808bits

Red Hat Enterprise Linux 9 Kernel Cryptographic API

FIPS 140-3 certificate #4796 · Red Hat(R), Inc. · data as of 2026-08-28
Active. Sunset date 2026-09-10, 12 days away.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in section 11 of the Security Policy. The module generates random strings whose strengths are modified by available entropy.

Certificate

Certificate number4796
StandardFIPS 140-3
Statusactive
Sunset date2026-09-10
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorRed Hat(R), Inc. · website
Software versions5.14.0-70.53.1.el9_0; 1.3.1-3.el9

Module description

The Red Hat Enterprise Linux 9 Kernel Cryptographic API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA3629
AES-CBCA3636
AES-CBCA3639
AES-CBCA3719
AES-CBCA3722
AES-CBCA4549
AES-CBC-CS3A3633
AES-CBC-CS3A3644
AES-CBC-CS3A3727
AES-CCMA3629
AES-CCMA3639
AES-CCMA3719
AES-CCMA3722
AES-CFB128A3631
AES-CFB128A3642
AES-CFB128A3725
AES-CMACA3629
AES-CMACA3639
AES-CMACA3719
AES-CMACA3722
AES-CTRA3629
AES-CTRA3636
AES-CTRA3639
AES-CTRA3719
AES-CTRA3722
AES-CTRA4549
AES-ECBA3629
AES-ECBA3634
AES-ECBA3635
AES-ECBA3636
AES-ECBA3637
AES-ECBA3638
AES-ECBA3639
AES-ECBA3640
AES-ECBA3641
AES-ECBA3719
AES-ECBA3720
AES-ECBA3721
AES-ECBA3722
AES-ECBA3723
AES-ECBA3724
AES-GCMA3629
AES-GCMA3634
AES-GCMA3635
AES-GCMA3636
AES-GCMA3637
AES-GCMA3638
AES-GCMA3639
AES-GCMA3640
AES-GCMA3641
AES-GCMA3719
AES-GCMA3720
AES-GCMA3721
AES-GCMA3722
AES-GCMA3723
AES-GCMA3724
AES-GMACA3629
AES-GMACA3639
AES-GMACA3719
AES-GMACA3722
AES-OFBA3632
AES-OFBA3643
AES-OFBA3726
AES-XTS Testing Revision 2.0A3629
AES-XTS Testing Revision 2.0A3636
AES-XTS Testing Revision 2.0A3639
AES-XTS Testing Revision 2.0A3719
AES-XTS Testing Revision 2.0A3722
AES-XTS Testing Revision 2.0A4549
Counter DRBGA3629
Counter DRBGA3634
Counter DRBGA3635
Counter DRBGA3636
Counter DRBGA3637
Counter DRBGA3638
Counter DRBGA3639
Counter DRBGA3640
Counter DRBGA3641
Counter DRBGA3719
Counter DRBGA3720
Counter DRBGA3721
Counter DRBGA3722
Counter DRBGA3723
Counter DRBGA3724
Hash DRBGA3629
Hash DRBGA3634
Hash DRBGA3635
Hash DRBGA3636
Hash DRBGA3637
Hash DRBGA3638
Hash DRBGA3639
Hash DRBGA3640
Hash DRBGA3641
Hash DRBGA3645
Hash DRBGA3646
Hash DRBGA3647
Hash DRBGA3720
Hash DRBGA3721
Hash DRBGA3722
Hash DRBGA3723
Hash DRBGA3724
HMAC DRBGA3629
HMAC DRBGA3634
HMAC DRBGA3635
HMAC DRBGA3636
HMAC DRBGA3637
HMAC DRBGA3638
HMAC DRBGA3639
HMAC DRBGA3640
HMAC DRBGA3641
HMAC DRBGA3645
HMAC DRBGA3646
HMAC DRBGA3647
HMAC DRBGA3720
HMAC DRBGA3721
HMAC DRBGA3722
HMAC DRBGA3723
HMAC DRBGA3724
HMAC-SHA-1A3629
HMAC-SHA-1A3645
HMAC-SHA-1A3646
HMAC-SHA-1A3647
HMAC-SHA-1A3722
HMAC-SHA2-224A3629
HMAC-SHA2-224A3645
HMAC-SHA2-224A3646
HMAC-SHA2-224A3647
HMAC-SHA2-224A3722
HMAC-SHA2-256A3629
HMAC-SHA2-256A3645
HMAC-SHA2-256A3646
HMAC-SHA2-256A3647
HMAC-SHA2-256A3722
HMAC-SHA2-384A3629
HMAC-SHA2-384A3645
HMAC-SHA2-384A3646
HMAC-SHA2-384A3647
HMAC-SHA2-384A3722
HMAC-SHA2-512A3629
HMAC-SHA2-512A3645
HMAC-SHA2-512A3646
HMAC-SHA2-512A3647
HMAC-SHA2-512A3722
HMAC-SHA3-224A3630
HMAC-SHA3-224A3728
HMAC-SHA3-256A3630
HMAC-SHA3-256A3728
HMAC-SHA3-384A3630
HMAC-SHA3-384A3728
HMAC-SHA3-512A3630
HMAC-SHA3-512A3728
RSA SigVer (FIPS186-4)A3629
RSA SigVer (FIPS186-4)A3645
RSA SigVer (FIPS186-4)A3646
RSA SigVer (FIPS186-4)A3647
RSA SigVer (FIPS186-4)A3722
SHA-1A3629
SHA-1A3645
SHA-1A3646
SHA-1A3647
SHA-1A3722
SHA2-224A3629
SHA2-224A3645
SHA2-224A3646
SHA2-224A3647
SHA2-224A3722
SHA2-256A3629
SHA2-256A3645
SHA2-256A3646
SHA2-256A3647
SHA2-256A3722
SHA2-384A3629
SHA2-384A3645
SHA2-384A3646
SHA2-384A3647
SHA2-384A3722
SHA2-512A3629
SHA2-512A3645
SHA2-512A3646
SHA2-512A3647
SHA2-512A3722
SHA3-224A3630
SHA3-224A3728
SHA3-256A3630
SHA3-256A3728
SHA3-384A3630
SHA3-384A3728
SHA3-512A3630
SHA3-512A3728

Tested configurations

  • Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 with PAI
  • Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 without PAI
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel Xeon Silver 4216 with PAA
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel Xeon Silver 4216 without PAA
  • Red Hat Enterprise Linux 9 with PowerVM FW1040.00 with VIOS 3.1.3.00 running on IBM 9080-HEX with IBM POWER10 without PAA

Validation history

DateTypeLab
2024-09-11Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-09-11

Source documents