808bits

Canonical Ltd. Ubuntu 22.04 Strongswan Cryptographic Module

FIPS 140-3 certificate #4911 · Canonical Ltd. · data as of 2026-08-28
Historical. Moved to historical list due to dependency on certificate #4894. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When installed, initialized and configured as specified in Section 11.1 of the Security Policy with module Canonical Ltd. Ubuntu 22.04 OpenSSL Cryptographic Module validated to FIPS 140-3 under Cert. #4794, operating in the approved mode, and with module Canonical Ltd. Ubuntu 22.04 Kernel Crypto API Cryptographic Module validated to FIPS 140-3 under Cert. #4894, operating in the approved mode.

Certificate

Certificate number4911
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCanonical Ltd. · website
Software versions5.9.5-2ubuntu2.1+Fips1

Module description

Strongswan IKE daemon implementing the IKEv2 protocol to negotiate the key material for IPSec.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3958
AES-CBCA3959
AES-CBCA3960
AES-CBCA3973
AES-CBCA3980
AES-CBCA3981
AES-CBCA3982
AES-CCMA3958
AES-CCMA3959
AES-CCMA3960
AES-CCMA3973
AES-CCMA3980
AES-CCMA3981
AES-CCMA3982
AES-GCMA3961
AES-GCMA3974
AES-GCMA3975
AES-GCMA3976
AES-GCMA3988
AES-GCMA3989
AES-GCMA3990
AES-GCMA3994
AES-GCMA3995
AES-GCMA3996
AES-GCMA3997
AES-GCMA3998
AES-GCMA3999
AES-GCMA4000
AES-GCMA4001
AES-GCMA4002
Counter DRBGA3970
ECDSA KeyGen (FIPS186-4)A3962
ECDSA KeyGen (FIPS186-4)A3977
ECDSA KeyGen (FIPS186-4)A3983
ECDSA KeyGen (FIPS186-4)A3993
ECDSA KeyGen (FIPS186-4)A4003
ECDSA KeyGen (FIPS186-4)A4004
ECDSA KeyGen (FIPS186-4)A4005
ECDSA KeyVer (FIPS186-4)A3962
ECDSA KeyVer (FIPS186-4)A3977
ECDSA KeyVer (FIPS186-4)A3983
ECDSA KeyVer (FIPS186-4)A3993
ECDSA KeyVer (FIPS186-4)A4003
ECDSA KeyVer (FIPS186-4)A4004
ECDSA KeyVer (FIPS186-4)A4005
ECDSA SigGen (FIPS186-4)A3962
ECDSA SigGen (FIPS186-4)A3964
ECDSA SigGen (FIPS186-4)A3972
ECDSA SigGen (FIPS186-4)A3977
ECDSA SigGen (FIPS186-4)A3979
ECDSA SigGen (FIPS186-4)A3983
ECDSA SigGen (FIPS186-4)A3993
ECDSA SigGen (FIPS186-4)A4003
ECDSA SigGen (FIPS186-4)A4004
ECDSA SigGen (FIPS186-4)A4005
ECDSA SigVer (FIPS186-4)A3962
ECDSA SigVer (FIPS186-4)A3964
ECDSA SigVer (FIPS186-4)A3972
ECDSA SigVer (FIPS186-4)A3977
ECDSA SigVer (FIPS186-4)A3979
ECDSA SigVer (FIPS186-4)A3983
ECDSA SigVer (FIPS186-4)A3993
ECDSA SigVer (FIPS186-4)A4003
ECDSA SigVer (FIPS186-4)A4004
ECDSA SigVer (FIPS186-4)A4005
HMAC-SHA-1A3962
HMAC-SHA-1A3977
HMAC-SHA-1A3983
HMAC-SHA-1A3993
HMAC-SHA-1A4003
HMAC-SHA-1A4004
HMAC-SHA-1A4005
HMAC-SHA-1A4017
HMAC-SHA2-224A3962
HMAC-SHA2-224A3977
HMAC-SHA2-224A3983
HMAC-SHA2-224A3993
HMAC-SHA2-224A4003
HMAC-SHA2-224A4004
HMAC-SHA2-224A4005
HMAC-SHA2-256A3812
HMAC-SHA2-256A3813
HMAC-SHA2-256A3814
HMAC-SHA2-256A3832
HMAC-SHA2-256A3850
HMAC-SHA2-256A3851
HMAC-SHA2-256A3852
HMAC-SHA2-256A3853
HMAC-SHA2-256A3857
HMAC-SHA2-256A3858
HMAC-SHA2-256A3962
HMAC-SHA2-256A3963
HMAC-SHA2-256A3977
HMAC-SHA2-256A3983
HMAC-SHA2-256A3993
HMAC-SHA2-256A4003
