Cryptographic Module Validation Program CMVP

Certificate #3648

Details

Module Name
Ubuntu 18.04 Strongswan Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
4/28/2025
Validation Dates
04/29/2020
Overall Level
1
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in Section 9.1 of the Security Policy with module Ubuntu OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #3622 operating in FIPS mode and with module Ubuntu Kernel Crypto API Cryptographic Module validated to FIPS140-2 under Cert. #3647 operating in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Ubuntu 18.04 Strongswan Cryptographic Module provides cryptographic services for the Internet Key Exchange (IKE) protocol in the Ubuntu Operating System user space.
Tested Configuration(s)
  • Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 with PAI
  • Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 without PAI (single-user mode)
  • Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 with PAA
  • Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 without PAA
FIPS Algorithms
AES Certs. #C670, #C671, #C672, #C673, #C674, #C675, #C676, #C677, #C678, #C679, #C680, #C687, #C688, #C689, #C690, #C691 and #C692
CVL Certs. #C682, #C683, #C684, #C685, #C687, #C688, #C752 and #C753
DRBG Certs. #C670, #C673, #C677, #C687 and #C688
ECDSA Certs. #C682, #C683, #C684, #C685, #C687 and #C688
HMAC Certs. #C682, #C683, #C684, #C685, #C687, #C688, #C755, #C766, #C767, #C768, #C771 and #C772
RSA Certs. #C682, #C683, #C684, #C685, #C687 and #C688
SHS Certs. #C682, #C683, #C684, #C685, #C687, #C688, #C755, #C766, #C767, #C768, #C771 and #C772
Triple-DES Certs. #C669 and #C686
Allowed Algorithms
Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C752 and #C753, key agreement; key establishment methodology provides between 112 and 192 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C752 and #C753, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG
Software Versions
2.0

Vendor

Canonical Ltd.
5th floor, Blue Fin Building
110 Southwark Street
London SE1 0SU
United Kingdom

Joy Latten
joy.latten@canonical.com
Joe McManus
joe.mcmanus@canonical.com

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0