U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

This is an archive
(replace .gov by .rip)

Cryptographic Module Validation Program CMVP

Certificate #3797

Details

Module Name
SUSE Linux Enterprise Server OpenSSL Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
1/24/2026
Validation Dates
01/25/2021
Overall Level
1
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.
Tested Configuration(s)
  • SUSE Linux Enterprise Server 15 SP0 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
  • SUSE Linux Enterprise Server 15 SP0 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA (single-user mode)
FIPS Algorithms
AES Certs. #A77, #A78, #A79, #A83, #A86, #A89, #A90, #A91, #A92, #A93, #A94, #A95, #A99, #A100, #A101, #A187, #A188, #A189, #A192, #A194, #A196, #A200, #A201, #A206, #A207, #A208, #A209, #A210, #A211 and #A212
CVL Certs. #A80, #A81, #A82, #A85, #A96, #A98, #A102, #A103, #A186, #A190, #A195, #A202, #A203, #A204, #A205 and #A213
DRBG Certs. #A76, #A77, #A78, #A79, #A83, #A84, #A87, #A88, #A89, #A91, #A92, #A93, #A94, #A95, #A100, #A101, #A187, #A188, #A189, #A191, #A192, #A193, #A194, #A198, #A199, #A200, #A206, #A207, #A208, #A209, #A210 and #A211
DSA Certs. #A80, #A81, #A82, #A85, #A186, #A195, #A202 and #A203
ECDSA Certs. #A80, #A81, #A82, #A85, #A186, #A195, #A202 and #A203
HMAC Certs. #A76, #A80, #A81, #A82, #A84, #A85, #A87, #A88, #A186, #A191, #A193, #A195, #A198, #A199, #A202 and #A203
KAS KAS-SSC Certs. #A676 and #A677; CVL Certs. #A80, #A81, #A82, #A85, #A186, #A195, #A202 and #A203
KTS AES Certs. #A86, #A90, #A99, #A196, #A201 and #A212; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Certs. #A77, #A78, #A86, #A89, #A90, #A91, #A92, #A94, #A95, #A99, #A100, #A101, #A187, #A189, #A192, #A196, #A201, #A206, #A207, #A208, #A209, #A210, #A211 and #A212; key establishment methodology provides 128 or 256 bits of encryption strength
KTS AES Certs. #A86, #A90, #A99, #A196, #A201 and #A212 and HMAC Certs. #A76, #A80, #A81, #A82, #A84, #A85, #A87, #A88, #A186, #A191, #A193, #A195, #A198, #A199, #A202 and #A203; key establishment methodology provides 128 or 256 bits of encryption strength
KTS Triple-DES Certs. #A97 and #A197 and HMAC Certs. #A76, #A80, #A81, #A82, #A84, #A85, #A87, #A88, #A186, #A191, #A193, #A195, #A198, #A199, #A202 and #A203; key establishment methodology provides 112 bits of encryption strength
PBKDF Certs. #A80, #A81, #A82, #A85, #A186, #A195, #A202 and #A203
RSA Certs. #A80, #A81, #A82, #A85, #A186, #A195, #A202 and #A203
SHS Certs. #A76, #A80, #A81, #A82, #A84, #A85, #A87, #A88, #A186, #A191, #A193, #A195, #A198, #A199, #A202 and #A203
Triple-DES Certs. #A97 and #A197
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
4.0

Vendor

SUSE, LLC
10 Canal Park, Suite 200
Cambridge, MA 02141
USA

Ivan Teblin
ivan.teblin@suse.com
Phone: +1-800-858-4000
Alexander Bergmann
ABergmann@suse.com
Phone: +1-800-858-4000

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0