Skip to content

Commit

Permalink
Update FIPS docs w/ certs (#1900)
Browse files Browse the repository at this point in the history
### Description of changes: 
* Update FIPS documentation with links to latest certs from NIST.
* Add security policy documentation to our repository.
* Remove old Boring security policies.

### Call-outs:
* You can also see the updated documentation on [this branch in my
repo](https://github.com/justsmth/aws-lc/blob/update-fips-docs/crypto/fipsmodule/FIPS.md).
* This commit may be cherry-picked onto the FIPS branches after being
merged into main.

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license and the ISC license.
  • Loading branch information
justsmth authored Oct 11, 2024
1 parent 9ff8458 commit 8363e61
Show file tree
Hide file tree
Showing 9 changed files with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions crypto/fipsmodule/FIPS.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,18 +6,18 @@ A submodule of AWS-LC, referred to here as the “FIPS module”, is periodicall

NIST has awarded the FIPS module of AWS-LC its validation certificate as a Federal Information Processing Standards (FIPS) 140-3, level 1, cryptographic module.

1. AWS-LC-FIPS v1.0: certificate [#4631](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4631), [security policy](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4631.pdf)
* AWS-LC-FIPS v1.0: certificate [#4631](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4631) - [security policy](./policydocs/140sp4631.pdf)
* AWS-LC-FIPS v2.0 (dynamic library): certificate [#4795](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4759) - [security policy](./policydocs/140sp4759.pdf)
* AWS-LC-FIPS v2.0 (static library): certificate [#4816](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4816) - [security policy](./policydocs/140sp4816.pdf)

NIST has also awarded SP 800-90B validation certificate for our CPU Jitter Entropy Source.

1. 2023-09-14: entropy certificate [#E77](https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/77), [public use document](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E77_PublicUse.pdf)

### Modules in Process

The modules below have been tested by an accredited lab and have been submitted to NIST for FIPS 140-3 validation.

* AWS-LC-FIPS v2.0 (dynamic library): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [Draft security policy](https://github.com/aws/aws-lc/blob/fips-2022-11-02/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-2.0.0-dynamic.pdf)
* AWS-LC-FIPS v2.0 (static library): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [Draft security policy](https://github.com/aws/aws-lc/blob/fips-2022-11-02/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-2.0.0-static.pdf)
The modules below have been tested by an accredited lab and have been submitted to NIST for FIPS 140-3 validation.
* AWS-LC Cryptographic Module (dynamic): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List)

## RNG design

Expand Down
Binary file added crypto/fipsmodule/policydocs/140sp4631.pdf
Binary file not shown.
Binary file added crypto/fipsmodule/policydocs/140sp4759.pdf
Binary file not shown.
Binary file added crypto/fipsmodule/policydocs/140sp4816.pdf
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.

0 comments on commit 8363e61

Please sign in to comment.