Oracle Linux 9 OpenSSL FIPS Provider
Caveat: Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11.1 of the Security Policy
Certificate
| Certificate number | 4779 |
|---|---|
| Standard | FIPS 140-3 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Oracle Corporation · website |
| Software versions | 3.0.7-b27cdeb3ba51be46 |
Module description
The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES-CBC | A4313 |
| AES-CBC | A4314 |
| AES-CBC | A4315 |
| AES-CBC | A4327 |
| AES-CBC | A4328 |
| AES-CBC | A4329 |
| AES-CBC-CS1 | A4313 |
| AES-CBC-CS1 | A4314 |
| AES-CBC-CS1 | A4315 |
| AES-CBC-CS1 | A4327 |
| AES-CBC-CS1 | A4328 |
| AES-CBC-CS1 | A4329 |
| AES-CBC-CS2 | A4313 |
| AES-CBC-CS2 | A4314 |
| AES-CBC-CS2 | A4315 |
| AES-CBC-CS2 | A4327 |
| AES-CBC-CS2 | A4328 |
| AES-CBC-CS2 | A4329 |
| AES-CBC-CS3 | A4313 |
| AES-CBC-CS3 | A4314 |
| AES-CBC-CS3 | A4315 |
| AES-CBC-CS3 | A4327 |
| AES-CBC-CS3 | A4328 |
| AES-CBC-CS3 | A4329 |
| AES-CCM | A4313 |
| AES-CCM | A4314 |
| AES-CCM | A4315 |
| AES-CCM | A4327 |
| AES-CCM | A4328 |
| AES-CCM | A4329 |
| AES-CFB1 | A4313 |
| AES-CFB1 | A4314 |
| AES-CFB1 | A4315 |
| AES-CFB1 | A4327 |
| AES-CFB1 | A4328 |
| AES-CFB1 | A4329 |
| AES-CFB128 | A4313 |
| AES-CFB128 | A4314 |
| AES-CFB128 | A4315 |
| AES-CFB128 | A4327 |
| AES-CFB128 | A4328 |
| AES-CFB128 | A4329 |
| AES-CFB8 | A4313 |
| AES-CFB8 | A4314 |
| AES-CFB8 | A4315 |
| AES-CFB8 | A4327 |
| AES-CFB8 | A4328 |
| AES-CFB8 | A4329 |
| AES-CMAC | A4313 |
| AES-CMAC | A4314 |
| AES-CMAC | A4315 |
| AES-CMAC | A4327 |
| AES-CMAC | A4328 |
| AES-CMAC | A4329 |
| AES-CTR | A4313 |
| AES-CTR | A4314 |
| AES-CTR | A4315 |
| AES-CTR | A4327 |
| AES-CTR | A4328 |
| AES-CTR | A4329 |
| AES-ECB | A4313 |
| AES-ECB | A4314 |
| AES-ECB | A4315 |
| AES-ECB | A4320 |
| AES-ECB | A4327 |
| AES-ECB | A4328 |
| AES-ECB | A4329 |
| AES-ECB | A4331 |
| AES-ECB | A4332 |
| AES-ECB | A4333 |
| AES-ECB | A4334 |
| AES-GCM | A4316 |
| AES-GCM | A4316 |
| AES-GCM | A4321 |
| AES-GCM | A4321 |
| AES-GCM | A4322 |
| AES-GCM | A4322 |
| AES-GCM | A4323 |
| AES-GCM | A4323 |
| AES-GCM | A4335 |
| AES-GCM | A4335 |
| AES-GCM | A4336 |
| AES-GCM | A4336 |
| AES-GCM | A4337 |
| AES-GCM | A4337 |
| AES-GCM | A4338 |
| AES-GCM | A4338 |
| AES-GCM | A4339 |
| AES-GCM | A4339 |
| AES-GCM | A4340 |
| AES-GCM | A4340 |
| AES-GCM | A4341 |
| AES-GCM | A4341 |
| AES-GCM | A4342 |
| AES-GCM | A4342 |
