808bits

Oracle Linux 8 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module and Oracle Linux 9 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module

FIPS 140-3 certificate #4739 · Oracle Corporation · data as of 2026-08-28
Active. Sunset date 2029-07-24, 1060 days away.
Caveat: Interim validation. When operated in Approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy.

Certificate

Certificate number4739
StandardFIPS 140-3
Statusactive
Sunset date2029-07-24
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOracle Corporation · website
Software versionskernel 5.15.0-303.171.5.2.2.el8uek and 5.15.0-303.171.5.2.2.el9uek; libkcapi 1.2.0-2.0.1.el8 and 1.3.1-3.0.1.el9

Module description

Oracle Linux 8 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module and Oracle Linux 9 Unbreakable Enterprise Kernel (UEK7) API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3862
AES-CBCA3869
AES-CBCA3876
AES-CBCA3879
AES-CBCA3889
AES-CBCA3891
AES-CBCA3894
AES-CBCA4162
AES-CBCA4169
AES-CBCA4176
AES-CBCA4178
AES-CBCA4179
AES-CBCA4183
AES-CBCA4191
AES-CBC-CS3A3866
AES-CBC-CS3A3874
AES-CBC-CS3A3884
AES-CBC-CS3A3889
AES-CBC-CS3A3891
AES-CBC-CS3A4166
AES-CBC-CS3A4174
AES-CBC-CS3A4176
AES-CBC-CS3A4178
AES-CBC-CS3A4188
AES-CCMA3862
AES-CCMA3869
AES-CCMA3879
AES-CCMA3889
AES-CCMA3891
AES-CCMA4162
AES-CCMA4169
AES-CCMA4176
AES-CCMA4178
AES-CCMA4183
AES-CFB128A3864
AES-CFB128A3872
AES-CFB128A3882
AES-CFB128A3891
AES-CFB128A4164
AES-CFB128A4172
AES-CFB128A4178
AES-CFB128A4186
AES-CMACA3862
AES-CMACA3869
AES-CMACA3879
AES-CMACA3889
AES-CMACA3891
AES-CMACA4162
AES-CMACA4169
AES-CMACA4176
AES-CMACA4178
AES-CMACA4183
AES-CTRA3862
AES-CTRA3869
AES-CTRA3876
AES-CTRA3879
AES-CTRA3889
AES-CTRA3891
AES-CTRA3894
AES-CTRA4162
AES-CTRA4169
AES-CTRA4176
AES-CTRA4178
AES-CTRA4179
AES-CTRA4183
AES-CTRA4191
AES-ECBA3860
AES-ECBA3861
AES-ECBA3862
AES-ECBA3867
AES-ECBA3868
AES-ECBA3869
AES-ECBA3870
AES-ECBA3871
AES-ECBA3876
AES-ECBA3877
AES-ECBA3878
AES-ECBA3879
AES-ECBA3880
AES-ECBA3881
AES-ECBA3889
AES-ECBA3891
AES-ECBA3892
AES-ECBA3893
AES-ECBA3894
AES-ECBA4160
AES-ECBA4161
AES-ECBA4162
AES-ECBA4167
AES-ECBA4168
AES-ECBA4169
AES-ECBA4170
AES-ECBA4171
AES-ECBA4176
AES-ECBA4178
AES-ECBA4179
AES-ECBA4181
AES-ECBA4182
AES-ECBA4183
AES-ECBA4184
AES-ECBA4185
AES-ECBA4191
AES-ECBA4196
AES-ECBA4197
AES-GCMA3862
AES-GCMA3867
AES-GCMA3868
AES-GCMA3869
AES-GCMA3870
AES-GCMA3871
AES-GCMA3876
AES-GCMA3877
AES-GCMA3878
AES-GCMA3879
AES-GCMA3880
AES-GCMA3881
AES-GCMA3891
AES-GCMA3892
AES-GCMA3893
AES-GCMA4162
AES-GCMA4167
AES-GCMA4168
AES-GCMA4169
AES-GCMA4170
AES-GCMA4171
AES-GCMA4178
AES-GCMA4181
AES-GCMA4182
AES-GCMA4183
AES-GCMA4184
AES-GCMA4185
AES-GCMA4191
AES-GCMA4196
AES-GCMA4197
AES-GMACA3862
AES-GMACA3869
AES-GMACA3879
AES-GMACA3891
AES-GMACA4162
AES-GMACA4169
AES-GMACA4178
AES-GMACA4183
AES-OFBA3865
AES-OFBA3873
AES-OFBA3883
AES-OFBA3891
AES-OFBA4165
AES-OFBA4173
AES-OFBA4178
AES-OFBA4187
AES-XTS Testing Revision 2.0A3862
AES-XTS Testing Revision 2.0A3869
AES-XTS Testing Revision 2.0A3876
AES-XTS Testing Revision 2.0A3879
AES-XTS Testing Revision 2.0A3889
AES-XTS Testing Revision 2.0A3891
AES-XTS Testing Revision 2.0A3894
AES-XTS Testing Revision 2.0A4162
AES-XTS Testing Revision 2.0A4169
AES-XTS Testing Revision 2.0A4176
AES-XTS Testing Revision 2.0A4178
AES-XTS Testing Revision 2.0A4179
AES-XTS Testing Revision 2.0A4183
AES-XTS Testing Revision 2.0A4191
Counter DRBGA3860
Counter DRBGA3861
Counter DRBGA3862
Counter DRBGA3867
Counter DRBGA3868
Counter DRBGA3869
Counter DRBGA3870
Counter DRBGA3871
Counter DRBGA3876
Counter DRBGA3877
Counter DRBGA3878
Counter DRBGA3879
Counter DRBGA3880
Counter DRBGA3881
Counter DRBGA3891
Counter DRBGA3892
Counter DRBGA3893
Counter DRBGA4160
Counter DRBGA4161
Counter DRBGA4162
Counter DRBGA4167
Counter DRBGA4168
Counter DRBGA4169
Counter DRBGA4170
Counter DRBGA4171
Counter DRBGA4178
Counter DRBGA4181
Counter DRBGA4182
Counter DRBGA4183
Counter DRBGA4184
Counter DRBGA4185
Counter DRBGA4191
Counter DRBGA4196
Counter DRBGA4197
ECDSA KeyGen (FIPS186-4)A3861
ECDSA KeyGen (FIPS186-4)A4161
Hash DRBGA3860
Hash DRBGA3861
Hash DRBGA3862
Hash DRBGA3867
Hash DRBGA3868
Hash DRBGA3869
Hash DRBGA3870
Hash DRBGA3871
Hash DRBGA3876
Hash DRBGA3877
Hash DRBGA3878
Hash DRBGA3879
Hash DRBGA3880
Hash DRBGA3881
Hash DRBGA3885
Hash DRBGA3886
Hash DRBGA3887
Hash DRBGA3892
Hash DRBGA3893
Hash DRBGA4160
Hash DRBGA4161
Hash DRBGA4162
Hash DRBGA4167
Hash DRBGA4168
Hash DRBGA4169
Hash DRBGA4170
Hash DRBGA4171
Hash DRBGA4181
Hash DRBGA4182
Hash DRBGA4183
Hash DRBGA4184
Hash DRBGA4185
Hash DRBGA4189
Hash DRBGA4190
Hash DRBGA4191
Hash DRBGA4192
Hash DRBGA4196
Hash DRBGA4197
HMAC DRBGA3860
HMAC DRBGA3861
HMAC DRBGA3862
HMAC DRBGA3867
HMAC DRBGA3868
HMAC DRBGA3869
HMAC DRBGA3870
HMAC DRBGA3871
HMAC DRBGA3876
HMAC DRBGA3877
HMAC DRBGA3878
HMAC DRBGA3879
HMAC DRBGA3880
HMAC DRBGA3881
HMAC DRBGA3885
HMAC DRBGA3886
HMAC DRBGA3887
HMAC DRBGA3892
HMAC DRBGA3893
HMAC DRBGA4160
HMAC DRBGA4161
