© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Cloudlinux Inc., TuxCare division
OpenSSL FIPS Provider for AlmaLinux 9
FIPS 140-3 Non-Proprietary Security Policy
Document Version 1.2
Last update: 2026-03-31
Prepared by:
atsec information security corporation
4516 Seton Center Pkwy, Suite 250
Austin, TX 78759
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
www.atsec.com
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Table of Contents
1 General.......................................................................................................................................................................7
1.1 Overview ............................................................................................................................................................7
1.1.1 How this Security Policy was prepared .....................................................................................................7
1.2 Security Levels....................................................................................................................................................7
2 Cryptographic Module Specification........................................................................................................................9
2.1 Description .........................................................................................................................................................9
2.2 Tested and Vendor Affirmed Module Version and Identification ................................................................10
2.3 Excluded Components .....................................................................................................................................11
2.4 Modes of Operation..........................................................................................................................................11
2.5 Algorithms........................................................................................................................................................12
2.6 Security Function Implementations................................................................................................................22
2.7 Algorithm Specific Information ......................................................................................................................30
2.7.1 AES GCM IV .............................................................................................................................................30
2.7.2 AES XTS ....................................................................................................................................................30
2.7.3 Key Derivation using SP 800-132 PBKDF2 .............................................................................................30
2.7.4 SP 800-56Ar3 Assurances.........................................................................................................................31
2.7.5 SHA-3........................................................................................................................................................31
2.7.6 RSA Signatures..........................................................................................................................................31
2.7.7 Key Agreement .........................................................................................................................................31
2.7.8 Key Transport............................................................................................................................................32
2.8 RBG and Entropy .............................................................................................................................................32
2.9 Key Generation ................................................................................................................................................33
2.10 Key Establishment..........................................................................................................................................33
2.11 Industry Protocols..........................................................................................................................................34
3 Cryptographic Module Interfaces...........................................................................................................................35
3.1 Ports and Interfaces..........................................................................................................................................35
4 Roles, Services, and Authentication .......................................................................................................................36
4.1 Authentication Methods..................................................................................................................................36
4.2 Roles..................................................................................................................................................................36
4.3 Approved Services............................................................................................................................................36
4.4 Non-Approved Services ...................................................................................................................................49
4.5 External Software/Firmware Loaded...............................................................................................................50
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
5 Software/Firmware Security ...................................................................................................................................51
5.1 Integrity Techniques........................................................................................................................................51
5.2 Initiate on Demand ..........................................................................................................................................51
6 Operational Environment .......................................................................................................................................52
6.1 Operational Environment Type and Requirements .......................................................................................52
6.2 Configuration Settings and Restrictions..........................................................................................................52
7 Physical Security .....................................................................................................................................................53
8 Non-Invasive Security.............................................................................................................................................54
9 Sensitive Security Parameters Management ..........................................................................................................55
9.1 Storage Areas....................................................................................................................................................55
9.2 SSP Input-Output Methods .............................................................................................................................55
9.3 SSP Zeroization Methods.................................................................................................................................55
9.4 SSPs...................................................................................................................................................................57
9.5 Transitions........................................................................................................................................................67
10 Self-Tests................................................................................................................................................................68
10.1 Pre-Operational Self-Tests.............................................................................................................................68
10.2 Conditional Self-Tests....................................................................................................................................69
10.3 Periodic Self-Test Information ......................................................................................................................83
10.4 Error States .....................................................................................................................................................91
10.5 Operator Initiation of Self-Tests....................................................................................................................92
