U.S. flag   An official website of the United States government

Computer Security Resource Center

Computer Security Resource Center

    Projects Cryptographic Algorithm Validation Program

Cryptographic Algorithm Validation Program CAVP

Implementation Name
Amazon Linux 2 Kernel crypto API (shaavx2)
Description
Linux kernel crypto API implementation providing cryptographic services to software components executing as part of the Linux kernel.
Version
1.0
Type
SOFTWARE
Vendor
Amazon Web Services, Inc.
1918 8th Ave
Seattle, WA 98101
USA
Contacts
Samartha Chandrashekar
amazon-linux-fips-external@amazon.com
Raghuram Kota
amazon-linux-fips-external@amazon.com

C919 First Validated: 7/18/2019

Operating Environment Algorithm Capabilities
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
Hash DRBG
  • Prediction Resistance: Yes, No
    • Capabilities:
      • Mode: SHA-1
      • Entropy Input: 128
      • Nonce: 64
      • Personalization String Length: 0-128
      • Additional Input: 0-128
      • Returned Bits: 640
    • Capabilities:
      • Mode: SHA2-256
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Additional Input: 0-256
      • Returned Bits: 1024
    • Capabilities:
      • Mode: SHA2-384
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Additional Input: 0-256
      • Returned Bits: 1536
    • Capabilities:
      • Mode: SHA2-512
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Additional Input: 0-256
      • Returned Bits: 2048
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
HMAC DRBG
  • Prediction Resistance: Yes, No
    • Capabilities:
      • Mode: SHA-1
      • Entropy Input: 128
      • Nonce: 64
      • Personalization String Length: 0-128
      • Additional Input: 0-128
      • Returned Bits: 640
    • Capabilities:
      • Mode: SHA2-256
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Additional Input: 0-256
      • Returned Bits: 1024
    • Capabilities:
      • Mode: SHA2-384
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Additional Input: 0-256
      • Returned Bits: 1536
    • Capabilities:
      • Mode: SHA2-512
      • Entropy Input: 256
      • Nonce: 128
      • Personalization String Length: 0-256
      • Additional Input: 0-256
      • Returned Bits: 2048
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
HMAC-SHA-1
  • MAC: 160
  • Key sizes < block size
  • Key size = block size
  • Key sizes > block size
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
HMAC-SHA2-224
  • MAC: 224
  • Key sizes < block size
  • Key size = block size
  • Key sizes > block size
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
HMAC-SHA2-256
  • MAC: 256
  • Key sizes < block size
  • Key size = block size
  • Key sizes > block size
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
HMAC-SHA2-384
  • MAC: 384
  • Key sizes < block size
  • Key sizes > block size
  • Key size = block size
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
HMAC-SHA2-512
  • MAC: 512
  • Key sizes < block size
  • Key size = block size
  • Key sizes > block size
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
RSA SigVer (FIPS186-4)
    • Capabilities:
      • Signature Type: PKCS 1.5
        • Properties:
          • Modulo: 2048
            • Hash Pair:
              • Hash Algorithm: SHA2-256
            • Hash Pair:
              • Hash Algorithm: SHA2-512
        • Properties:
          • Modulo: 3072
            • Hash Pair:
              • Hash Algorithm: SHA2-256
            • Hash Pair:
              • Hash Algorithm: SHA2-512
  • Public Exponent Mode: Random
Prerequisites:
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
SHA-1
  • Message Length: 0-51200 Increment 8
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
SHA2-224
  • Message Length: 0-51200 Increment 8
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
SHA2-256
  • Message Length: 0-51200 Increment 8
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
SHA2-384
  • Message Length: 0-102400 Increment 8
Amazon Linux 2 on Intel(R) Xeon(R) E5
  • software: Amazon Linux 2
  • processor: Intel Xeon(R) E5
    • manufacturer: Intel
SHA2-512
  • Message Length: 0-102400 Increment 8

Created October 05, 2016, Updated March 08, 2021