Bitwarden Cryptographic Module
Caveat: No assurance of the minimum strength of generated SSPs (e.g., keys) and random strings. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Certificate
| Certificate number | 5507 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-08-26 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | MultiChipStand |
| Vendor | Bitwarden, Inc. · website |
Module description
The Bitwarden Cryptographic module provides cryptographic operations for the Bitwarden password manager application and vault data. The cryptographic operations provided by the Bitwarden Cryptographic module support the secure storage of passwords, authentication information, storage of credentials and other sensitive documents using 256-bit AES encryption, zero-knowledge architecture, and two-factor authentication.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A4593 |
| AES-CBC | A5173 |
| AES-CBC-CS1 | A4593 |
| AES-CBC-CS1 | A5173 |
| AES-CBC-CS2 | A4593 |
| AES-CBC-CS2 | A5173 |
| AES-CBC-CS3 | A4593 |
| AES-CBC-CS3 | A5173 |
| AES-CCM | A4593 |
| AES-CCM | A5173 |
| AES-CFB1 | A4593 |
| AES-CFB1 | A5173 |
| AES-CFB128 | A4593 |
| AES-CFB128 | A5173 |
| AES-CFB8 | A4593 |
| AES-CFB8 | A5173 |
| AES-CMAC | A4593 |
| AES-CMAC | A5173 |
| AES-CTR | A4593 |
| AES-CTR | A5173 |
| AES-ECB | A4593 |
| AES-ECB | A5173 |
| AES-GCM | A4593 |
| AES-GCM | A5173 |
| AES-GMAC | A4593 |
| AES-GMAC | A5173 |
| AES-KW | A4593 |
| AES-KW | A5173 |
| AES-KWP | A4593 |
| AES-KWP | A5173 |
| AES-OFB | A4593 |
| AES-OFB | A5173 |
| AES-XTS Testing Revision 2.0 | A4593 |
| AES-XTS Testing Revision 2.0 | A5173 |
| Counter DRBG | A4593 |
| Counter DRBG | A5173 |
| DSA KeyGen (FIPS186-4) | A4593 |
| DSA KeyGen (FIPS186-4) | A5173 |
| DSA PQGGen (FIPS186-4) | A4593 |
| DSA PQGGen (FIPS186-4) | A5173 |
| DSA PQGVer (FIPS186-4) | A4593 |
| DSA PQGVer (FIPS186-4) | A5173 |
| DSA SigVer (FIPS186-4) | A4593 |
| DSA SigVer (FIPS186-4) | A5173 |
| ECDSA KeyGen (FIPS186-4) | A4593 |
| ECDSA KeyGen (FIPS186-4) | A5173 |
| ECDSA KeyVer (FIPS186-4) | A4593 |
| ECDSA KeyVer (FIPS186-4) | A5173 |
| ECDSA SigGen (FIPS186-4) | A4593 |
| ECDSA SigGen (FIPS186-4) | A5173 |
| ECDSA SigVer (FIPS186-4) | A4593 |
| ECDSA SigVer (FIPS186-4) | A5173 |
| EDDSA KeyGen | A4593 |
| EDDSA KeyGen | A5173 |
| EDDSA KeyVer | A4593 |
| EDDSA KeyVer | A5173 |
| EDDSA SigGen | A4593 |
| EDDSA SigGen | A5173 |
| EDDSA SigVer | A4593 |
| EDDSA SigVer | A5173 |
| Hash DRBG | A4593 |
| Hash DRBG | A5173 |
| HMAC DRBG | A4593 |
| HMAC DRBG | A5173 |
| HMAC-SHA-1 | A4593 |
| HMAC-SHA-1 | A5173 |
| HMAC-SHA2-224 | A4593 |
| HMAC-SHA2-224 | A5173 |
| HMAC-SHA2-256 | A4593 |