11 Life-Cycle Assurance.............................................................................................................................................93
11.1 Installation, Initialization, and Startup Procedures......................................................................................93
11.2 Administrator Guidance ................................................................................................................................93
11.3 Non-Administrator Guidance........................................................................................................................93
11.4 Design and Rules............................................................................................................................................93
11.5 Maintenance Requirements...........................................................................................................................93
11.6 End of Life ......................................................................................................................................................94
12 Mitigation of Other Attacks..................................................................................................................................95
12.1 Attack List.......................................................................................................................................................95
Appendix A. Glossary and Abbreviations .................................................................................................................96
Appendix B. References .............................................................................................................................................98
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
List of Tables
Table 1: Security Levels................................................................................................................................................8
Table 2: Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets) .............................10
Table 3: Tested Operational Environments - Software, Firmware, Hybrid ............................................................11
Table 4: Modes List and Description .........................................................................................................................11
Table 5: Approved Algorithms...................................................................................................................................20
Table 6: Vendor-Affirmed Algorithms......................................................................................................................21
Table 7: Non-Approved, Not Allowed Algorithms...................................................................................................22
Table 8: Security Function Implementations............................................................................................................30
Table 9: Entropy Certificates .....................................................................................................................................32
Table 10: Entropy Sources..........................................................................................................................................32
Table 11: Ports and Interfaces....................................................................................................................................35
Table 12: Roles............................................................................................................................................................36
Table 13: Approved Services......................................................................................................................................48
Table 14: Non-Approved Services .............................................................................................................................49
Table 15: Storage Areas ..............................................................................................................................................55
Table 16: SSP Input-Output Methods .......................................................................................................................55
Table 17: SSP Zeroization Methods...........................................................................................................................56
Table 18: SSP Table 1 .................................................................................................................................................62
Table 19: SSP Table 2 .................................................................................................................................................67
Table 20: Pre-Operational Self-Tests.........................................................................................................................69
Table 21: Conditional Self-Tests ................................................................................................................................82
Table 22: Pre-Operational Periodic Information......................................................................................................83
Table 23: Conditional Periodic Information .............................................................................................................91
Table 24: Error States .................................................................................................................................................91
List of Figures
Figure 1 - Block Diagram ...........................................................................................................................................10
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
1 General
1.1 Overview
This document is the non-proprietary FIPS 140-3 Security Policy for version 3.0.7-1d2bd88ee26b3c90 of the
OpenSSL FIPS Provider for AlmaLinux 9. It contains the security rules under which the module must operate
and describes how this module meets the requirements as specified in FIPS PUB 140-3 (Federal Information
Processing Standards Publication 140-3) for an overall Security Level 1 module.
This Non-Proprietary Security Policy may be reproduced and distributed, but only whole and intact and
including this notice. Other documentation is proprietary to their authors.
1.1.1 How this Security Policy was prepared
In preparing the Security Policy document, the laboratory formatted the vendor-supplied documentation for
consolidation without altering the technical statements therein contained. The further refining of the Security
Policy document was conducted iteratively throughout the conformance testing, wherein the Security Policy
was submitted to the vendor, who would then edit, modify, and add technical contents. The vendor would also
supply additional documentation, which the laboratory formatted into the existing Security Policy, and
resubmitted to the vendor for their final editing.
1.2 Security Levels
Section Title Security Level
1 General 1
2 Cryptographic module specification 1
3 Cryptographic module interfaces 1
4 Roles, services, and authentication 1
5 Software/Firmware security 1
6 Operational environment 1
7 Physical security N/A
8 Non-invasive security N/A
9 Sensitive security parameter management 1
10 Self-tests 1
11 Life-cycle assurance 1
12 Mitigation of other attacks 1
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Section Title Security Level
Overall Level 1
Table 1: Security Levels
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
2 Cryptographic Module Specification
2.1 Description
Purpose and Use:
The OpenSSL FIPS Provider for AlmaLinux 9 (hereafter referred to as “the module”) is defined as a software
module in a multi-chip standalone embodiment. It provides a C language application program interface (API)
for use by other applications that require cryptographic functionality. The module is a software library
supporting FIPS 140-3 approved algorithms developed by TuxCare for its use by other applications that require
cryptographic functionality and consists of one software component, the “FIPS provider”, which implements
the FIPS requirements and the cryptographic functionality provided to the operator.
Module Type: Software
Module Embodiment: Multi-Chip Standalone
Module Characteristics:
Cryptographic Boundary:
The cryptographic boundary of the module is defined as the fips.so shared library, which contains the compiled
code implementing the FIPS provider.
Tested Operational Environment’s Physical Perimeter (TOEPP):
The TOEPP of the module is defined as the general-purpose computer on which the module is installed.
