Amazon Linux 2 NSS Cryptographic Module
Amazon Web Services, Inc. - FIPS 140 #4565
The Amazon Linux 2 NSS Cryptographic Module is a set of libraries designed to support cross-platform development of security-enabled applications. These applications may support the TLS protocol, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME, X.509 v3 certificates, and other security standards supporting FIPS 140-2 validated cryptographic algorithms.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4565
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- Moved to historical list due to sunsetting
- Vendor
- Amazon Web Services, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- August 30, 2023
- Versions
- 1.0
- Caveat
- When operated in FIPS mode. When installed, initialized and configured as specified in Section 10.2 of the Security Policy.
- Level exceptions
- Physical Security: N/A; Roles, Services, and Authentication: Level 2
Algorithms
- AES
- CVL
- DRBG
- DSA
- ECDSA
- HMAC
- KTS
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (12)
- AES A3741
- AES A3742
- CVL A3741
- DRBG A3741
- DSA A3741
- ECDSA A3741
- HMAC A3741
- KTS A3741
- KTS A3742
- RSA A3741
- SHS A3741
- Triple-DES A3741
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Amazon Linux 2 running on Amazon EC2 c6g.metal with Graviton 2 with PAA
- Amazon Linux 2 running on Amazon EC2 c6g.metal with Graviton 2 without PAA (single-user mode)
- Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5 with PAA
- Amazon Linux 2 running on Amazon EC2 i3.metal with Intel Xeon E5 without PAA
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain