Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5104

Details

Module Name
BoringCrypto
Standard
FIPS 140-3
Status
Active
Sunset Date
12/8/2030
Overall Level
1
Caveat
When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.
Approved Algorithms
AES-CBC
A5370
AES-CCM
A5370
AES-CTR
A5370
AES-ECB
A5370
AES-GCM
A5370
AES-GMAC
A5370
AES-KW
A5370
AES-KWP
A5370
Counter DRBG
A5370
ECDSA KeyGen (FIPS186-5)
A5370
ECDSA KeyVer (FIPS186-5)
A5370
ECDSA SigGen (FIPS186-5)
A5370
ECDSA SigVer (FIPS186-5)
A5370
HMAC-SHA-1
A5370
HMAC-SHA2-224
A5370
HMAC-SHA2-256
A5370
HMAC-SHA2-384
A5370
HMAC-SHA2-512
A5370
HMAC-SHA2-512/256
A5370
KAS-ECC-SSC Sp800-56Ar3
A5370
KAS-FFC-SSC Sp800-56Ar3
A5370
KDA HKDF Sp800-56Cr1
A5370
RSA KeyGen (FIPS186-5)
A5370
RSA SigGen (FIPS186-5)
A5370
RSA SigVer (FIPS186-5)
A5370
SHA-1
A5370
SHA2-224
A5370
SHA2-256
A5370
SHA2-384
A5370
SHA2-512
A5370
SHA2-512/256
A5370
TLS v1.2 KDF RFC7627
A5370
TLS v1.3 KDF
A5370

Vendor

Google, LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA

Adam Langley
[email protected]
Phone: 212-565-9291

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
12/9/2025 Initial DEKRA Cybersecurity Certification Laboratory