Figure 1 shows a block diagram that represents the design of the module when the module is operational and
providing services to other user space applications. In this diagram, the physical perimeter of the operational
environment (a general-purpose computer on which the module is installed) is indicated by a purple dashed
line. The cryptographic boundary is represented by the components painted in orange blocks, which consists
only of the shared library implementing the FIPS provider (fips.so).
Green lines indicate the flow of data between the cryptographic module and its operator application, through
the logical interfaces defined in Section 3 Cryptographic Module Interfaces.
Components in white are only included in the diagram for informational purposes. They are not included in the
cryptographic boundary (and therefore not part of the module’s validation). For example, the kernel is
responsible for managing system calls issued by the module itself, as well as other applications using the module
for cryptographic services.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Figure 1 - Block Diagram
2.2 Tested and Vendor Affirmed Module Version and Identification
Tested Module Identification – Hardware:
N/A for this module.
Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets):
Package or File Name Software/ Firmware
Version
Features Integrity Test
fips.so 3.0.7-1d2bd88ee26b3c90 N/A HMAC-SHA2-256
Table 2: Tested Module Identification – Software, Firmware, Hybrid (Executable Code Sets)
Tested Module Identification – Hybrid Disjoint Hardware:
N/A for this module.
Tested Operational Environments - Software, Firmware, Hybrid:
Operating
System
Hardware Platform Processors PAA/PAI Hypervisor
or Host OS
Version(s)
AlmaLinux
9.2
Amazon Web Services
(AWS) m5.metal
Intel Xeon
Platinum 8259CL
Yes N/A 3.0.7-
1d2bd88ee26b3c90
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Operating
System
Hardware Platform Processors PAA/PAI Hypervisor
or Host OS
Version(s)
AlmaLinux
9.2
Amazon Web Services
(AWS) m5.metal
Intel Xeon
Platinum 8259CL
No N/A 3.0.7-
1d2bd88ee26b3c90
AlmaLinux
9.2
Amazon Web Services
(AWS) a1.metal
AWS Graviton Yes N/A 3.0.7-
1d2bd88ee26b3c90
AlmaLinux
9.2
Amazon Web Services
(AWS) a1.metal
AWS Graviton No N/A 3.0.7-
1d2bd88ee26b3c90
Table 3: Tested Operational Environments - Software, Firmware, Hybrid
Vendor-Affirmed Operational Environments - Software, Firmware, Hybrid:
N/A for this module.
CMVP makes no statement as to the correct operation of the module or the security strengths of the generated
keys when so ported if the specific operational environment is not listed on the validation certificate.
2.3 Excluded Components
There are no components excluded from the requirements of the FIPS 140-3 standard.
2.4 Modes of Operation
Modes List and Description:
Mode Name Description Type Status Indicator
Approved
mode
Automatically entered whenever an
approved service is requested
Approved Equivalent to the indicator of
the requested service
Non-approved
mode
Automatically entered whenever a non-
approved service is requested
Non-
Approved
Equivalent to the indicator of
the requested service
Table 4: Modes List and Description
After passing all pre-operational self-tests and cryptographic algorithm self-tests executed on start-up, the
module automatically transitions to the approved mode. No operator intervention is required to reach this
point. The module operates in the approved mode of operation by default and can only transition into the non-
approved mode by calling one of the non-approved services listed in the Non-Approved Services table of the
Security Policy.
In the operational state, the module accepts service requests from calling applications through its logical
interfaces. At any point in the operational state, a calling application can end its process, causing the module to
end its operation.
Mode Change Instructions and Status:
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
The module automatically switches between the approved and non-approved modes depending on the services
requested by the operator. The status indicator of the mode of operation is equivalent to the indicator of the
service that was requested.
