808bits

Red Hat Enterprise Linux 9 OpenSSL FIPS Provider

FIPS 140-3 certificate #4746 · Red Hat®, Inc. · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.

Certificate

Certificate number4746
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorRed Hat®, Inc. · website
Software versions3.0.1-3f45e68ee408cd9c

Module description

The Red Hat Enterprise Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3527
AES-CBCA3528
AES-CBCA3529
AES-CBCA4018
AES-CBCA4461
AES-CBCA4465
AES-CBC-CS1A3527
AES-CBC-CS1A3528
AES-CBC-CS1A3529
AES-CBC-CS1A4018
AES-CBC-CS1A4461
AES-CBC-CS1A4465
AES-CBC-CS2A3527
AES-CBC-CS2A3528
AES-CBC-CS2A3529
AES-CBC-CS2A4018
AES-CBC-CS2A4461
AES-CBC-CS2A4465
AES-CBC-CS3A3527
AES-CBC-CS3A3528
AES-CBC-CS3A3529
AES-CBC-CS3A4018
AES-CBC-CS3A4461
AES-CBC-CS3A4465
AES-CCMA3527
AES-CCMA3528
AES-CCMA3529
AES-CCMA4018
AES-CCMA4461
AES-CCMA4465
AES-CFB1A3527
AES-CFB1A3528
AES-CFB1A3529
AES-CFB1A4018
AES-CFB1A4461
AES-CFB1A4465
AES-CFB128A3527
AES-CFB128A3528
AES-CFB128A3529
AES-CFB128A4018
AES-CFB128A4461
AES-CFB128A4465
AES-CFB8A3527
AES-CFB8A3528
AES-CFB8A3529
AES-CFB8A4018
AES-CFB8A4461
AES-CFB8A4465
AES-CMACA3527
AES-CMACA3528
AES-CMACA3529
AES-CMACA4018
AES-CMACA4461
AES-CMACA4465
AES-CTRA3527
AES-CTRA3528
AES-CTRA3529
AES-CTRA4018
AES-CTRA4461
AES-CTRA4465
AES-ECBA3527
AES-ECBA3528
AES-ECBA3529
AES-ECBA3530
AES-ECBA3531
AES-ECBA3532
AES-ECBA3533
AES-ECBA4018
AES-ECBA4023
AES-ECBA4460
AES-ECBA4461
AES-ECBA4465
AES-GCMA3535
AES-GCMA3536
AES-GCMA3537
AES-GCMA3538
AES-GCMA3539
AES-GCMA3540
AES-GCMA3541
AES-GCMA3542
AES-GCMA3543
AES-GCMA4019
AES-GCMA4020
AES-GCMA4021
AES-GCMA4458
AES-GCMA4462
AES-GMACA3535
AES-GMACA3536
AES-GMACA3537
AES-GMACA3538
AES-GMACA3539
AES-GMACA3540
AES-GMACA3541
AES-GMACA3542
AES-GMACA3543
AES-GMACA4019
AES-GMACA4020
AES-GMACA4021
AES-GMACA4458
AES-GMACA4462
AES-KWA3527
AES-KWA3528
AES-KWA3529
AES-KWA4018
AES-KWA4461
AES-KWA4465
AES-KWPA3527
AES-KWPA3528
AES-KWPA3529
AES-KWPA4018
AES-KWPA4461
AES-KWPA4465
AES-OFBA3527
AES-OFBA3528
AES-OFBA3529
AES-OFBA4018
AES-OFBA4461
AES-OFBA4465
AES-XTS Testing Revision 2.0A3527
AES-XTS Testing Revision 2.0A3528
AES-XTS Testing Revision 2.0A3529
AES-XTS Testing Revision 2.0A4018
AES-XTS Testing Revision 2.0A4461
AES-XTS Testing Revision 2.0A4465
Counter DRBGA3570
