Oracle OpenSSL FIPS Provider
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Certificate
| Certificate number | 4506 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | 3.0.15 |
Module description
The Oracle OpenSSL FIPS Provider is a software library written in C programming language for use by Oracle applications that require FIPS 140-2 validated cryptography.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | A6065 |
| CKG | vendor affirmed |
| CVL | A6065 |
| DRBG | A6065 |
| DSA | A6065 |
| ECDSA | A6065 |
| HMAC | A6065 |
| KAS-RSA-SSC | A6065 |
| KAS-SSC | A6065 |
| KBKDF | A6065 |
| KDA | A6065 |
| KMAC | A6065 |
| KTS | |
| KTS | |
| KTS | |
| KTS-RSA | |
| PBKDF | A6065 |
| RSA | A6065 |
| SHA-3 | A6065 |
| SHS | A6065 |
| Triple-DES | A6065 |
Tested configurations
- Oracle ILOM OS v3.0 running on Emulex Pilot-4 Orion mainboard with Oracle ILOM SP v4 ARM v7
- Oracle ILOM OS v5.0 running on AST2520 Server Management Processor with Oracle ILOM SP v5 with ARM v11
- Oracle ILOM OS v5.1 running on AST2600 Server Management Processor with Oracle ILOM SP v6 with ARM v7
- Oracle Linux 8.9 64-bit running on Oracle A1-2C Server with ARMv8 with PAA
- Oracle Linux 8.9 64-bit running on Oracle A1-2C Server with ARMv8 without PAA
- Oracle Linux 8.9 64-bit running on Oracle X9-2C Server with Intel XEON Platinum 8358 with PAA
- Oracle Linux 8.9 64-bit running on Oracle X9-2C Server with Intel XEON Platinum 8358 without PAA
- Oracle Solaris 11.4 64-bit running on Oracle X9 Server with Intel XEON Gold 6354 with PAA
- Oracle Solaris 11.4 64-bit running on Oracle X9 Server with Intel XEON Gold 6354 without PAA
- Oracle Solaris 11.4 64-bit running on SPARC T8 with SPARC M8 with PAA
- Oracle Solaris 11.4 64-bit running on SPARC T8 with SPARC M8 without PAA
- Windows Server 2019 running on Oracle X9-2C Server with Intel XEON Platinum 8358 with PAA
- Windows Server 2019 running on Oracle X9-2C Server with Intel XEON Platinum 8358 without PAA
- Windows Server 2022 running on Oracle E4-2C server with AMD EPYC 7J13 with PAA
- Windows Server 2022 running on Oracle E4-2C server with AMD EPYC 7J13 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-05-03 | Initial | Acumen Security |
| 2025-03-26 | Update | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2023-05-03, 2025-03-26