2.5 Algorithms
Approved Algorithms:
Algorithm CAVP Cert Properties Reference
AES-CBC A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-
38A
AES-CBC-
CS1
A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - decrypt, encrypt
Key Length - 128, 192, 256
Payload Length - Payload Length: 128-65536 Increment
8
SP 800-
38A
AES-CBC-
CS2
A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - decrypt, encrypt
Key Length - 128, 192, 256
Payload Length - Payload Length: 128-65536 Increment
8
SP 800-
38A
AES-CBC-
CS3
A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - decrypt, encrypt
Key Length - 128, 192, 256
Payload Length - Payload Length: 128-65536 Increment
8
SP 800-
38A
AES-CCM A4056, A4057,
A4058, A4061,
A4062, A4063
Key Length - 128, 192, 256
Tag Length - 112, 128, 32, 48, 64, 80, 96
IV Length - IV Length: 56, 64, 72, 80, 88, 96, 104
Payload Length - Payload Length: 256
AAD Length - AAD Length: 0, 256, 65536
SP 800-
38C
AES-CFB1 A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-
38A
AES-CFB128 A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-
38A
AES-CFB8 A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-
38A
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
AES-CMAC A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Generation, Verification
Key Length - 128, 192, 256
MAC Length - MAC Length: 128
Message Length - Message Length: 8-524288 Increment 8
SP 800-
38B
AES-CTR A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
Payload Length - Payload Length: 8-128 Increment 8
Supports Counter larger than maximum value - No
Incremental Counter - Yes
Counter Tests Performed - Yes
SP 800-
38A
AES-ECB A4054, A4056,
A4057, A4058,
A4061, A4062,
A4063, A4064,
A4065, A4066
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-
38A
AES-GCM A4067, A4068,
A4069, A4070,
A4071, A4072,
A4073, A4074,
A4075, A4076,
A4077, A4078
Direction - Decrypt, Encrypt
IV Generation - External, Internal
IV Generation Mode - 8.2.1
Key Length - 128, 192, 256
Tag Length - 104, 112, 120, 128, 32, 64, 96
IV Length - IV Length: 96, IV Length: 96, 128
Payload Length - Payload Length: 128, 256, 120, 248
AAD Length - AAD Length: 128, 256, 120, 0, AAD
Length: 64, 96
SP 800-
38D
AES-GMAC A4067, A4068,
A4069, A4070,
A4071, A4072,
A4073, A4074,
A4075, A4076,
A4077, A4078
Direction - Decrypt, Encrypt
IV Generation - External
IV Generation Mode - 8.2.1
Key Length - 128, 192, 256
Tag Length - 104, 112, 120, 128, 32, 64, 96
IV Length - IV Length: 96
AAD Length - AAD Length: 128, 256, 120, 0
SP 800-
38D
AES-KW A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Cipher - Cipher
Key Length - 128, 192, 256
Payload Length - Payload Length: 128-4096 Increment
128
SP 800-
38F
AES-KWP A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Cipher - Cipher
Key Length - 128, 192, 256
Payload Length - Payload Length: 8-4096 Increment 8
SP 800-
38F
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
AES-OFB A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 192, 256
SP 800-
38A
AES-XTS
Testing
Revision 2.0
A4056, A4057,
A4058, A4061,
A4062, A4063
Direction - Decrypt, Encrypt
Key Length - 128, 256
Payload Length - Payload Length: 128-65536 Increment
128
Tweak Mode - Hex
Data Unit Length Matches Payload Length - Yes
SP 800-
38E
Counter
DRBG
A4053 Prediction Resistance - No, Yes
Supports Reseed - Yes
Mode - AES-128, AES-192, AES-256
Derivation Function Enabled - No, Yes
Additional Input - Additional Input: 0-512 Increment
128, Additional Input: 256, Additional Input: 320,
Additional Input: 384
Entropy Input - Entropy Input: 128, Entropy Input: 192,
