[FIPS] Add AWS-LC-FIPS v3.0 policy docs (aws#2044)

### Issues: Addresses CryptoAlg-2802 ### Description of changes: Update FIPS.md: * Include v3.0.0 draft security policies. * Add links to v2.0 security policies on NIST website. By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.
justsmth · Dec 10, 2024 · 8ff5cce · 8ff5cce
1 parent dc6b2cb
commit 8ff5cce
Show file tree

Hide file tree

Showing 12 changed files with 7 additions and 5 deletions.
diff --git a/crypto/fipsmodule/FIPS.md b/crypto/fipsmodule/FIPS.md
@@ -6,18 +6,20 @@ A submodule of AWS-LC, referred to here as the “FIPS module”, is periodicall
 
 NIST has awarded the FIPS module of AWS-LC its validation certificate as a Federal Information Processing Standards (FIPS) 140-3, level 1, cryptographic module.
 
-1. AWS-LC-FIPS v1.0: certificate [#4631](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4631), [security policy](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4631.pdf)
+* AWS-LC-FIPS v1.0: certificate [#4631](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4631) - [security policy](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4631.pdf)
+* AWS-LC-FIPS v2.0 (dynamic library): certificate [#4759](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4759) - [security policy](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4759.pdf)
+* AWS-LC-FIPS v2.0 (static library): certificate [#4816](https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4816) - [security policy](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4816.pdf)
 
 NIST has also awarded SP 800-90B validation certificate for our CPU Jitter Entropy Source.
 
 1. 2023-09-14: entropy certificate [#E77](https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/77), [public use document](https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/entropy/E77_PublicUse.pdf)
 
 ### Modules in Process
 
-The modules below have been tested by an accredited lab and have been submitted to NIST for FIPS 140-3 validation.  
-
-* AWS-LC-FIPS v2.0 (dynamic library): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [Draft security policy](https://github.com/aws/aws-lc/blob/fips-2022-11-02/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-2.0.0-dynamic.pdf)
-* AWS-LC-FIPS v2.0 (static library): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [Draft security policy](https://github.com/aws/aws-lc/blob/fips-2022-11-02/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-2.0.0-static.pdf)
+The modules below have been tested by an accredited lab and have been submitted to NIST for FIPS 140-3 validation.
+* AWS-LC Cryptographic Module (dynamic): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [draft security policy](./policydocs/DRAFT-140-3-AmazonSecurityPolicy-NetOS-dynamic.pdf)
+* AWS-LC-FIPS v3.0 (static): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [draft security policy](./policydocs/DRAFT-140-3-AmazonSecurityPolicy-3.0.0-static.pdf)
+* AWS-LC-FIPS v3.0 (dynamic): [Review Pending](https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Modules-In-Process/Modules-In-Process-List) - [draft security policy](./policydocs/DRAFT-140-3-AmazonSecurityPolicy-3.0.0-dynamic.pdf)
 
 ## RNG design
 

diff --git a/crypto/fipsmodule/policydocs/140sp4631.pdf b/crypto/fipsmodule/policydocs/140sp4631.pdf
diff --git a/crypto/fipsmodule/policydocs/140sp4759.pdf b/crypto/fipsmodule/policydocs/140sp4759.pdf
diff --git a/crypto/fipsmodule/policydocs/140sp4816.pdf b/crypto/fipsmodule/policydocs/140sp4816.pdf
diff --git a/crypto/fipsmodule/policydocs/BoringCrypto-Android-Security-Policy-20191020.docx b/crypto/fipsmodule/policydocs/BoringCrypto-Android-Security-Policy-20191020.docx
diff --git a/crypto/fipsmodule/policydocs/BoringCrypto-Android-Security-Policy-20210319.docx b/crypto/fipsmodule/policydocs/BoringCrypto-Android-Security-Policy-20210319.docx
diff --git a/crypto/fipsmodule/policydocs/BoringCrypto-Security-Policy-20170615.docx b/crypto/fipsmodule/policydocs/BoringCrypto-Security-Policy-20170615.docx
diff --git a/crypto/fipsmodule/policydocs/BoringCrypto-Security-Policy-20180730.docx b/crypto/fipsmodule/policydocs/BoringCrypto-Security-Policy-20180730.docx
diff --git a/crypto/fipsmodule/policydocs/BoringCrypto-Security-Policy-20190808.docx b/crypto/fipsmodule/policydocs/BoringCrypto-Security-Policy-20190808.docx
diff --git a/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-3.0.0-dynamic.pdf b/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-3.0.0-dynamic.pdf
diff --git a/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-3.0.0-static.pdf b/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-3.0.0-static.pdf
diff --git a/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-NetOS-dynamic.pdf b/crypto/fipsmodule/policydocs/DRAFT-140-3-AmazonSecurityPolicy-NetOS-dynamic.pdf