SUSE Linux Enterprise Kernel Crypto API Cryptographic Module
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy
Certificate
| Certificate number | 4727 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-07-14 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | SUSE, LLC · website |
| Software versions | 3.3[1] and 3.4[2] |
Module description
SUSE Linux Enterprise Kernel Crypto API Module provides cryptographic services to the Linux operating system kernel.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A3045 |
| AES-CBC | A3053 |
| AES-CBC | A3061 |
| AES-CBC | A3064 |
| AES-CBC | A3075 |
| AES-CBC | A3078 |
| AES-CBC | A3090 |
| AES-CBC | A3098 |
| AES-CBC | A3106 |
| AES-CBC | A3109 |
| AES-CBC | A3125 |
| AES-CBC | A3128 |
| AES-CBC | A3131 |
| AES-CBC-CS3 | A3050 |
| AES-CBC-CS3 | A3059 |
| AES-CBC-CS3 | A3070 |
| AES-CBC-CS3 | A3084 |
| AES-CBC-CS3 | A3095 |
| AES-CBC-CS3 | A3104 |
| AES-CBC-CS3 | A3115 |
| AES-CBC-CS3 | A3128 |
| AES-CCM | A3045 |
| AES-CCM | A3053 |
| AES-CCM | A3064 |
| AES-CCM | A3075 |
| AES-CCM | A3078 |
| AES-CCM | A3090 |
| AES-CCM | A3098 |
| AES-CCM | A3109 |
| AES-CCM | A3125 |
| AES-CCM | A3128 |
| AES-CFB128 | A3048 |
| AES-CFB128 | A3057 |
| AES-CFB128 | A3068 |
| AES-CFB128 | A3082 |
| AES-CFB128 | A3093 |
| AES-CFB128 | A3102 |
| AES-CFB128 | A3113 |
| AES-CFB128 | A3128 |
| AES-CMAC | A3045 |
| AES-CMAC | A3053 |
| AES-CMAC | A3064 |
| AES-CMAC | A3075 |
| AES-CMAC | A3078 |
| AES-CMAC | A3090 |
| AES-CMAC | A3098 |
| AES-CMAC | A3109 |
| AES-CMAC | A3125 |
| AES-CMAC | A3128 |
| AES-CTR | A3045 |
| AES-CTR | A3053 |
| AES-CTR | A3061 |
| AES-CTR | A3064 |
| AES-CTR | A3075 |
| AES-CTR | A3078 |
| AES-CTR | A3090 |
| AES-CTR | A3098 |
| AES-CTR | A3106 |
| AES-CTR | A3109 |
| AES-CTR | A3125 |
| AES-CTR | A3128 |
| AES-CTR | A3131 |
| AES-ECB | A3043 |
| AES-ECB | A3044 |
| AES-ECB | A3045 |
| AES-ECB | A3051 |
| AES-ECB | A3052 |
| AES-ECB | A3053 |
| AES-ECB | A3055 |
| AES-ECB | A3056 |
| AES-ECB | A3061 |
| AES-ECB | A3062 |
| AES-ECB | A3063 |
| AES-ECB | A3064 |
| AES-ECB | A3065 |
| AES-ECB | A3066 |
| AES-ECB | A3075 |
| AES-ECB | A3076 |
| AES-ECB | A3077 |
| AES-ECB | A3078 |
| AES-ECB | A3079 |
| AES-ECB | A3080 |
| AES-ECB | A3088 |
| AES-ECB | A3089 |
| AES-ECB | A3090 |
| AES-ECB | A3096 |
| AES-ECB | A3097 |
| AES-ECB | A3098 |
| AES-ECB | A3100 |
| AES-ECB | A3101 |
| AES-ECB | A3106 |
| AES-ECB | A3107 |
| AES-ECB | A3108 |
| AES-ECB | A3109 |
| AES-ECB | A3110 |
| AES-ECB | A3111 |
| AES-ECB | A3125 |
| AES-ECB | A3128 |
| AES-ECB | A3129 |
| AES-ECB | A3130 |
| AES-ECB | A3131 |
