808bits

Network Security Services (NSS) Cryptographic Module

FIPS 140-2 certificate #814 · Red Hat®, Inc. and Sun Microsystems, Inc. · data as of 2026-10-09

Network Security Services (NSS) Cryptographic Module, from Red Hat®, Inc. and Sun Microsystems, Inc., holds FIPS 140-2 certificate #814 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number814
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeSoftware
EmbodimentMulti-chip standalone
VendorRed Hat®, Inc. and Sun Microsystems, Inc. · website
Software versions3.11.4

Module description

Quoted from the NIST CMVP entry for this certificate.

Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major crypto algorithms and Internet security standards, and supports smartcards and hardware crypto devices. NSS is available free of charge under the Mozilla Public License, the GNU General Public License, and the GNU Lesser General Public License. For more information, see http://www.mozilla.org/projects/security/pki/nss/

Approved algorithms (8)

AlgorithmCAVP certificates
AES352
DSA172
ECDSA30
HMAC152
RNG208
RSA152
SHS426
Triple-DES469

Other algorithms

RC2; RC4; MD2; DES; MD5; RSA (key wrapping; key establishment methodology provides between 112 and 201 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength)); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength))

Tested configurations

  • Red Hat Enterprise Linux Version 4 Update 1 AS on IBM xSeries 336 with Intel Xeon CPU
  • Trusted Solaris 8 4/01 on Sun Blade 2500 Workstation with UltraSPARC IIIi CPU

Validation history

DateTypeLab
2007-08-27InitialAspect

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2007-08-27

Source documents