808bits

Kernel Cryptography Module for AlmaLinux 9

FIPS 140-3 certificate #4750 · Cloudlinux Inc., TuxCare division · data as of 2026-10-21

Kernel Cryptography Module for AlmaLinux 9, from Cloudlinux Inc., TuxCare division, holds FIPS 140-3 certificate #4750 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5441. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy.

Certificate

Certificate number4750
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCloudlinux Inc., TuxCare division · website
Software versionskernel 5.14.0-284.1101.el9_2.tuxcare.7; libkcapi 1.3.1-3.el9

Module description

Quoted from the NIST CMVP entry for this certificate.

The Linux kernel crypto API implementation provides cryptographic services to Linux kernel space software components and user space via the AF_ALG interface.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms (31)

AlgorithmCAVP certificates
AES-CBCA4025, A4032, A4033, A4036, A4038, A4041
AES-CBC-CS3A4029, A4032, A4033, A4046
AES-CCMA4025, A4032, A4033, A4041
AES-CFB128A4027, A4033, A4044
AES-CMACA4025, A4032, A4033, A4041
AES-CTRA4025, A4032, A4033, A4036, A4038, A4041
AES-ECBA4025, A4030, A4031, A4032, A4033, A4034, A4035, A4036, A4038, A4039, A4040, A4041, A4042, A4043
AES-GCMA4025, A4030, A4031, A4033, A4034, A4035, A4038, A4039, A4040, A4041, A4042, A4043
AES-GMACA4025, A4033, A4041
AES-OFBA4028, A4033, A4045
AES-XTS Testing Revision 2.0A4025, A4032, A4033, A4036, A4038, A4041
Counter DRBGA4025, A4030, A4031, A4033, A4034, A4035, A4038, A4039, A4040, A4041, A4042, A4043
Hash DRBGA4025, A4030, A4031, A4034, A4035, A4038, A4039, A4040, A4041, A4042, A4043, A4047, A4048, A4049
HMAC DRBGA4025, A4030, A4031, A4034, A4035, A4038, A4039, A4040, A4041, A4042, A4043, A4047, A4048, A4049
HMAC-SHA2-224A4025, A4032, A4036, A4037, A4047, A4048, A4049
HMAC-SHA2-256A4025, A4032, A4036, A4037, A4047, A4048, A4049
HMAC-SHA2-384A4025, A4047, A4048, A4049
HMAC-SHA2-512A4025, A4047, A4048, A4049
HMAC-SHA3-224A4026
HMAC-SHA3-256A4026
HMAC-SHA3-384A4026
HMAC-SHA3-512A4026
RSA SigVer (FIPS186-4)A4025, A4047, A4048, A4049
SHA2-224A4025, A4032, A4036, A4037, A4047, A4048, A4049
SHA2-256A4025, A4032, A4036, A4037, A4047, A4048, A4049
SHA2-384A4025, A4047, A4048, A4049
SHA2-512A4025, A4047, A4048, A4049
SHA3-224A4026
SHA3-256A4026
SHA3-384A4026
SHA3-512A4026

Tested configurations

  • AlmaLinux 9.2 running on Amazon Web Services (AWS) a1.metal with AWS Graviton with PAA
  • AlmaLinux 9.2 running on Amazon Web Services (AWS) a1.metal with AWS Graviton without PAA
  • AlmaLinux 9.2 running on Amazon Web Services (AWS) m5.metal with Intel Xeon Platinum 8259CL with PAA
  • AlmaLinux 9.2 running on Amazon Web Services (AWS) m5.metal with Intel Xeon Platinum 8259CL without PAA

Validation history

DateTypeLab
2024-08-02Initialatsec information security corporation
2025-08-07Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-02

Source documents