808bits

Oracle Linux 9 OpenSSL FIPS Provider

FIPS 140-3 certificate #4779 · Oracle Corporation · data as of 2026-10-21

Oracle Linux 9 OpenSSL FIPS Provider, from Oracle Corporation, holds FIPS 140-3 certificate #4779 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5294. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11.1 of the Security Policy

Certificate

Certificate number4779
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorOracle Corporation · website
Software versions3.0.7-b27cdeb3ba51be46

Module description

Quoted from the NIST CMVP entry for this certificate.

The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (64)

AlgorithmCAVP certificates
AES-CBCA4313, A4314, A4315, A4327, A4328, A4329
AES-CBC-CS1A4313, A4314, A4315, A4327, A4328, A4329
AES-CBC-CS2A4313, A4314, A4315, A4327, A4328, A4329
AES-CBC-CS3A4313, A4314, A4315, A4327, A4328, A4329
AES-CCMA4313, A4314, A4315, A4327, A4328, A4329
AES-CFB1A4313, A4314, A4315, A4327, A4328, A4329
AES-CFB128A4313, A4314, A4315, A4327, A4328, A4329
AES-CFB8A4313, A4314, A4315, A4327, A4328, A4329
AES-CMACA4313, A4314, A4315, A4327, A4328, A4329
AES-CTRA4313, A4314, A4315, A4327, A4328, A4329
AES-ECBA4313, A4314, A4315, A4320, A4327, A4328, A4329, A4331, A4332, A4333, A4334
AES-GCMA4316, A4321, A4322, A4323, A4335, A4336, A4337, A4338, A4339, A4340, A4341, A4342, A4343
AES-GMACA4316, A4321, A4322, A4323, A4335, A4336, A4337, A4338, A4339, A4340, A4341, A4342, A4343
AES-KWA4313, A4314, A4315, A4327, A4328, A4329
AES-KWPA4313, A4314, A4315, A4327, A4328, A4329
AES-OFBA4313, A4314, A4315, A4327, A4328, A4329
AES-XTS Testing Revision 2.0A4313, A4314, A4315, A4327, A4328, A4329
Counter DRBGA4311
ECDSA KeyGen (FIPS186-4)A4317, A4326, A4330, A4344, A4345, A4346
ECDSA KeyVer (FIPS186-4)A4317, A4326, A4330, A4344, A4345, A4346
ECDSA SigGen (FIPS186-4)A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346
ECDSA SigVer (FIPS186-4)A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346
Hash DRBGA4311
HMAC DRBGA4311
HMAC-SHA-1A4317, A4326, A4330, A4344, A4345, A4346
HMAC-SHA2-224A4317, A4326, A4330, A4344, A4345, A4346
HMAC-SHA2-256A4317, A4318, A4326, A4330, A4344, A4345, A4346
HMAC-SHA2-384A4317, A4326, A4330, A4344, A4345, A4346
HMAC-SHA2-512A4317, A4326, A4330, A4344, A4345, A4346
HMAC-SHA2-512/224A4317, A4326, A4330, A4344, A4345, A4346
HMAC-SHA2-512/256A4317, A4326, A4330, A4344, A4345, A4346
HMAC-SHA3-224A4312, A4319
HMAC-SHA3-256A4312, A4319
HMAC-SHA3-384A4312, A4319
HMAC-SHA3-512A4312, A4319
KAS-ECC-SSC Sp800-56Ar3A4317, A4326, A4330, A4344, A4345, A4346
KAS-FFC-SSC Sp800-56Ar3A4325
KDA HKDF Sp800-56Cr1A4310
KDA OneStep SP800-56Cr2A4309
KDF ANS 9.42A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346
KDF ANS 9.63A4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346
KDF SP800-108A4324
KDF SSHA4320, A4331, A4332, A4333, A4334
PBKDFA4312, A4317, A4319, A4326, A4330, A4344, A4345, A4346
RSA KeyGen (FIPS186-4)A4317, A4326, A4330, A4344, A4345, A4346
RSA SigGen (FIPS186-4)A4317, A4326, A4330, A4344, A4345, A4346
RSA SigVer (FIPS186-4)A4317, A4326, A4330, A4344, A4345, A4346
Safe Primes Key GenerationA4325
Safe Primes Key VerificationA4325
SHA-1A4317, A4326, A4330, A4344, A4345, A4346
SHA2-224A4317, A4326, A4330, A4344, A4345, A4346
SHA2-256A4317, A4318, A4326, A4330, A4344, A4345, A4346
SHA2-384A4317, A4326, A4330, A4344, A4345, A4346
SHA2-512A4317, A4326, A4330, A4344, A4345, A4346
SHA2-512/224A4317, A4326, A4330, A4344, A4345, A4346
SHA2-512/256A4317, A4326, A4330, A4344, A4345, A4346
SHA3-224A4312, A4319
SHA3-256A4312, A4319
SHA3-384A4312, A4319
SHA3-512A4312, A4319
SHAKE-128A4312, A4319
SHAKE-256A4312, A4319
TLS v1.2 KDF RFC7627A4317, A4326, A4330, A4344, A4345, A4346
TLS v1.3 KDFA4310

Tested configurations

  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere® Altra® Q80-30 with PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere® Altra® Q80-30 without PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 with PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 without PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel® Xeon® Platinum 8358 with PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel® Xeon® Platinum 8358 without PAA
  • Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III without PAA

Validation history

DateTypeLab
2024-08-25Initialatsec information security corporation
2025-09-19Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-08-25

Source documents