| HMAC-SHA2-256 | A5173 |
| HMAC-SHA2-384 | A4593 |
| HMAC-SHA2-384 | A5173 |
| HMAC-SHA2-512 | A4593 |
| HMAC-SHA2-512 | A5173 |
| HMAC-SHA2-512/224 | A4593 |
| HMAC-SHA2-512/224 | A5173 |
| HMAC-SHA2-512/256 | A4593 |
| HMAC-SHA2-512/256 | A5173 |
| HMAC-SHA3-224 | A4593 |
| HMAC-SHA3-224 | A5173 |
| HMAC-SHA3-256 | A4593 |
| HMAC-SHA3-256 | A5173 |
| HMAC-SHA3-384 | A4593 |
| HMAC-SHA3-384 | A5173 |
| HMAC-SHA3-512 | A4593 |
| HMAC-SHA3-512 | A5173 |
| KAS-ECC-SSC Sp800-56Ar3 | A4593 |
| KAS-ECC-SSC Sp800-56Ar3 | A5173 |
| KAS-FFC-SSC Sp800-56Ar3 | A4593 |
| KAS-FFC-SSC Sp800-56Ar3 | A5173 |
| KAS-IFC-SSC | A4593 |
| KAS-IFC-SSC | A5173 |
| KDA HKDF SP800-56Cr2 | A4593 |
| KDA HKDF SP800-56Cr2 | A5173 |
| KDA OneStep SP800-56Cr2 | A4593 |
| KDA OneStep SP800-56Cr2 | A5173 |
| KDA TwoStep SP800-56Cr2 | A4593 |
| KDA TwoStep SP800-56Cr2 | A5173 |
| KDF ANS 9.42 | A4593 |
| KDF ANS 9.42 | A5173 |
| KDF ANS 9.63 | A4593 |
| KDF ANS 9.63 | A5173 |
| KDF KMAC Sp800-108r1 | A4593 |
| KDF KMAC Sp800-108r1 | A5173 |
| KDF SP800-108 | A4593 |
| KDF SP800-108 | A5173 |
| KDF SSH | A4593 |
| KDF SSH | A5173 |
| KMAC-128 | A4593 |
| KMAC-128 | A5173 |
| KMAC-256 | A4593 |
| KMAC-256 | A5173 |
| KTS-IFC | A4593 |
| KTS-IFC | A5173 |
| PBKDF | A4593 |
| PBKDF | A5173 |
| RSA KeyGen (FIPS186-4) | A4593 |
| RSA KeyGen (FIPS186-4) | A5173 |
| RSA SigGen (FIPS186-4) | A4593 |
| RSA SigGen (FIPS186-4) | A5173 |
| RSA SigVer (FIPS186-4) | A4593 |
| RSA SigVer (FIPS186-4) | A5173 |
| Safe Primes Key Generation | A4593 |
| Safe Primes Key Generation | A5173 |
| Safe Primes Key Verification | A4593 |
| Safe Primes Key Verification | A5173 |
| SHA-1 | A4593 |
| SHA-1 | A5173 |
| SHA2-224 | A4593 |
| SHA2-224 | A5173 |
| SHA2-256 | A4593 |
| SHA2-256 | A5173 |
| SHA2-384 | A4593 |
| SHA2-384 | A5173 |
| SHA2-512 | A4593 |
| SHA2-512 | A5173 |
| SHA2-512/224 | A4593 |
| SHA2-512/224 | A5173 |
| SHA2-512/256 | A4593 |
| SHA2-512/256 | A5173 |
| SHA3-224 | A4593 |
| SHA3-224 | A5173 |
| SHA3-256 | A4593 |
| SHA3-256 | A5173 |
| SHA3-384 | A4593 |
| SHA3-384 | A5173 |
| SHA3-512 | A4593 |
| SHA3-512 | A5173 |
| SHAKE-128 | A4593 |
| SHAKE-128 | A5173 |
| SHAKE-256 | A4593 |
| SHAKE-256 | A5173 |
| TDES-CBC | A4593 |
| TDES-CBC | A5173 |
| TDES-ECB | A4593 |
| TDES-ECB | A5173 |
| TLS v1.2 KDF RFC7627 | A4593 |
| TLS v1.2 KDF RFC7627 | A5173 |
| TLS v1.3 KDF | A4593 |
| TLS v1.3 KDF | A5173 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-08-27 | Initial | DEKRA Cybersecurity Certification Laboratory |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-28: first observed by this tracker, status active
- Validation dates on record: 2026-08-27