This page was not yet optimized for use on mobile devices.

SUSE Linux Enterprise GnuTLS Cryptographic Module

Certificate details

Certificate ID	#4742
Status	historical
Historical reason	Replaced by certificate #5419
Validation dates	26.07.2024
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	GnuTLS is a secure communications library implementing the TLS protocol. It provides a simple C language application programming interface to access the secure communications protocols as well as APIs to parse and write X.509, PKCS#12, and other required structures which is shipped with SUSE Linux Enterprise.
Tested configurations	SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 with PAA SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 without PAA SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 with PAA SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 without PAA SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 with PAA SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 without PAA SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 with PAI SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 without PAI SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R with PAA SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R without PAA
Vendor	SUSE, LLC http://www.suse.com
Lab	atsec information security corporation
Algorithms	AES-CBCA3007 AES-CCMA3007 AES-CFB8A2995 AES-CMACA3004 AES-GCMA3007 AES-GMACA2992 AES-XTS Testing Revision 2.0A2993 Counter DRBGA2992 ECDSA KeyGen (FIPS186-4)A2992 ECDSA KeyVer (FIPS186-4)A2992 ECDSA SigGen (FIPS186-4)A2992 ECDSA SigVer (FIPS186-4)A2992 HMAC-SHA-1A3007 HMAC-SHA2-224A3007 HMAC-SHA2-256A3007 HMAC-SHA2-384A3007 HMAC-SHA2-512A3007 KAS-ECC-SSC Sp800-56Ar3A2992 KAS-FFC-SSC Sp800-56Ar3A2992 KDA HKDF Sp800-56Cr1A2991 KDF TLSA2992 PBKDFA2992 RSA KeyGen (FIPS186-4)A2992 RSA SigGen (FIPS186-4)A2992 RSA SigVer (FIPS186-4)A2992 Safe Primes Key GenerationA2992 SHA-1A3007 SHA2-224A3007 SHA2-256A3007 SHA2-384A3007 SHA2-512A3007 SHA3-224A2994 SHA3-256A2994 SHA3-384A2994 SHA3-512A2994 TLS v1.2 KDF RFC7627A2992
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-256, AES-, Twofish, Serpent, CAST, RC2, RC4, DES, Triple-DES, TDES, ChaCha20, Salsa20, Poly1305, Blowfish, Camellia, SEED, HMAC, CMAC

Asymmetric Algorithms

ECDH, ECDSA, ECC, Diffie-Hellman, DH, DSA

Hash functions

SHA-1, SHA-256, SHA-384, SHA-512, SHA-3, SHA3-224, SHA3-384, SHA3-512, SHA3-256, MD4, MD5, PBKDF, PBKDF2

Schemes

MAC, Key Exchange, Key agreement, Key Agreement

Protocols

SSH, TLS, TLS v1.2, TLSv1.0, TLS 1.3, TLSv1.2, TLSv1.3, TLS v1.3, IKE, IKEv2

Randomness

DRBG, RNG

Libraries

GnuTLS

Elliptic Curves

P-384, P-521, P-256

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

TLS cipher suites

TLS_DH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DH_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DH_RSA_WITH_AES_128_GCM_SHA256, TLS_DH_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_CCM, TLS_DHE_RSA_WITH_AES_256_CCM, TLS_DHE_RSA_WITH_AES_128_CCM_8, TLS_DHE_RSA_WITH_AES_256_CCM_8

Security level

level 1

Standards

FIPS 140-3, FIPS197, FIPS186-4, FIPS198-1, FIPS202, FIPS180-4, FIPS 186-4, FIPS140-3, FIPS PUB 140-3, SP 800-140B, PKCS#1, RFC5288, RFC7627, RFC7919, RFC3526, RFC8446, RFC3268, RFC5246, RFC4279, RFC4492, RFC5289, RFC6655, RFC3394, ISO/IEC 24759

Creation date	D:20240725182618Z00'00'
Modification date	D:20240725182618Z00'00'
Pages	55
Producer	macOS Version 13.6.7 (Build 22G720) Quartz PDFContext

