Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5104

Details

Module Name
BoringCrypto
Standard
FIPS 140-3
Status
Active
Sunset Date
12/8/2030
Overall Level
1
Caveat
When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
A software library that contains cryptographic functionality to serve BoringSSL and other user-space applications.

Vendor

Google, LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA

Adam Langley
[email protected]
Phone: 212-565-9291

Related Files

Security Policy

Validation History

Date Type Lab
12/9/2025 Initial DEKRA Cybersecurity Certification Laboratory