U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

Certificate #4229

Details

Module Name
Oracle Linux 8 GnuTLS Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 8 GnuTLS Cryptographic Module is a set of libraries implementing general purpose cryptographic algorithms and network protocols.
Tested Configuration(s)
  • Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 with PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 without PAA (single-user mode)
  • Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA
FIPS Algorithms
AES Certs. #A1704, #A1705, #A1707, #A1708, #A1710, #A1711, #A1713 and #A2560
CKG vendor affirmed
CVL Cert. #A1710
DRBG Cert. #A1710
DSA Cert. #A1710
ECDSA Cert. #A1710
ENT NP
HMAC Certs. #A1705, #A1710 and #A2560
KAS KAS-SSC Cert. #A1710, CVL Cert. #A1710
KAS-SSC Cert. #A1710
KDA Cert. #A1709
KTS AES Certs. #A1704, #A1705, #A1710 and #A2560; key establishment methodology provides 128 or 256 bits of encryption strength
KTS AES Certs. #A1704, #A1705, #A1710 and #A2560 and HMAC Certs. #A1705, #A1710 and #A2560; key establishment methodology provides 128 or 256 bits of encryption strength
KTS Triple-DES Cert. #A1710 and HMAC Certs. #A1705, #A1710 and #A2560; key establishment methodology provides 112 bits of encryption strength
PBKDF Cert. #A1710
RSA Cert. #A1710
SHA-3 Certs. #A1706 and #A1712
SHS Certs. #A1705, #A1710 and #A2560
Triple-DES Cert. #A1710
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength);
Software Versions
R8-8.4.0

Vendor

Oracle Corporation
2300 Oracle Way
Austin, TX 78741
USA

Security Evaluation team
seceval_us@oracle.com

Validation History

Date Type Lab
5/16/2022 Initial ATSEC INFORMATION SECURITY CORP
8/2/2022 Update ATSEC INFORMATION SECURITY CORP