808bits

Canonical Ltd. Ubuntu 22.04 Kernel Crypto API Cryptographic Module

FIPS 140-3 certificate #4894 · Canonical Ltd. · data as of 2026-08-28
Historical. Replaced by certificate #5491. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy.

Certificate

Certificate number4894
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCanonical Ltd. · website
Software versions5.15.0-73-fips

Module description

The Linux kernel crypto API implementation provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3814
AES-CBCA3814
AES-CBCA3822
AES-CBCA3822
AES-CBCA3829
AES-CBCA3829
AES-CBCA3832
AES-CBCA3832
AES-CBCA3840
AES-CBCA3840
AES-CBCA3843
AES-CBCA3843
AES-CBCA3853
AES-CBCA3853
AES-CBCA3854
AES-CBCA3854
AES-CBCA3857
AES-CBCA3857
AES-CBC-CS3A3819
AES-CBC-CS3A3828
AES-CBC-CS3A3838
AES-CBC-CS3A3849
AES-CBC-CS3A3853
AES-CBC-CS3A3854
AES-CCMA3814
AES-CCMA3822
AES-CCMA3829
AES-CCMA3832
AES-CCMA3843
AES-CCMA3853
AES-CCMA3854
AES-CFB128A3817
AES-CFB128A3826
AES-CFB128A3836
AES-CFB128A3847
AES-CFB128A3854
AES-CMACA3814
AES-CMACA3822
AES-CMACA3829
AES-CMACA3832
AES-CMACA3843
AES-CMACA3853
AES-CMACA3854
AES-CTRA3814
AES-CTRA3814
AES-CTRA3822
AES-CTRA3822
AES-CTRA3829
AES-CTRA3829
AES-CTRA3832
AES-CTRA3832
AES-CTRA3840
AES-CTRA3840
AES-CTRA3843
AES-CTRA3843
AES-CTRA3853
AES-CTRA3853
AES-CTRA3854
AES-CTRA3854
AES-CTRA3857
AES-CTRA3857
AES-ECBA3812
AES-ECBA3813
AES-ECBA3814
AES-ECBA3820
AES-ECBA3821
AES-ECBA3822
AES-ECBA3824
AES-ECBA3825
AES-ECBA3829
AES-ECBA3830
AES-ECBA3831
AES-ECBA3832
AES-ECBA3833
AES-ECBA3834
AES-ECBA3840
AES-ECBA3841
AES-ECBA3842
AES-ECBA3843
AES-ECBA3844
AES-ECBA3845
AES-ECBA3853
AES-ECBA3854
AES-ECBA3855
AES-ECBA3856
AES-ECBA3857
AES-GCMA3814
AES-GCMA3814
AES-GCMA3820
AES-GCMA3820
AES-GCMA3821
AES-GCMA3821
AES-GCMA3822
AES-GCMA3822
AES-GCMA3824
AES-GCMA3824
AES-GCMA3825
AES-GCMA3825
AES-GCMA3829
AES-GCMA3829
AES-GCMA3830
AES-GCMA3830
AES-GCMA3831
AES-GCMA3831
AES-GCMA3832
AES-GCMA3832
AES-GCMA3833
AES-GCMA3833
AES-GCMA3834
AES-GCMA3834
AES-GCMA3840
AES-GCMA3840
AES-GCMA3841
AES-GCMA3841
AES-GCMA3842
AES-GCMA3842
AES-GCMA3843
AES-GCMA3843
AES-GCMA3844
AES-GCMA3844
AES-GCMA3845
AES-GCMA3845
AES-GCMA3854
AES-GCMA3854
AES-GCMA3855
AES-GCMA3855
AES-GCMA3856
AES-GCMA3856
AES-GMACA3814
AES-GMACA3822
AES-GMACA3829
AES-GMACA3832
AES-GMACA3843
AES-GMACA3854
AES-KWA3815
AES-KWA3823
AES-KWA3835
AES-KWA3846
AES-KWA3854
AES-OFBA3818
AES-OFBA3827
AES-OFBA3837
AES-OFBA3848
AES-OFBA3854
AES-XTS Testing Revision 2.0A3814
AES-XTS Testing Revision 2.0A3822
AES-XTS Testing Revision 2.0A3829
AES-XTS Testing Revision 2.0A3832
AES-XTS Testing Revision 2.0A3840
AES-XTS Testing Revision 2.0A3843
AES-XTS Testing Revision 2.0A3853
AES-XTS Testing Revision 2.0A3854
AES-XTS Testing Revision 2.0A3857
Counter DRBGA3812
Counter DRBGA3813
Counter DRBGA3814
Counter DRBGA3820
Counter DRBGA3821
Counter DRBGA3822
Counter DRBGA3824
Counter DRBGA3825
Counter DRBGA3829
Counter DRBGA3830
Counter DRBGA3831
Counter DRBGA3832
