Module Name
Oracle Linux 8 GnuTLS Cryptographic Module
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 8 GnuTLS Cryptographic Module is a set of libraries implementing general purpose cryptographic algorithms and network protocols.
Tested Configuration(s)
- Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 with PAA
- Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 without PAA (single-user mode)
- Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
- Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
- Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
- Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA
FIPS Algorithms
| AES |
Certs. #A1704, #A1705, #A1707, #A1708, #A1710, #A1711, #A1713 and #A2560 |
| CKG |
vendor affirmed |
| CVL |
Cert. #A1710 |
| DRBG |
Cert. #A1710 |
| DSA |
Cert. #A1710 |
| ECDSA |
Cert. #A1710 |
| ENT |
NP |
| HMAC |
Certs. #A1705, #A1710 and #A2560 |
| KAS |
KAS-SSC Cert. #A1710, CVL Cert. #A1710 |
| KAS-SSC |
Cert. #A1710 |
| KDA |
Cert. #A1709 |
| KTS |
AES Certs. #A1704, #A1705, #A1710 and #A2560; key establishment methodology provides 128 or 256 bits of encryption strength |
| KTS |
AES Certs. #A1704, #A1705, #A1710 and #A2560 and HMAC Certs. #A1705, #A1710 and #A2560; key establishment methodology provides 128 or 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #A1710 and HMAC Certs. #A1705, #A1710 and #A2560; key establishment methodology provides 112 bits of encryption strength |
| PBKDF |
Cert. #A1710 |
| RSA |
Cert. #A1710 |
| SHA-3 |
Certs. #A1706 and #A1712 |
| SHS |
Certs. #A1705, #A1710 and #A2560 |
| Triple-DES |
Cert. #A1710 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength);
Software Versions
R8-8.4.0
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
