Cisco FIPS Object Module
Cisco Systems, Inc. - FIPS 140 #4036
The Cisco FIPS Object Module (FOM) is a firmware library that provides cryptographic services to a vast array of Cisco's networking and collaboration products. The module provides FIPS 140 validated cryptographic algorithms for services such as IPSEC, SRTP, SSH, TLS, 802.1x, etc. The module does not directly implement any of these protocols, instead it provides the cryptographic primitives and functions to allow a developer to implement the various protocols.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4036
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- Moved to historical list due to sunsetting
- Vendor
- Cisco Systems, Inc.
- Module type
- Firmware
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Acumen Security
- First validated
- September 23, 2021
- Versions
- 7.2a
- Caveat
- When installed, initialized and configured as specified in the Security Policy Section 3 and operated in FIPS mode. No assurance of the minimum strength of generated keys
- Level exceptions
- Design Assurance: Level 3; Mitigation of Other Attacks: N/A
Algorithms
- AES
- CVL
- DRBG
- DSA
- ECDSA
- HMAC
- KAS-SSC
- KBKDF
- RSA
- SHA-3
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (12)
- AES A1420
- CVL A1420
- DRBG A1420
- DSA A1420
- ECDSA A1420
- HMAC A1420
- KAS-SSC A1420
- KBKDF A1420
- RSA A1420
- SHA-3 A1420
- SHS A1420
- Triple-DES A1420
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Cisco ASA 5555 with Linux 4.1 with Intel Xeon X3460 without PAA
- Cisco Catalyst 9200 with Linux 4.4 with ARM 8 Cortex-A53 AArch64 without PAA
- Cisco Catalyst 9300 with Linux 4.4 with Intel Xeon D-1526 with PAA
- Cisco Firepower 9300 with Linux 4.1 with Intel Xeon E5-2658 with PAA
- Cisco ISR 4321 with Linux 5.4 with Intel Atom C2558 with PAA
- Cisco ISR 4451 with Linux 5.4 with Intel Xeon E3-1105C with PAA
- Cisco UCS M5 with Linux 4.18 with Intel Xeon Gold 6128 with PAA
- Evaluation board with Linux 2.6 with Cavium Octeon CN5230 without PAA
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain