808bits

Oracle Linux 8 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module and Oracle Linux 9 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module

FIPS 140-3 certificate #4739 · Oracle Corporation · data as of 2026-09-12

Oracle Linux 8 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module and Oracle Linux 9 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module, from Oracle Corporation, holds FIPS 140-3 certificate #4739 at overall level 1. The validation is active, with a sunset date of 2029-07-24. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Active. Sunset date 2029-07-24, 1045 days away.
Caveat: Interim validation. When operated in Approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy.

Certificate

Certificate number4739
StandardFIPS 140-3
Statusactive
Sunset date2029-07-24
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOracle Corporation · website
Software versionskernel 5.15.0-303.171.5.2.2.el8uek and 5.15.0-303.171.5.2.2.el9uek; libkcapi 1.2.0-2.0.1.el8 and 1.3.1-3.0.1.el9

Module description

Quoted from the NIST CMVP entry for this certificate.

Oracle Linux 8 Unbreakable Enterprise Kernel (UEK7) Cryptographic Module and Oracle Linux 9 Unbreakable Enterprise Kernel (UEK7) API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (37)

AlgorithmCAVP certificates
AES-CBCA3862, A3869, A3876, A3879, A3889, A3891, A3894, A4162, A4169, A4176, A4178, A4179, A4183, A4191
AES-CBC-CS3A3866, A3874, A3884, A3889, A3891, A4166, A4174, A4176, A4178, A4188
AES-CCMA3862, A3869, A3879, A3889, A3891, A4162, A4169, A4176, A4178, A4183
AES-CFB128A3864, A3872, A3882, A3891, A4164, A4172, A4178, A4186
AES-CMACA3862, A3869, A3879, A3889, A3891, A4162, A4169, A4176, A4178, A4183
AES-CTRA3862, A3869, A3876, A3879, A3889, A3891, A3894, A4162, A4169, A4176, A4178, A4179, A4183, A4191
AES-ECBA3860, A3861, A3862, A3867, A3868, A3869, A3870, A3871, A3876, A3877, A3878, A3879, A3880, A3881, A3889, A3891, A3892, A3893, A3894, A4160, A4161, A4162, A4167, A4168, A4169, A4170, A4171, A4176, A4178, A4179, A4181, A4182, A4183, A4184, A4185, A4191, A4196, A4197
AES-GCMA3862, A3867, A3868, A3869, A3870, A3871, A3876, A3877, A3878, A3879, A3880, A3881, A3891, A3892, A3893, A4162, A4167, A4168, A4169, A4170, A4171, A4178, A4181, A4182, A4183, A4184, A4185, A4191, A4196, A4197
AES-GMACA3862, A3869, A3879, A3891, A4162, A4169, A4178, A4183
AES-OFBA3865, A3873, A3883, A3891, A4165, A4173, A4178, A4187
AES-XTS Testing Revision 2.0A3862, A3869, A3876, A3879, A3889, A3891, A3894, A4162, A4169, A4176, A4178, A4179, A4183, A4191
Counter DRBGA3860, A3861, A3862, A3867, A3868, A3869, A3870, A3871, A3876, A3877, A3878, A3879, A3880, A3881, A3891, A3892, A3893, A4160, A4161, A4162, A4167, A4168, A4169, A4170, A4171, A4178, A4181, A4182, A4183, A4184, A4185, A4191, A4196, A4197
ECDSA KeyGen (FIPS186-4)A3861, A4161
Hash DRBGA3860, A3861, A3862, A3867, A3868, A3869, A3870, A3871, A3876, A3877, A3878, A3879, A3880, A3881, A3885, A3886, A3887, A3892, A3893, A4160, A4161, A4162, A4167, A4168, A4169, A4170, A4171, A4181, A4182, A4183, A4184, A4185, A4189, A4190, A4191, A4192, A4196, A4197
HMAC DRBGA3860, A3861, A3862, A3867, A3868, A3869, A3870, A3871, A3876, A3877, A3878, A3879, A3880, A3881, A3885, A3886, A3887, A3892, A3893, A4160, A4161, A4162, A4167, A4168, A4169, A4170, A4171, A4181, A4182, A4183, A4184, A4185, A4189, A4190, A4191, A4192, A4196, A4197
HMAC-SHA-1A3860, A3861, A3862, A3885, A3886, A3887, A3888, A3889, A4160, A4161, A4162, A4176, A4189, A4190, A4192, A4193, A6709
HMAC-SHA2-224A3860, A3861, A3862, A3885, A3886, A3887, A3888, A3889, A3894, A3895, A4160, A4161, A4162, A4176, A4179, A4180, A4189, A4190, A4192, A4193, A6709
HMAC-SHA2-256A3860, A3861, A3862, A3885, A3886, A3887, A3888, A3889, A3894, A3895, A4160, A4161, A4162, A4176, A4179, A4180, A4189, A4190, A4192, A4193, A6709
HMAC-SHA2-384A3860, A3861, A3862, A3885, A3886, A3887, A3890, A3895, A4160, A4161, A4162, A4177, A4180, A4189, A4190, A4192, A6709
HMAC-SHA2-512A3860, A3861, A3862, A3885, A3886, A3887, A3890, A3895, A4160, A4161, A4162, A4177, A4180, A4189, A4190, A4192, A6709
HMAC-SHA3-224A3863, A4163
HMAC-SHA3-256A3863, A4163
HMAC-SHA3-384A3863, A4163
HMAC-SHA3-512A3863, A4163
KAS-ECC-SSC Sp800-56Ar3A3861, A4161
KAS-FFC-SSC Sp800-56Ar3A3860, A4160
RSA SigVer (FIPS186-4)A3862, A3885, A3886, A3887, A4162, A4189, A4190, A4192
Safe Primes Key GenerationA3860, A4160
SHA-1A3860, A3861, A3862, A3885, A3886, A3887, A3888, A3889, A4160, A4161, A4162, A4176, A4189, A4190, A4192, A4193, A6709
SHA2-224A3860, A3861, A3862, A3885, A3886, A3887, A3888, A3889, A3894, A3895, A4160, A4161, A4162, A4176, A4179, A4180, A4189, A4190, A4192, A4193, A6709
SHA2-256A3860, A3861, A3862, A3885, A3886, A3887, A3888, A3889, A3894, A3895, A4160, A4161, A4162, A4176, A4179, A4180, A4189, A4190, A4192, A4193, A6709
SHA2-384A3860, A3861, A3862, A3885, A3886, A3887, A3890, A3895, A4160, A4161, A4162, A4177, A4180, A4189, A4190, A4192, A6709
SHA2-512A3860, A3861, A3862, A3885, A3886, A3887, A3890, A3895, A4160, A4161, A4162, A4177, A4180, A4189, A4190, A4192, A6709
SHA3-224A3863, A4163
SHA3-256A3863, A4163
SHA3-384A3863, A4163
SHA3-512A3863, A4163

Tested configurations

  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 with PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 without PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 with PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 without PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 with PAA
  • Oracle Linux 8 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 without PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 with PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere(R) Altra(R) Q80-30 without PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 with PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYC 7J13 without PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 with PAA
  • Oracle Linux 9 running on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel(R) Xeon(R) Platinum 8358 without PAA
  • Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III

Validation history

DateTypeLab
2024-07-25Initialatsec information security corporation
2025-08-22Updateatsec information security corporation
2026-04-01Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-07-25

Source documents