Module Name

Red Hat Enterprise Linux OpenSSL Cryptographic Module

Standard

FIPS 140-2

Status

Active

Sunset Date

9/25/2024

Validation Dates

09/26/2019

Overall Level

1

Caveat

When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Security Level Exceptions

• Physical Security: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The OpenSSL FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the OpenSSL library.

Tested Configuration(s)

• Red Hat Enterprise Linux 7 running on Dell PowerEdge R630 with an Intel(R) Xeon(R) E5 with PAA
• Red Hat Enterprise Linux 7 running on Dell PowerEdge R630 with an Intel(R) Xeon(R) E5 without PAA (single-user mode)

FIPS Algorithms

AES	Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336
CVL	Certs. #C297, #C302, #C316, #C321, #C329 and #C336
DRBG	Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336
DSA	Certs. #C297, #C302, #C329 and #C336
ECDSA	Certs. #C297, #C302, #C329 and #C336
HMAC	Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336
KTS	AES Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336, key establishment methodology provides between 128 and 256 bits of encryption strength
KTS	AES Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336 with HMAC Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336, key establishment methodology provides between 128 and 256 bits of encryption strength
KTS	Triple-DES Certs. #C297, #C302, #C329 and #C336 and HMAC Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336, key establishment methodology provides 112 bits of encryption strength
RSA	Certs. #C297, #C302, #C329 and #C336
SHS	Certs. #C297, #C302, #C303, #C304, #C316, #C321, #C327, #C328, #C329 and #C336
Triple-DES	Certs. #C297, #C302, #C329 and #C336

Allowed Algorithms

Diffie-Hellman (CVL Certs. #C297, #C302, #C329 and #C336 with CVL Certs. #C297, #C302, #C316, #C321, #C329 and #C336, key agreement; key establishment methodology provides 112 or 128 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C297, #C302, #C329 and #C336 with CVL Certs. #C297, #C302, #C316, #C321, #C329 and #C336, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Software Versions

7.0