808bits

SUSE Linux Enterprise Kernel Crypto API Cryptographic Module

FIPS 140-3 certificate #4727 · SUSE, LLC · data as of 2026-10-09

SUSE Linux Enterprise Kernel Crypto API Cryptographic Module, from SUSE, LLC, holds FIPS 140-3 certificate #4727 at overall level 1. The validation is active, with a sunset date of 2029-07-14. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2029-07-14, 1008 days away.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy

Certificate

Certificate number4727
StandardFIPS 140-3
Statusactive
Sunset date2029-07-14
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorSUSE, LLC · website
Software versions3.3[1] and 3.4[2]

Module description

Quoted from the NIST CMVP entry for this certificate.

SUSE Linux Enterprise Kernel Crypto API Module provides cryptographic services to the Linux operating system kernel.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (37)

AlgorithmCAVP certificates
AES-CBCA3045, A3053, A3061, A3064, A3075, A3078, A3090, A3098, A3106, A3109, A3125, A3128, A3131
AES-CBC-CS3A3050, A3059, A3070, A3084, A3095, A3104, A3115, A3128
AES-CCMA3045, A3053, A3064, A3075, A3078, A3090, A3098, A3109, A3125, A3128
AES-CFB128A3048, A3057, A3068, A3082, A3093, A3102, A3113, A3128
AES-CMACA3045, A3053, A3064, A3075, A3078, A3090, A3098, A3109, A3125, A3128
AES-CTRA3045, A3053, A3061, A3064, A3075, A3078, A3090, A3098, A3106, A3109, A3125, A3128, A3131
AES-ECBA3043, A3044, A3045, A3051, A3052, A3053, A3055, A3056, A3061, A3062, A3063, A3064, A3065, A3066, A3075, A3076, A3077, A3078, A3079, A3080, A3088, A3089, A3090, A3096, A3097, A3098, A3100, A3101, A3106, A3107, A3108, A3109, A3110, A3111, A3125, A3128, A3129, A3130, A3131
AES-GCMA3045, A3051, A3052, A3053, A3055, A3056, A3061, A3062, A3063, A3064, A3065, A3066, A3075, A3076, A3077, A3078, A3079, A3080, A3090, A3096, A3097, A3098, A3100, A3101, A3106, A3107, A3108, A3109, A3110, A3111, A3128, A3129, A3130
AES-KWA3046, A3054, A3067, A3081, A3091, A3099, A3112, A3128
AES-OFBA3049, A3058, A3069, A3083, A3094, A3103, A3114, A3128
AES-XTS Testing Revision 2.0A3045, A3053, A3061, A3064, A3075, A3078, A3090, A3098, A3106, A3109, A3125, A3128, A3131
Counter DRBGA3043, A3044, A3045, A3051, A3052, A3053, A3055, A3056, A3061, A3062, A3063, A3064, A3065, A3066, A3075, A3076, A3077, A3078, A3079, A3080, A3088, A3089, A3090, A3096, A3097, A3098, A3100, A3101, A3106, A3107, A3108, A3109, A3110, A3111, A3128, A3129, A3130
ECDSA KeyGen (FIPS186-4)A3044, A3089
Hash DRBGA3043, A3044, A3045, A3051, A3052, A3053, A3055, A3056, A3061, A3062, A3063, A3064, A3065, A3066, A3071, A3072, A3073, A3076, A3077, A3078, A3079, A3080, A3088, A3089, A3090, A3096, A3097, A3098, A3100, A3101, A3106, A3107, A3108, A3109, A3110, A3111, A3116, A3117, A3118, A3129, A3130
HMAC DRBGA3043, A3044, A3045, A3051, A3052, A3053, A3055, A3056, A3061, A3062, A3063, A3064, A3065, A3066, A3071, A3072, A3073, A3076, A3077, A3078, A3079, A3080, A3088, A3089, A3090, A3096, A3097, A3098, A3100, A3101, A3106, A3107, A3108, A3109, A3110, A3111, A3116, A3117, A3118, A3129, A3130
HMAC-SHA-1A3043, A3044, A3045, A3071, A3072, A3073, A3074, A3078, A3086, A3087, A3088, A3089, A3090, A3116, A3117, A3118, A3119, A3125
HMAC-SHA2-224A3043, A3044, A3045, A3071, A3072, A3073, A3074, A3078, A3087, A3088, A3089, A3090, A3116, A3117, A3118, A3119, A3125, A3131, A3132
HMAC-SHA2-256A3043, A3044, A3045, A3071, A3072, A3073, A3074, A3078, A3087, A3088, A3089, A3090, A3116, A3117, A3118, A3119, A3125, A3131, A3132
HMAC-SHA2-384A3043, A3044, A3045, A3071, A3072, A3073, A3078, A3088, A3089, A3090, A3116, A3117, A3118, A3127, A3132
HMAC-SHA2-512A3043, A3044, A3045, A3071, A3072, A3073, A3078, A3088, A3089, A3090, A3116, A3117, A3118, A3127, A3132
HMAC-SHA3-224A3047, A3085, A3092, A3126
HMAC-SHA3-256A3047, A3085, A3092, A3126
HMAC-SHA3-384A3047, A3085, A3092, A3126
HMAC-SHA3-512A3047, A3085, A3092, A3126
KAS-ECC-SSC Sp800-56Ar3A3044, A3089
KAS-FFC-SSC Sp800-56Ar3A3043, A3088
RSA SigVer (FIPS186-4)A3045, A3071, A3072, A3073, A3078, A3090, A3116, A3117, A3118
Safe Primes Key GenerationA3043, A3088
SHA-1A3043, A3044, A3045, A3071, A3072, A3073, A3074, A3078, A3086, A3087, A3088, A3089, A3090, A3116, A3117, A3118, A3119, A3125
SHA2-224A3043, A3044, A3045, A3071, A3072, A3073, A3074, A3078, A3087, A3088, A3089, A3090, A3116, A3117, A3118, A3119, A3125, A3131, A3132
SHA2-256A3043, A3044, A3045, A3071, A3072, A3073, A3074, A3078, A3087, A3088, A3089, A3090, A3116, A3117, A3118, A3119, A3125, A3131, A3132
SHA2-384A3043, A3044, A3045, A3071, A3072, A3073, A3078, A3088, A3089, A3090, A3116, A3117, A3118, A3127, A3132
SHA2-512A3043, A3044, A3045, A3071, A3072, A3073, A3078, A3088, A3089, A3090, A3116, A3117, A3118, A3127, A3132
SHA3-224A3047, A3085, A3092, A3126
SHA3-256A3047, A3085, A3092, A3126
SHA3-384A3047, A3085, A3092, A3126
SHA3-512A3047, A3085, A3092, A3126

Tested configurations

  • SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 with PAA[1]
  • SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 without PAA[1]
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 with PAA[1]
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 without PAA[1]
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 with PAA[1][2]
  • SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 without PAA[1][2]
  • SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 with PAI[1]
  • SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 without PAI[1]
  • SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R with PAA[1][2]
  • SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R without PAA[1][2]

Validation history

DateTypeLab
2024-07-15Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-07-15

Source documents