ECDSA KeyGen (FIPS186-4)A3544
ECDSA KeyGen (FIPS186-4)A3545
ECDSA KeyGen (FIPS186-4)A3546
ECDSA KeyGen (FIPS186-4)A3547
ECDSA KeyGen (FIPS186-4)A4022
ECDSA KeyGen (FIPS186-4)A4459
ECDSA KeyVer (FIPS186-4)A3544
ECDSA KeyVer (FIPS186-4)A3545
ECDSA KeyVer (FIPS186-4)A3546
ECDSA KeyVer (FIPS186-4)A3547
ECDSA KeyVer (FIPS186-4)A4022
ECDSA KeyVer (FIPS186-4)A4459
ECDSA SigGen (FIPS186-4)A3534
ECDSA SigGen (FIPS186-4)A3544
ECDSA SigGen (FIPS186-4)A3545
ECDSA SigGen (FIPS186-4)A3546
ECDSA SigGen (FIPS186-4)A3547
ECDSA SigGen (FIPS186-4)A4022
ECDSA SigGen (FIPS186-4)A4024
ECDSA SigGen (FIPS186-4)A4459
ECDSA SigVer (FIPS186-4)A3534
ECDSA SigVer (FIPS186-4)A3544
ECDSA SigVer (FIPS186-4)A3545
ECDSA SigVer (FIPS186-4)A3546
ECDSA SigVer (FIPS186-4)A3547
ECDSA SigVer (FIPS186-4)A4022
ECDSA SigVer (FIPS186-4)A4024
ECDSA SigVer (FIPS186-4)A4459
Hash DRBGA3570
HMAC DRBGA3570
HMAC-SHA-1A3544
HMAC-SHA-1A3545
HMAC-SHA-1A3546
HMAC-SHA-1A3547
HMAC-SHA-1A4022
HMAC-SHA-1A4459
HMAC-SHA2-224A3544
HMAC-SHA2-224A3545
HMAC-SHA2-224A3546
HMAC-SHA2-224A3547
HMAC-SHA2-224A4022
HMAC-SHA2-224A4459
HMAC-SHA2-256A3544
HMAC-SHA2-256A3545
HMAC-SHA2-256A3546
HMAC-SHA2-256A3547
HMAC-SHA2-256A4022
HMAC-SHA2-256A4459
HMAC-SHA2-384A4459
HMAC-SHA2-512A3544
HMAC-SHA2-512A3545
HMAC-SHA2-512A3546
HMAC-SHA2-512A3547
HMAC-SHA2-512A4022
HMAC-SHA2-512A4459
HMAC-SHA2-512/224A3544
HMAC-SHA2-512/224A3545
HMAC-SHA2-512/224A3546
HMAC-SHA2-512/224A3547
HMAC-SHA2-512/224A4022
HMAC-SHA2-512/224A4459
HMAC-SHA2-512/256A3544
HMAC-SHA2-512/256A3545
HMAC-SHA2-512/256A3546
HMAC-SHA2-512/256A3547
HMAC-SHA2-512/256A4022
HMAC-SHA2-512/256A4459
HMAC-SHA3-224A3534
HMAC-SHA3-224A4024
HMAC-SHA3-256A3534
HMAC-SHA3-256A4024
HMAC-SHA3-384A3534
HMAC-SHA3-384A4024
HMAC-SHA3-512A3534
HMAC-SHA3-512A4024
KAS-ECC-SSC Sp800-56Ar3A3544
KAS-ECC-SSC Sp800-56Ar3A3545
KAS-ECC-SSC Sp800-56Ar3A3546
KAS-ECC-SSC Sp800-56Ar3A3547
KAS-ECC-SSC Sp800-56Ar3A4022
KAS-ECC-SSC Sp800-56Ar3A4459
KAS-FFC-SSC Sp800-56Ar3A3554
KDA HKDF Sp800-56Cr1A3526
KDA OneStep SP800-56Cr2A3525
KDF ANS 9.42A3534
KDF ANS 9.42A3544
KDF ANS 9.42A3545
KDF ANS 9.42A3546
KDF ANS 9.42A3547
KDF ANS 9.42A4022
KDF ANS 9.42A4024
KDF ANS 9.42A4459
KDF ANS 9.63A3534
KDF ANS 9.63A3544
KDF ANS 9.63A3545
KDF ANS 9.63A3546
KDF ANS 9.63A3547
KDF ANS 9.63A4022
KDF ANS 9.63A4024