Counter DRBGA3833
Counter DRBGA3834
Counter DRBGA3840
Counter DRBGA3841
Counter DRBGA3842
Counter DRBGA3843
Counter DRBGA3844
Counter DRBGA3845
Counter DRBGA3854
Counter DRBGA3855
Counter DRBGA3856
ECDSA KeyGen (FIPS186-4)A3813
Hash DRBGA3812
Hash DRBGA3813
Hash DRBGA3814
Hash DRBGA3820
Hash DRBGA3821
Hash DRBGA3822
Hash DRBGA3824
Hash DRBGA3825
Hash DRBGA3830
Hash DRBGA3831
Hash DRBGA3832
Hash DRBGA3833
Hash DRBGA3834
Hash DRBGA3840
Hash DRBGA3841
Hash DRBGA3842
Hash DRBGA3843
Hash DRBGA3844
Hash DRBGA3845
Hash DRBGA3850
Hash DRBGA3851
Hash DRBGA3852
Hash DRBGA3855
Hash DRBGA3856
HMAC DRBGA3812
HMAC DRBGA3813
HMAC DRBGA3814
HMAC DRBGA3820
HMAC DRBGA3821
HMAC DRBGA3822
HMAC DRBGA3824
HMAC DRBGA3825
HMAC DRBGA3830
HMAC DRBGA3831
HMAC DRBGA3832
HMAC DRBGA3833
HMAC DRBGA3834
HMAC DRBGA3840
HMAC DRBGA3841
HMAC DRBGA3842
HMAC DRBGA3843
HMAC DRBGA3844
HMAC DRBGA3845
HMAC DRBGA3850
HMAC DRBGA3851
HMAC DRBGA3852
HMAC DRBGA3855
HMAC DRBGA3856
HMAC-SHA-1A3812
HMAC-SHA-1A3812
HMAC-SHA-1A3813
HMAC-SHA-1A3813
HMAC-SHA-1A3814
HMAC-SHA-1A3814
HMAC-SHA-1A3832
HMAC-SHA-1A3832
HMAC-SHA-1A3850
HMAC-SHA-1A3850
HMAC-SHA-1A3851
HMAC-SHA-1A3851
HMAC-SHA-1A3852
HMAC-SHA-1A3852
HMAC-SHA-1A3853
HMAC-SHA-1A3853
HMAC-SHA2-224A3812
HMAC-SHA2-224A3813
HMAC-SHA2-224A3814
HMAC-SHA2-224A3832
HMAC-SHA2-224A3850
HMAC-SHA2-224A3851
HMAC-SHA2-224A3852
HMAC-SHA2-224A3853
HMAC-SHA2-224A3857
HMAC-SHA2-224A3858
HMAC-SHA2-256A3812
HMAC-SHA2-256A3812
HMAC-SHA2-256A3813
HMAC-SHA2-256A3813
HMAC-SHA2-256A3814
HMAC-SHA2-256A3814
HMAC-SHA2-256A3832
HMAC-SHA2-256A3832
HMAC-SHA2-256A3850
HMAC-SHA2-256A3850
HMAC-SHA2-256A3851
HMAC-SHA2-256A3851
HMAC-SHA2-256A3852
HMAC-SHA2-256A3852
HMAC-SHA2-256A3853
HMAC-SHA2-256A3853
HMAC-SHA2-256A3857
HMAC-SHA2-256A3857
HMAC-SHA2-256A3858
HMAC-SHA2-256A3858
HMAC-SHA2-384A3812
HMAC-SHA2-384A3812
HMAC-SHA2-384A3813
HMAC-SHA2-384A3813
HMAC-SHA2-384A3814
HMAC-SHA2-384A3814
HMAC-SHA2-384A3832
HMAC-SHA2-384A3832
HMAC-SHA2-384A3850
HMAC-SHA2-384A3850
HMAC-SHA2-384A3851
HMAC-SHA2-384A3851
HMAC-SHA2-384A3852
HMAC-SHA2-384A3852
HMAC-SHA2-384A3858
HMAC-SHA2-384A3858
HMAC-SHA2-512A3812
HMAC-SHA2-512A3812
HMAC-SHA2-512A3813
HMAC-SHA2-512A3813
HMAC-SHA2-512A3814
HMAC-SHA2-512A3814
HMAC-SHA2-512A3832
HMAC-SHA2-512A3832
HMAC-SHA2-512A3850
HMAC-SHA2-512A3850
HMAC-SHA2-512A3851
HMAC-SHA2-512A3851
HMAC-SHA2-512A3852
HMAC-SHA2-512A3852
HMAC-SHA2-512A3858
HMAC-SHA2-512A3858
HMAC-SHA3-224A3816
HMAC-SHA3-224A3839
HMAC-SHA3-256A3816
HMAC-SHA3-256A3839
HMAC-SHA3-384A3816
HMAC-SHA3-384A3839
HMAC-SHA3-512A3816
HMAC-SHA3-512A3839
KAS-ECC-SSC Sp800-56Ar3A3813
KAS-FFC-SSC Sp800-56Ar3A3812
RSA SigVer (FIPS186-4)A3814
RSA SigVer (FIPS186-4)A3832
RSA SigVer (FIPS186-4)A3850
RSA SigVer (FIPS186-4)A3851
RSA SigVer (FIPS186-4)A3852
Safe Primes Key GenerationA3812
SHA-1A3812
SHA-1A3812
SHA-1A3812
SHA-1A3813
SHA-1A3813
SHA-1A3813
SHA-1A3814
SHA-1A3814
SHA-1A3814
SHA-1A3814
SHA-1A3832
SHA-1A3832
SHA-1A3832
SHA-1A3832
SHA-1A3850
SHA-1A3850
SHA-1A3850
