Oracle Linux 7 Kernel Crypto API Cryptographic Module
Caveat: When operated in FIPS mode with module Oracle Linux NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3143 operating in FIPS mode. The module generates random strings whose strengths are modified by available entropy
Certificate
| Certificate number | 3342 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | R7-2.0.0 |
Module description
The Oracle Linux 7 Kernel Crypto API Cryptographic Module provides general-purpose cryptographic services to the remainder of the Linux kernel.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 5407, 5408, 5409, 5410, 5411, 5420, 5421, 5422, 5488, 5489, 5490, 5491, 5492, 5493, 5494, 5495 |
| DRBG | 2103, 2104, 2105, 2106, 2107, 2116, 2128, 2163, 2164, 2165, 2166, 2174, 2175, 2363 |
| HMAC | 3077, 3582, 3583, 3590, 3602, 3646, 3661, 3662, 3767, 3816 |
| RSA | 2891, 2892, 2905, 2920, 2949, 2953, 2954, 3072 |
| SHS | 4341, 4342, 4352, 4363, 4405, 4417, 4418, 4591 |
| Triple-DES | 2729, 2763 |
Allowed algorithms
NDRNG
Tested configurations
- Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 with PAA
- Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 without PAA
- Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 with PAA
- Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2018-12-17 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2018-12-17