808bits

Red Hat Enterprise Linux 9 - OpenSSL FIPS Provider

FIPS 140-3 certificate #4857 · Red Hat(R), Inc. · data as of 2026-08-28
Active. Sunset date 2029-10-28, 1156 days away.
Caveat: Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11.2 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.

Certificate

Certificate number4857
StandardFIPS 140-3
Statusactive
Sunset date2029-10-28
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorRed Hat(R), Inc. · website
Software versions3.0.7-395c1a240fbfffd8

Module description

The Red Hat Enterprise Linux 9 - OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.

Security level exceptions

  • Physical security: N/A
  • Non-invasive security: N/A

Approved algorithms

AlgorithmCAVP certificate
AES-CBCA4809
AES-CBCA4810
AES-CBCA4811
AES-CBCA5560
AES-CBCA5576
AES-CBCA5580
AES-CBC-CS1A4809
AES-CBC-CS1A4810
AES-CBC-CS1A4811
AES-CBC-CS1A5560
AES-CBC-CS1A5576
AES-CBC-CS1A5580
AES-CBC-CS2A4809
AES-CBC-CS2A4810
AES-CBC-CS2A4811
AES-CBC-CS2A5560
AES-CBC-CS2A5576
AES-CBC-CS2A5580
AES-CBC-CS3A4809
AES-CBC-CS3A4810
AES-CBC-CS3A4811
AES-CBC-CS3A5560
AES-CBC-CS3A5576
AES-CBC-CS3A5580
AES-CCMA4809
AES-CCMA4810
AES-CCMA4811
AES-CCMA5560
AES-CCMA5576
AES-CCMA5580
AES-CFB1A4809
AES-CFB1A4810
AES-CFB1A4811
AES-CFB1A5560
AES-CFB1A5576
AES-CFB1A5580
AES-CFB128A4809
AES-CFB128A4810
AES-CFB128A4811
AES-CFB128A5560
AES-CFB128A5576
AES-CFB128A5580
AES-CFB8A4809
AES-CFB8A4810
AES-CFB8A4811
AES-CFB8A5560
AES-CFB8A5576
AES-CFB8A5580
AES-CMACA4809
AES-CMACA4810
AES-CMACA4811
AES-CMACA5560
AES-CMACA5576
AES-CMACA5580
AES-CTRA4809
AES-CTRA4810
AES-CTRA4811
AES-CTRA5560
AES-CTRA5576
AES-CTRA5580
AES-ECBA4809
AES-ECBA4810
AES-ECBA4811
AES-ECBA4837
AES-ECBA4838
AES-ECBA4839
AES-ECBA4840
AES-ECBA4841
AES-ECBA5560
AES-ECBA5576
AES-ECBA5579
AES-ECBA5580
AES-ECBA5586
AES-GCMA4812
AES-GCMA4815
AES-GCMA4816
AES-GCMA4817
AES-GCMA4818
AES-GCMA4819
AES-GCMA4820
AES-GCMA4821
AES-GCMA4822
AES-GCMA5577
AES-GCMA5581
AES-GCMA5582
AES-GCMA5583
AES-GCMA5584
AES-GMACA4812
AES-GMACA4815
AES-GMACA4816
AES-GMACA4817
AES-GMACA4818
AES-GMACA4819
AES-GMACA4820
AES-GMACA4821
AES-GMACA4822
AES-GMACA5577
AES-GMACA5581
AES-GMACA5582
AES-GMACA5583
AES-GMACA5584
AES-KWA4809
AES-KWA4810
AES-KWA4811
AES-KWA5560
AES-KWA5576
AES-KWA5580
AES-KWPA4809
AES-KWPA4810
AES-KWPA4811
AES-KWPA5560
AES-KWPA5576
AES-KWPA5580
AES-OFBA4809
AES-OFBA4810
AES-OFBA4811
AES-OFBA5560
AES-OFBA5576
AES-OFBA5580
AES-XTS Testing Revision 2.0A4809
AES-XTS Testing Revision 2.0A4810
AES-XTS Testing Revision 2.0A4811
AES-XTS Testing Revision 2.0A5560
AES-XTS Testing Revision 2.0A5576
AES-XTS Testing Revision 2.0A5580
Counter DRBGA4808
ECDSA KeyGen (FIPS186-5)A4813
ECDSA KeyGen (FIPS186-5)A4823
ECDSA KeyGen (FIPS186-5)A4824
ECDSA KeyGen (FIPS186-5)A4825
ECDSA KeyGen (FIPS186-5)A4826
ECDSA KeyGen (FIPS186-5)A5578