SHA-1A3850
SHA-1A3851
SHA-1A3851
SHA-1A3851
SHA-1A3851
SHA-1A3852
SHA-1A3852
SHA-1A3852
SHA-1A3852
SHA-1A3853
SHA-1A3853
SHA-1A3853
SHA2-224A3812
SHA2-224A3812
SHA2-224A3813
SHA2-224A3813
SHA2-224A3814
SHA2-224A3814
SHA2-224A3814
SHA2-224A3832
SHA2-224A3832
SHA2-224A3832
SHA2-224A3850
SHA2-224A3850
SHA2-224A3850
SHA2-224A3851
SHA2-224A3851
SHA2-224A3851
SHA2-224A3852
SHA2-224A3852
SHA2-224A3852
SHA2-224A3853
SHA2-224A3853
SHA2-224A3857
SHA2-224A3857
SHA2-224A3858
SHA2-224A3858
SHA2-256A3812
SHA2-256A3812
SHA2-256A3812
SHA2-256A3813
SHA2-256A3813
SHA2-256A3813
SHA2-256A3814
SHA2-256A3814
SHA2-256A3814
SHA2-256A3814
SHA2-256A3832
SHA2-256A3832
SHA2-256A3832
SHA2-256A3832
SHA2-256A3850
SHA2-256A3850
SHA2-256A3850
SHA2-256A3850
SHA2-256A3851
SHA2-256A3851
SHA2-256A3851
SHA2-256A3851
SHA2-256A3852
SHA2-256A3852
SHA2-256A3852
SHA2-256A3852
SHA2-256A3853
SHA2-256A3853
SHA2-256A3853
SHA2-256A3857
SHA2-256A3857
SHA2-256A3857
SHA2-256A3858
SHA2-256A3858
SHA2-256A3858
SHA2-384A3812
SHA2-384A3812
SHA2-384A3812
SHA2-384A3813
SHA2-384A3813
SHA2-384A3813
SHA2-384A3814
SHA2-384A3814
SHA2-384A3814
SHA2-384A3814
SHA2-384A3832
SHA2-384A3832
SHA2-384A3832
SHA2-384A3832
SHA2-384A3850
SHA2-384A3850
SHA2-384A3850
SHA2-384A3850
SHA2-384A3851
SHA2-384A3851
SHA2-384A3851
SHA2-384A3851
SHA2-384A3852
SHA2-384A3852
SHA2-384A3852
SHA2-384A3852
SHA2-384A3858
SHA2-384A3858
SHA2-384A3858
SHA2-512A3812
SHA2-512A3812
SHA2-512A3812
SHA2-512A3813
SHA2-512A3813
SHA2-512A3813
SHA2-512A3814
SHA2-512A3814
SHA2-512A3814
SHA2-512A3814
SHA2-512A3832
SHA2-512A3832
SHA2-512A3832
SHA2-512A3832
SHA2-512A3850
SHA2-512A3850
SHA2-512A3850
SHA2-512A3850
SHA2-512A3851
SHA2-512A3851
SHA2-512A3851
SHA2-512A3851
SHA2-512A3852
SHA2-512A3852
SHA2-512A3852
SHA2-512A3852
SHA2-512A3858
SHA2-512A3858
SHA2-512A3858
SHA3-224A3816
SHA3-224A3816
SHA3-224A3839
SHA3-224A3839
SHA3-256A3816
SHA3-256A3816
SHA3-256A3839
SHA3-256A3839
SHA3-256A3839
SHA3-384A3816
SHA3-384A3816
SHA3-384A3839
SHA3-512A3816
SHA3-512A3816
SHA3-512A3839
SHA3-512A3839

Tested configurations

  • Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA
  • Ubuntu 22.04 LTS 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA
  • Ubuntu 22.04 LTS 64-bit running on IBM z15 with IBM z15 with PAI
  • Ubuntu 22.04 LTS 64-bit running on IBM z15 with IBM z15 without PAI
  • Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 with PAA
  • Ubuntu 22.04 LTS 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 without PAA
  • Ubuntu Core 22 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 with PAA
  • Ubuntu Core 22 64-bit running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 without PAA
  • Ubuntu Core 22 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 with PAA
  • Ubuntu Core 22 64-bit running on Supermicro SYS-1019P-WTR with Intel(R) Xeon(R) Gold 6226 without PAA

Validation history

DateTypeLab
2024-11-21Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-11-21

Source documents