Canonical Ltd. Ubuntu 22.04 Kernel Crypto API Cryptographic Module
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy.
Certificate
| Certificate number | 4894 |
|---|---|
| Standard | FIPS 140-3 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Canonical Ltd. · website |
| Software versions | 5.15.0-73-fips |
Module description
The Linux kernel crypto API implementation provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A3814 |
| AES-CBC | A3814 |
| AES-CBC | A3822 |
| AES-CBC | A3822 |
| AES-CBC | A3829 |
| AES-CBC | A3829 |
| AES-CBC | A3832 |
| AES-CBC | A3832 |
| AES-CBC | A3840 |
| AES-CBC | A3840 |
| AES-CBC | A3843 |
| AES-CBC | A3843 |
| AES-CBC | A3853 |
| AES-CBC | A3853 |
| AES-CBC | A3854 |
| AES-CBC | A3854 |
| AES-CBC | A3857 |
| AES-CBC | A3857 |
| AES-CBC-CS3 | A3819 |
| AES-CBC-CS3 | A3828 |
| AES-CBC-CS3 | A3838 |
| AES-CBC-CS3 | A3849 |
| AES-CBC-CS3 | A3853 |
| AES-CBC-CS3 | A3854 |
| AES-CCM | A3814 |
| AES-CCM | A3822 |
| AES-CCM | A3829 |
| AES-CCM | A3832 |
| AES-CCM | A3843 |
| AES-CCM | A3853 |
| AES-CCM | A3854 |
| AES-CFB128 | A3817 |
| AES-CFB128 | A3826 |
| AES-CFB128 | A3836 |
| AES-CFB128 | A3847 |
| AES-CFB128 | A3854 |
| AES-CMAC | A3814 |
| AES-CMAC | A3822 |
| AES-CMAC | A3829 |
| AES-CMAC | A3832 |
| AES-CMAC | A3843 |
| AES-CMAC | A3853 |
| AES-CMAC | A3854 |
| AES-CTR | A3814 |
| AES-CTR | A3814 |
| AES-CTR | A3822 |
| AES-CTR | A3822 |
| AES-CTR | A3829 |
| AES-CTR | A3829 |
| AES-CTR | A3832 |
| AES-CTR | A3832 |
| AES-CTR | A3840 |
| AES-CTR | A3840 |
| AES-CTR | A3843 |
| AES-CTR | A3843 |
| AES-CTR | A3853 |
| AES-CTR | A3853 |
| AES-CTR | A3854 |
| AES-CTR | A3854 |
| AES-CTR | A3857 |
| AES-CTR | A3857 |
| AES-ECB | A3812 |
| AES-ECB | A3813 |
| AES-ECB | A3814 |
| AES-ECB | A3820 |
| AES-ECB | A3821 |
| AES-ECB | A3822 |
| AES-ECB | A3824 |
| AES-ECB | A3825 |
| AES-ECB | A3829 |
| AES-ECB | A3830 |
| AES-ECB | A3831 |
| AES-ECB | A3832 |
| AES-ECB | A3833 |
| AES-ECB | A3834 |
| AES-ECB | A3840 |
| AES-ECB | A3841 |
| AES-ECB | A3842 |
| AES-ECB | A3843 |
| AES-ECB | A3844 |
| AES-ECB | A3845 |
| AES-ECB | A3853 |
| AES-ECB | A3854 |
| AES-ECB | A3855 |
| AES-ECB | A3856 |
| AES-ECB | A3857 |
| AES-GCM | A3814 |
| AES-GCM | A3814 |
| AES-GCM | A3820 |
| AES-GCM | A3820 |
| AES-GCM | A3821 |
| AES-GCM | A3821 |
| AES-GCM | A3822 |
| AES-GCM | A3822 |
| AES-GCM | A3824 |
| AES-GCM | A3824 |