| AES-GCM | A3045 |
| AES-GCM | A3051 |
| AES-GCM | A3052 |
| AES-GCM | A3053 |
| AES-GCM | A3055 |
| AES-GCM | A3056 |
| AES-GCM | A3061 |
| AES-GCM | A3062 |
| AES-GCM | A3063 |
| AES-GCM | A3064 |
| AES-GCM | A3065 |
| AES-GCM | A3066 |
| AES-GCM | A3075 |
| AES-GCM | A3076 |
| AES-GCM | A3077 |
| AES-GCM | A3078 |
| AES-GCM | A3079 |
| AES-GCM | A3080 |
| AES-GCM | A3090 |
| AES-GCM | A3096 |
| AES-GCM | A3097 |
| AES-GCM | A3098 |
| AES-GCM | A3100 |
| AES-GCM | A3101 |
| AES-GCM | A3106 |
| AES-GCM | A3107 |
| AES-GCM | A3108 |
| AES-GCM | A3109 |
| AES-GCM | A3110 |
| AES-GCM | A3111 |
| AES-GCM | A3128 |
| AES-GCM | A3129 |
| AES-GCM | A3130 |
| AES-KW | A3046 |
| AES-KW | A3054 |
| AES-KW | A3067 |
| AES-KW | A3081 |
| AES-KW | A3091 |
| AES-KW | A3099 |
| AES-KW | A3112 |
| AES-KW | A3128 |
| AES-OFB | A3049 |
| AES-OFB | A3058 |
| AES-OFB | A3069 |
| AES-OFB | A3083 |
| AES-OFB | A3094 |
| AES-OFB | A3103 |
| AES-OFB | A3114 |
| AES-OFB | A3128 |
| AES-XTS Testing Revision 2.0 | A3045 |
| AES-XTS Testing Revision 2.0 | A3053 |
| AES-XTS Testing Revision 2.0 | A3061 |
| AES-XTS Testing Revision 2.0 | A3064 |
| AES-XTS Testing Revision 2.0 | A3075 |
| AES-XTS Testing Revision 2.0 | A3078 |
| AES-XTS Testing Revision 2.0 | A3090 |
| AES-XTS Testing Revision 2.0 | A3098 |
| AES-XTS Testing Revision 2.0 | A3106 |
| AES-XTS Testing Revision 2.0 | A3109 |
| AES-XTS Testing Revision 2.0 | A3125 |
| AES-XTS Testing Revision 2.0 | A3128 |
| AES-XTS Testing Revision 2.0 | A3131 |
| Counter DRBG | A3043 |
| Counter DRBG | A3044 |
| Counter DRBG | A3045 |
| Counter DRBG | A3051 |
| Counter DRBG | A3052 |
| Counter DRBG | A3053 |
| Counter DRBG | A3055 |
| Counter DRBG | A3056 |
| Counter DRBG | A3061 |
| Counter DRBG | A3062 |
| Counter DRBG | A3063 |
| Counter DRBG | A3064 |
| Counter DRBG | A3065 |
| Counter DRBG | A3066 |
| Counter DRBG | A3075 |
| Counter DRBG | A3076 |
| Counter DRBG | A3077 |
| Counter DRBG | A3078 |
| Counter DRBG | A3079 |
| Counter DRBG | A3080 |
| Counter DRBG | A3088 |
| Counter DRBG | A3089 |
| Counter DRBG | A3090 |
| Counter DRBG | A3096 |
| Counter DRBG | A3097 |
| Counter DRBG | A3098 |
| Counter DRBG | A3100 |
| Counter DRBG | A3101 |
| Counter DRBG | A3106 |
| Counter DRBG | A3107 |
| Counter DRBG | A3108 |
| Counter DRBG | A3109 |
| Counter DRBG | A3110 |
| Counter DRBG | A3111 |
| Counter DRBG | A3128 |
| Counter DRBG | A3129 |
| Counter DRBG | A3130 |
| ECDSA KeyGen (FIPS186-4) | A3044 |
| ECDSA KeyGen (FIPS186-4) | A3089 |
| Hash DRBG | A3043 |
| Hash DRBG | A3044 |
| Hash DRBG | A3045 |
| Hash DRBG | A3051 |
| Hash DRBG | A3052 |
| Hash DRBG | A3053 |
| Hash DRBG | A3055 |
| Hash DRBG | A3056 |
| Hash DRBG | A3061 |
| Hash DRBG | A3062 |
| Hash DRBG | A3063 |
| Hash DRBG | A3064 |
| Hash DRBG | A3065 |
| Hash DRBG | A3066 |
| Hash DRBG | A3071 |
| Hash DRBG | A3072 |
| Hash DRBG | A3073 |
| Hash DRBG | A3076 |
| Hash DRBG | A3077 |
| Hash DRBG | A3078 |
| Hash DRBG | A3079 |
| Hash DRBG | A3080 |
| Hash DRBG | A3088 |
| Hash DRBG | A3089 |
| Hash DRBG | A3090 |
| Hash DRBG | A3096 |
| Hash DRBG | A3097 |
| Hash DRBG | A3098 |
| Hash DRBG | A3100 |
| Hash DRBG | A3101 |
| Hash DRBG | A3106 |
| Hash DRBG | A3107 |
| Hash DRBG | A3108 |
| Hash DRBG | A3109 |
| Hash DRBG | A3110 |
| Hash DRBG | A3111 |
| Hash DRBG | A3116 |
| Hash DRBG | A3117 |
| Hash DRBG | A3118 |
| Hash DRBG | A3129 |
| Hash DRBG | A3130 |
| HMAC DRBG | A3043 |
| HMAC DRBG | A3044 |
| HMAC DRBG | A3045 |
| HMAC DRBG | A3051 |
| HMAC DRBG | A3052 |
| HMAC DRBG | A3053 |
| HMAC DRBG | A3055 |
| HMAC DRBG | A3056 |
| HMAC DRBG | A3061 |
| HMAC DRBG | A3062 |
| HMAC DRBG | A3063 |
| HMAC DRBG | A3064 |
| HMAC DRBG | A3065 |
| HMAC DRBG | A3066 |
| HMAC DRBG | A3071 |
| HMAC DRBG | A3072 |
| HMAC DRBG | A3073 |
| HMAC DRBG | A3076 |
| HMAC DRBG | A3077 |
| HMAC DRBG | A3078 |
| HMAC DRBG | A3079 |
| HMAC DRBG | A3080 |
| HMAC DRBG | A3088 |
| HMAC DRBG | A3089 |
| HMAC DRBG | A3090 |
| HMAC DRBG | A3096 |
| HMAC DRBG | A3097 |
| HMAC DRBG | A3098 |
| HMAC DRBG | A3100 |
| HMAC DRBG | A3101 |
| HMAC DRBG | A3106 |
| HMAC DRBG | A3107 |
| HMAC DRBG | A3108 |
| HMAC DRBG | A3109 |
| HMAC DRBG | A3110 |
| HMAC DRBG | A3111 |
| HMAC DRBG | A3116 |
| HMAC DRBG | A3117 |
| HMAC DRBG | A3118 |
| HMAC DRBG | A3129 |
| HMAC DRBG | A3130 |
| HMAC-SHA-1 | A3043 |
| HMAC-SHA-1 | A3044 |
| HMAC-SHA-1 | A3045 |
| HMAC-SHA-1 | A3071 |
| HMAC-SHA-1 | A3072 |
| HMAC-SHA-1 | A3073 |
| HMAC-SHA-1 | A3074 |
| HMAC-SHA-1 | A3078 |
| HMAC-SHA-1 | A3086 |
| HMAC-SHA-1 | A3087 |
| HMAC-SHA-1 | A3088 |
| HMAC-SHA-1 | A3089 |
| HMAC-SHA-1 | A3090 |
| HMAC-SHA-1 | A3116 |
| HMAC-SHA-1 | A3117 |
| HMAC-SHA-1 | A3118 |
| HMAC-SHA-1 | A3119 |
| HMAC-SHA-1 | A3125 |
| HMAC-SHA2-224 | A3043 |
| HMAC-SHA2-224 | A3044 |
| HMAC-SHA2-224 | A3045 |
| HMAC-SHA2-224 | A3071 |
| HMAC-SHA2-224 | A3072 |
| HMAC-SHA2-224 | A3073 |
| HMAC-SHA2-224 | A3074 |
| HMAC-SHA2-224 | A3078 |
| HMAC-SHA2-224 | A3087 |
| HMAC-SHA2-224 | A3088 |
| HMAC-SHA2-224 | A3089 |
| HMAC-SHA2-224 | A3090 |
| HMAC-SHA2-224 | A3116 |
| HMAC-SHA2-224 | A3117 |
| HMAC-SHA2-224 | A3118 |
| HMAC-SHA2-224 | A3119 |
| HMAC-SHA2-224 | A3125 |
| HMAC-SHA2-224 | A3131 |
| HMAC-SHA2-224 | A3132 |
| HMAC-SHA2-256 | A3043 |
| HMAC-SHA2-256 | A3044 |
| HMAC-SHA2-256 | A3045 |
| HMAC-SHA2-256 | A3071 |
| HMAC-SHA2-256 | A3072 |
| HMAC-SHA2-256 | A3073 |
| HMAC-SHA2-256 | A3074 |
| HMAC-SHA2-256 | A3078 |
| HMAC-SHA2-256 | A3087 |
| HMAC-SHA2-256 | A3088 |
| HMAC-SHA2-256 | A3089 |
| HMAC-SHA2-256 | A3090 |
| HMAC-SHA2-256 | A3116 |
| HMAC-SHA2-256 | A3117 |
| HMAC-SHA2-256 | A3118 |
| HMAC-SHA2-256 | A3119 |
| HMAC-SHA2-256 | A3125 |
| HMAC-SHA2-256 | A3131 |
| HMAC-SHA2-256 | A3132 |
| HMAC-SHA2-384 | A3043 |
| HMAC-SHA2-384 | A3044 |
| HMAC-SHA2-384 | A3045 |
| HMAC-SHA2-384 | A3071 |
| HMAC-SHA2-384 | A3072 |
| HMAC-SHA2-384 | A3073 |
| HMAC-SHA2-384 | A3078 |
| HMAC-SHA2-384 | A3088 |
| HMAC-SHA2-384 | A3089 |
| HMAC-SHA2-384 | A3090 |
| HMAC-SHA2-384 | A3116 |
| HMAC-SHA2-384 | A3117 |
| HMAC-SHA2-384 | A3118 |
| HMAC-SHA2-384 | A3127 |
| HMAC-SHA2-384 | A3132 |
| HMAC-SHA2-512 | A3043 |
| HMAC-SHA2-512 | A3044 |
| HMAC-SHA2-512 | A3045 |
| HMAC-SHA2-512 | A3071 |
| HMAC-SHA2-512 | A3072 |
| HMAC-SHA2-512 | A3073 |
| HMAC-SHA2-512 | A3078 |
| HMAC-SHA2-512 | A3088 |
| HMAC-SHA2-512 | A3089 |
| HMAC-SHA2-512 | A3090 |
| HMAC-SHA2-512 | A3116 |
| HMAC-SHA2-512 | A3117 |
| HMAC-SHA2-512 | A3118 |
| HMAC-SHA2-512 | A3127 |
| HMAC-SHA2-512 | A3132 |
| HMAC-SHA3-224 | A3047 |
| HMAC-SHA3-224 | A3085 |
| HMAC-SHA3-224 | A3092 |
| HMAC-SHA3-224 | A3126 |
| HMAC-SHA3-256 | A3047 |
| HMAC-SHA3-256 | A3085 |
| HMAC-SHA3-256 | A3092 |
| HMAC-SHA3-256 | A3126 |
| HMAC-SHA3-384 | A3047 |
| HMAC-SHA3-384 | A3085 |
| HMAC-SHA3-384 | A3092 |
| HMAC-SHA3-384 | A3126 |
| HMAC-SHA3-512 | A3047 |
| HMAC-SHA3-512 | A3085 |
| HMAC-SHA3-512 | A3092 |
| HMAC-SHA3-512 | A3126 |
| KAS-ECC-SSC Sp800-56Ar3 | A3044 |
| KAS-ECC-SSC Sp800-56Ar3 | A3089 |
| KAS-FFC-SSC Sp800-56Ar3 | A3043 |
| KAS-FFC-SSC Sp800-56Ar3 | A3088 |
| RSA SigVer (FIPS186-4) | A3045 |
| RSA SigVer (FIPS186-4) | A3071 |
| RSA SigVer (FIPS186-4) | A3072 |
| RSA SigVer (FIPS186-4) | A3073 |
| RSA SigVer (FIPS186-4) | A3078 |
| RSA SigVer (FIPS186-4) | A3090 |
| RSA SigVer (FIPS186-4) | A3116 |
| RSA SigVer (FIPS186-4) | A3117 |
| RSA SigVer (FIPS186-4) | A3118 |
| Safe Primes Key Generation | A3043 |
| Safe Primes Key Generation | A3088 |
| SHA-1 | A3043 |
| SHA-1 | A3044 |
| SHA-1 | A3045 |
| SHA-1 | A3071 |
| SHA-1 | A3072 |
| SHA-1 | A3073 |
| SHA-1 | A3074 |
| SHA-1 | A3078 |
| SHA-1 | A3086 |
| SHA-1 | A3087 |
| SHA-1 | A3088 |
| SHA-1 | A3089 |
| SHA-1 | A3090 |
| SHA-1 | A3116 |
| SHA-1 | A3117 |
| SHA-1 | A3118 |
| SHA-1 | A3119 |
| SHA-1 | A3125 |
| SHA2-224 | A3043 |
