Cryptographic Module Validation Program CMVP

Module Name

AWS-LC Cryptographic Module

Standard

FIPS 140-3

Status

Active

Sunset Date

10/5/2028

Overall Level

1

Caveat

When operated in approved mode

Security Level Exceptions

• Physical security: N/A
• Non-invasive security: N/A
• Documentation requirements: N/A
• Cryptographic module security policy: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

AWS-LC is a general-purpose cryptographic library maintained by the AWS Cryptography team for AWS and their customers. It іs based on code from the Google BoringSSL project and the OpenSSL project.

Tested Configuration(s)

• Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
• Amazon Linux 2 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA
• Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA
• Amazon Linux 2 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA
• Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor with PAA
• Ubuntu 20.04 running Amazon EC2 c6g.metal with Graviton 2 processor without PAA
• Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor with PAA
• Ubuntu 20.04 running on Amazon EC2 c5.metal with Intel Xeon Platinum 8275CL processor without PAA

Approved Algorithms

Software Versions

AWS-LC FIPS 1.0.2