Entropy Input: 256, Entropy Input: 320, Entropy Input:
384
Nonce - Nonce: 0, Nonce: 128, Nonce: 64, Nonce: 96
Personalization String Length - Personalization String
Length: 0-512 Increment 128, Personalization String
Length: 256, Personalization String Length: 320,
Personalization String Length: 384
Returned Bits - 256
SP 800-
90A Rev. 1
ECDSA
KeyGen
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Curve - P-224, P-256, P-384, P-521
Secret Generation Mode - Testing Candidates
FIPS 186-4
ECDSA
KeyVer
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Curve - P-224, P-256, P-384, P-521 FIPS 186-4
ECDSA
SigGen
(FIPS186-4)
A4055 Component - No
Curve - P-224, P-256, P-384, P-521
Hash Algorithm - SHA3-224, SHA3-256, SHA3-384,
SHA3-512
FIPS 186-4
ECDSA
SigGen
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Component - No
Curve - P-224, P-256, P-384, P-521
Hash Algorithm - SHA2-224, SHA2-256, SHA2-384,
SHA2-512, SHA2-512/224, SHA2-512/256
FIPS 186-4
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
ECDSA
SigVer
(FIPS186-4)
A4055 Component - No
Curve - P-224, P-256, P-384, P-521
Hash Algorithm - SHA3-224, SHA3-256, SHA3-384,
SHA3-512
FIPS 186-4
ECDSA
SigVer
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Component - No
Curve - P-224, P-256, P-384, P-521
Hash Algorithm - SHA2-224, SHA2-256, SHA2-384,
SHA2-512, SHA2-512/224, SHA2-512/256
FIPS 186-4
Hash DRBG A4053 Prediction Resistance - No, Yes
Supports Reseed - Yes
Mode - SHA-1, SHA2-256, SHA2-512
Entropy Input - Entropy Input: 128, Entropy Input: 256
Nonce - Nonce: 128, Nonce: 64
Personalization String Length - Personalization String
Length: 0-512 Increment 128
Additional Input - Additional Input: 0-512 Increment
128
Returned Bits - 160, 256, 512
SP 800-
90A Rev. 1
HMAC DRBG A4053 Prediction Resistance - No, Yes
Supports Reseed - Yes
Mode - SHA-1, SHA2-256, SHA2-512
Entropy Input - Entropy Input: 128, Entropy Input: 256
Nonce - Nonce: 128, Nonce: 64
Personalization String Length - Personalization String
Length: 0-512 Increment 128
Additional Input - Additional Input: 0-512 Increment
128
Returned Bits - 160, 256, 512
SP 800-
90A Rev. 1
HMAC-SHA-
1
A4059, A4079,
A4080, A4081,
A4082
MAC - MAC: 160
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA2-224
A4059, A4079,
A4080, A4081,
A4082
MAC - MAC: 224
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA2-256
A4059, A4060,
A4079, A4080,
A4081, A4082
MAC - MAC: 256
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
HMAC-
SHA2-384
A4059, A4079,
A4080, A4081,
A4082
MAC - MAC: 384
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA2-512
A4059, A4079,
A4080, A4081,
A4082
MAC - MAC: 512
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA2-
512/224
A4059, A4079,
A4080, A4081,
A4082
MAC - MAC: 224
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA2-
512/256
A4059, A4079,
A4080, A4081,
A4082
MAC - MAC: 256
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA3-224
A4055 MAC - MAC: 224
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA3-256
A4055 MAC - MAC: 256
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA3-384
A4055 MAC - MAC: 384
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
HMAC-
SHA3-512
A4055 MAC - MAC: 512
Key Length - Key Length: 112-524288 Increment 8
FIPS 198-1
KAS-ECC-
SSC Sp800-
56Ar3
A4059, A4079,
A4080, A4081,
A4082
Domain Parameter Generation Methods - P-224, P-256,
P-384, P-521
Scheme -
ephemeralUnified -
KAS Role - initiator, responder
SP 800-
56A Rev. 3
KAS-FFC-SSC
Sp800-56Ar3
A4085 Domain Parameter Generation Methods - ffdhe2048,
ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-