ECDSA KeyGen (FIPS186-5)A5585
ECDSA KeyVer (FIPS186-5)A4813
ECDSA KeyVer (FIPS186-5)A4823
ECDSA KeyVer (FIPS186-5)A4824
ECDSA KeyVer (FIPS186-5)A4825
ECDSA KeyVer (FIPS186-5)A4826
ECDSA KeyVer (FIPS186-5)A5578
ECDSA KeyVer (FIPS186-5)A5585
ECDSA SigGen (FIPS186-5)A4813
ECDSA SigGen (FIPS186-5)A4814
ECDSA SigGen (FIPS186-5)A4823
ECDSA SigGen (FIPS186-5)A4824
ECDSA SigGen (FIPS186-5)A4825
ECDSA SigGen (FIPS186-5)A4826
ECDSA SigGen (FIPS186-5)A5578
ECDSA SigGen (FIPS186-5)A5585
ECDSA SigGen (FIPS186-5)A5587
ECDSA SigVer (FIPS186-5)A4813
ECDSA SigVer (FIPS186-5)A4814
ECDSA SigVer (FIPS186-5)A4823
ECDSA SigVer (FIPS186-5)A4824
ECDSA SigVer (FIPS186-5)A4825
ECDSA SigVer (FIPS186-5)A4826
ECDSA SigVer (FIPS186-5)A5578
ECDSA SigVer (FIPS186-5)A5585
ECDSA SigVer (FIPS186-5)A5587
Hash DRBGA4808
HMAC DRBGA4808
HMAC-SHA-1A4813
HMAC-SHA-1A4823
HMAC-SHA-1A4824
HMAC-SHA-1A4825
HMAC-SHA-1A4826
HMAC-SHA-1A5578
HMAC-SHA-1A5585
HMAC-SHA2-224A4813
HMAC-SHA2-224A4823
HMAC-SHA2-224A4824
HMAC-SHA2-224A4825
HMAC-SHA2-224A4826
HMAC-SHA2-224A5578
HMAC-SHA2-224A5585
HMAC-SHA2-256A4813
HMAC-SHA2-256A4823
HMAC-SHA2-256A4824
HMAC-SHA2-256A4825
HMAC-SHA2-256A4826
HMAC-SHA2-256A5578
HMAC-SHA2-256A5585
HMAC-SHA2-384A4813
HMAC-SHA2-384A4823
HMAC-SHA2-384A4824
HMAC-SHA2-384A4825
HMAC-SHA2-384A4826
HMAC-SHA2-384A5578
HMAC-SHA2-384A5585
HMAC-SHA2-512A4813
HMAC-SHA2-512A4823
HMAC-SHA2-512A4824
HMAC-SHA2-512A4825
HMAC-SHA2-512A4826
HMAC-SHA2-512A5578
HMAC-SHA2-512A5585
HMAC-SHA2-512/224A4813
HMAC-SHA2-512/224A4823
HMAC-SHA2-512/224A4824
HMAC-SHA2-512/224A4825
HMAC-SHA2-512/224A4826
HMAC-SHA2-512/224A5578
HMAC-SHA2-512/224A5585
HMAC-SHA2-512/256A4813
HMAC-SHA2-512/256A4823
HMAC-SHA2-512/256A4824
HMAC-SHA2-512/256A4825
HMAC-SHA2-512/256A4826
HMAC-SHA2-512/256A5578
HMAC-SHA2-512/256A5585
HMAC-SHA3-224A4814
HMAC-SHA3-224A5587
HMAC-SHA3-256A4814
HMAC-SHA3-256A5587
HMAC-SHA3-384A4814
HMAC-SHA3-384A5587
HMAC-SHA3-512A4814
HMAC-SHA3-512A5587
KAS-ECC-SSC Sp800-56Ar3A4813
KAS-ECC-SSC Sp800-56Ar3A4823
KAS-ECC-SSC Sp800-56Ar3A4824
KAS-ECC-SSC Sp800-56Ar3A4825
KAS-ECC-SSC Sp800-56Ar3A4826
KAS-ECC-SSC Sp800-56Ar3A5578
KAS-ECC-SSC Sp800-56Ar3A5585
KAS-FFC-SSC Sp800-56Ar3A4845
KAS-IFC-SSCA4813
KAS-IFC-SSCA4823
KAS-IFC-SSCA4824
KAS-IFC-SSCA4825
KAS-IFC-SSCA4826
KAS-IFC-SSCA5578
KAS-IFC-SSCA5585
KDA HKDF Sp800-56Cr1A4807
KDA OneStep SP800-56Cr2A4844
KDF ANS 9.42A4813
KDF ANS 9.42A4814
KDF ANS 9.42A4823
KDF ANS 9.42A4824
KDF ANS 9.42A4825
KDF ANS 9.42A4826
KDF ANS 9.42A5578
KDF ANS 9.42A5585
KDF ANS 9.42A5587
KDF ANS 9.63A4813
KDF ANS 9.63A4814
KDF ANS 9.63A4823
KDF ANS 9.63A4824
KDF ANS 9.63A4825
KDF ANS 9.63A4826
KDF ANS 9.63A5578
KDF ANS 9.63A5585
KDF ANS 9.63A5587
KDF SP800-108A4843
KDF SSHA4837
KDF SSHA4838
KDF SSHA4839
KDF SSHA4840
KDF SSHA4841
KDF SSHA5579
KDF SSHA5586
KTS-IFCA4813
KTS-IFCA4823
KTS-IFCA4824
KTS-IFCA4825