| AES-GCM | A3825 |
| AES-GCM | A3825 |
| AES-GCM | A3829 |
| AES-GCM | A3829 |
| AES-GCM | A3830 |
| AES-GCM | A3830 |
| AES-GCM | A3831 |
| AES-GCM | A3831 |
| AES-GCM | A3832 |
| AES-GCM | A3832 |
| AES-GCM | A3833 |
| AES-GCM | A3833 |
| AES-GCM | A3834 |
| AES-GCM | A3834 |
| AES-GCM | A3840 |
| AES-GCM | A3840 |
| AES-GCM | A3841 |
| AES-GCM | A3841 |
| AES-GCM | A3842 |
| AES-GCM | A3842 |
| AES-GCM | A3843 |
| AES-GCM | A3843 |
| AES-GCM | A3844 |
| AES-GCM | A3844 |
| AES-GCM | A3845 |
| AES-GCM | A3845 |
| AES-GCM | A3854 |
| AES-GCM | A3854 |
| AES-GCM | A3855 |
| AES-GCM | A3855 |
| AES-GCM | A3856 |
| AES-GCM | A3856 |
| AES-GMAC | A3814 |
| AES-GMAC | A3822 |
| AES-GMAC | A3829 |
| AES-GMAC | A3832 |
| AES-GMAC | A3843 |
| AES-GMAC | A3854 |
| AES-KW | A3815 |
| AES-KW | A3823 |
| AES-KW | A3835 |
| AES-KW | A3846 |
| AES-KW | A3854 |
| AES-OFB | A3818 |
| AES-OFB | A3827 |
| AES-OFB | A3837 |
| AES-OFB | A3848 |
| AES-OFB | A3854 |
| AES-XTS Testing Revision 2.0 | A3814 |
| AES-XTS Testing Revision 2.0 | A3822 |
| AES-XTS Testing Revision 2.0 | A3829 |
| AES-XTS Testing Revision 2.0 | A3832 |
| AES-XTS Testing Revision 2.0 | A3840 |
| AES-XTS Testing Revision 2.0 | A3843 |
| AES-XTS Testing Revision 2.0 | A3853 |
| AES-XTS Testing Revision 2.0 | A3854 |
| AES-XTS Testing Revision 2.0 | A3857 |
| Counter DRBG | A3812 |
| Counter DRBG | A3813 |
| Counter DRBG | A3814 |
| Counter DRBG | A3820 |
| Counter DRBG | A3821 |
| Counter DRBG | A3822 |
| Counter DRBG | A3824 |
| Counter DRBG | A3825 |
| Counter DRBG | A3829 |
| Counter DRBG | A3830 |
| Counter DRBG | A3831 |
| Counter DRBG | A3832 |
| Counter DRBG | A3833 |
| Counter DRBG | A3834 |
| Counter DRBG | A3840 |
| Counter DRBG | A3841 |
| Counter DRBG | A3842 |
| Counter DRBG | A3843 |
| Counter DRBG | A3844 |
| Counter DRBG | A3845 |
| Counter DRBG | A3854 |
| Counter DRBG | A3855 |
| Counter DRBG | A3856 |
| ECDSA KeyGen (FIPS186-4) | A3813 |
| Hash DRBG | A3812 |
| Hash DRBG | A3813 |
| Hash DRBG | A3814 |
| Hash DRBG | A3820 |
| Hash DRBG | A3821 |
| Hash DRBG | A3822 |
| Hash DRBG | A3824 |
| Hash DRBG | A3825 |
| Hash DRBG | A3830 |
| Hash DRBG | A3831 |
| Hash DRBG | A3832 |
| Hash DRBG | A3833 |
| Hash DRBG | A3834 |
| Hash DRBG | A3840 |
| Hash DRBG | A3841 |
| Hash DRBG | A3842 |
| Hash DRBG | A3843 |
| Hash DRBG | A3844 |
| Hash DRBG | A3845 |
| Hash DRBG | A3850 |
| Hash DRBG | A3851 |
