808bits

Oracle Linux 7 Libreswan Cryptographic Module

FIPS 140-2 certificate #4266 · Oracle Corporation · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode with Oracle Linux 7 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #4171 operating in FIPS mode and Oracle Linux OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #4170 operating in FIPS mode

Certificate

Certificate number4266
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOracle Corporation · website
Software versionsR7-7.8.0

Module description

The Oracle Linux 7 Libreswan Cryptographic Module is a framework for providing cryptographic services to other network entities implementing the IKEv1 and IKEv2 protocols.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA1097, A1179, A2580
CVLA1903
DRBGA1179
ECDSAA1179
ENT
HMACA1179, A1224, A1225, A1226, A1227, A2395
KAS
KAS-SSCA1179
RSAA1179
SHSA1179, A1224, A1225, A1226, A1227, A2395
Triple-DESA1179

Tested configurations

  • Oracle Linux 7.8 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 7551 with PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 7551 without PAA (single-user mode)
  • Oracle Linux 7.8 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA

Validation history

DateTypeLab
2022-07-18Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-07-18

Source documents