U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

Certificate #3962

Details

Module Name
SUSE Linux Enterprise Kernel Crypto API Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
6/29/2026
Overall Level
1
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in section 10.1 of the Security Policy
Security Level Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
z SUSE Linux Enterprise Kernel Crypto API Module provides cryptographic services to the Linux operating system kernel.
Tested Configuration(s)
  • (single-user mode)
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 without PAA
  • SUSE Linux Enterprise Server 15 SP2 running on IBM System Z z15 with IBM z15 with PAI
  • SUSE Linux Enterprise Server 15 SP2 running on IBM System Z z15 with IBM z15 without PAI
FIPS Algorithms
AES Certs. #A418, #A419, #A420, #A422, #A423, #A424, #A425, #A426, #A428, #A429, #A430, #A431, #A432, #A433, #A434, #A435, #A436, #A437, #A438, #A439, #A440, #A441, #A442, #A443, #A444, #A446, #A447, #A448, #A449, #A450, #A451, #A452, #A455, #A456, #A457, #A458, #A459, #A460, #A461, #A462, #A463, #A464, #A465, #A466, #A467, #A469, #A470 and #A472
DRBG Certs. #A418, #A419, #A420, #A422, #A423, #A424, #A426, #A428, #A429, #A431, #A432, #A433, #A436, #A439, #A441, #A447, #A449, #A450, #A451, #A452, #A453, #A454, #A457, #A461, #A462, #A464, #A465, #A467, #A468 and #A471
ECDSA Cert. #A447
HMAC Certs. #A420, #A421, #A427, #A436, #A438, #A445, #A447, #A451, #A453, #A468, #A471 and #A472
KAS-SSC Cert. #A776
KTS AES Certs. #A423, #A424, #A426, #A429, #A431, #A432, #A433, #A436, #A439, #A440, #A441, #A442, #A444, #A449, #A451, #A460, #A461, #A465, #A467, #A470 and #A472; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Certs. #A422, #A423, #A429, #A431, #A436, #A438, #A449, #A451, #A467 and #A472 and HMAC Certs. #A420, #A427, #A436, #A438, #A447, #A451, #A453, #A468, #A471 and #A472; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS Triple-DES Certs. #A423, #A436, #A449, #A451 and #A454 and HMAC Certs. #A420, #A427, #A436, #A438, #A447, #A451, #A453, #A468, #A471 and #A472; key establishment methodology provides 112 bits of encryption strength
RSA Certs. #A436, #A451, #A453, #A468 and #A471
SHA-3 Certs. #A421 and #A445
SHS Certs. #A420, #A427, #A436, #A438, #A447, #A451, #A453, #A468, #A471 and #A472
Triple-DES Certs. #A423, #A425, #A436, #A443, #A446, #A449, #A451, #A454, #A459, #A463 and #A466
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
3.2

Vendor

SUSE, LLC
10 Canal Park, Suite 200
Cambridge, MA 02141
USA

Ivan Teblin
ivan.teblin@suse.com
Phone: +1-800-858-4000
Alexander Bergmann
abergmann@suse.com
Phone: +1-800-858-4000

Validation History

Date Type Lab
6/30/2021 Initial ATSEC INFORMATION SECURITY CORP
11/28/2021 Update ATSEC INFORMATION SECURITY CORP