U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

This is an archive
(replace .gov by .rip)

Cryptographic Module Validation Program CMVP

Certificate #3991

Details

Module Name
SUSE Linux Enterprise Server OpenSSL Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
7/21/2026
Validation Dates
07/22/2021
Overall Level
1
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in section 9 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.
Tested Configuration(s)
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 without PAA (single-user mode)
  • SUSE Linux Enterprise Server 15 SP2 running on IBM System Z/15 with IBM z15 with PAI
  • SUSE Linux Enterprise Server 15 SP2 running on IBM System Z/15 with IBM z15 without PAI
FIPS Algorithms
AES Certs. #A339, #A340, #A343, #A344, #A346, #A349, #A350, #A351, #A354, #A357, #A358, #A362, #A370, #A373, #A377, #A378, #A379, #A381, #A508, #A509 and #A1498
CVL Certs. #A353, #A355, #A360, #A364, #A365, #A366, #A367, #A371, #A385, #A386 and #A1498
DRBG Certs. #A342, #A348, #A360, #A363, #A365, #A369, #A375, #A376, #A380, #A382, #A383, #A508 and #A1498
DSA Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498
ECDSA Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498
HMAC Certs. #A352, #A353, #A359, #A360, #A364, #A365, #A367, #A368, #A372, #A374, #A386 and #A1498
KAS KAS-SSC Certs. #A684 and #A1498, CVL Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498
KTS AES Certs. #A339, #A340, #A343, #A344, #A346, #A349, #A350, #A351, #A354, #A357, #A358, #A362, #A370, #A373, #A377, #A378, #A379, #A381, #A508, #A509 and #A1498; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Certs. #A343, #A350, #A351, #A357, #A378, #A381, #A508 and #A1498 and HMAC Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498; key establishment methodology provides 128 or 256 bits of encryption strength
KTS Triple-DES Certs. #A341, #A345 and #A347 and HMAC Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498; key establishment methodology provides 112 bits of encryption strength
PBKDF Certs. #A352, #A353, #A359, #A360, #A364, #A365, #A367, #A368, #A372, #A374, #A386 and #A1498
RSA Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498
SHA-3 Certs. #A352, #A359, #A368, #A372, #A374, #A507 and #A1498
SHS Certs. #A353, #A360, #A364, #A365, #A367, #A386 and #A1498
Triple-DES Certs. #A341, #A345 and #A347
Allowed Algorithms
MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
4.1

Vendor

SUSE, LLC
10 Canal Park, Suite 200
Cambridge, MA 02141
USA

Ivan Teblin
ivan.teblin@suse.com
Phone: +1-800-858-4000
Alexander Bergmann
ABergmann@suse.com
Phone: +1-800-858-4000

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0