U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #3389

Details

Module Name
wolfCrypt
Standard
FIPS 140-2
Status
Active
Sunset Date
3/3/2024
Overall Level
1
Caveat
When operated in FIPS mode. When entropy is externally loaded, no assurance of the minimum strength of generated keys.
Security Level Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
wolfCrypt module is a comprehensive suite of FIPS Approved algorithms. All key sizes and modes have been implemented to allow flexibility and efficiency.
Tested Configuration(s)
  • Android 11 running on Samsung Galaxy S20 5G with a Qualcomm Snapdragon 865 SoC with PAA
  • Android 11 running on Samsung Galaxy S20 5G with a Qualcomm Snapdragon 865 SoC without PAA
  • Android 6.0 (Linux 4.1) running on RICOH IM C6000 with a Freescale i.MX6 Quad/DualLite with PAA
  • Android 6.0 (Linux 4.1) running on RICOH IM C6000 with a Freescale i.MX6 Quad/DualLite without PAA
  • Android 8.1 (Linux 4.4) running on EchoNous Kosmos® Bridge with a Qualcomm Snapdragon 835 (APQ8098 / MSM8998) with PAA
  • Android 8.1 (Linux 4.4) running on EchoNous Kosmos® Bridge with a Qualcomm Snapdragon 835 (APQ8098 / MSM8998) without PAA
  • CentOS 7.9 on host VMware ESXi 6.7 running on HP ProLiant DL360 with Intel® Xeon™ X5650 with PAA
  • CentOS 7.9 on host VMware ESXi 6.7 running on HP ProLiant DL360 with Intel® Xeon™ X5650 without PAA
  • CMSIS-RTOS2 v2.1.3 running on Alto™ with Silicon Labs EFM32G (Gecko)
  • CodeOS v1.4 running on Series CR2700 Code Reader(s) with CodeCorp CT8200 (ARM FA626TE)
  • Debian GNU/Linux 8 (jessie) running on a Corning 1LAN-SDDP-24POE with a Broadcom BCM5634
  • Debian GNU/Linux 8 (jessie) running on an ufiSpace Cloud and Data Center Switch S7810-54QS with an Intel® Atom™ C2558 @ 2.40GHz
  • Endace-Crypto-Firmware-1.0 running on EndaceProbe 2144 with Intel® Xeon® Silver 4316 CPU @2.30GHz with PAA
  • FreeBSD 10.3 on VMWare ESXi 7.0 running on a Supermicro X11DPH-i with an Intel® Xeon® Silver 4210 @ 2.20GHz
  • Fusion Embedded RTOS 5.0 running on Classone® IP Radio Gateway with Analog Devices ADSP-BF516 (BlackFin)
  • HP Imaging & Printing Linux 4.9 running on HP PN 3PZ95-60002 with ARM Cortex-A72 with PAA
  • HP Imaging & Printing Linux 4.9 running on HP PN 3PZ95-60002 with ARM Cortex-A72 without PAA
  • iOS 14 running on iPhone 12 with Apple A14 Bionic with PAA
  • iOS 14 running on iPhone 12 with Apple A14 Bionic without PAA
  • Linux 3.10 (CentOS 7) running on a Beckman Coulter PROService RAP BOX with an Intel® Atom™ CPU D525 @ 1.80GHz with PAA
  • Linux 3.10 (CentOS 7) running on a Beckman Coulter PROService RAP BOX with an Intel® Atom™ CPU D525 @ 1.80GHz without PAA
  • Linux 4.12 running on HP PageWide XL with an Intel® Core™ i3 - 7101 with PAA
  • Linux 4.12 running on HP PageWide XL with an Intel® Core™ i3 – 7101 without PAA
  • Linux 4.12 Yocto Standard running on Metasys® SNC Series Network Control Engine with Freescale i.MX6 DualLite ARMv7 Cortex-A9 x2 with PAA
  • Linux 4.12 Yocto Standard running on Metasys® SNC Series Network Control Engine with Freescale i.MX6 DualLite ARMv7 Cortex-A9x2 without PAA
  • Linux 4.14 running on Lenovo Xclarity Controller with an ARM Cortex A9 (x2) with PAA
  • Linux 4.14 running on Lenovo Xclarity Controller with an ARM Cortex A9 (x2) without PAA
  • Linux 4.14 running on SEL-2742S with an ARMv8 Cortex A53 with PAA
  • Linux 4.14 running on SEL-2742S with an ARMv8 Cortex A53 without PAA
  • Linux 4.4 (Ubuntu 16.04 LTS) running on Intel Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 with PAA
  • Linux 4.4 (Ubuntu 16.04 LTS) running on Intel Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 without PAA
  • Linux 4.9 running on ZOLL Communications Module with a Freescale i.MX7 Dual ARM Cortex-A7 with PAA
  • Linux 4.9 running on ZOLL Communications Module with a Freescale i.MX7 Dual ARM Cortex-A7 without PAA
  • Linux 5.15 on VMWare ESXi 7.0 running on a Supermicro X11DPH-i with an Intel® Xeon® Silver 4210 @2.20GHz
  • Linux 5.4 running on a Dell PowerEdge R340 Rack Server with an Intel® Xeon® E-2244G with PAA
  • Linux 5.4 running on a Dell PowerEdge R340 Rack Server with an Intel® Xeon® E-2244G without PAA
  • Linux 5.4 running on a LiveAction LiveNX Appliance with an Intel® Xeon® Gold 5218 CPU @2.30GHz
  • Linux 5.4 running on an iSTAR physical access controller with a Freescale i.MX7 Dual Arm Cortex A-7 with PAA
  • Linux 5.4 running on an iSTAR physical access controller with a Freescale i.MX7 Dual Arm Cortex A-7 without PAA
