Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2]
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 2657 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Red Hat®, Inc. · website |
| Software versions | 4.0 [1], 5.0 [2] |
Module description
The libgcrypt FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the libgcrypt library delivered with RHEL 7.1 [1] and RHEL 7.4 [2].
Security level exceptions
- Physical Security: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 3643, 3644, 3645, 3646, 3647, 3648, 3649, 4580, 4581 |
| DRBG | 972, 973, 974, 975, 976, 977, 978, 979, 980, 1527, 1528 |
| DSA | 1017, 1018, 1019, 1020, 1021, 1214, 1215 |
| HMAC | 2395, 2396, 2397, 2398, 2399, 3030, 3031 |
| RSA | 1879, 1880, 1881, 1882, 1883, 2498, 2499 |
| SHS | 3062, 3063, 3064, 3065, 3066, 3756, 3757 |
| Triple-DES | 2030, 2031, 2032, 2033, 2034, 2433, 2434 |
Other algorithms
RSA (key wrapping; key establishment methodology provides between 128 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); ARC4; Blowfish; Camellia; Cast5; CRC32; CSPRNG; DES; El Gamal; Gost; IDEA; MD4; MD5; OpenPGP S2K Salted and Iterated/salted; RC2; RIPEMD160; SEED; Serpent; Tiger; Twofish; Whirlpool
Tested configurations
- Red Hat Enterprise Linux 7.1 running on IBM Power8 Little Endian 8286-41A [1]
- Red Hat Enterprise Linux 7.1 running on IBM z13 with CP Assist for Cryptographic Functions [1]
- Red Hat Enterprise Linux 7.1 running on ProLiant DL380p Gen8 with AES-NI [1]
- Red Hat Enterprise Linux 7.1 running on ProLiant DL380p Gen8 without AES-NI [1]
- Red Hat Enterprise Linux 7.4 running on Dell PowerEdge R630 [2] (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-06-13 | Initial | atsec information security corporation |
| 2017-07-28 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-06-13, 2017-07-28