808bits

OpenSSL FIPS Provider for AlmaLinux 9

FIPS 140-3 certificate #4823 · Cloudlinux Inc., TuxCare division · data as of 2026-10-21

OpenSSL FIPS Provider for AlmaLinux 9, from Cloudlinux Inc., TuxCare division, holds FIPS 140-3 certificate #4823 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Replaced by certificate #5482. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: Interim validation. When operated in Approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy

Certificate

Certificate number4823
StandardFIPS 140-3
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCloudlinux Inc., TuxCare division · website
Software versions3.0.7-1d2bd88ee26b3c90

Module description

Quoted from the NIST CMVP entry for this certificate.

AlmaLinux 9.2 OpenSSL FIPS provider implementation providing cryptographic services to Linux user space software components.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms (63)

AlgorithmCAVP certificates
AES-CBCA4056, A4057, A4058, A4061, A4062, A4063
AES-CBC-CS1A4056, A4057, A4058, A4061, A4062, A4063
AES-CBC-CS2A4056, A4057, A4058, A4061, A4062, A4063
AES-CBC-CS3A4056, A4057, A4058, A4061, A4062, A4063
AES-CCMA4056, A4057, A4058, A4061, A4062, A4063
AES-CFB1A4056, A4057, A4058, A4061, A4062, A4063
AES-CFB128A4056, A4057, A4058, A4061, A4062, A4063
AES-CFB8A4056, A4057, A4058, A4061, A4062, A4063
AES-CMACA4056, A4057, A4058, A4061, A4062, A4063
AES-CTRA4056, A4057, A4058, A4061, A4062, A4063
AES-ECBA4054, A4056, A4057, A4058, A4061, A4062, A4063, A4064, A4065, A4066
AES-GCMA4067, A4068, A4069, A4070, A4071, A4072, A4073, A4074, A4075, A4076, A4077, A4078
AES-GMACA4067, A4068, A4069, A4070, A4071, A4072, A4073, A4074, A4075, A4076, A4077, A4078
AES-KWA4056, A4057, A4058, A4061, A4062, A4063
AES-KWPA4056, A4057, A4058, A4061, A4062, A4063
AES-OFBA4056, A4057, A4058, A4061, A4062, A4063
AES-XTS Testing Revision 2.0A4056, A4057, A4058, A4061, A4062, A4063
Counter DRBGA4053
ECDSA KeyGen (FIPS186-4)A4059, A4079, A4080, A4081, A4082
ECDSA KeyVer (FIPS186-4)A4059, A4079, A4080, A4081, A4082
ECDSA SigGen (FIPS186-4)A4055, A4059, A4079, A4080, A4081, A4082
ECDSA SigVer (FIPS186-4)A4055, A4059, A4079, A4080, A4081, A4082
Hash DRBGA4053
HMAC DRBGA4053
HMAC-SHA-1A4059, A4079, A4080, A4081, A4082
HMAC-SHA2-224A4059, A4079, A4080, A4081, A4082
HMAC-SHA2-256A4059, A4060, A4079, A4080, A4081, A4082
HMAC-SHA2-384A4059, A4079, A4080, A4081, A4082
HMAC-SHA2-512A4059, A4079, A4080, A4081, A4082
HMAC-SHA2-512/224A4059, A4079, A4080, A4081, A4082
HMAC-SHA2-512/256A4059, A4079, A4080, A4081, A4082
HMAC-SHA3-224A4055
HMAC-SHA3-256A4055
HMAC-SHA3-384A4055
HMAC-SHA3-512A4055
KAS-ECC-SSC Sp800-56Ar3A4059, A4079, A4080, A4081, A4082
KAS-FFC-SSC Sp800-56Ar3A4085
KDA HKDF Sp800-56Cr1A4052
KDA OneStep SP800-56Cr2A4051
KDF ANS 9.42A4055, A4059, A4079, A4080, A4081, A4082
KDF ANS 9.63A4055, A4059, A4079, A4080, A4081, A4082
KDF SP800-108A4084
KDF SSHA4054, A4064, A4065, A4066
PBKDFA4055, A4059, A4079, A4080, A4081, A4082
RSA KeyGen (FIPS186-4)A4059, A4079, A4080, A4081, A4082
RSA SigGen (FIPS186-4)A4059, A4079, A4080, A4081, A4082
RSA SigVer (FIPS186-4)A4059, A4079, A4080, A4081, A4082
Safe Primes Key GenerationA4085
SHA-1A4059, A4079, A4080, A4081, A4082
SHA2-224A4059, A4079, A4080, A4081, A4082
SHA2-256A4059, A4060, A4079, A4080, A4081, A4082
SHA2-384A4059, A4079, A4080, A4081, A4082
SHA2-512A4059, A4079, A4080, A4081, A4082
SHA2-512/224A4059, A4079, A4080, A4081, A4082
SHA2-512/256A4059, A4079, A4080, A4081, A4082
SHA3-224A4055
SHA3-256A4055
SHA3-384A4055
SHA3-512A4055
SHAKE-128A4055
SHAKE-256A4055
TLS v1.2 KDF RFC7627A4059, A4079, A4080, A4081, A4082
TLS v1.3 KDFA4052

Tested configurations

  • AlmaLinux 9.2 running on Amazon Web Services (AWS) a1.metal with AWS Graviton with PAA
  • AlmaLinux 9.2 running on Amazon Web Services (AWS) a1.metal with AWS Graviton without PAA
  • AlmaLinux 9.2 running on Amazon Web Services (AWS) m5.metal with Intel Xeon Platinum 8259CL with PAA
  • AlmaLinux 9.2 running on Amazon Web Services (AWS) m5.metal with Intel Xeon Platinum 8259CL without PAA

Validation history

DateTypeLab
2024-10-07Initialatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2024-10-07

Source documents