  • Linux IPHO00550F22 4.1 running on a Corning 1LAN-SDAN-7691 with a Broadcom BCM6858
  • Linux IPHO00559B23 3.4 running on a Corning 1LAN-SDAN-7290 with a Broadcom BCM6838
  • Linux socfpga Cyclone V running on SEL 2700 Series 24-Port Ethernet Switch with an ARMv7 rev0, Cortex A-9
  • macOS Monterey 12.5 running on a Macbook Air with an Apple M1 with PAA
  • macOS Monterey 12.5 running on a Macbook Air with an Apple M1 without PAA
  • macOS Monterey 12.5 running on a Macbook Pro with an Apple M1 Max with PAA
  • macOS Monterey 12.5 running on a Macbook Pro with an Intel® Core™ i7-8569U @ 2.80Ghz with PAA
  • Net+OS v7.6 running on a Sigma IV Infusion Pump with a Digi International NS9210
  • NetBSD Rev 6.0.1 running on RICOH IM C2500 with an Intel® Atom® E3930
  • NetBSD Rev 6.0.1 running on RICOH IM C6000 with an Intel® Atom® E3940
  • Nucleus 3.0 version 2013.08.1 running on XL200 Radio with Freescale Vybrid VF500
  • OpenRTOS v10.1.1 running on STMicroelectronics STM32L4R9I-DISCO (Discovery Kit) with a STMicroelectronics STM32L4Rx
  • QNX 6.5 running on Zebra ZQ630 with an ARM9®
  • QNX 6.6 running on Zebra ZT610 with an ARM® Cortex®-A9
  • QNX 7.0 running on Zebra ZD621 with an ARM® Cortex®-A7
  • QNX 7.0 running on Zebra ZT421 with an ARM® Cortex®-A7 (x2)
  • SUSE Linux Enterprise Server on VMWare ESXi 6.7.0 running on Dell PowerEdge T340 with an Intel® Xeon® E-2234 with PAA
  • SUSE Linux Enterprise Server on VMWare ESXi 6.7.0 running on Dell PowerEdge T340 with an Intel® Xeon® E-2234 without PAA
  • Swoop Kernel 1.5 running on Skipper with a Xilinx Zynq Ultrascale+ XCZU9EG™ ARM® Cortex®-A53
  • Vortec Scheduler running on Avaya MP160 with an StarCore SC3850 DSP Core
  • Vx Works 7.0 running on G450 Media Gateway with an NXP T1024
  • VxWorks 6.9 running on G430 Media Gateway with an NXP MPC8560
  • VxWorks 7 SR0630 running on F-16 WASP with Intel® Core™ i7-5850EQ @ 2.70GHz
  • Windows 10 Enterprise running on Radar FCL Package Utility with Intel® Core™ i7-7820 @2.9GHz x 4 with PAA
  • Windows 10 Enterprise running on Radar FCL Package Utility with Intel® Core™ i7-7820 @2.9GHz x 4 without PAA
  • Windows 10 Pro running on a Dell Precision 3570 with an Intel® Core™ i7-1255U @ 1.70 Ghz
  • Windows 10 Pro running on Lenovo Thinkpad T470 with an Intel® Core™ i7-7600 with PAA
  • Windows 10 Pro running on Lenovo Thinkpad T470 with an Intel® Core™ i7-7600 without PAA
  • Windows 10 running on Intel® Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 with PAA
  • Windows 10 running on Intel® Ultrabook 2 in 1 with an Intel® Core™ i5-5300U CPU @2.30GHz x 4 without PAA
  • Windows 11 Enterprise running on a Dell Latitude 7410 with an Intel® Core™ i7-10610U @ 1.80Ghz with PAA
  • Windows CE 6.0 running on HP LaserJet Enterprise with an ARM Cortex-A8
  • Windows Server 2016 Standard running on Dell PowerEdge R430 with an Intel® Xeon® E5-2603 with PAA
  • Windows Server 2016 Standard running on Dell PowerEdge R430 with an Intel® Xeon® E5-2603 without PAA A8
  • Windows Server 2019 running on HPE ProLiant DL360 with an Intel® Xeon® Silver 4116 with PAA
  • Windows Server 2019 running on HPE ProLiant DL360 with an Intel® Xeon® Silver 4116 without PAA
  • Yocto (dunfell) 3.1 running on a LinkGuard with an AMD GX-412TC SoC with PAA
  • Yocto (dunfell) 3.1 running on a LinkGuard with an AMD GX-412TC SoC without PAA (single-user mode)
Approved Algorithms
AES Certs. #5446, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
CVL Certs. #1891, #1892, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
DRBG Certs. #2131, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
DSA Certs. #1401, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
ECDSA Certs. #1451, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
HMAC Certs. #3604, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
KAS-SSC Certs. #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2420, #A2421, #A2422, #A2423, #A2460, #A2465, #A2790, #A3234 and #A3412
RSA Certs. #2922, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568 #C1727 and #C1746
SHA-3 Certs. #45, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
SHS Certs. #4365, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
Triple-DES Certs. #2736, #A894, #A902, #A949, #A1103, #A1180, #A1261, #A1565, #A2119, #A2790, #A3234, #A3412, #C663, #C1051, #C1438, #C1568, #C1727 and #C1746
Allowed Algorithms
NDRNG
Software Versions
4.0, 4.0.1, 4.1.0, 4.2.0, 4.3.0, 4.3.2, 4.3.2a, 4.3.2b, 4.3.4, 4.4.1, 4.4.1a, 4.4.2, 4.5.2, 4.5.4, 4.5.4a, 4.5.4b, 4.6.1 and 4.6.2