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['KAS-FFC-SSC Sp800-56Ar3A2992', 'Counter DRBGA2992', 'TLS v1.2 KDF RFC7627A2992', 'RSA SigGen (FIPS186-4)A2992', 'KAS-ECC-SSC Sp800-56Ar3A2992', 'KDF TLSA2992', 'ECDSA KeyVer (FIPS186-4)A2992', 'SHA3-384A2994', 'KDA HKDF Sp800-56Cr1A2991', 'SHA3-224A2994', 'SHA2-512A3007', 'SHA3-512A2994', 'ECDSA SigGen (FIPS186-4)A2992', 'AES-CMACA3004', 'PBKDFA2992', 'ECDSA SigVer (FIPS186-4)A2992', 'SHA-1A3007', 'AES-CCMA3007', 'ECDSA KeyGen (FIPS186-4)A2992', 'SHA2-384A3007', 'HMAC-SHA-1A3007', 'HMAC-SHA2-224A3007', 'AES-XTS Testing Revision 2.0A2993', 'RSA KeyGen (FIPS186-4)A2992', 'AES-GCMA3007', 'RSA SigVer (FIPS186-4)A2992', 'Safe Primes Key GenerationA2992', 'AES-GMACA2992', 'HMAC-SHA2-256A3007', 'SHA3-256A2994', 'SHA2-256A3007', 'HMAC-SHA2-384A3007', 'HMAC-SHA2-512A3007', 'SHA2-224A3007', 'AES-CFB8A2995', 'AES-CBCA3007']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A2985', '#A2997', '#A2991', '#A2994', '#A2988', '#A2990', '#A2996', '#A3007', '#A3004', '#A2995', '#A2987', '#A2993', '#A2998', '#A2984', '#A2992', '#A2986', '#A2989']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__delete__': ['Level 1']}}}, 'eval_facility': {'__update__': {'atsec': {'__update__': {'atsec': 56}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'Twofish': {'__update__': {'Twofish': 2}}, 'CAST': {'__update__': {'CAST': 5}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 23}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDH': {'__update__': {'ECDH': 6}}, 'ECDSA': {'__update__': {'ECDSA': 63}}}}, 'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 65, 'DH': 6}}}}}}, 'crypto_scheme': {'__update__': {'MAC': {'__update__': {'MAC': 22}}}}, 'crypto_protocol': {'__update__': {'TLS': {'__update__': {'TLS': {'__update__': {'TLS': 114, 'TLS 1.3': 3}}}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 44}}}}, 'crypto_library': {'__update__': {'GnuTLS': {'__update__': {'GnuTLS': 58}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-3': 66, 'FIPS186-4': 12}}, 'RFC': {'__update__': {'RFC7627': 13}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A2985', '#A2997', '#A2991', '#A2994', '#A2988', '#A2990', '#A2996', '#A3007', '#A3004', '#A2995', '#A2987', '#A2993', '#A2998', '#A2984', '#A2992', '#A2986', '#A2989']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': 'd46c4e7762b151ddee87da62e74e9aa1a3a306d4a8821e4921e4152b4c7800ca', 'json_hash': 'ba11f025b8f9e5fb1382779c907e2de8c5801db72ca4dda21251f92d7443d186'} data.
20.07.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Replaced by certificate #5419.

The date_sunset property was set to None.
29.12.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The date_sunset property was set to 2029-07-25.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
24.02.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The exceptions property was updated.
12.08.2024

