowball running on AMD EPYC 7702 without PAA
  • SnowOS 1.0 on AWS Snowblade running on Intel Xeon Gold 6314U with PAA
  • SnowOS 1.0 on AWS Snowblade running on Intel Xeon Gold 6314U without PAA
  • SnowOS 1.0 on AWS Snowcone running on Intel Atom C3558 with PAA
  • SnowOS 1.0 on AWS Snowcone running on Intel Atom C3558 without PAA

Validation history

DateTypeLab
2024-09-23Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-09-23

Source documents