Vendor

wolfSSL Inc.
10016 Edmonds Way Suite C-300
Edmonds, WA 98020
USA

Todd Ouska
todd@wolfssl.com
Phone: 503-679-1859
 Larry Stefonic
larry@wolfssl.com
Phone: 206-369-4800

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
3/4/2019 Initial UL VERIFICATION SERVICES INC
5/31/2019 Update UL VERIFICATION SERVICES INC
10/22/2019 Update UL VERIFICATION SERVICES INC
1/6/2020 Update UL VERIFICATION SERVICES INC
3/26/2020 Update UL VERIFICATION SERVICES INC
4/22/2020 Update UL VERIFICATION SERVICES INC
7/6/2020 Update UL VERIFICATION SERVICES INC
8/27/2020 Update UL VERIFICATION SERVICES INC
1/29/2021 Update UL VERIFICATION SERVICES INC
3/24/2021 Update UL VERIFICATION SERVICES INC
4/14/2021 Update UL VERIFICATION SERVICES INC
8/30/2021 Update UL VERIFICATION SERVICES INC
2/14/2022 Update UL VERIFICATION SERVICES INC
3/14/2022 Update UL VERIFICATION SERVICES INC
2/15/2023 Update UL VERIFICATION SERVICES INC
4/26/2023 Update UL VERIFICATION SERVICES INC
9/13/2023 Update UL VERIFICATION SERVICES INC