808bits

Network Security Services (NSS) Cryptographic Module

FIPS 140-2 certificate #815 · Red Hat®, Inc. and Sun Microsystems, Inc. · data as of 2026-08-28
Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number815
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorRed Hat®, Inc. and Sun Microsystems, Inc. · website
Software versions3.11.4

Module description

Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major crypto algorithms and Internet security standards, and supports smartcards and hardware crypto devices. NSS is available free of charge under the Mozilla Public License, the GNU General Public License, and the GNU Lesser General Public License. For more information, see http://www.mozilla.org/projects/security/pki/nss/

Approved algorithms

AlgorithmCAVP certificate
AES352
DSA172
ECDSA30, 37
HMAC152
RNG208
RSA152
SHS426
Triple-DES410, 469

Other algorithms

RC2; RC4; MD2; DES; MD5; RSA (key wrapping; key establishment methodology provides between 112 and 201 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides 112 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength)

Tested configurations

  • 64-bit Solaris 10
  • HP-UX B.11.11 with HP-UX Strong Random Number Generator (KRNG11i) bundle
  • Mac OS X 10.4 (single user mode)
  • Microsoft Windows XP SP 2
  • Red Hat Enterprise Linux 4 x86

Validation history

DateTypeLab
2007-08-08InitialAspect
2007-12-07Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2007-08-08, 2007-12-07

Source documents