Module Name
Huawei EulerOS 2.0 OpenSSL Cryptographic Module
Caveat
When operated in FIPS mode.
Security Level Exceptions
Embodiment
Multi-Chip Stand Alone
Description
The Huawei EulerOS 2.0 OpenSSL Cryptographic Module is a software library supporting the implementation of Transport Layer Security (TLS) protocol v1.2 as well as general purpose approved cryptographic algorithms.
The module provides cryptographic services to applications running in the user space of the underlying EulerOS 2.0 operating system through a C language application program interface (API).
Tested Configuration(s)
- Huawei EulerOS 2.0 on FusionServer RH2288 with Intel Xeon E5-2690 processor. Huawei EulerOS 2.0 on Taishan200 with Kunpeng 920 processor.
FIPS Algorithms
AES |
Certs. #A903 |
CVL |
Cert. #A903 |
DRBG |
Cert. #A903 |
DSA |
Cert. #A903 |
ECDSA |
Cert. #A903 |
ENT |
NP |
HMAC |
Cert. #A903 |
KAS |
KAS-SSC Cert. #A903, CVL Cert. #A903 |
KAS-SSC |
Cert. #A903 |
KTS |
AES Cert. #A903; key establishment methodology provides between 128 and 256 bits of encryption strength |
KTS |
AES Cert. #A903 and HMAC Cert. #A903; key establishment methodology provides between 128 and 256 bits of encryption strength |
KTS |
Triple-DES Cert. #A903 and HMAC Cert. #A903; key establishment methodology provides 112 bits of encryption strength |
RSA |
Cert. #A903 |
SHA-3 |
Cert. #A903 |
SHS |
Cert. #A903 |
Triple-DES |
Cert. #A903 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)