U.S. flag   An unofficial archive of your favorite United States government website

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #3168

Details

Module Name
Oracle Linux 7 Libreswan Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
4/9/2023
Validation Dates
04/10/2018;10/12/2018
Overall Level
1
Caveat
When operated in FIPS mode with Oracle Linux 7 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3143 operating in FIPS mode and Oracle Linux OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #3017 operating in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 7 Libreswan Cryptographic Module is a framework for providing cryptographic services to other network entities implementing the IKEv1 and IKEv2 protocols.
Tested Configuration(s)
  • Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with PAA
  • Oracle Linux 7.3 64 bit running on Oracle Server X6-2 without PAA
  • Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with PAA€
  • Oracle Linux 7.3 64 bit running on Oracle Server X7-2 without PAA (single-user mode)
FIPS Algorithms
AES Certs. #4648, #4649, #5654 and #5655
CVL Certs. #1300, #1341, #2046 and #2082
DRBG Certs. #1568 and #2284
DSA Certs. #1229 and #1454
ECDSA Certs. #1145 and #1528
HMAC Certs. #2996, #3077, #3558 and #3767
RSA Certs. #2536 and #3044
SHS Certs. #3808 and #4535
Triple-DES Certs. #2472 and #2838
Allowed Algorithms
Diffie-Hellman (CVL Cert. #1300 and #2046 with CVL Certs. #1341 and #2082, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1300 and #2046 with CVL Certs. #1341 and #2082, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R7-2.0.0

Vendor

Oracle Corporation
500 Oracle Parkway
Redwood Shores, CA 94065
USA

Honglin Su
honglin.su@oracle.com
Phone: +1 650-607-0970

Related Files

Security Policy
Consolidated Certificate

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0