AWS OpenSSL FIPS Module (based on the OpenSSL FIPS Provider)
AWS OpenSSL FIPS Module (based on the OpenSSL FIPS Provider), from Amazon Web Services, Inc., holds FIPS 140-3 certificate #5242 at overall level 1. The validation is active, with a sunset date of 2030-03-10. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys).
Certificate
| Certificate number | 5242 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2030-03-10 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | MultiChipStand |
| Vendor | Amazon Web Services, Inc. · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
The AWS OpenSSL FIPS Module (based on the OpenSSL FIPS Provider) is a software library providing a C-language application program interface (API) for use by applications that require cryptographic functionality.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Life-cycle assurance: Level 3
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-04-14 | Initial | Lightship Security, Inc. |
| 2026-07-17 | Update | Lightship Security, Inc. |
| 2026-08-14 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2026-04-14