| SHA2-224 | A3044 |
| SHA2-224 | A3045 |
| SHA2-224 | A3071 |
| SHA2-224 | A3072 |
| SHA2-224 | A3073 |
| SHA2-224 | A3074 |
| SHA2-224 | A3078 |
| SHA2-224 | A3087 |
| SHA2-224 | A3088 |
| SHA2-224 | A3089 |
| SHA2-224 | A3090 |
| SHA2-224 | A3116 |
| SHA2-224 | A3117 |
| SHA2-224 | A3118 |
| SHA2-224 | A3119 |
| SHA2-224 | A3125 |
| SHA2-224 | A3131 |
| SHA2-224 | A3132 |
| SHA2-256 | A3043 |
| SHA2-256 | A3044 |
| SHA2-256 | A3045 |
| SHA2-256 | A3071 |
| SHA2-256 | A3072 |
| SHA2-256 | A3073 |
| SHA2-256 | A3074 |
| SHA2-256 | A3078 |
| SHA2-256 | A3087 |
| SHA2-256 | A3088 |
| SHA2-256 | A3089 |
| SHA2-256 | A3090 |
| SHA2-256 | A3116 |
| SHA2-256 | A3117 |
| SHA2-256 | A3118 |
| SHA2-256 | A3119 |
| SHA2-256 | A3125 |
| SHA2-256 | A3131 |
| SHA2-256 | A3132 |
| SHA2-384 | A3043 |
| SHA2-384 | A3044 |
| SHA2-384 | A3045 |
| SHA2-384 | A3071 |
| SHA2-384 | A3072 |
| SHA2-384 | A3073 |
| SHA2-384 | A3078 |
| SHA2-384 | A3088 |
| SHA2-384 | A3089 |
| SHA2-384 | A3090 |
| SHA2-384 | A3116 |
| SHA2-384 | A3117 |
| SHA2-384 | A3118 |
| SHA2-384 | A3127 |
| SHA2-384 | A3132 |
| SHA2-512 | A3043 |
| SHA2-512 | A3044 |
| SHA2-512 | A3045 |
| SHA2-512 | A3071 |
| SHA2-512 | A3072 |
| SHA2-512 | A3073 |
| SHA2-512 | A3078 |
| SHA2-512 | A3088 |
| SHA2-512 | A3089 |
| SHA2-512 | A3090 |
| SHA2-512 | A3116 |
| SHA2-512 | A3117 |
| SHA2-512 | A3118 |
| SHA2-512 | A3127 |
| SHA2-512 | A3132 |
| SHA3-224 | A3047 |
| SHA3-224 | A3085 |
| SHA3-224 | A3092 |
| SHA3-224 | A3126 |
| SHA3-256 | A3047 |
| SHA3-256 | A3085 |
| SHA3-256 | A3092 |
| SHA3-256 | A3126 |
| SHA3-384 | A3047 |
| SHA3-384 | A3085 |
| SHA3-384 | A3092 |
| SHA3-384 | A3126 |
| SHA3-512 | A3047 |
| SHA3-512 | A3085 |
| SHA3-512 | A3092 |
| SHA3-512 | A3126 |
Tested configurations
- SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 with PAA[1]
- SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 without PAA[1]
- SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 with PAA[1]
- SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 without PAA[1]
- SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 with PAA[1][2]
- SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 without PAA[1][2]
- SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 with PAI[1]
- SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 without PAI[1]
- SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R with PAA[1][2]
- SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R without PAA[1][2]
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-07-15 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-07-15