U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #4170

Details

Module Name
Oracle Linux 7 OpenSSL Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Oracle Linux OpenSSL Cryptographic Module is a software module supporting FIPS 140-2 approved cryptographic algorithms for general use by vendors.
Tested Configuration(s)
  • Oracle Linux 7.8 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 with PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 without PAA (single-user mode)
  • Oracle Linux 7.8 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
  • Oracle Linux 7.8 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA
FIPS Algorithms
AES Certs. #A1207, #A1208, #A1209, #A1210, #A1211, #A1212, #A1213, #A1214, #A1215, #A1216, #A1217, #A1218, #A2394, #A2396, #A2397, #A2398, #A2399 and #A2400
CVL Certs. #A1224, #A1225, #A1226 and #A1227
DRBG Certs. #A1207, #A1208, #A1209, #A1228, #A2394, #A2396 and #A2397
DSA Certs. #A1224, #A1225, #A1226 and #A1227
ECDSA Certs. #A1224, #A1225, #A1226 and #A1227
ENT NP
HMAC Certs. #A1224, #A1225, #A1226, #A1227 and #A2395
KAS KAS-SSC Certs. #A1224, #A1225, #A1226, #A1227 and #A1322, CVL Certs. #A1224, #A1225, #A1226 and #A1227
KAS-SSC Certs. #A1224, #A1225, #A1226, #A1227 and #A1322
KTS AES Certs. #A1207, #A1208, #A1209, #A1210, #A1211, #A1212, #A1213, #A1214, #A1215, #A1216, #A1217, #A1218, #A2394, #A2396, #A2397, #A2398, #A2399 and #A2400; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Certs. #A1207, #A1208, #A1209, #A2394, #A2396 and #A2397 and HMAC Certs. #A1224, #A1225, #A1226, #A1227 and #A2395; key establishment methodology provides 128 or 256 bits of encryption strength
KTS Triple-DES Cert. #A1206 and HMAC Certs. #A1224, #A1225, #A1224, #A1227 and #A2395; key establishment methodology provides 112 bits of encryption strength
RSA Certs. #A1224, #A1225, #A1226 and #A1227
SHS Certs. #A1224, #A1225, #A1226, #A1227 and #A2395
Triple-DES Cert. #A1206
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R7-7.8.0

Vendor

Oracle Corporation
2300 Oracle Way
Austin, TX 78741
USA

Security Evaluation team
seceval_us@oracle.com

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
3/4/2022 Initial ATSEC INFORMATION SECURITY CORP
7/1/2022 Update ATSEC INFORMATION SECURITY CORP