| Hash DRBG | A3852 |
| Hash DRBG | A3855 |
| Hash DRBG | A3856 |
| HMAC DRBG | A3812 |
| HMAC DRBG | A3813 |
| HMAC DRBG | A3814 |
| HMAC DRBG | A3820 |
| HMAC DRBG | A3821 |
| HMAC DRBG | A3822 |
| HMAC DRBG | A3824 |
| HMAC DRBG | A3825 |
| HMAC DRBG | A3830 |
| HMAC DRBG | A3831 |
| HMAC DRBG | A3832 |
| HMAC DRBG | A3833 |
| HMAC DRBG | A3834 |
| HMAC DRBG | A3840 |
| HMAC DRBG | A3841 |
| HMAC DRBG | A3842 |
| HMAC DRBG | A3843 |
| HMAC DRBG | A3844 |
| HMAC DRBG | A3845 |
| HMAC DRBG | A3850 |
| HMAC DRBG | A3851 |
| HMAC DRBG | A3852 |
| HMAC DRBG | A3855 |
| HMAC DRBG | A3856 |
| HMAC-SHA-1 | A3812 |
| HMAC-SHA-1 | A3812 |
| HMAC-SHA-1 | A3813 |
| HMAC-SHA-1 | A3813 |
| HMAC-SHA-1 | A3814 |
| HMAC-SHA-1 | A3814 |
| HMAC-SHA-1 | A3832 |
| HMAC-SHA-1 | A3832 |
| HMAC-SHA-1 | A3850 |
| HMAC-SHA-1 | A3850 |
| HMAC-SHA-1 | A3851 |
| HMAC-SHA-1 | A3851 |
| HMAC-SHA-1 | A3852 |
| HMAC-SHA-1 | A3852 |
| HMAC-SHA-1 | A3853 |
| HMAC-SHA-1 | A3853 |
| HMAC-SHA2-224 | A3812 |
| HMAC-SHA2-224 | A3813 |
| HMAC-SHA2-224 | A3814 |
| HMAC-SHA2-224 | A3832 |
| HMAC-SHA2-224 | A3850 |
| HMAC-SHA2-224 | A3851 |
| HMAC-SHA2-224 | A3852 |
| HMAC-SHA2-224 | A3853 |
| HMAC-SHA2-224 | A3857 |
| HMAC-SHA2-224 | A3858 |
| HMAC-SHA2-256 | A3812 |
| HMAC-SHA2-256 | A3812 |
| HMAC-SHA2-256 | A3813 |
| HMAC-SHA2-256 | A3813 |
| HMAC-SHA2-256 | A3814 |
| HMAC-SHA2-256 | A3814 |
| HMAC-SHA2-256 | A3832 |
| HMAC-SHA2-256 | A3832 |
| HMAC-SHA2-256 | A3850 |
| HMAC-SHA2-256 | A3850 |
| HMAC-SHA2-256 | A3851 |
| HMAC-SHA2-256 | A3851 |
| HMAC-SHA2-256 | A3852 |
| HMAC-SHA2-256 | A3852 |
| HMAC-SHA2-256 | A3853 |
| HMAC-SHA2-256 | A3853 |
| HMAC-SHA2-256 | A3857 |
| HMAC-SHA2-256 | A3857 |
| HMAC-SHA2-256 | A3858 |
| HMAC-SHA2-256 | A3858 |
| HMAC-SHA2-384 | A3812 |
| HMAC-SHA2-384 | A3812 |
| HMAC-SHA2-384 | A3813 |
| HMAC-SHA2-384 | A3813 |
| HMAC-SHA2-384 | A3814 |
| HMAC-SHA2-384 | A3814 |
| HMAC-SHA2-384 | A3832 |
| HMAC-SHA2-384 | A3832 |
| HMAC-SHA2-384 | A3850 |
| HMAC-SHA2-384 | A3850 |
| HMAC-SHA2-384 | A3851 |
| HMAC-SHA2-384 | A3851 |
| HMAC-SHA2-384 | A3852 |
| HMAC-SHA2-384 | A3852 |
| HMAC-SHA2-384 | A3858 |
| HMAC-SHA2-384 | A3858 |
| HMAC-SHA2-512 | A3812 |
| HMAC-SHA2-512 | A3812 |
| HMAC-SHA2-512 | A3813 |
| HMAC-SHA2-512 | A3813 |
| HMAC-SHA2-512 | A3814 |
| HMAC-SHA2-512 | A3814 |
| HMAC-SHA2-512 | A3832 |
| HMAC-SHA2-512 | A3832 |
| HMAC-SHA2-512 | A3850 |