| AES-GCM | A4343 |
| AES-GCM | A4343 |
| AES-GMAC | A4316 |
| AES-GMAC | A4321 |
| AES-GMAC | A4322 |
| AES-GMAC | A4323 |
| AES-GMAC | A4335 |
| AES-GMAC | A4336 |
| AES-GMAC | A4337 |
| AES-GMAC | A4338 |
| AES-GMAC | A4339 |
| AES-GMAC | A4340 |
| AES-GMAC | A4341 |
| AES-GMAC | A4342 |
| AES-GMAC | A4343 |
| AES-KW | A4313 |
| AES-KW | A4314 |
| AES-KW | A4315 |
| AES-KW | A4327 |
| AES-KW | A4328 |
| AES-KW | A4329 |
| AES-KWP | A4313 |
| AES-KWP | A4314 |
| AES-KWP | A4315 |
| AES-KWP | A4327 |
| AES-KWP | A4328 |
| AES-KWP | A4329 |
| AES-OFB | A4313 |
| AES-OFB | A4314 |
| AES-OFB | A4315 |
| AES-OFB | A4327 |
| AES-OFB | A4328 |
| AES-OFB | A4329 |
| AES-XTS Testing Revision 2.0 | A4313 |
| AES-XTS Testing Revision 2.0 | A4314 |
| AES-XTS Testing Revision 2.0 | A4315 |
| AES-XTS Testing Revision 2.0 | A4327 |
| AES-XTS Testing Revision 2.0 | A4328 |
| AES-XTS Testing Revision 2.0 | A4329 |
| Counter DRBG | A4311 |
| ECDSA KeyGen (FIPS186-4) | A4317 |
| ECDSA KeyGen (FIPS186-4) | A4326 |
| ECDSA KeyGen (FIPS186-4) | A4330 |
| ECDSA KeyGen (FIPS186-4) | A4344 |
| ECDSA KeyGen (FIPS186-4) | A4345 |
| ECDSA KeyGen (FIPS186-4) | A4346 |
| ECDSA KeyVer (FIPS186-4) | A4317 |
| ECDSA KeyVer (FIPS186-4) | A4326 |
| ECDSA KeyVer (FIPS186-4) | A4330 |
| ECDSA KeyVer (FIPS186-4) | A4344 |
| ECDSA KeyVer (FIPS186-4) | A4345 |
| ECDSA KeyVer (FIPS186-4) | A4346 |
| ECDSA SigGen (FIPS186-4) | A4312 |
| ECDSA SigGen (FIPS186-4) | A4317 |
| ECDSA SigGen (FIPS186-4) | A4319 |
| ECDSA SigGen (FIPS186-4) | A4326 |
| ECDSA SigGen (FIPS186-4) | A4330 |
| ECDSA SigGen (FIPS186-4) | A4344 |
| ECDSA SigGen (FIPS186-4) | A4345 |
| ECDSA SigGen (FIPS186-4) | A4346 |
| ECDSA SigVer (FIPS186-4) | A4312 |
| ECDSA SigVer (FIPS186-4) | A4317 |
| ECDSA SigVer (FIPS186-4) | A4319 |
| ECDSA SigVer (FIPS186-4) | A4326 |
| ECDSA SigVer (FIPS186-4) | A4330 |
| ECDSA SigVer (FIPS186-4) | A4344 |
| ECDSA SigVer (FIPS186-4) | A4345 |
| ECDSA SigVer (FIPS186-4) | A4346 |
| Hash DRBG | A4311 |
| HMAC DRBG | A4311 |
| HMAC-SHA-1 | A4317 |
| HMAC-SHA-1 | A4326 |
| HMAC-SHA-1 | A4330 |
| HMAC-SHA-1 | A4344 |
| HMAC-SHA-1 | A4345 |
| HMAC-SHA-1 | A4346 |
| HMAC-SHA2-224 | A4317 |
| HMAC-SHA2-224 | A4326 |
| HMAC-SHA2-224 | A4330 |
| HMAC-SHA2-224 | A4344 |
| HMAC-SHA2-224 | A4345 |
| HMAC-SHA2-224 | A4346 |
| HMAC-SHA2-256 | A4317 |
| HMAC-SHA2-256 | A4318 |
| HMAC-SHA2-256 | A4326 |
| HMAC-SHA2-256 | A4330 |
