U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

Certificate #3992

Details

Module Name
SUSE Linux Enterprise Server libgcrypt Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
7/21/2026
Overall Level
1
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in section 9 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy.
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
SUSE Libgcrypt is a general purpose cryptographic library based on the code from GnuPG.
Tested Configuration(s)
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 with PAA
  • SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 without PAA (single-user mode)
  • SUSE Linux Enterprise Server 15 SP2 running on IBM System Z/15 with IBM z15
FIPS Algorithms
AES Certs. #A482, #A485, #A486 and #A1152
DRBG Certs. #A482, #A485, #A486, #A487 and #A1152
DSA Certs. #A482, #A485, #A486, #A487 and #A1152
ECDSA Certs. #A482, #A485, #A486, #A487 and #A1152
HMAC Certs. #A482, #A484, #A485, #A486, #A487, #A488 and #A1152
KTS AES Certs. #A482, #A485, #A486 and #A1152; key establishment methodology provides between 128 and 256 bits of encryption strength
PBKDF vendor affirmed
RSA Certs. #A482, #A485, #A486, #A487 and #A1152
SHA-3 Certs. #A482, #A487 and #A1152
SHS Certs. #A482, #A484, #A485, #A486, #A488 and #A1152
Triple-DES Cert. #A482
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
3.1

Vendor

SUSE, LLC
10 Canal Park, Suite 200
Cambridge, MA 02141
USA

Ivan Teblin
ivan.teblin@suse.com
Phone: +1-800-858-4000
Alexander Bergmann
ABergmann@suse.com
Phone: +1-800-858-4000

Validation History

Date Type Lab
7/22/2021 Initial ATSEC INFORMATION SECURITY CORP
11/28/2021 Update ATSEC INFORMATION SECURITY CORP