808bits

Oracle Linux Unbreakable Enterprise Kernel (UEK) Cryptographic Module

FIPS 140-2 certificate #3348 · Oracle Corporation · data as of 2026-08-28
Historical. Moved to historical list due to dependency on certificate #3111. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module Oracle Linux NSS Cryptographic Module validated to FIPS 140-2 under Certs. #3111[1] and #3143[2] operating in FIPS mode. The module generates random strings whose strengths are modified by available entropy

Certificate

Certificate number3348
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOracle Corporation · website
Software versionsR6-1.0.0[1] and R7-2.0.0[2]

Module description

Oracle Linux Unbreakable Enterprise Kernel Cryptographic Module provides general-purpose cryptographic services to the remainder of the Linux kernel.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES5398, 5400, 5401, 5402, 5403, 5423, 5424, 5425, 5614, 5615, 5617, 5618, 5619, 5620, 5621, 5622, 5623, 5624, 5625, 5626, 5627, 5628, 5629, 5630, 5631, 5632, 5633, 5634, 5635, 5636, 5637, 5638
DRBG2092, 2093, 2097, 2098, 2099, 2100, 2101, 2254, 2255, 2256, 2257, 2258, 2259, 2260, 2261, 2262, 2263, 2264, 2265, 2266, 2267, 2268, 2269, 2270, 2271, 2272, 2273, 2274
HMAC3077, 3184, 3574, 3575, 3577, 3578, 3628, 3744, 3745, 3746, 3747, 3748, 3749, 3750, 3751, 3752, 3753, 3754, 3755, 3767
RSA2886, 2887, 2888, 2889, 3021, 3022, 3023, 3024, 3025, 3026, 3027, 3028, 3029, 3030, 3031, 3032
SHS4330, 4331, 4336, 4337, 4510, 4511, 4512, 4513, 4514, 4515, 4516, 4517, 4518, 4519, 4520, 4521
Triple-DES2721, 2728, 2826, 2827, 2828, 2829, 2830, 2831

Allowed algorithms

NDRNG

Tested configurations

  • Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 with PAA [1]
  • Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 without PAA [1]
  • Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 with PAA [1]
  • Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 without PAA [1]
  • Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 with PAA [2]
  • Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 without PAA [2]
  • Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 with PAA [2]
  • Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 without PAA [2] (single-user mode)

Validation history

DateTypeLab
2019-01-02Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-01-02

Source documents