Oracle Linux 6 Kernel Crypto API Cryptographic Module
Caveat: When operated in FIPS mode with module Oracle Linux NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3111 operating in FIPS mode. The module generates random strings whose strengths are modified by available entropy
Certificate
| Certificate number | 3421 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | R6-1.0.0 |
Module description
The Oracle Linux 6 Kernel Crypto API Cryptographic Module provides general-purpose cryptographic services to the remainder of the Linux kernel.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 5865, 5866, 5867, 5868, 5869, 5870, 5871, 5872, 5873, 5874, 5875, 5876, 5877, 5878, C17, C18 |
| DRBG | 2438, 2439, 2440, 2441, 2442, 2453, 2455, 2456, 2457, 2458, 2459, 2460, 2461, C17 |
| DSA | 1487, 1488, 1489, 1490, 1491, 1492, 1493, 1494 |
| HMAC | 3184, 3628, 3871, 3873, 3874, 3875, 3876, 3877, 3878, 3879 |
| SHS | 4647, 4649, 4650, 4651, 4652, 4653, 4654, 4655 |
| Triple-DES | 2864, 2865 |
Allowed algorithms
NDRNG
Tested configurations
- Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 with PAA
- Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 without PAA
- Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 with PAA
- Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2019-03-28 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2019-03-28