U.S. flag   An unofficial archive of your favorite United States government website

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #3170

Details

Module Name
Oracle Linux 6 Libreswan Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
4/11/2023
Validation Dates
04/12/2018;10/12/2018
Overall Level
1
Caveat
When operated in FIPS mode with Oracle Linux 6 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3111 operating in FIPS mode and Oracle Linux OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #3017 operating in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 6 Libreswan Cryptographic Module is a framework for providing cryptographic services to other network entities implementing the IKEv1 and IKEv2 protocols.
Tested Configuration(s)
  • Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with PAA
  • Oracle Linux 6.9 64 bit running on Oracle Server X6-2 without PAA
  • Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with PAA€
  • Oracle Linux 6.9 64 bit running on Oracle Server X7-2 without PAA (single-user mode)
FIPS Algorithms
AES Certs. #4773, #4774, #5469 and #5472
CVL Certs. #1417, #1427, #1924 and #2081
DRBG Certs. #1652 and #2151
DSA Certs. #1285 and #1407
ECDSA Certs. #1199 and #1464
HMAC Certs. #2993, #2995, #3184, #3549, #3550 and #3628
RSA Certs. #2615, #2640 and #2939
SHS Certs. #3918 and #4391
Triple-DES Certs. #2536 and #2755
Allowed Algorithms
Diffie-Hellman (CVL Cert. #1417 and #1924 with CVL Cert. #1427 and #2081, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #1417 and #1924 with CVL Cert. #1427 and #2081, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R6-1.0.0

Vendor

Oracle Corporation
500 Oracle Parkway
Redwood Shores, CA 94065
USA

Honglin Su
honglin.su@oracle.com
Phone: +1 650-607-0970

Related Files

Security Policy
Consolidated Certificate

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0