U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #3922

Details

Module Name
SUSE Linux Enterprise Server NSS Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
5/8/2026
Validation Dates
05/09/2021
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Roles, Services, and Authentication: Level 2
  • Physical Security: N/A
  • Design Assurance: Level 2
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
SUSE Network Security Services (NSS) is a set of libraries designed to support cross-platform development of security-enabled client and server applications.
Tested Configuration(s)
  • SUSE Linux Enterprise Server 15 SP0 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
  • SUSE Linux Enterprise Server 15 SP0 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 without PAA (single-user mode)
  • SUSE Linux Enterprise Server 15 SP2 running on IBM System Z/15 with IBM z15 without PAI
FIPS Algorithms
AES Certs. #A245, #A247, #A337, #A338, #A473, #A474, #A476 and #A477
CKG vendor affirmed
CVL Certs. #A245, #A246, #A473 and #A475
DRBG Certs. #A245 and #A473
DSA Certs. #A245 and #A473
ECDSA Certs. #A245 and #A473
HMAC Certs. #A245 and #A473
KAS-SSC Certs. #A681 and #A682
KTS AES Certs. #A337, #A338, #A476 and #A477; key establishment methodology provides between 128 and 256 bits of encryption strength
PBKDF Certs. #A245 and #A473
RSA Certs. #A245 and #A473
SHS Certs. #A245 and #A473
Triple-DES Certs. #A245 and #A473
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
3.0
Product URL
http://www.suse.com/products/server

Vendor

SUSE, LLC
10 Canal Park, Suite 200
Cambridge, MA 02141
USA

Ivan Teblin
ivan.teblin@suse.com
Phone: +1-800-858-4000
 Alexander Bergmann
ABergmann@suse.com
Phone: +1-800-858-4000

Related Files

Security Policy
Consolidated Certificate

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0