U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

Certificate #4232

Details

Module Name
Oracle Linux 8 libgcrypt Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 8 libgcrypt Cryptographic Module is a software library implementing general purpose cryptographic algorithms.
Tested Configuration(s)
  • Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 with PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 without PAA (single-user mode)
  • Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
  • Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA
FIPS Algorithms
AES Certs. #A1785, #A1786, #A1787 and #A1788
DRBG Certs. #A1785, #A1786, #A1787, #A1788 and #A1789
DSA Certs. #A1785, #A1786, #A1787, #A1788 and #A1789
ECDSA Certs. #A1785, #A1786, #A1787, #A1788 and #A1789
ENT NP
HMAC Certs. #A1784, #A1785, #A1786, #A1787, #A1788 and #A1789
KTS AES Certs. #A1785, #A1786, #A1787 and #A1788; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS-RSA Certs. #A1785, #A1786, #A1787, #A1788 and #A1789; key establishment methodology provides between 112 and 200 bits of encryption strength
PBKDF Certs. #A1785, #A1786, #A1787 and #A1788 and #A1789
RSA Certs. #A1785, #A1786, #A1787, #A1788 and #A1789
SHA-3 Certs. #A1786, #A1787 and #A1789
SHS Certs. #A1784, #A1785, #A1786, #A1787, #A1788 and #A1789
Triple-DES Cert. #A1786
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R8-8.4.0

Vendor

Oracle Corporation
2300 Oracle Way
Austin, TX 78741
USA

Security Evaluation team
seceval_us@oracle.com

Validation History

Date Type Lab
5/23/2022 Initial ATSEC INFORMATION SECURITY CORP
7/15/2022 Update ATSEC INFORMATION SECURITY CORP