Oracle Linux Unbreakable Enterprise Kernel (UEK 5) Cryptographic Module
Oracle Linux Unbreakable Enterprise Kernel (UEK 5) Cryptographic Module, from Oracle Corporation, holds FIPS 140-2 certificate #3893 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode with module Oracle Linux 7 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #4586 operating in FIPS mode. The module generates random strings whose strengths are modified by available entropy.
Certificate
| Certificate number | 3893 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | R7-5.0.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Oracle Linux Unbreakable Enterprise Kernel Cryptographic Module provides cryptographic services to applications requiring Kernel level cryptography via the Kernel Crypto API.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
- Mitigation of Other Attacks: N/A
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| AES | C1733, C1734, C1735, C1736 |
| DRBG | C1733, C1734, C1735, C1738, C1739, C1740, C1744 |
| HMAC | C786, C1738, C1739, C1740, C1744 |
| KTS | |
| RSA | C1738, C1739, C1740, C1744 |
| SHS | C1738, C1739, C1740, C1744 |
| Triple-DES | C1737, C1741 |
Allowed algorithms
NDRNG
Tested configurations
- Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with AMD® EPYC® 7551 with PAA
- Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with AMD® EPYC® 7551 without PAA (single-user mode)
- Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with Intel® Xeon® Silver 4114 with PAA
- Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with Intel® Xeon® Silver 4114 without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2021-04-15 | Initial | Acumen Security |
| 2022-01-30 | Update | Acumen Security |
| 2023-09-28 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2021-04-15, 2022-01-30, 2023-09-28