Module Name

Ubuntu 18.04 OpenSSL Cryptographic Module

Standard

FIPS 140-2

Status

Active

Sunset Date

2/24/2025

Validation Dates

02/25/2020

Overall Level

1

Caveat

When operated in FIPS mode and installed, initialized and configured as specified in Sections 9.1 of the Security Policy

Security Level Exceptions

• Physical Security: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.

Tested Configuration(s)

• Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 with PAI
• Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 without PAI (single-user mode)
• Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 with PAA
• Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 without PAA

FIPS Algorithms

AES	Certs. #C79, #C670, #C671, #C672, #C673, #C674, #C675, #C676, #C677, #C678, #C679, #C680, #C687, #C688, #C689, #C690, #C691 and #C692
CVL	Certs. #C682, #C683, #C684, #C685, #C687 and #C688
DRBG	Certs. #C670, #C673, #C677, #C687 and #C688
DSA	Certs. #C682, #C683, #C684, #C685, #C687 and #C688
ECDSA	Certs. #C682, #C683, #C684, #C685, #C687 and #C688
HMAC	Certs. #C682, #C683, #C684, #C685, #C687 and #C688
KTS	AES Certs. #C673, #C687 and #C688; key establishment methodology provides between 128 and 256 bits of encryption strength
RSA	Certs. #C682, #C683, #C684, #C685, #C687 and #C688
SHA-3	Certs. #C682, #C687 and #C688
SHS	Certs. #C79, #C682, #C683, #C684, #C685, #C687 and #C688
Triple-DES	Certs. #C669 and #C686

Allowed Algorithms

Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Software Versions

2.0