808bits

Red Hat Enterprise Linux 9 OpenSSL FIPS Provider

FIPS 140-3 certificate #4746 · Red Hat®, Inc. · data as of 2026-10-21

Red Hat Enterprise Linux 9 OpenSSL FIPS Provider, from Red Hat®, Inc., holds FIPS 140-3 certificate #4746 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.

Certificate

Certificate number4746
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorRed Hat®, Inc. · website
Software versions3.0.1-3f45e68ee408cd9c

Module description

Quoted from the NIST CMVP entry for this certificate.

The Red Hat Enterprise Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (64)

AlgorithmCAVP certificates
AES-CBCA3527, A3528, A3529, A4018, A4461, A4465
AES-CBC-CS1A3527, A3528, A3529, A4018, A4461, A4465
AES-CBC-CS2A3527, A3528, A3529, A4018, A4461, A4465
AES-CBC-CS3A3527, A3528, A3529, A4018, A4461, A4465
AES-CCMA3527, A3528, A3529, A4018, A4461, A4465
AES-CFB1A3527, A3528, A3529, A4018, A4461, A4465
AES-CFB128A3527, A3528, A3529, A4018, A4461, A4465
AES-CFB8A3527, A3528, A3529, A4018, A4461, A4465
AES-CMACA3527, A3528, A3529, A4018, A4461, A4465
AES-CTRA3527, A3528, A3529, A4018, A4461, A4465
AES-ECBA3527, A3528, A3529, A3530, A3531, A3532, A3533, A4018, A4023, A4460, A4461, A4465
AES-GCMA3535, A3536, A3537, A3538, A3539, A3540, A3541, A3542, A3543, A4019, A4020, A4021, A4458, A4462
AES-GMACA3535, A3536, A3537, A3538, A3539, A3540, A3541, A3542, A3543, A4019, A4020, A4021, A4458, A4462
AES-KWA3527, A3528, A3529, A4018, A4461, A4465
AES-KWPA3527, A3528, A3529, A4018, A4461, A4465
AES-OFBA3527, A3528, A3529, A4018, A4461, A4465
AES-XTS Testing Revision 2.0A3527, A3528, A3529, A4018, A4461, A4465
Counter DRBGA3570
ECDSA KeyGen (FIPS186-4)A3544, A3545, A3546, A3547, A4022, A4459
ECDSA KeyVer (FIPS186-4)A3544, A3545, A3546, A3547, A4022, A4459
ECDSA SigGen (FIPS186-4)A3534, A3544, A3545, A3546, A3547, A4022, A4024, A4459
ECDSA SigVer (FIPS186-4)A3534, A3544, A3545, A3546, A3547, A4022, A4024, A4459
Hash DRBGA3570
HMAC DRBGA3570
HMAC-SHA-1A3544, A3545, A3546, A3547, A4022, A4459
HMAC-SHA2-224A3544, A3545, A3546, A3547, A4022, A4459
HMAC-SHA2-256A3544, A3545, A3546, A3547, A4022, A4459
HMAC-SHA2-384A4459
HMAC-SHA2-512A3544, A3545, A3546, A3547, A4022, A4459
HMAC-SHA2-512/224A3544, A3545, A3546, A3547, A4022, A4459
HMAC-SHA2-512/256A3544, A3545, A3546, A3547, A4022, A4459
HMAC-SHA3-224A3534, A4024
HMAC-SHA3-256A3534, A4024
HMAC-SHA3-384A3534, A4024
HMAC-SHA3-512A3534, A4024
KAS-ECC-SSC Sp800-56Ar3A3544, A3545, A3546, A3547, A4022, A4459
KAS-FFC-SSC Sp800-56Ar3A3554
KDA HKDF Sp800-56Cr1A3526
KDA OneStep SP800-56Cr2A3525
KDF ANS 9.42A3534, A3544, A3545, A3546, A3547, A4022, A4024, A4459
KDF ANS 9.63A3534, A3544, A3545, A3546, A3547, A4022, A4024, A4459
KDF SP800-108A3553
KDF SSHA3530, A3531, A3532, A3533, A4023, A4460
PBKDFA3534, A3544, A3545, A3546, A3547, A4022, A4024, A4459
RSA KeyGen (FIPS186-4)A3544, A3545, A3546, A3547, A4022, A4459
RSA SigGen (FIPS186-4)A3544, A3545, A3546, A3547, A4022, A4459
RSA SigVer (FIPS186-4)A3544, A3545, A3546, A3547, A4022, A4459
Safe Primes Key GenerationA3554
Safe Primes Key VerificationA3554
SHA-1A3544, A3545, A3546, A3547, A4022, A4459
SHA2-224A3544, A3545, A3546, A3547, A4022, A4459
SHA2-256A3544, A3545, A3546, A3547, A4022, A4459
SHA2-384A3544, A3545, A3546, A3547, A4022, A4459
SHA2-512A3544, A3545, A3546, A3547, A4022, A4459
SHA2-512/224A3544, A3545, A3546, A3547, A4022, A4459
SHA2-512/256A3544, A3545, A3546, A3547, A4022, A4459
SHA3-224A3534, A4024
SHA3-256A3534, A4024
SHA3-384A3534, A4024
SHA3-512A3534, A4024
SHAKE-128A3534, A4024
SHAKE-256A3534, A4024
TLS v1.2 KDF RFC7627A3544, A3545, A3546, A3547, A4022, A4459
TLS v1.3 KDFA3526

Tested configurations

  • Red Hat Enterprise Linux 9 on IBM 9080 HEX with IBM POWER10 with PAA
  • Red Hat Enterprise Linux 9 on IBM 9080 HEX with IBM POWER10 without PAA
  • Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 with PAI
  • Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 without PAI
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 with PAA
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 without PAA

Validation history

DateTypeLab
2024-07-31Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-31

Source documents