808bits

SUSE Linux Enterprise OpenSSL Cryptographic Module

FIPS 140-3 certificate #4725 · SUSE, LLC · data as of 2026-10-09

SUSE Linux Enterprise OpenSSL Cryptographic Module, from SUSE, LLC, holds FIPS 140-3 certificate #4725 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5436. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in the approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy

Certificate

Certificate number4725
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorSUSE, LLC · website
Software versions4.4

Module description

Quoted from the NIST CMVP entry for this certificate.

OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (50)

AlgorithmCAVP certificates
AES-CBCA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-CCMA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-CFB1A3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-CFB128A3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-CFB8A3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-CMACA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-CTRA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-ECBA3136, A3137, A3138, A3140, A3141, A3142, A3143, A3149, A3150, A3154, A3157, A3158, A3160, A3162, A3163, A3165, A3166, A3167, A3169, A3170, A3171, A3172
AES-GCMA3151, A3152, A3153, A3155, A3159, A3176, A3177, A3178, A3179, A3180, A3181, A3182, A3183, A3184, A3190, A3194, A3195, A3196, A3197, A3198, A3199, A3200, A3201, A3204, A3205, A3206
AES-KWA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-KWPA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-OFBA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
AES-XTS Testing Revision 2.0A3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
Counter DRBGA3136, A3137, A3138, A3150, A3154, A3158, A3160, A3162, A3163, A3165, A3166, A3167
ECDSA KeyGen (FIPS186-4)A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
ECDSA KeyVer (FIPS186-4)A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
ECDSA SigGen (FIPS186-4)A3144, A3145, A3146, A3147, A3148, A3156, A3173, A3174, A3175, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
ECDSA SigVer (FIPS186-4)A3144, A3145, A3146, A3147, A3148, A3156, A3173, A3174, A3175, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
HMAC-SHA-1A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
HMAC-SHA2-224A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
HMAC-SHA2-256A3147, A3156, A3161, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
HMAC-SHA2-384A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
HMAC-SHA2-512A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
HMAC-SHA3-224A3144, A3145, A3146, A3148, A3173, A3174, A3175
HMAC-SHA3-256A3144, A3145, A3146, A3148, A3173, A3174, A3175
HMAC-SHA3-384A3144, A3145, A3146, A3148, A3173, A3174, A3175
HMAC-SHA3-512A3144, A3145, A3146, A3148, A3173, A3174, A3175
KAS-ECC-SSC Sp800-56Ar3A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
KAS-FFC-SSC Sp800-56Ar3A3207, A3211
KDA HKDF Sp800-56Cr1A3139, A3168
KDF SSHA3140, A3141, A3142, A3143, A3149, A3157, A3169, A3170, A3171, A3172
KDF TLSA3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
PBKDFA3144, A3145, A3146, A3147, A3148, A3156, A3173, A3174, A3175, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
RSA KeyGen (FIPS186-4)A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
RSA SigGen (FIPS186-4)A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
RSA SigVer (FIPS186-4)A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
Safe Primes Key GenerationA3207, A3211
Safe Primes Key VerificationA3207, A3211
SHA-1A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
SHA2-224A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
SHA2-256A3147, A3156, A3161, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
SHA2-384A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
SHA2-512A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210
SHA3-224A3144, A3145, A3146, A3148, A3173, A3174, A3175
SHA3-256A3144, A3145, A3146, A3148, A3173, A3174, A3175
SHA3-384A3144, A3145, A3146, A3148, A3173, A3174, A3175
SHA3-512A3144, A3145, A3146, A3148, A3173, A3174, A3175
SHAKE-128A3144, A3145, A3146, A3148, A3173, A3174, A3175
SHAKE-256A3144, A3145, A3146, A3148, A3173, A3174, A3175
TLS v1.2 KDF RFC7627A3147, A3156, A3185, A3186, A3187, A3188, A3193, A3202, A3203, A3210

Tested configurations

  • SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 with PAA
  • SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 without PAA
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 with PAA
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 without PAA
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 with PAA
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 without PAA
  • SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 with PAI
  • SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 without PAI
  • SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R with PAA
  • SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R without PAA

Validation history

DateTypeLab
2024-07-12Initialatsec information security corporation
2025-12-19Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-12

Source documents