Module Name

Red Hat Enterprise Linux 7 OpenSSL Cryptographic Module

Standard

FIPS 140-2

Status

Active

Sunset Date

3/28/2026

Validation Dates

03/29/2021

Overall Level

1

Caveat

When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Security Level Exceptions

• Physical Security: N/A

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The OpenSSL FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the OpenSSL library.

Tested Configuration(s)

• Red Hat Enterprise Linux 7 running on Dell PowerEdge R630 with an Intel(R) Xeon(R) E5 with PAA
• Red Hat Enterprise Linux 7 running on Dell PowerEdge R630 with an Intel(R) Xeon(R) E5 without PAA (single-user mode)

FIPS Algorithms

AES	Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419
CVL	Certs. #C1378, #C1379, #C1381, #C1382, #C1385 and #C1386
DRBG	Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419
DSA	Certs. #C1378, #C1379, #C1385 and #C1386
ECDSA	Certs. #C1378, #C1379, #C1385 and #C1386
HMAC	Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419
KTS	AES Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS	AES Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419 and HMAC Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419; key establishment methodology provides 128 or 256 bits of encryption strength
KTS	Triple-DES Certs. #C1378, #C1379, #C1385 and #C1386 and HMAC Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419; key establishment methodology provides 112 bits of encryption strength
RSA	Certs. #C1378, #C1379, #C1385 and #C1386
SHS	Certs. #C1378, #C1379, #C1380, #C1381, #C1382, #C1383, #C1384, #C1385, #C1386 and #C1419
Triple-DES	Certs. #C1378, #C1379, #C1385 and #C1386

Allowed Algorithms

Diffie-Hellman (CVL Certs. #C1378, #C1379, #C1385 and #C1386 with CVL Certs. #C1378, #C1379, #C1381, #C1382, #C1385 and #C1386, key agreement; key establishment methodology provides between 112 and 219 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C1378, #C1379, #C1385 and #C1386 with CVL Certs. #C1378, #C1379, #C1381, #C1382, #C1385 and #C1386, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Software Versions

rhel7.20190409