KTS-IFCA4826
KTS-IFCA5578
KTS-IFCA5585
PBKDFA4813
PBKDFA4814
PBKDFA4823
PBKDFA4824
PBKDFA4825
PBKDFA4826
PBKDFA5578
PBKDFA5585
PBKDFA5587
RSA KeyGen (FIPS186-5)A4813
RSA KeyGen (FIPS186-5)A4823
RSA KeyGen (FIPS186-5)A4824
RSA KeyGen (FIPS186-5)A4825
RSA KeyGen (FIPS186-5)A4826
RSA KeyGen (FIPS186-5)A5578
RSA KeyGen (FIPS186-5)A5585
RSA SigGen (FIPS186-5)A4813
RSA SigGen (FIPS186-5)A4823
RSA SigGen (FIPS186-5)A4824
RSA SigGen (FIPS186-5)A4825
RSA SigGen (FIPS186-5)A4826
RSA SigGen (FIPS186-5)A5578
RSA SigGen (FIPS186-5)A5585
RSA SigVer (FIPS186-4)A4813
RSA SigVer (FIPS186-4)A4823
RSA SigVer (FIPS186-4)A4824
RSA SigVer (FIPS186-4)A4825
RSA SigVer (FIPS186-4)A4826
RSA SigVer (FIPS186-4)A5578
RSA SigVer (FIPS186-4)A5585
RSA SigVer (FIPS186-5)A4813
RSA SigVer (FIPS186-5)A4823
RSA SigVer (FIPS186-5)A4824
RSA SigVer (FIPS186-5)A4825
RSA SigVer (FIPS186-5)A4826
RSA SigVer (FIPS186-5)A5578
RSA SigVer (FIPS186-5)A5585
Safe Primes Key GenerationA4845
Safe Primes Key VerificationA4845
SHA-1A4813
SHA-1A4823
SHA-1A4824
SHA-1A4825
SHA-1A4826
SHA-1A5578
SHA-1A5585
SHA2-224A4813
SHA2-224A4823
SHA2-224A4824
SHA2-224A4825
SHA2-224A4826
SHA2-224A5578
SHA2-224A5585
SHA2-256A4813
SHA2-256A4823
SHA2-256A4824
SHA2-256A4825
SHA2-256A4826
SHA2-256A5578
SHA2-256A5585
SHA2-384A4813
SHA2-384A4823
SHA2-384A4824
SHA2-384A4825
SHA2-384A4826
SHA2-384A5578
SHA2-384A5585
SHA2-512A4813
SHA2-512A4823
SHA2-512A4824
SHA2-512A4825
SHA2-512A4826
SHA2-512A5578
SHA2-512A5585
SHA2-512/224A4813
SHA2-512/224A4823
SHA2-512/224A4824
SHA2-512/224A4825
SHA2-512/224A4826
SHA2-512/224A5578
SHA2-512/224A5585
SHA2-512/256A4813
SHA2-512/256A4823
SHA2-512/256A4824
SHA2-512/256A4825
SHA2-512/256A4826
SHA2-512/256A5578
SHA2-512/256A5585
SHA3-224A4814
SHA3-224A5587
SHA3-256A4814
SHA3-256A5587
SHA3-384A4814
SHA3-384A5587
SHA3-512A4814
SHA3-512A5587
SHAKE-128A4814
SHAKE-128A5587
SHAKE-256A4814
SHAKE-256A5587
TLS v1.2 KDF RFC7627A4813
TLS v1.2 KDF RFC7627A4823
TLS v1.2 KDF RFC7627A4824
TLS v1.2 KDF RFC7627A4825
TLS v1.2 KDF RFC7627A4826
TLS v1.2 KDF RFC7627A5578
TLS v1.2 KDF RFC7627A5586
TLS v1.3 KDFA4807

Tested configurations

  • Red Hat Enterprise Linux 9 on PowerVM FW1040.00 with VIOS 3.1.3.00 running on IBM 9080-HEX with IBM POWER10 with PAI
  • Red Hat Enterprise Linux 9 on PowerVM FW1040.00 with VIOS 3.1.3.00 running on IBM 9080-HEX with IBM POWER10 without PAI
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 with PAA
  • Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 without PAA
  • Red Hat Enterprise Linux 9 running on IBM z16 3931-A01 with IBM z16 with PAI
  • Red Hat Enterprise Linux 9 running on IBM z16 3931-A01 with IBM z16 without PAI

Validation history

DateTypeLab
2024-10-29Initialatsec information security corporation
2025-11-28Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2024-10-29

Source documents