HMAC DRBGA4162
HMAC DRBGA4167
HMAC DRBGA4168
HMAC DRBGA4169
HMAC DRBGA4170
HMAC DRBGA4171
HMAC DRBGA4181
HMAC DRBGA4182
HMAC DRBGA4183
HMAC DRBGA4184
HMAC DRBGA4185
HMAC DRBGA4189
HMAC DRBGA4190
HMAC DRBGA4191
HMAC DRBGA4192
HMAC DRBGA4196
HMAC DRBGA4197
HMAC-SHA-1A3860
HMAC-SHA-1A3861
HMAC-SHA-1A3862
HMAC-SHA-1A3885
HMAC-SHA-1A3886
HMAC-SHA-1A3887
HMAC-SHA-1A3888
HMAC-SHA-1A3889
HMAC-SHA-1A4160
HMAC-SHA-1A4161
HMAC-SHA-1A4162
HMAC-SHA-1A4176
HMAC-SHA-1A4189
HMAC-SHA-1A4190
HMAC-SHA-1A4192
HMAC-SHA-1A4193
HMAC-SHA-1A6709
HMAC-SHA2-224A3860
HMAC-SHA2-224A3861
HMAC-SHA2-224A3862
HMAC-SHA2-224A3885
HMAC-SHA2-224A3886
HMAC-SHA2-224A3887
HMAC-SHA2-224A3888
HMAC-SHA2-224A3889
HMAC-SHA2-224A3894
HMAC-SHA2-224A3895
HMAC-SHA2-224A4160
HMAC-SHA2-224A4161
HMAC-SHA2-224A4162
HMAC-SHA2-224A4176
HMAC-SHA2-224A4179
HMAC-SHA2-224A4180
HMAC-SHA2-224A4189
HMAC-SHA2-224A4190
HMAC-SHA2-224A4192
HMAC-SHA2-224A4193
HMAC-SHA2-224A6709
HMAC-SHA2-256A3860
HMAC-SHA2-256A3861
HMAC-SHA2-256A3862
HMAC-SHA2-256A3885
HMAC-SHA2-256A3886
HMAC-SHA2-256A3887
HMAC-SHA2-256A3888
HMAC-SHA2-256A3889
HMAC-SHA2-256A3894
HMAC-SHA2-256A3895
HMAC-SHA2-256A4160
HMAC-SHA2-256A4161
HMAC-SHA2-256A4162
HMAC-SHA2-256A4176
HMAC-SHA2-256A4179
HMAC-SHA2-256A4180
HMAC-SHA2-256A4189
HMAC-SHA2-256A4190
HMAC-SHA2-256A4192
HMAC-SHA2-256A4193
HMAC-SHA2-256A6709
HMAC-SHA2-384A3860
HMAC-SHA2-384A3861
HMAC-SHA2-384A3862
HMAC-SHA2-384A3885
HMAC-SHA2-384A3886
HMAC-SHA2-384A3887
HMAC-SHA2-384A3890
HMAC-SHA2-384A3895
HMAC-SHA2-384A4160
HMAC-SHA2-384A4161
HMAC-SHA2-384A4162
HMAC-SHA2-384A4177
HMAC-SHA2-384A4180
HMAC-SHA2-384A4189
HMAC-SHA2-384A4190
HMAC-SHA2-384A4192
HMAC-SHA2-384A6709
HMAC-SHA2-512A3860
HMAC-SHA2-512A3861
HMAC-SHA2-512A3862
HMAC-SHA2-512A3885
HMAC-SHA2-512A3886
HMAC-SHA2-512A3887
HMAC-SHA2-512A3890
HMAC-SHA2-512A3895
HMAC-SHA2-512A4160
HMAC-SHA2-512A4161
HMAC-SHA2-512A4162
HMAC-SHA2-512A4177
HMAC-SHA2-512A4180
HMAC-SHA2-512A4189
HMAC-SHA2-512A4190
HMAC-SHA2-512A4192
HMAC-SHA2-512A6709
HMAC-SHA3-224A3863
HMAC-SHA3-224A4163
HMAC-SHA3-256A3863
HMAC-SHA3-256A4163
HMAC-SHA3-384A3863
HMAC-SHA3-384A4163
HMAC-SHA3-512A3863
HMAC-SHA3-512A4163
KAS-ECC-SSC Sp800-56Ar3A3861
KAS-ECC-SSC Sp800-56Ar3A4161
KAS-FFC-SSC Sp800-56Ar3A3860
KAS-FFC-SSC Sp800-56Ar3A4160
RSA SigVer (FIPS186-4)A3862
RSA SigVer (FIPS186-4)A3885
RSA SigVer (FIPS186-4)A3886
RSA SigVer (FIPS186-4)A3887
RSA SigVer (FIPS186-4)A4162
RSA SigVer (FIPS186-4)A4189
RSA SigVer (FIPS186-4)A4190
RSA SigVer (FIPS186-4)A4192
