Oracle OpenSSL FIPS Object Module
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Certificate
| Certificate number | 3335 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | OpenSSL_2.0.13_OracleFIPS_1.0; OpenSSL_2.0.13_OracleFIPS_1.1; OpenSSL_2.0.13_OracleFIPS_1.2 |
Module description
Oracle OpenSSL FIPS Object Module is a software library providing a C language application program interface (API) for use by processes that require cryptographic services. It is implemented in products such as Oracle Solaris 11, Oracle Integrated Lights Out Manager (ILOM), and Oracle ZFS Storage Appliance.
Security level exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A861, A2511, A2514, C1651, 5445 |
| CKG | vendor affirmed |
| DRBG | A861, A2511, A2514, C1651, 2129 |
| DSA | A861, A2511, A2514, 1400, C1651 |
| ECDSA | A861, A2511, A2514, C1651, 1449 |
| HMAC | A861, A2511, A2514, C1651, 3603 |
| KAS-SSC | vendor affirmed |
| RSA | A861, A2511, A2514, C1651, 2921 |
| SHS | A861, A2511, A2514, C1651, 4364 |
| Triple-DES | A861, A2511, A2514, C1651, 2735 |
Allowed algorithms
RSA (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- Oracle ILOM OS v5.1 running on AST2600 Server Management Processor with Oracle ILOM SP v6 (ARM v7) without PAA
- Oracle® ILOM OS v3.0 running on Emulex Pilot-4 Orion mainboard with Oracle® ILOM SP v2 (ARM v5) without PAA
- Oracle® ILOM OS v3.0 running on Oracle X5-2 server with Oracle® ILOM SP v3 (ARM v7) with PAA
- Oracle® ILOM OS v3.0 running on Oracle X5-2 server with Oracle® ILOM SP v3 (ARM v7) without PAA
- Oracle® ILOM OS v4.0 running on AST2400 Server Management Processor with Oracle® ILOM SP v4 (ARM v9) without PAA
- Oracle® ILOM OS v5.0 running on AST2520 Server Management Processor with Oracle® ILOM SP v5 (ARM v11) without PAA
- Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with AMD® EPYC® 7551 with PAA
- Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with AMD® EPYC® 7551 without PAA
- Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with Intel® Xeon® Silver 4114 with PAA
- Oracle® Linux 7.6 64 bit running on Oracle® X7-2 Server with Intel® Xeon® Silver 4114 without PAA
- Oracle® Linux 7.8 64 bit running on Marvell MIPS III 64-bit (T73) without PAA
- Oracle® Linux 7.8 64 bit running on Marvell ThunderX2 (ARM 8.1) without PAA
- Oracle® Solaris 11.4 running on Oracle S7-2L with an Oracle® SPARC S7 without PAA
- Oracle® Solaris 11.4 running on Oracle S7-2L with Oracle® SPARC S7 with PAA
- Oracle® Solaris 11.4 running on Oracle X5-2 server with Intel Xeon E5-2600 with PAA
- Oracle® Solaris 11.4 running on Oracle X5-2 server with Intel Xeon E5-2600 without PAA
- Oracle® Solaris 11.4 running on Oracle® SPARC T8 server with SPARC M8 with PAA
- Oracle® Solaris 11.4 running on Oracle® SPARC T8 server with SPARC M8 without PAA
- Oracle® Solaris 11.4 running on Oracle® X8-2 server with Intel Xeon Gold 5200 series with PAA
- Oracle® Solaris 11.4 running on Oracle® X8-2 server with Intel Xeon Gold 5200 series without PAA
- Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-2 with Intel Xeon E5 with PAA
- Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-2 with Intel Xeon E5 without PAA
- Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-4 with Intel Xeon E7
- Oracle® ZFS Storage OS 8.8 running on Oracle® ZFS Storage ZS5-4 with Intel Xeon E7 without PAA
- Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD® EPYC® 7742 with PAA
- Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with AMD® EPYC® 7742 without PAA
- Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel® Xeon® CPU ES-2695 v4 with PAA
- Windows Server 2019 on VMWare ESXi 6.0 running on Oracle Server E2-2C with Intel® Xeon® CPU ES-2695 v4 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2018-12-03 | Initial | Acumen Security |
| 2019-07-18 | Update | Acumen Security |
| 2020-04-29 | Update | Acumen Security |
| 2020-10-23 | Update | Acumen Security |
| 2021-03-02 | Update | Acumen Security |
| 2021-05-17 | Update | Acumen Security |
| 2021-08-03 | Update | Acumen Security |
| 2022-07-29 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2018-12-03, 2019-07-18, 2020-04-29, 2020-10-23, 2021-03-02, 2021-05-17, 2021-08-03, 2022-07-29