Skyhigh Security OpenSSL Module
Skyhigh Security OpenSSL Module, from Skyhigh Security, holds FIPS 140-2 certificate #4439 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys
Certificate
| Certificate number | 4439 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Skyhigh Security · website |
| Software versions | 1.1.1v |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Skyhigh Security OpenSSL Module provides FIPS validated cryptographic services for Skyhigh Security products.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms (14)
| Algorithm | CAVP certificates |
|---|---|
| AES | A2366, A3012 |
| CKG | vendor affirmed |
| CVL | A2366 |
| DRBG | A2366 |
| DSA | A2366 |
| ECDSA | A2366 |
| HMAC | A2366 |
| KAS | |
| KAS-SSC | A2366 |
| KTS | |
| PBKDF | A2366 |
| RSA | A2366, A3012 |
| SHA-3 | A2366 |
| SHS | A2366 |
Allowed algorithms
RSA (key wrapping; key establishment methodology provides between112 and 256 bits of encryption strength)
Tested configurations
- macOS 12.2.1 running on Apple MacBook Pro with Intel ® Core ™ i7-7920HQ with PAA
- macOS 12.2.1 running on Apple MacBook Pro with Intel ® Core ™ i7-7920HQ without PAA
- McAfee Linux 3.8.0 on VMware ESXi 6.7.0 running on Intel (R) Taylor Pass 2U Xeon (R) DP Quad Board Server with Intel ® Xeon ® E5-2699 with PAA
- McAfee Linux 3.8.0 on Vmware ESXi 6.7.0 running on Intel ® Taylor Pass 2U Xeon® DP Quad Board Server with Intel ® Xeon ® E5-2699 without PAA
- SUSE Linux 15 SP3 Enterprise on Vmware ESXi 6.7.0 running on Intel ® Taylor Pass 2U Xeon ® DP Quad Board Server with Intel ® Xeon ® E5-2699 with PAA
- SUSE Linux 15 SP3 Enterprise on Vmware ESXi 6.7.0 running on Intel ® Taylor Pass 2U Xeon DP Quad Board Server with Intel ® Xeon ® E5-2699 without PAA (single-user mode)
- Ubuntu 20.04.03 LTS running on Dell PowerEdge R720xd with Intel ® Xeon ® E5-2620 with PAA
- Ubuntu 20.04.03 LTS running on Dell PowerEdge R720xd with Intel ® Xeon ® E5-2620 without PAA
- Windows 10 Enterprise 20H2 32-bit running on HP EliteBook 860 G3 with Intel ® Core ™ i5-6300U with PAA
- Windows 10 Enterprise 20H2 32-bit running on HP EliteBook 860 G3 with Intel ® Core ™ i5-6300U without PAA
- Windows Server 2019 H2 64-bit on Vmware ESXi 6.7.0 running on Intel ® Taylor Pass 2U Xeon ® DP Quad Board Server with Intel ® Xeon ® E5-2699 with PAA
- Windows Server 2019 H2 64-bit on Vmware ESXi 6.7.0 running on Intel ® Taylor Pass 2U Xeon ® DP Quad Board Server with Intel ® Xeon ® E5-2699 without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-02-15 | Initial | Gossamer Security Solutions |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2023-02-15