Safe Primes Key GenerationA3860
Safe Primes Key GenerationA4160
SHA-1A3860
SHA-1A3861
SHA-1A3862
SHA-1A3885
SHA-1A3886
SHA-1A3887
SHA-1A3888
SHA-1A3889
SHA-1A4160
SHA-1A4161
SHA-1A4162
SHA-1A4176
SHA-1A4189
SHA-1A4190
SHA-1A4192
SHA-1A4193
SHA-1A6709
SHA2-224A3860
SHA2-224A3861
SHA2-224A3862
SHA2-224A3885
SHA2-224A3886
SHA2-224A3887
SHA2-224A3888
SHA2-224A3889
SHA2-224A3894
SHA2-224A3895
SHA2-224A4160
SHA2-224A4161
SHA2-224A4162
SHA2-224A4176
SHA2-224A4179
SHA2-224A4180
SHA2-224A4189
SHA2-224A4190
SHA2-224A4192
SHA2-224A4193
SHA2-224A6709
SHA2-256A3860
SHA2-256A3861
SHA2-256A3862
SHA2-256A3885
SHA2-256A3886
SHA2-256A3887
SHA2-256A3888
SHA2-256A3889
SHA2-256A3894
SHA2-256A3895
SHA2-256A4160
SHA2-256A4161
SHA2-256A4162
SHA2-256A4176
SHA2-256A4179
SHA2-256A4180
SHA2-256A4189
SHA2-256A4190
SHA2-256A4192
SHA2-256A4193
SHA2-256A6709
SHA2-384A3860
SHA2-384A3861
SHA2-384A3862
SHA2-384A3885
SHA2-384A3886
SHA2-384A3887
SHA2-384A3890
SHA2-384A3895
SHA2-384A4160
SHA2-384A4161
SHA2-384A4162
SHA2-384A4177
SHA2-384A4180
SHA2-384A4189
SHA2-384A4190
SHA2-384A4192
SHA2-384A6709
SHA2-512A3860
SHA2-512A3861
SHA2-512A3862
SHA2-512A3885
SHA2-512A3886
SHA2-512A3887
SHA2-512A3890
SHA2-512A3895
SHA2-512A4160
SHA2-512A4161
SHA2-512A4162
SHA2-512A4177
SHA2-512A4180
SHA2-512A4189
SHA2-512A4190
SHA2-512A4192
SHA2-512A6709
SHA3-224A3863
SHA3-224A4163
SHA3-256A3863
SHA3-256A4163
SHA3-384A3863
SHA3-384A4163
SHA3-512A3863
SHA3-512A4163

Tested configurations

  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 with PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 without PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 with PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 without PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 with PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 without PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 with PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 without PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 with PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 without PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 with PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 without PAA
  • Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III

Validation history

DateTypeLab
2024-07-25Initialatsec information security corporation
2025-08-22Updateatsec information security corporation
2026-04-01Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-07-25

Source documents