| HMAC-SHA2-256 | A4344 |
| HMAC-SHA2-256 | A4345 |
| HMAC-SHA2-256 | A4346 |
| HMAC-SHA2-384 | A4317 |
| HMAC-SHA2-384 | A4326 |
| HMAC-SHA2-384 | A4330 |
| HMAC-SHA2-384 | A4344 |
| HMAC-SHA2-384 | A4345 |
| HMAC-SHA2-384 | A4346 |
| HMAC-SHA2-512 | A4317 |
| HMAC-SHA2-512 | A4326 |
| HMAC-SHA2-512 | A4330 |
| HMAC-SHA2-512 | A4344 |
| HMAC-SHA2-512 | A4345 |
| HMAC-SHA2-512 | A4346 |
| HMAC-SHA2-512/224 | A4317 |
| HMAC-SHA2-512/224 | A4326 |
| HMAC-SHA2-512/224 | A4330 |
| HMAC-SHA2-512/224 | A4344 |
| HMAC-SHA2-512/224 | A4345 |
| HMAC-SHA2-512/224 | A4346 |
| HMAC-SHA2-512/256 | A4317 |
| HMAC-SHA2-512/256 | A4326 |
| HMAC-SHA2-512/256 | A4330 |
| HMAC-SHA2-512/256 | A4344 |
| HMAC-SHA2-512/256 | A4345 |
| HMAC-SHA2-512/256 | A4346 |
| HMAC-SHA3-224 | A4312 |
| HMAC-SHA3-224 | A4319 |
| HMAC-SHA3-256 | A4312 |
| HMAC-SHA3-256 | A4319 |
| HMAC-SHA3-384 | A4312 |
| HMAC-SHA3-384 | A4319 |
| HMAC-SHA3-512 | A4312 |
| HMAC-SHA3-512 | A4319 |
| KAS-ECC-SSC Sp800-56Ar3 | A4317 |
| KAS-ECC-SSC Sp800-56Ar3 | A4326 |
| KAS-ECC-SSC Sp800-56Ar3 | A4330 |
| KAS-ECC-SSC Sp800-56Ar3 | A4344 |
| KAS-ECC-SSC Sp800-56Ar3 | A4345 |
| KAS-ECC-SSC Sp800-56Ar3 | A4346 |
| KAS-FFC-SSC Sp800-56Ar3 | A4325 |
| KDA HKDF Sp800-56Cr1 | A4310 |
| KDA OneStep SP800-56Cr2 | A4309 |
| KDF ANS 9.42 | A4312 |
| KDF ANS 9.42 | A4317 |
| KDF ANS 9.42 | A4319 |
| KDF ANS 9.42 | A4326 |
| KDF ANS 9.42 | A4330 |
| KDF ANS 9.42 | A4344 |
| KDF ANS 9.42 | A4345 |
| KDF ANS 9.42 | A4346 |
| KDF ANS 9.63 | A4312 |
| KDF ANS 9.63 | A4317 |
| KDF ANS 9.63 | A4319 |
| KDF ANS 9.63 | A4326 |
| KDF ANS 9.63 | A4330 |
| KDF ANS 9.63 | A4344 |
| KDF ANS 9.63 | A4345 |
| KDF ANS 9.63 | A4346 |
| KDF SP800-108 | A4324 |
| KDF SSH | A4320 |
| KDF SSH | A4331 |
| KDF SSH | A4332 |
| KDF SSH | A4333 |
| KDF SSH | A4334 |
| PBKDF | A4312 |
| PBKDF | A4317 |
| PBKDF | A4319 |
| PBKDF | A4326 |
| PBKDF | A4330 |
| PBKDF | A4344 |
| PBKDF | A4345 |
| PBKDF | A4346 |
| RSA KeyGen (FIPS186-4) | A4317 |
| RSA KeyGen (FIPS186-4) | A4326 |
| RSA KeyGen (FIPS186-4) | A4330 |
| RSA KeyGen (FIPS186-4) | A4344 |
| RSA KeyGen (FIPS186-4) | A4345 |
| RSA KeyGen (FIPS186-4) | A4346 |
| RSA SigGen (FIPS186-4) | A4317 |
| RSA SigGen (FIPS186-4) | A4326 |
| RSA SigGen (FIPS186-4) | A4330 |
| RSA SigGen (FIPS186-4) | A4344 |
| RSA SigGen (FIPS186-4) | A4345 |
| RSA SigGen (FIPS186-4) | A4346 |
| RSA SigVer (FIPS186-4) | A4317 |