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf.
03.08.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4742,
  "dgst": "01cbde8c463f2a8f",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTS Testing Revision 2.0A2993",
        "TLS v1.2 KDF RFC7627A2992",
        "HMAC-SHA2-384A3007",
        "SHA3-224A2994",
        "AES-CBCA3007",
        "#A2985",
        "Counter DRBGA2992",
        "ECDSA SigGen (FIPS186-4)A2992",
        "HMAC-SHA2-512A3007",
        "#A3004",
        "#A2996",
        "RSA KeyGen (FIPS186-4)A2992",
        "#A2989",
        "RSA SigGen (FIPS186-4)A2992",
        "SHA3-384A2994",
        "ECDSA KeyGen (FIPS186-4)A2992",
        "#A2984",
        "KDA HKDF Sp800-56Cr1A2991",
        "#A2988",
        "HMAC-SHA2-256A3007",
        "AES-CCMA3007",
        "AES-GCMA3007",
        "#A2995",
        "#A2997",
        "SHA-1A3007",
        "RSA SigVer (FIPS186-4)A2992",
        "KAS-FFC-SSC Sp800-56Ar3A2992",
        "SHA3-512A2994",
        "HMAC-SHA-1A3007",
        "SHA2-224A3007",
        "Safe Primes Key GenerationA2992",
        "SHA3-256A2994",
        "#A2992",
        "#A2987",
        "#A2998",
        "SHA2-384A3007",
        "ECDSA KeyVer (FIPS186-4)A2992",
        "#A2993",
        "#A2986",
        "#A2991",
        "SHA2-512A3007",
        "KDF TLSA2992",
        "PBKDFA2992",
        "SHA2-256A3007",
        "#A2990",
        "HMAC-SHA2-224A3007",
        "#A3007",
        "KAS-ECC-SSC Sp800-56Ar3A2992",
        "AES-CFB8A2995",
        "ECDSA SigVer (FIPS186-4)A2992",
        "AES-CMACA3004",
        "AES-GMACA2992",
        "#A2994"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 6
          },
          "ECDSA": {
            "ECDSA": 63
          }
        },
        "FF": {
          "DH": {
            "DH": 6,
            "Diffie-Hellman": 65
          },
          "DSA": {
            "DSA": 9
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 5
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 14
        },
        "OFB": {
          "OFB": 1
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "GnuTLS": {
          "GnuTLS": 58
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 2,
          "IKEv2": 1
        },
        "SSH": {
          "SSH": 1
        },
        "TLS": {
          "TLS": {
            "TLS": 114,
            "TLS 1.3": 3,
            "TLS v1.2": 8,
            "TLS v1.3": 1,
            "TLSv1.0": 1,
            "TLSv1.2": 3,
            "TLSv1.3": 2
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1,
          "Key agreement": 5
        },
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 22
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 16,
          "P-384": 16,
          "P-521": 10
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 56
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 2,
          "HMAC-SHA-1": 4,
          "PKCS#1": 2,
          "SHA-1": 5,
          "SHA-256": 1,
          "SHA-3": 4,
          "SHA-384": 1,
          "SHA-512": 1,
          "SHA2- 224": 2,
          "SHA2- 256": 2,
          "SHA2- 384": 4,
          "SHA2- 512": 2,
          "SHA2-224": 4,
          "SHA2-256": 11,
          "SHA2-384": 5,
          "SHA2-512": 7,
          "SHA3- 256": 1,
          "SHA3-224": 2,
          "SHA3-256": 1,
          "SHA3-384": 2,
          "SHA3-512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 3
          },
          "MD5": {
            "MD5": 4
          }
        },
        "PBKDF": {
          "PBKDF": 19,
          "PBKDF2": 1
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 5
          },
          "SHA2": {
            "SHA-256": 1,
            "SHA-384": 1,
            "SHA-512": 1
          },
          "SHA3": {
            "SHA-3": 4,
            "SHA3-224": 2,
            "SHA3-256": 1,
            "SHA3-384": 2,
            "SHA3-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 44
        },
        "RNG": {
          "RNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 66,
          "FIPS 186-4": 4,
          "FIPS PUB 140-3": 1,
          "FIPS140-3": 1,
          "FIPS180-4": 2,
          "FIPS186-4": 12,
          "FIPS197": 3,
          "FIPS198-1": 3,
          "FIPS202": 2
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-140B": 1
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC3268": 4,
          "RFC3394": 1,
          "RFC3526": 3,
          "RFC4279": 2,
          "RFC4492": 8,
          "RFC5246": 4,
          "RFC5288": 7,
          "RFC5289": 16,
          "RFC6655": 4,
          "RFC7627": 13,
          "RFC7919": 3,
          "RFC8446": 6
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 56,
            "AES-": 2,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 5
          },
          "RC": {
            "RC2": 3,
            "RC4": 3
          },
          "Serpent": {
            "Serpent": 3
          },
          "Twofish": {
            "Twofish": 2
          }
        },
        "DES": {
          "3DES": {
            "TDES": 1,
            "Triple-DES": 5
          },
          "DES": {
            "DES": 4
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 7,
            "HMAC": 23
          }
        },
        "djb": {
          "ChaCha": {
            "ChaCha20": 3
          },
          "Poly": {
            "Poly1305": 1
          },
          "Salsa": {
            "Salsa20": 3
          }
        },
        "miscellaneous": {
          "Blowfish": {
            "Blowfish": 3
          },
          "Camellia": {
            "Camellia": 3
          },
          "SEED": {
            "SEED": 3
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_DHE_RSA_WITH_AES_128_CCM": 1,
          "TLS_DHE_RSA_WITH_AES_128_CCM_8": 1,
          "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1,
          "TLS_DHE_RSA_WITH_AES_256_CCM": 1,
          "TLS_DHE_RSA_WITH_AES_256_CCM_8": 1,
          "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_DH_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DH_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_DH_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_DH_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_DH_RSA_WITH_AES_256_CBC_SHA256": 1,
          "TLS_DH_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_PSK_WITH_AES_128_CBC_SHA": 1,
          "TLS_PSK_WITH_AES_256_CBC_SHA": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-XTS Testing Revision 2.0A2993",
