SUSE Linux Enterprise Server Kernel Crypto API Cryptographic Module
SUSE Linux Enterprise Server Kernel Crypto API Cryptographic Module, from SUSE, LLC, holds FIPS 140-2 certificate #4508 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode and installed, initialized and configured as specified in section 10.1 of the Security Policy
Certificate
| Certificate number | 4508 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | SUSE, LLC · website |
| Software versions | 3.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
SUSE Linux Enterprise Server Kernel Crypto API Module provides cryptographic services to the Linux operating system kernel.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms (8)
| Algorithm | CAVP certificates |
|---|---|
| AES | A53, A54, A55, A57, A58, A59, A60, A61, A63, A66, A68, A69, A70, A71, A72 |
| DRBG | A53, A57, A58, A60, A62, A66, A73, A74 |
| HMAC | A56, A62, A66, A73, A74 |
| KTS | |
| RSA | A62, A66, A73, A74 |
| SHA-3 | A56 |
| SHS | A62, A65, A66, A73, A74 |
| Triple-DES | A57, A66, A67 |
Allowed algorithms
NDRNG
Tested configurations
- SUSE Linux Enterprise Server 15 SP0 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
- SUSE Linux Enterprise Server 15 SP0 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2023-05-05 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2023-05-05