2048, MODP-3072, MODP-4096, MODP-6144, MODP-
8192
Scheme -
dhEphem -
KAS Role - initiator, responder
SP 800-
56A Rev. 3
KDA HKDF
Sp800-56Cr1
A4052 Fixed Info Pattern - uPartyInfo||vPartyInfo
Fixed Info Encoding - concatenation
Derived Key Length - 2048
Shared Secret Length - Shared Secret Length: 224-2048
Increment 8
SP 800-
56C Rev. 2
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
HMAC Algorithm - SHA-1, SHA2-224, SHA2-256,
SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256,
SHA3-224, SHA3-256, SHA3-384
KDA OneStep
SP800-56Cr2
A4051 Auxiliary Function Methods -
Auxiliary Function Name - SHA-1
Fixed Info Pattern - uPartyInfo||vPartyInfo
Fixed Info Encoding - concatenation
Derived Key Length - 2048
Shared Secret Length - Shared Secret Length: 224-2048
Increment 8
SP 800-
56C Rev. 2
KDA TwoStep
SP800-56Cr2
A4051 MAC Salting Methods - default, random
Fixed Info Pattern - uPartyInfo||vPartyInfo
Fixed Info Encoding - concatenation
KDF Mode - feedback
MAC Modes - HMAC-SHA-1, HMAC-SHA2-224,
HMAC-SHA2-256, HMAC-SHA2-384, HMAC-SHA2-
512, HMAC-SHA2-512/224, HMAC-SHA2-512/256,
HMAC-SHA3-224, HMAC-SHA3-256, HMAC-SHA3-
384
Fixed Data Order - after fixed data
Counter Lengths - 8
The KDF supports an empty IV - Yes
The KDF requires an empty IV - Yes
Supported Lengths - Supported Lengths: 2048
Derived Key Length - 2048
Shared Secret Length - Shared Secret Length: 224-2048
Increment 8
Perform Multiple Expansion Tests - No
Uses Hybrid Shared Secret - No
SP 800-
56C Rev. 2
KDF ANS
9.42 (CVL)
A4055 KDF Type - DER
Hash Algorithm - SHA3-224, SHA3-256, SHA3-384,
SHA3-512
zz Length - zz Length: 8-4096 Increment 8
Key Data Length - Key Data Length: 8-4096 Increment 8
Supplemental Information Length - Supplemental
Information Length: 0-256 Increment 8
OID - AES-128-KW, AES-192-KW, AES-256-KW
SP 800-
135 Rev. 1
KDF ANS
9.42 (CVL)
A4059, A4079,
A4080, A4081,
A4082
KDF Type - DER
Hash Algorithm - SHA-1, SHA2-224, SHA2-256, SHA2-
384, SHA2-512, SHA2-512/224, SHA2-512/256
zz Length - zz Length: 8-4096 Increment 8
Key Data Length - Key Data Length: 8-4096 Increment 8
Supplemental Information Length - Supplemental
SP 800-
135 Rev. 1
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
Information Length: 0-256 Increment 8
OID - AES-128-KW, AES-192-KW, AES-256-KW
KDF ANS
9.63 (CVL)
A4055 Hash Algorithm - SHA3-224, SHA3-256, SHA3-384,
SHA3-512
Field Size - 224, 571
Shared Info Length - Shared Info Length: 0-1024
Increment 8
Key Data Length - Key Data Length: 128-4096 Increment
8
SP 800-
135 Rev. 1
KDF ANS
9.63 (CVL)
A4059, A4079,
A4080, A4081,
A4082
Hash Algorithm - SHA2-224, SHA2-256, SHA2-384,
SHA2-512, SHA2-512/224, SHA2-512/256
Field Size - 224, 571
Shared Info Length - Shared Info Length: 0-1024
Increment 8
Key Data Length - Key Data Length: 128-4096 Increment
8
SP 800-
135 Rev. 1
KDF SP800-
108
A4084 KDF Mode - Counter, Feedback
MAC Mode - CMAC-AES128, CMAC-AES192, CMAC-
AES256, HMAC-SHA-1, HMAC-SHA2-224, HMAC-
SHA2-256, HMAC-SHA2-384, HMAC-SHA2-512,
HMAC-SHA2-512/224, HMAC-SHA2-512/256, HMAC-
SHA3-224, HMAC-SHA3-256, HMAC-SHA3-384,
HMAC-SHA3-512
Supported Lengths - Supported Lengths: 8, 72, 128, 776,
3456, 4096
Fixed Data Order - Before Fixed Data
Counter Length - 32
Supports Empty IV - Yes
Requires Empty IV - No
Custom Key In Length - 0
SP 800-
108 Rev. 1
KDF SSH
(CVL)
A4054, A4064,
A4065, A4066
Cipher - AES-128, AES-192, AES-256
Hash Algorithm - SHA-1, SHA2-256, SHA2-384, SHA2-
512
SP 800-
135 Rev. 1
PBKDF A4055 Iteration Count - Iteration Count: 1000-10000 Increment
1
HMAC Algorithm - SHA3-224, SHA3-256, SHA3-384,
SHA3-512
Password Length - Password Length: 8-128 Increment 1