KDF ANS 9.63A4459
KDF SP800-108A3553
KDF SSHA3530
KDF SSHA3531
KDF SSHA3532
KDF SSHA3533
KDF SSHA4023
KDF SSHA4460
PBKDFA3534
PBKDFA3544
PBKDFA3545
PBKDFA3546
PBKDFA3547
PBKDFA4022
PBKDFA4024
PBKDFA4459
RSA KeyGen (FIPS186-4)A3544
RSA KeyGen (FIPS186-4)A3545
RSA KeyGen (FIPS186-4)A3546
RSA KeyGen (FIPS186-4)A3547
RSA KeyGen (FIPS186-4)A4022
RSA KeyGen (FIPS186-4)A4459
RSA SigGen (FIPS186-4)A3544
RSA SigGen (FIPS186-4)A3545
RSA SigGen (FIPS186-4)A3546
RSA SigGen (FIPS186-4)A3547
RSA SigGen (FIPS186-4)A4022
RSA SigGen (FIPS186-4)A4459
RSA SigVer (FIPS186-4)A3544
RSA SigVer (FIPS186-4)A3545
RSA SigVer (FIPS186-4)A3546
RSA SigVer (FIPS186-4)A3547
RSA SigVer (FIPS186-4)A4022
RSA SigVer (FIPS186-4)A4459
Safe Primes Key GenerationA3554
Safe Primes Key VerificationA3554
SHA-1A3544
SHA-1A3545
SHA-1A3546
SHA-1A3547
SHA-1A4022
SHA-1A4459
SHA2-224A3544
SHA2-224A3545
SHA2-224A3546
SHA2-224A3547
SHA2-224A4022
SHA2-224A4459
SHA2-256A3544
SHA2-256A3545
SHA2-256A3546
SHA2-256A3547
SHA2-256A4022
SHA2-256A4459
SHA2-384A3544
SHA2-384A3545
SHA2-384A3546
SHA2-384A3547
SHA2-384A4022
SHA2-384A4459
SHA2-512A3544
SHA2-512A3545
SHA2-512A3546
SHA2-512A3547
SHA2-512A4022
SHA2-512A4459
SHA2-512/224A3544
SHA2-512/224A3545
SHA2-512/224A3546
SHA2-512/224A3547
SHA2-512/224A4022
SHA2-512/224A4459
SHA2-512/256A3544
SHA2-512/256A3545
SHA2-512/256A3546
SHA2-512/256A3547
SHA2-512/256A4022
SHA2-512/256A4459
SHA3-224A3534
SHA3-224A4024
SHA3-256A3534
SHA3-256A4024
SHA3-384A3534
SHA3-384A4024
SHA3-512A3534
SHA3-512A4024
SHAKE-128A3534
SHAKE-128A4024
SHAKE-256A3534
SHAKE-256A4024
TLS v1.2 KDF RFC7627A3544
TLS v1.2 KDF RFC7627A3545
TLS v1.2 KDF RFC7627A3546
TLS v1.2 KDF RFC7627A3547
TLS v1.2 KDF RFC7627A4022
TLS v1.2 KDF RFC7627A4459
TLS v1.3 KDFA3526

Tested configurations

  • Red Hat Enterprise Linux 9 on IBM 9080 HEX with IBM POWER10 with PAA
  • Red Hat Enterprise Linux 9 on IBM 9080 HEX with IBM POWER10 without PAA
  • Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 with PAI
  • Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 without PAI
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 with PAA
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 without PAA

Validation history

DateTypeLab
2024-07-31Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-07-31

Source documents