HMAC-SHA2-256A4004
HMAC-SHA2-256A4005
HMAC-SHA2-256A4017
HMAC-SHA2-384A3962
HMAC-SHA2-384A3977
HMAC-SHA2-384A3983
HMAC-SHA2-384A3993
HMAC-SHA2-384A4003
HMAC-SHA2-384A4004
HMAC-SHA2-384A4005
HMAC-SHA2-384A4017
HMAC-SHA2-512A3962
HMAC-SHA2-512A3977
HMAC-SHA2-512A3983
HMAC-SHA2-512A3993
HMAC-SHA2-512A4003
HMAC-SHA2-512A4004
HMAC-SHA2-512A4005
HMAC-SHA2-512A4017
HMAC-SHA2-512/224A3962
HMAC-SHA2-512/224A3977
HMAC-SHA2-512/224A3983
HMAC-SHA2-512/224A3993
HMAC-SHA2-512/224A4003
HMAC-SHA2-512/224A4004
HMAC-SHA2-512/224A4005
HMAC-SHA2-512/256A3962
HMAC-SHA2-512/256A3977
HMAC-SHA2-512/256A3983
HMAC-SHA2-512/256A3993
HMAC-SHA2-512/256A4003
HMAC-SHA2-512/256A4004
KAS-ECC-SSC Sp800-56Ar3A3962
KAS-ECC-SSC Sp800-56Ar3A3977
KAS-ECC-SSC Sp800-56Ar3A3983
KAS-ECC-SSC Sp800-56Ar3A3993
KAS-ECC-SSC Sp800-56Ar3A4003
KAS-ECC-SSC Sp800-56Ar3A4004
KAS-ECC-SSC Sp800-56Ar3A4005
KAS-FFC-SSC Sp800-56Ar3A3992
KDF IKEv2A4017
RSA SigGen (FIPS186-4)A3962
RSA SigGen (FIPS186-4)A3977
RSA SigGen (FIPS186-4)A3983
RSA SigGen (FIPS186-4)A3993
RSA SigGen (FIPS186-4)A4003
RSA SigGen (FIPS186-4)A4004
RSA SigGen (FIPS186-4)A4005
RSA SigVer (FIPS186-4)A3962
RSA SigVer (FIPS186-4)A3977
RSA SigVer (FIPS186-4)A3983
RSA SigVer (FIPS186-4)A3993
RSA SigVer (FIPS186-4)A4003
RSA SigVer (FIPS186-4)A4004
RSA SigVer (FIPS186-4)A4005
Safe Primes Key GenerationA3992
Safe Primes Key VerificationA3992
SHA-1A3962
SHA-1A3977
SHA-1A3983
SHA-1A3993
SHA-1A4003
SHA-1A4004
SHA-1A4005
SHA-1A4017
SHA2-224A3962
SHA2-224A3977
SHA2-224A3983
SHA2-224A3993
SHA2-224A4003
SHA2-224A4004
SHA2-224A4005
SHA2-256A3812
SHA2-256A3813
SHA2-256A3814
SHA2-256A3832
SHA2-256A3850
SHA2-256A3851
SHA2-256A3852
SHA2-256A3853
SHA2-256A3857
SHA2-256A3858
SHA2-256A3962
SHA2-256A3963
SHA2-256A3977
SHA2-256A3983
SHA2-256A3993
SHA2-256A4003
SHA2-256A4004
SHA2-256A4005
SHA2-256A4017
SHA2-384A3962
SHA2-384A3977
SHA2-384A3983
SHA2-384A3993
SHA2-384A4003
SHA2-384A4004
SHA2-384A4005
SHA2-384A4017
SHA2-512A3962
SHA2-512A3977
SHA2-512A3983
SHA2-512A3993
SHA2-512A4003
SHA2-512A4004
SHA2-512A4005
SHA2-512A4017
SHA2-512/224A3962
SHA2-512/224A3977
SHA2-512/224A3983
SHA2-512/224A3993
SHA2-512/224A4003
SHA2-512/224A4004
SHA2-512/224A4005
SHA2-512/256A3962
SHA2-512/256A3977
SHA2-512/256A3983
SHA2-512/256A3993
SHA2-512/256A4003
SHA2-512/256A4004
SHA2-512/256A4005

Tested configurations

  • Ubuntu 22.04 on IBM z15 with IBM z15 processor with PAI
  • Ubuntu 22.04 on IBM z15 with IBM z15 processor without PAI
  • Ubuntu 22.04 running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 processor with PAA
  • Ubuntu 22.04 running on Amazon Web Services (AWS) c6g.metal with AWS Graviton2 processor without PAA
  • Ubuntu 22.04 running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 processor with PAA
  • Ubuntu 22.04 running on Supermicro SYS-1019P-WTR with Intel Xeon Gold 6226 processor without PAA

Validation history

DateTypeLab
2024-12-03Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-12-03

Source documents