        "TLS v1.2 KDF RFC7627A2992",
        "HMAC-SHA2-384A3007",
        "SHA3-224A2994",
        "AES-CBCA3007",
        "Counter DRBGA2992",
        "ECDSA SigGen (FIPS186-4)A2992",
        "HMAC-SHA2-512A3007",
        "RSA KeyGen (FIPS186-4)A2992",
        "RSA SigGen (FIPS186-4)A2992",
        "SHA3-384A2994",
        "ECDSA KeyGen (FIPS186-4)A2992",
        "KDA HKDF Sp800-56Cr1A2991",
        "HMAC-SHA2-256A3007",
        "AES-CCMA3007",
        "AES-GCMA3007",
        "SHA-1A3007",
        "RSA SigVer (FIPS186-4)A2992",
        "KAS-FFC-SSC Sp800-56Ar3A2992",
        "SHA3-512A2994",
        "HMAC-SHA-1A3007",
        "SHA2-224A3007",
        "Safe Primes Key GenerationA2992",
        "SHA3-256A2994",
        "SHA2-384A3007",
        "ECDSA KeyVer (FIPS186-4)A2992",
        "SHA2-512A3007",
        "KDF TLSA2992",
        "PBKDFA2992",
        "SHA2-256A3007",
        "HMAC-SHA2-224A3007",
        "KAS-ECC-SSC Sp800-56Ar3A2992",
        "AES-CFB8A2995",
        "ECDSA SigVer (FIPS186-4)A2992",
        "AES-CMACA3004",
        "AES-GMACA2992"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A2984",
        "#A2991",
        "#A2994",
        "#A2990",
        "#A2985",
        "#A3007",
        "#A2992",
        "#A3004",
        "#A2996",
        "#A2995",
        "#A2987",
        "#A2989",
        "#A2997",
        "#A2998",
        "#A2993",
        "#A2986",
        "#A2988"
      ]
    },
    "policy_metadata": {
      "/CreationDate": "D:20240725182618Z00\u002700\u0027",
      "/ModDate": "D:20240725182618Z00\u002700\u0027",
      "/Producer": "macOS Version 13.6.7 (Build 22G720) Quartz PDFContext",
      "pdf_file_size_bytes": 1048280,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://documentation.suse.com/sle-micro/5.3/single-html/SLE-Micro-security/#sec-fips-slemicro-install",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35601",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35598",
          "https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-108/sp800-108.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35617",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35603",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://www.rfc-editor.org/rfc/rfc8446.txt",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35607",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38G.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35605",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://www.rfc-editor.org/rfc/rfc7627.txt",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35595",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35597",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35600",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35604",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35594",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35599",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/28",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/29",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140B.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35606",
          "https://documentation.suse.com/sle-rt/15-SP4/",
          "https://documentation.suse.com/sles/15-SP4/html/SLES-all/book-security.html",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35608",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38b.pdf",
          "https://documentation.suse.com/sled/15-SP4/html/SLED-all/book-security.html",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35614",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://documentation.suse.com/smart/linux/html/concept-bci/index.html",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "https://www.rfc-editor.org/rfc/rfc5288.txt",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35602",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35596",
          "https://www.ietf.org/rfc/rfc3394.txt"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 55
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "ba11f025b8f9e5fb1382779c907e2de8c5801db72ca4dda21251f92d7443d186",
      "source_hash": "a23867ed065f79253cebbf83c0060d4df05d56c500bc6bcb4c609608d62902d3",
      "txt_hash": "d46c4e7762b151ddee87da62e74e9aa1a3a306d4a8821e4921e4152b4c7800ca"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
    "date_sunset": null,
    "description": "GnuTLS is a secure communications library implementing the TLS protocol. It provides a simple C language application programming interface to access the secure communications protocols as well as APIs to parse and write X.509, PKCS#12, and other required structures which is shipped with SUSE Linux Enterprise.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Replaced by certificate #5419",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "SUSE Linux Enterprise GnuTLS Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "historical",
    "sw_versions": "1.1",
    "tested_conf": [
      "SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 with PAA",
      "SUSE Linux Enterprise Server 15 SP4 on PowerVM (VIOS 3.1.4.00) running on IBM Power E1080 (9080-HEX) with Power10 without PAA",
      "SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 with PAA",
      "SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE G242-P32-QZ with ARM Ampere(R) Altra(R) Q80-30 without PAA",
      "SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 with PAA",
      "SUSE Linux Enterprise Server 15 SP4 running on GIGABYTE R181-Z90-00 with AMD EPYC(TM) 7371 without PAA",
      "SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 with PAI",
      "SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with z15 without PAI",
      "SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R with PAA",
      "SUSE Linux Enterprise Server 15 SP4 running on Supermicro Super Server SYS-6019P-WTR with Intel(R) Xeon(R) Silver 4215R without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-07-26",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "SUSE, LLC",
    "vendor_url": "http://www.suse.com"
  }
}

Sections

SUSE Linux Enterprise GnuTLS Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

TLS cipher suites

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

SUSE Linux Enterprise GnuTLS Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

TLS cipher suites

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data