| HMAC-SHA2-512 | A3850 |
| HMAC-SHA2-512 | A3851 |
| HMAC-SHA2-512 | A3851 |
| HMAC-SHA2-512 | A3852 |
| HMAC-SHA2-512 | A3852 |
| HMAC-SHA2-512 | A3858 |
| HMAC-SHA2-512 | A3858 |
| HMAC-SHA3-224 | A3816 |
| HMAC-SHA3-224 | A3839 |
| HMAC-SHA3-256 | A3816 |
| HMAC-SHA3-256 | A3839 |
| HMAC-SHA3-384 | A3816 |
| HMAC-SHA3-384 | A3839 |
| HMAC-SHA3-512 | A3816 |
| HMAC-SHA3-512 | A3839 |
| KAS-ECC-SSC Sp800-56Ar3 | A3813 |
| KAS-FFC-SSC Sp800-56Ar3 | A3812 |
| RSA SigVer (FIPS186-4) | A3814 |
| RSA SigVer (FIPS186-4) | A3832 |
| RSA SigVer (FIPS186-4) | A3850 |
| RSA SigVer (FIPS186-4) | A3851 |
| RSA SigVer (FIPS186-4) | A3852 |
| Safe Primes Key Generation | A3812 |
| SHA-1 | A3812 |
| SHA-1 | A3812 |
| SHA-1 | A3812 |
| SHA-1 | A3813 |
| SHA-1 | A3813 |
| SHA-1 | A3813 |
| SHA-1 | A3814 |
| SHA-1 | A3814 |
| SHA-1 | A3814 |
| SHA-1 | A3814 |
| SHA-1 | A3832 |
| SHA-1 | A3832 |
| SHA-1 | A3832 |
| SHA-1 | A3832 |
| SHA-1 | A3850 |
| SHA-1 | A3850 |
| SHA-1 | A3850 |
| SHA-1 | A3850 |
| SHA-1 | A3851 |
| SHA-1 | A3851 |
| SHA-1 | A3851 |
| SHA-1 | A3851 |
| SHA-1 | A3852 |
| SHA-1 | A3852 |
| SHA-1 | A3852 |
| SHA-1 | A3852 |
| SHA-1 | A3853 |
| SHA-1 | A3853 |
| SHA-1 | A3853 |
| SHA2-224 | A3812 |
| SHA2-224 | A3812 |
| SHA2-224 | A3813 |
| SHA2-224 | A3813 |
| SHA2-224 | A3814 |
| SHA2-224 | A3814 |
| SHA2-224 | A3814 |
| SHA2-224 | A3832 |
| SHA2-224 | A3832 |
| SHA2-224 | A3832 |
| SHA2-224 | A3850 |
| SHA2-224 | A3850 |
| SHA2-224 | A3850 |
| SHA2-224 | A3851 |
| SHA2-224 | A3851 |
| SHA2-224 | A3851 |
| SHA2-224 | A3852 |
| SHA2-224 | A3852 |
| SHA2-224 | A3852 |
| SHA2-224 | A3853 |
| SHA2-224 | A3853 |
| SHA2-224 | A3857 |
| SHA2-224 | A3857 |
| SHA2-224 | A3858 |
| SHA2-224 | A3858 |
| SHA2-256 | A3812 |
| SHA2-256 | A3812 |
| SHA2-256 | A3812 |
| SHA2-256 | A3813 |
| SHA2-256 | A3813 |
| SHA2-256 | A3813 |
| SHA2-256 | A3814 |
| SHA2-256 | A3814 |
| SHA2-256 | A3814 |
| SHA2-256 | A3814 |
| SHA2-256 | A3832 |
| SHA2-256 | A3832 |
| SHA2-256 | A3832 |
| SHA2-256 | A3832 |
| SHA2-256 | A3850 |
| SHA2-256 | A3850 |
| SHA2-256 | A3850 |
| SHA2-256 | A3850 |
| SHA2-256 | A3851 |
| SHA2-256 | A3851 |
| SHA2-256 | A3851 |
| SHA2-256 | A3851 |
| SHA2-256 | A3852 |
| SHA2-256 | A3852 |
| SHA2-256 | A3852 |
| SHA2-256 | A3852 |
| SHA2-256 | A3853 |
| SHA2-256 | A3853 |
| SHA2-256 | A3853 |
| SHA2-256 | A3857 |
| SHA2-256 | A3857 |
| SHA2-256 | A3857 |
