Red Hat Enterprise Linux 9 NSS Cryptographic Module
Red Hat Enterprise Linux 9 NSS Cryptographic Module, from Red Hat, Inc, holds FIPS 140-3 certificate #5022 at overall level 1. The validation is active, with a sunset date of 2030-05-29. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in approved mode and installed, initialized and configured as specified in the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Certificate
| Certificate number | 5022 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2030-05-29 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Red Hat, Inc · website |
Module description
Quoted from the NIST CMVP entry for this certificate.
Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2025-05-30 | Initial | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2025-05-30