U.S. flag   An official website of the United States government

Computer Security Resource Center

Computer Security Resource Center

    Projects Cryptographic Algorithm Validation Program

Cryptographic Algorithm Validation Program CAVP

Implementation Name
Amazon Linux 2 Linux Kernel crypto API (aesgen)
Description
Linux kernel crypto API implementation providing cryptographic services to software components executing as part of the Linux kernel.
Version
1.0
Type
SOFTWARE
Vendor
Amazon Web Services, Inc.
1918 8th Ave
Seattle, WA 98101
USA
Contacts
Samartha Chandrashekar
amazon-linux-fips-external@amazon.com
Raghuram Kota
amazon-linux-fips-external@amazon.com

C913 First Validated: 7/18/2019

Operating Environment Algorithm Capabilities
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-CBC
  • Direction: Decrypt, Encrypt
  • Key Length: 128, 192, 256
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-CCM
  • Key Length: 128, 192, 256
  • Tag Length: 32, 48, 64, 80, 96, 112, 128
  • IV Length: 56, 64, 72, 80, 88, 96, 104
  • Payload Length: 0-256
  • AAD Length: 0-524288
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-CMAC
    • Capabilities:
      • Direction: Generation
      • Key Length: 128
      • MAC: 64, 128
      • Message Length: 0, 128, 136, 256, 264, 524288
    • Capabilities:
      • Direction: Generation
      • Key Length: 192
      • MAC: 64, 128
      • Message Length: 0, 128, 136, 256, 264, 524288
    • Capabilities:
      • Direction: Generation
      • Key Length: 256
      • MAC: 64, 128
      • Message Length: 0, 128, 136, 256, 264, 524288
    • Capabilities:
      • Direction: Verification
      • Key Length: 128
      • MAC: 64, 128
      • Message Length: 0, 128, 136, 256, 264, 524288
    • Capabilities:
      • Direction: Verification
      • Key Length: 192
      • MAC: 64, 128
      • Message Length: 0, 128, 136, 256, 264, 524288
    • Capabilities:
      • Direction: Verification
      • Key Length: 256
      • MAC: 64, 128
      • Message Length: 0, 128, 136, 256, 264, 524288
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-CTR
  • Direction: Encrypt
  • Key Length: 128, 192, 256
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-ECB
  • Direction: Decrypt, Encrypt
  • Key Length: 128, 192, 256
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-GCM
  • Direction: Decrypt, Encrypt
  • IV Generation: External
  • Key Length: 128, 192, 256
  • Tag Length: 32, 64, 96, 104, 112, 120, 128
  • IV Length: 96
  • Payload Length: 120, 128, 248, 256
  • AAD Length: 0, 120, 128, 248, 256
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-GMAC
  • Direction: Decrypt, Encrypt
  • IV Generation: External
  • Key Length: 128, 192, 256
  • Tag Length: 32, 64, 96, 104, 112, 120, 128
  • IV Length: 96
  • AAD Length: 0, 120, 128, 248, 256
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-KW
  • Direction: Decrypt, Encrypt
  • Cipher: Cipher
  • Key Length: 128, 192, 256
  • Payload Length: 128, 192, 256, 320, 4096
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-XTS
  • Direction: Decrypt, Encrypt
  • Key Length: 128
  • Payload Length: 128, 256, 65536
  • Tweak Mode: Hex
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
AES-XTS
  • Direction: Decrypt, Encrypt
  • Key Length: 256
  • Payload Length: 128, 256, 65536
  • Tweak Mode: Hex
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
Counter DRBG
  • Prediction Resistance: Yes, No
    • Capabilities:
      • Mode: AES-128
      • Derivation Function Enabled: Yes
      • Additional Input: 0-128
      • Entropy Input: 128
      • Nonce: 64
      • Personalization String Length: 0-128
      • Returned Bits: 512
    • Capabilities:
      • Mode: AES-192
      • Derivation Function Enabled: Yes
      • Additional Input: 0-256
      • Entropy Input: 192
      • Nonce: 128
      • Personalization String Length: 0-256
      • Returned Bits: 512
    • Capabilities:
      • Mode: AES-256
      • Derivation Function Enabled: Yes
      • Additional Input: 0-256
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Returned Bits: 512
Prerequisites:

Created October 05, 2016, Updated March 08, 2021