Oracle Linux OpenSSL Cryptographic Module
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Certificate
| Certificate number | 3017 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | R6-1.0.0[1] and R7-2.0.0[2] |
Module description
Oracle Linux OpenSSL Cryptographic Module is a software module supporting FIPS 140-2 approved cryptographic algorithms for general use by vendors.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 4533, 4534, 4535, 4536, 4537, 4538, 5344, 5351, 5352, 5353, 5370, 5396 |
| CVL | 1215, 1216, 1217, 1218, 1816, 1817, 1837, 1838 |
| DRBG | 1490, 1491, 1492, 1493, 1494, 1495, 2064, 2070, 2071, 2079, 2091, 2108 |
| DSA | 1208, 1209, 1383, 1388 |
| ECDSA | 1104, 1105, 1409, 1417 |
| HMAC | 2991, 2992, 2993, 2994, 2995, 2996, 3541, 3548, 3549, 3550, 3558, 3573 |
| KTS | |
| RSA | 2468, 2469, 2864, 2873 |
| SHS | 3714, 3715, 3716, 3717, 3718, 3719, 4295, 4302, 4303, 4304, 4312, 4329 |
| Triple-DES | 2414, 2415, 2707, 2710 |
Allowed algorithms
Diffie-Hellman (CVL Certs. #1216, #1217, #1816 and #1837, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #1216, #1217, #1816 and #1837, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (Key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with PAA[1]
- Oracle Linux 6.9 64 bit running on Oracle Server X6-2 without PAA[1]
- Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with PAA[1]
- Oracle Linux 6.9 64 bit running on Oracle Server X7-2 without PAA[1]
- Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with PAA[2]
- Oracle Linux 7.3 64 bit running on Oracle Server X6-2 without PAA[2]
- Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with PAA[2]
- Oracle Linux 7.3 64 bit running on Oracle Server X7-2 without PAA[2] (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2017-09-20 | Initial | atsec information security corporation |
| 2018-05-17 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2017-09-20, 2018-05-17