808bits

Red Hat Enterprise Linux 8 libgcrypt Cryptographic Module

FIPS 140-2 certificate #4397 · Red Hat®, Inc. · data as of 2026-09-12

Red Hat Enterprise Linux 8 libgcrypt Cryptographic Module, from Red Hat®, Inc., holds FIPS 140-2 certificate #4397 at overall level 1. The validation is active, with a sunset date of 2026-09-21. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2026-09-21, 8 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode and installed, initialized and configured as specified in Section 10.1 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy applies.

Certificate

Certificate number4397
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorRed Hat®, Inc. · website
Software versionsrhel8.20200615

Module description

Quoted from the NIST CMVP entry for this certificate.

The libgcrypt FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the libgcrypt library delivered with RHEL 8.

Security level exceptions

  • Physical Security: N/A

Approved algorithms (12)

AlgorithmCAVP certificates
AESA1255, A1256, A1258, A1259
DRBGA1255, A1256, A1257, A1258, A1259
DSAA1255, A1256, A1257, A1258, A1259
ECDSAA1255, A1256, A1257, A1258, A1259
ENT
HMACA1254, A1255, A1256, A1257, A1258, A1259
KTS
PBKDFA1255, A1256, A1257, A1258, A1259
RSAA1255, A1256, A1257, A1258, A1259
SHA-3A1257, A1258, A1259
SHSA1254, A1255, A1256, A1257, A1258, A1259
Triple-DESA1258

Allowed algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Red Hat Enterprise Linux 8 running on Dell PowerEdge R440 with an Intel(R) Xeon(R) Silver 4216 with PAA
  • Red Hat Enterprise Linux 8 running on Dell PowerEdge R440 with an Intel(R) Xeon(R) Silver 4216 without PAA (single-user mode)

Validation history

DateTypeLab
2022-12-20Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2022-12-20

Source documents