| SHA2-256 | A3858 |
| SHA2-256 | A3858 |
| SHA2-256 | A3858 |
| SHA2-384 | A3812 |
| SHA2-384 | A3812 |
| SHA2-384 | A3812 |
| SHA2-384 | A3813 |
| SHA2-384 | A3813 |
| SHA2-384 | A3813 |
| SHA2-384 | A3814 |
| SHA2-384 | A3814 |
| SHA2-384 | A3814 |
| SHA2-384 | A3814 |
| SHA2-384 | A3832 |
| SHA2-384 | A3832 |
| SHA2-384 | A3832 |
| SHA2-384 | A3832 |
| SHA2-384 | A3850 |
| SHA2-384 | A3850 |
| SHA2-384 | A3850 |
| SHA2-384 | A3850 |
| SHA2-384 | A3851 |
| SHA2-384 | A3851 |
| SHA2-384 | A3851 |
| SHA2-384 | A3851 |
| SHA2-384 | A3852 |
| SHA2-384 | A3852 |
| SHA2-384 | A3852 |
| SHA2-384 | A3852 |
| SHA2-384 | A3858 |
| SHA2-384 | A3858 |
| SHA2-384 | A3858 |
| SHA2-512 | A3812 |
| SHA2-512 | A3812 |
| SHA2-512 | A3812 |
| SHA2-512 | A3813 |
| SHA2-512 | A3813 |
| SHA2-512 | A3813 |
| SHA2-512 | A3814 |
| SHA2-512 | A3814 |
| SHA2-512 | A3814 |
| SHA2-512 | A3814 |
| SHA2-512 | A3832 |
| SHA2-512 | A3832 |
| SHA2-512 | A3832 |
| SHA2-512 | A3832 |
| SHA2-512 | A3850 |
| SHA2-512 | A3850 |
| SHA2-512 | A3850 |
| SHA2-512 | A3850 |
| SHA2-512 | A3851 |
| SHA2-512 | A3851 |
| SHA2-512 | A3851 |
| SHA2-512 | A3851 |
| SHA2-512 | A3852 |
| SHA2-512 | A3852 |
| SHA2-512 | A3852 |
| SHA2-512 | A3852 |
| SHA2-512 | A3858 |
| SHA2-512 | A3858 |
| SHA2-512 | A3858 |
| SHA3-224 | A3816 |
| SHA3-224 | A3816 |
| SHA3-224 | A3839 |
| SHA3-224 | A3839 |
| SHA3-256 | A3816 |
| SHA3-256 | A3816 |
| SHA3-256 | A3839 |
| SHA3-256 | A3839 |
| SHA3-256 | A3839 |
| SHA3-384 | A3816 |
| SHA3-384 | A3816 |
| SHA3-384 | A3839 |
| SHA3-512 | A3816 |
| SHA3-512 | A3816 |
| SHA3-512 | A3839 |
| SHA3-512 | A3839 |
Tested configurations
- Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA
- Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA
- Ubuntu 22.04 LTS 64-bit running on IBM z15 with IBM z15 with PAI
- Ubuntu 22.04 LTS 64-bit running on IBM z15 with IBM z15 without PAI
- Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 with PAA
- Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 without PAA
- Ubuntu Core 22 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA
- Ubuntu Core 22 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA
- Ubuntu Core 22 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 with PAA
- Ubuntu Core 22 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-11-21 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2024-11-21