808bits

Oracle OpenSSL FIPS Provider

FIPS 140-2 certificate #4506 · Oracle Corporation · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.

Certificate

Certificate number4506
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOracle Corporation · website
Software versions3.0.15

Module description

The Oracle OpenSSL FIPS Provider is a software library written in C programming language for use by Oracle applications that require FIPS 140-2 validated cryptography.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
AESA6065
CKGvendor affirmed
CVLA6065
DRBGA6065
DSAA6065
ECDSAA6065
HMACA6065
KAS-RSA-SSCA6065
KAS-SSCA6065
KBKDFA6065
KDAA6065
KMACA6065
KTS
KTS
KTS
KTS-RSA
PBKDFA6065
RSAA6065
SHA-3A6065
SHSA6065
Triple-DESA6065

Tested configurations

  • Oracle ILOM OS v3.0 running on Emulex Pilot-4 Orion mainboard with Oracle ILOM SP v4 ARM v7
  • Oracle ILOM OS v5.0 running on AST2520 Server Management Processor with Oracle ILOM SP v5 with ARM v11
  • Oracle ILOM OS v5.1 running on AST2600 Server Management Processor with Oracle ILOM SP v6 with ARM v7
  • Oracle Linux 8.9 64-bit running on Oracle A1-2C Server with ARMv8 with PAA
  • Oracle Linux 8.9 64-bit running on Oracle A1-2C Server with ARMv8 without PAA
  • Oracle Linux 8.9 64-bit running on Oracle X9-2C Server with Intel XEON Platinum 8358 with PAA
  • Oracle Linux 8.9 64-bit running on Oracle X9-2C Server with Intel XEON Platinum 8358 without PAA
  • Oracle Solaris 11.4 64-bit running on Oracle X9 Server with Intel XEON Gold 6354 with PAA
  • Oracle Solaris 11.4 64-bit running on Oracle X9 Server with Intel XEON Gold 6354 without PAA
  • Oracle Solaris 11.4 64-bit running on SPARC T8 with SPARC M8 with PAA
  • Oracle Solaris 11.4 64-bit running on SPARC T8 with SPARC M8 without PAA
  • Windows Server 2019 running on Oracle X9-2C Server with Intel XEON Platinum 8358 with PAA
  • Windows Server 2019 running on Oracle X9-2C Server with Intel XEON Platinum 8358 without PAA
  • Windows Server 2022 running on Oracle E4-2C server with AMD EPYC 7J13 with PAA
  • Windows Server 2022 running on Oracle E4-2C server with AMD EPYC 7J13 without PAA (single-user mode)

Validation history

DateTypeLab
2023-05-03InitialAcumen Security
2025-03-26UpdateLightship Security, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2023-05-03, 2025-03-26

Source documents