Oracle Solaris Kernel Cryptographic Framework: FIPS 140-2 cert #2061

Oracle Solaris Kernel Cryptographic Framework, from Oracle Corporation, holds FIPS 140-2 certificate #2061 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	2061
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-chip standalone
Vendor	Oracle Corporation · website
Software versions	1.0 and 1.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The Oracle Solaris OS utilizes the Oracle Solaris Kernel Cryptographic Framework module to provide cryptographic functionality for any kernel-level processes that require it, via Oracle-proprietary APIs.

Approved algorithms (7)

Algorithm	CAVP certificates
AES	2309, 2573
ECDSA	374, 445
HMAC	1423, 1595
RNG	1151, 1225
RSA	1192, 1320
SHS	1993, 2173
Triple-DES	1456, 1559

Other algorithms

AES-CTS (non-compliant); AES-XCBC-MAC (non-compliant); MD4; MD5; HMAC-MD5; RC4; DES; Blowfish; Triple-DES (non-compliant); RSA (key wrapping; key establishment methodology provides between 112 and 192 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Tested configurations

Oracle Solaris 11.1 running on a M3000 Enterprise Server without PAA
Oracle Solaris 11.1 running on a Sun Server X3-2 with PAA
Oracle Solaris 11.1 running on a Sun Server X3-2 without PAA (single-user mode)

Validation history

Date	Type	Lab
2013-12-13	Initial	CGI Information Systems & Management Consultants Inc

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2013-12-13

Oracle Solaris Kernel Cryptographic Framework