Red Hat Enterprise Linux Libreswan Cryptographic Module
Certificate
| Certificate number | 3083 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Red Hat®, Inc. · website |
| Software versions | 5.0 |
Module description
Red Hat Enterprise Linux Libreswan Cryptographic Module is a software only cryptographic module that provides the IKE protocol version 1 and version 2 key agreement services required for IPSec.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 4739, 4740, 4741, 4742 |
| CVL | 1378, 1379, 1410 |
| DRBG | 1625, 1626 |
| ECDSA | 1181, 1182 |
| HMAC | 3076, 3088, 3090, 3091, 3107, 3108, 3109, 3110, 3111, 3112, 3156, 3157 |
| RSA | 2588, 2589 |
| SHS | 3884, 3885 |
| Triple-DES | 2520, 2521 |
Allowed algorithms
Diffie-Hellman (Certs. #1378 and #1379 with CVL Cert. #1410, key agreement; key establishment methodology provides between 112 bits and 256 bits of encryption strength); EC Diffie-Hellman (Certs. #1378 and #1379 with CVL Cert. #1410, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); NDRNG; RSA (Certs. #2588 and #2589, key wrapping; key establishment methodology provides between 112 bits and 256 bits of encryption strength)
Tested configurations
- Red Hat Enterprise Linux 7.4 running on Dell PowerEdge R630 with PAA
- Red Hat Enterprise Linux 7.4 running on Dell PowerEdge R630 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2017-12-19 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2017-12-19