Echo FIPS Provider for OpenSSL
Echo FIPS Provider for OpenSSL, from Echo Software Inc., holds FIPS 140-3 certificate #5560 at overall level 1. The validation is active, with a sunset date of 2029-08-26. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: No assurance of the minimum strength of generated SSPs (e.g., keys) and random strings. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Certificate
| Certificate number | 5560 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-08-26 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | MultiChipStand |
| Vendor | Echo Software Inc. · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
Echo FIPS Provider for OpenSSL is a software cryptographic module that provides FIPS 140-3 validated cryptography through the OpenSSL 3 API.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms (80)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A4593, A5173 |
| AES-CBC-CS1 | A4593, A5173 |
| AES-CBC-CS2 | A4593, A5173 |
| AES-CBC-CS3 | A4593, A5173 |
| AES-CCM | A4593, A5173 |
| AES-CFB1 | A4593, A5173 |
| AES-CFB128 | A4593, A5173 |
| AES-CFB8 | A4593, A5173 |
| AES-CMAC | A4593, A5173 |
| AES-CTR | A4593, A5173 |
| AES-ECB | A4593, A5173 |
| AES-GCM | A4593, A5173 |
| AES-GMAC | A4593, A5173 |
| AES-KW | A4593, A5173 |
| AES-KWP | A4593, A5173 |
| AES-OFB | A4593, A5173 |
| AES-XTS Testing Revision 2.0 | A4593, A5173 |
| Counter DRBG | A4593, A5173 |
| DSA KeyGen (FIPS186-4) | A4593, A5173 |
| DSA PQGGen (FIPS186-4) | A4593, A5173 |
| DSA PQGVer (FIPS186-4) | A4593, A5173 |
| DSA SigVer (FIPS186-4) | A4593, A5173 |
| ECDSA KeyGen (FIPS186-4) | A4593, A5173 |
| ECDSA KeyVer (FIPS186-4) | A4593, A5173 |
| ECDSA SigGen (FIPS186-4) | A4593, A5173 |
| ECDSA SigVer (FIPS186-4) | A4593, A5173 |
| EDDSA KeyGen | A4593, A5173 |
| EDDSA KeyVer | A4593, A5173 |
| EDDSA SigGen | A4593, A5173 |
| EDDSA SigVer | A4593, A5173 |
| Hash DRBG | A4593, A5173 |
| HMAC DRBG | A4593, A5173 |
| HMAC-SHA-1 | A4593, A5173 |
| HMAC-SHA2-224 | A4593, A5173 |
| HMAC-SHA2-256 | A4593, A5173 |
| HMAC-SHA2-384 | A4593, A5173 |
| HMAC-SHA2-512 | A4593, A5173 |
| HMAC-SHA2-512/224 | A4593, A5173 |
| HMAC-SHA2-512/256 | A4593, A5173 |
| HMAC-SHA3-224 | A4593, A5173 |
| HMAC-SHA3-256 | A4593, A5173 |
| HMAC-SHA3-384 | A4593, A5173 |
| HMAC-SHA3-512 | A4593, A5173 |
| KAS-ECC-SSC Sp800-56Ar3 | A4593, A5173 |
| KAS-FFC-SSC Sp800-56Ar3 | A4593, A5173 |
| KAS-IFC-SSC | A4593, A5173 |
| KDA HKDF SP800-56Cr2 | A4593, A5173 |
| KDA OneStep SP800-56Cr2 | A4593, A5173 |
| KDA TwoStep SP800-56Cr2 | A4593, A5173 |
| KDF ANS 9.42 | A4593, A5173 |
| KDF ANS 9.63 | A4593, A5173 |
| KDF KMAC Sp800-108r1 | A4593, A5173 |
| KDF SP800-108 | A4593, A5173 |
| KDF SSH | A4593, A5173 |
| KMAC-128 | A4593, A5173 |
| KMAC-256 | A4593, A5173 |
| KTS-IFC | A4593, A5173 |
| PBKDF | A4593, A5173 |
| RSA KeyGen (FIPS186-4) | A4593, A5173 |
| RSA SigGen (FIPS186-4) | A4593, A5173 |
| RSA SigVer (FIPS186-4) | A4593, A5173 |
| Safe Primes Key Generation | A4593, A5173 |
| Safe Primes Key Verification | A4593, A5173 |
| SHA-1 | A4593, A5173 |
| SHA2-224 | A4593, A5173 |
| SHA2-256 | A4593, A5173 |
| SHA2-384 | A4593, A5173 |
| SHA2-512 | A4593, A5173 |
| SHA2-512/224 | A4593, A5173 |
| SHA2-512/256 | A4593, A5173 |
| SHA3-224 | A4593, A5173 |
| SHA3-256 | A4593, A5173 |
| SHA3-384 | A4593, A5173 |
| SHA3-512 | A4593, A5173 |
| SHAKE-128 | A4593, A5173 |
| SHAKE-256 | A4593, A5173 |
| TDES-CBC | A4593, A5173 |
| TDES-ECB | A4593, A5173 |
| TLS v1.2 KDF RFC7627 | A4593, A5173 |
| TLS v1.3 KDF | A4593, A5173 |
Validation history
| Date | Type | Lab |
|---|---|---|
| 2026-10-21 | Initial | DEKRA Cybersecurity Certification Laboratory |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-10-21: first observed by this tracker, status active
- Validation dates on record: 2026-10-21