808bits

Chainguard FIPS Provider for OpenSSL

FIPS 140-3 certificate #5523 · Chainguard, Inc. · data as of 2026-09-15

Chainguard FIPS Provider for OpenSSL, from Chainguard, Inc., holds FIPS 140-3 certificate #5523 at overall level 1. The validation is active, with a sunset date of 2031-09-14. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2031-09-14, 1824 days away.
Caveat: When operated in approved mode; No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.

Certificate

Certificate number5523
StandardFIPS 140-3
Statusactive
Sunset date2031-09-14
Overall level1
Module typeSoftware
EmbodimentMultiChipStand
VendorChainguard, Inc. · website

Module description

Quoted from the NIST CMVP entry for this certificate.

The Chainguard FIPS Provider for OpenSSL is defined as a software module in a multi-chip standalone embodiment. It provides a C language application program interface (API) for use by other applications that require cryptographic functionality. The module consists of one software component, the "FIPS provider", which implements FIPS requirements, and the cryptographic functionality provided to the operator.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (78)

AlgorithmCAVP certificates
AES-CBCA7579, A7587, A7588, A7594, A7595, A7613
AES-CBC-CS1A7579, A7587, A7588, A7594, A7595, A7613
AES-CBC-CS2A7579, A7587, A7588, A7594, A7595, A7613
AES-CBC-CS3A7579, A7587, A7588, A7594, A7595, A7613
AES-CCMA7579, A7587, A7588, A7594, A7595, A7613
AES-CFB1A7579, A7587, A7588, A7594, A7595, A7613
AES-CFB128A7579, A7587, A7588, A7594, A7595, A7613, A8282
AES-CFB8A7579, A7587, A7588, A7594, A7595, A7613
AES-CMACA7579, A7587, A7588, A7594, A7595, A7613
AES-CTRA7579, A7587, A7588, A7594, A7595, A7613
AES-ECBA7579, A7587, A7588, A7594, A7595, A7613
AES-GCMA7580, A7581, A7582, A7589, A7590, A7596, A7597, A7598, A7599, A7600, A7601, A7602, A7603
AES-GMACA7580, A7581, A7582, A7589, A7590, A7596, A7597, A7598, A7599, A7600, A7601, A7602, A7603
AES-KWA7579, A7587, A7588, A7594, A7595, A7613
AES-KWPA7579, A7587, A7588, A7594, A7595, A7613
AES-OFBA7579, A7587, A7588, A7594, A7595, A7613
AES-XTS Testing Revision 2.0A7579, A7587, A7588, A7594, A7595, A7596, A7613
Counter DRBGA7579, A7587, A7588, A7594, A7595, A7613
Deterministic ECDSA SigGen (FIPS186-5)A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
ECDSA KeyGen (FIPS186-5)A7583, A7584, A7591, A7604, A7606, A7608, A7614
ECDSA KeyVer (FIPS186-4)A7583, A7584, A7591, A7604, A7606, A7608, A7614
ECDSA KeyVer (FIPS186-5)A7583, A7584, A7591, A7604, A7606, A7608, A7614
ECDSA SigGen (FIPS186-5)A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
ECDSA SigVer (FIPS186-4)A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
ECDSA SigVer (FIPS186-5)A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
EDDSA KeyGenA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
EDDSA KeyVerA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
EDDSA SigGenA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
EDDSA SigVerA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
Hash DRBGA7583, A7584, A7591, A7604, A7606, A7608, A7614
HMAC DRBGA7583, A7584, A7591, A7604, A7606, A7608, A7614
HMAC-SHA2-256A7583, A7584, A7591, A7604, A7606, A7608, A7614
HMAC-SHA2-384A7583, A7584, A7591, A7604, A7606, A7608, A7614
HMAC-SHA2-512A7583, A7584, A7591, A7604, A7606, A7608, A7614
HMAC-SHA2-512/256A7583, A7584, A7591, A7604, A7606, A7608, A7614
HMAC-SHA3-256A7584, A7585, A7593, A7610, A7611, A7612
HMAC-SHA3-384A7584, A7585, A7593, A7610, A7611, A7612
HMAC-SHA3-512A7584, A7585, A7593, A7610, A7611, A7612
KAS-ECC-SSC Sp800-56Ar3A7583, A7584, A7591, A7604, A7606, A7608, A7614
KAS-FFC-SSC Sp800-56Ar3A7586
KAS-IFC-SSCA8281
KDA HKDF SP800-56Cr2A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
KDA OneStep SP800-56Cr2A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
KDA TwoStep SP800-56Cr2A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
KDF ANS 9.42A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
KDF ANS 9.63A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
KDF KMAC Sp800-108r1A7584, A7585, A7593, A7610, A7611, A7612
KDF SP800-108A7579, A7583, A7584, A7585, A7587, A7588, A7591, A7593, A7594, A7595, A7604, A7606, A7608, A7610, A7611, A7612, A7613, A7614
KDF SSHA7583, A7584, A7591, A7592, A7604, A7605, A7606, A7607, A7608, A7609, A7614, A7615
KMAC-128A7584, A7585, A7593, A7610, A7611, A7612
KMAC-256A7584, A7585, A7593, A7610, A7611, A7612
KTS-IFCA7583, A7584, A7591, A7604, A7606, A7608, A7614
ML-DSA KeyGenA7584, A7585, A7593, A7610, A7611, A7612
ML-DSA SigGenA7584, A7585, A7593, A7610, A7611, A7612
ML-DSA SigVerA7584, A7585, A7593, A7610, A7611, A7612
ML-KEM EncapDecapA7584, A7585, A7593, A7610, A7611, A7612
ML-KEM KeyGenA7584, A7585, A7593, A7610, A7611, A7612
PBKDFA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
RSA KeyGen (FIPS186-5)A7583, A7584, A7591, A7604, A7606, A7608, A7614
RSA SigGen (FIPS186-5)A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
RSA SigVer (FIPS186-4)A7583, A7584, A7591, A7604, A7606, A7608, A7614
RSA SigVer (FIPS186-5)A7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
Safe Primes Key GenerationA7586
Safe Primes Key VerificationA7586
SHA2-256A7583, A7584, A7591, A7604, A7606, A7608, A7614
SHA2-384A7583, A7584, A7591, A7604, A7606, A7608, A7614
SHA2-512A7583, A7584, A7591, A7604, A7606, A7608, A7614
SHA2-512/256A7583, A7584, A7591, A7604, A7606, A7608, A7614
SHA3-256A7584, A7585, A7593, A7610, A7611, A7612
SHA3-384A7584, A7585, A7593, A7610, A7611, A7612
SHA3-512A7584, A7585, A7593, A7610, A7611, A7612
SHAKE-128A7584, A7585, A7593, A7610, A7611, A7612
SHAKE-256A7584, A7585, A7593, A7610, A7611, A7612
SLH-DSA KeyGenA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
SLH-DSA SigGenA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
SLH-DSA SigVerA7583, A7584, A7585, A7591, A7593, A7604, A7606, A7608, A7610, A7611, A7612, A7614
TLS v1.2 KDF RFC7627A7583, A7584, A7591, A7604, A7606, A7608, A7614
TLS v1.3 KDFA7583, A7584, A7591, A7604, A7606, A7608, A7614

Validation history

DateTypeLab
2026-09-15Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-09-15: first observed by this tracker, status active
  • Validation dates on record: 2026-09-15

Source documents