Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #3648

Details

Module Name
Ubuntu 18.04 Strongswan Cryptographic Module
Standard
FIPS 140-2
Status
Historical
 Historical Reason
SP 800-56Arev3 transition
Overall Level
1
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in Section 9.1 of the Security Policy with module Ubuntu OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #3622 operating in FIPS mode and with module Ubuntu Kernel Crypto API Cryptographic Module validated to FIPS140-2 under Cert. #3647 operating in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Ubuntu 18.04 Strongswan Cryptographic Module provides cryptographic services for the Internet Key Exchange (IKE) protocol in the Ubuntu Operating System user space.
Tested Configuration(s)
  • Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 with PAI [1]
  • Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 without PAI [1] (single-user mode)
  • Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 with PAA [1][2]
  • Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 without PAA [1][2]
Approved Algorithms
AES Certs. #C670, #C671, #C672, #C673, #C674, #C675, #C676, #C677, #C678, #C679, #C680, #C687, #C688, #C689, #C690, #C691 and #C692
CVL Certs. #C682, #C683, #C684, #C685, #C687, #C688, #C752 and #C753
DRBG Certs. #C670, #C673, #C677, #C687 and #C688
ECDSA Certs. #C682, #C683, #C684, #C685, #C687 and #C688
HMAC Certs. #C682, #C683, #C684, #C685, #C687, #C688, #C755, #C766, #C767, #C768, #C771 and #C772
RSA Certs. #C682, #C683, #C684, #C685, #C687 and #C688
SHS Certs. #C682, #C683, #C684, #C685, #C687, #C688, #C755, #C766, #C767, #C768, #C771 and #C772
Triple-DES Certs. #C669 and #C686
Allowed Algorithms
Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C752 and #C753, key agreement; key establishment methodology provides between 112 and 192 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C752 and #C753, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG
Software Versions
2.0 [1] and 2.1 [2]

Vendor

Canonical Ltd.
5th floor, Blue Fin Building
110 Southwark Street
London SE1 0SU
United Kingdom

Canonical Certification Team
security-certifications@lists.canonical.com

Validation History

Date Type Lab
4/29/2020 Initial ATSEC INFORMATION SECURITY CORP
11/30/2020 Update ATSEC INFORMATION SECURITY CORP
9/21/2021 Update ATSEC INFORMATION SECURITY CORP
10/18/2021 Update ATSEC INFORMATION SECURITY CORP