| RSA SigVer (FIPS186-4) | A4326 |
| RSA SigVer (FIPS186-4) | A4330 |
| RSA SigVer (FIPS186-4) | A4344 |
| RSA SigVer (FIPS186-4) | A4345 |
| RSA SigVer (FIPS186-4) | A4346 |
| Safe Primes Key Generation | A4325 |
| Safe Primes Key Verification | A4325 |
| SHA-1 | A4317 |
| SHA-1 | A4326 |
| SHA-1 | A4330 |
| SHA-1 | A4344 |
| SHA-1 | A4345 |
| SHA-1 | A4346 |
| SHA2-224 | A4317 |
| SHA2-224 | A4326 |
| SHA2-224 | A4330 |
| SHA2-224 | A4344 |
| SHA2-224 | A4345 |
| SHA2-224 | A4346 |
| SHA2-256 | A4317 |
| SHA2-256 | A4318 |
| SHA2-256 | A4326 |
| SHA2-256 | A4330 |
| SHA2-256 | A4344 |
| SHA2-256 | A4345 |
| SHA2-256 | A4346 |
| SHA2-384 | A4317 |
| SHA2-384 | A4326 |
| SHA2-384 | A4330 |
| SHA2-384 | A4344 |
| SHA2-384 | A4345 |
| SHA2-384 | A4346 |
| SHA2-512 | A4317 |
| SHA2-512 | A4326 |
| SHA2-512 | A4330 |
| SHA2-512 | A4344 |
| SHA2-512 | A4345 |
| SHA2-512 | A4346 |
| SHA2-512/224 | A4317 |
| SHA2-512/224 | A4326 |
| SHA2-512/224 | A4330 |
| SHA2-512/224 | A4344 |
| SHA2-512/224 | A4345 |
| SHA2-512/224 | A4346 |
| SHA2-512/256 | A4317 |
| SHA2-512/256 | A4326 |
| SHA2-512/256 | A4330 |
| SHA2-512/256 | A4344 |
| SHA2-512/256 | A4345 |
| SHA2-512/256 | A4346 |
| SHA3-224 | A4312 |
| SHA3-224 | A4319 |
| SHA3-256 | A4312 |
| SHA3-256 | A4319 |
| SHA3-384 | A4312 |
| SHA3-384 | A4319 |
| SHA3-512 | A4312 |
| SHA3-512 | A4319 |
| SHAKE-128 | A4312 |
| SHAKE-128 | A4319 |
| SHAKE-256 | A4312 |
| SHAKE-256 | A4319 |
| TLS v1.2 KDF RFC7627 | A4317 |
| TLS v1.2 KDF RFC7627 | A4326 |
| TLS v1.2 KDF RFC7627 | A4330 |
| TLS v1.2 KDF RFC7627 | A4344 |
| TLS v1.2 KDF RFC7627 | A4345 |
| TLS v1.2 KDF RFC7627 | A4346 |
| TLS v1.3 KDF | A4310 |
Tested configurations
- Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere® Altra® Q80-30 with PAA
- Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere® Altra® Q80-30 without PAA
- Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 with PAA
- Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 without PAA
- Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel® Xeon® Platinum 8358 with PAA
- Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel® Xeon® Platinum 8358 without PAA
- Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III without PAA
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-08-25 | Initial | atsec information security corporation |
| 2025-09-19 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2024-08-25