Salt Length - Salt Length: 128-4096 Increment 8
Key Data Length - Key Data Length: 128-4096 Increment
8
SP 800-
132
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
PBKDF A4059, A4079,
A4080, A4081,
A4082
Iteration Count - Iteration Count: 1000-10000 Increment
1
HMAC Algorithm - SHA-1, SHA2-224, SHA2-256,
SHA2-384, SHA2-512, SHA2-512/224, SHA2-512/256
Password Length - Password Length: 8-128 Increment 1
Salt Length - Salt Length: 128-4096 Increment 8
Key Data Length - Key Data Length: 128-4096 Increment
8
SP 800-
132
RSA KeyGen
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Key Generation Mode - B.3.6
Modulo - 2048, 3072, 4096
Primality Tests - Table C.2
Info Generated By Server - No
Public Exponent Mode - Random
Private Key Format - Standard
FIPS 186-4
RSA SigGen
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Signature Type - PKCS 1.5, PKCSPSS
Modulo - 2048, 3072, 4096
Hash Pair -
Hash Algorithm - SHA2-224
FIPS 186-4
RSA SigVer
(FIPS186-4)
A4059, A4079,
A4080, A4081,
A4082
Signature Type - PKCS 1.5, PKCSPSS
Modulo - 1024, 2048, 3072, 4096
Hash Pair -
Hash Algorithm - SHA2-224
Public Exponent Mode - Random
FIPS 186-4
Safe Primes
Key
Generation
A4085 Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096,
ffdhe6144, ffdhe8192, MODP-2048, MODP-3072,
MODP-4096, MODP-6144, MODP-8192
SP 800-
56A Rev. 3
Safe Primes
Key
Verification
A4085 Safe Prime Groups - ffdhe2048, ffdhe3072, ffdhe4096,
ffdhe6144, ffdhe8192, MODP-2048, MODP-3072,
MODP-4096, MODP-6144, MODP-8192
SP 800-
56A Rev. 3
SHA-1 A4059, A4079,
A4080, A4081,
A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
SHA2-224 A4059, A4079,
A4080, A4081,
A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
SHA2-256 A4059, A4060,
A4079, A4080,
A4081, A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm CAVP Cert Properties Reference
SHA2-384 A4059, A4079,
A4080, A4081,
A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
SHA2-512 A4059, A4079,
A4080, A4081,
A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
SHA2-
512/224
A4059, A4079,
A4080, A4081,
A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
SHA2-
512/256
A4059, A4079,
A4080, A4081,
A4082
Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 180-4
SHA3-224 A4055 Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 202
SHA3-256 A4055 Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 202
SHA3-384 A4055 Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 202
SHA3-512 A4055 Message Length - Message Length: 0-65536 Increment 8
Large Message Sizes - 1, 2, 4, 8
FIPS 202
SHAKE-128 A4055 Supports Bit-Oriented Messages - No
Supports Empty Message - Yes
Supports Bit-Oriented Output - No
Output Length - Output Length: 16-65536 Increment 8
FIPS 202
SHAKE-256 A4055 Supports Bit-Oriented Messages - No
Supports Empty Message - Yes
Supports Bit-Oriented Output - No
Output Length - Output Length: 16-65536 Increment 8
FIPS 202
TLS v1.2 KDF
RFC7627
(CVL)
A4059, A4079,
A4080, A4081,
A4082
Hash Algorithm - SHA2-256, SHA2-384, SHA2-512
Key Block Length - Key Block Length: 1024
SP 800-
135 Rev. 1
TLS v1.3 KDF
(CVL)
A4052 HMAC Algorithm - SHA2-256, SHA2-384
KDF Running Modes - DHE, PSK, PSK-DHE
SP 800-
135 Rev. 1
Table 5: Approved Algorithms
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Vendor-Affirmed Algorithms:
Name Properties Implementation Reference
(CKG) Key
Pair
Generation
Key Pair Generation with RSA:2048-16384 bits keys
(112-256 bits strength)
Key Pair Generation with ECDSA:P-224, P-256, P-
384, P-521 curves (112, 128, 192, 256 bits strength)
Key Pair Generation with Safe Primes:ffdhe2048,
ffdhe3072, ffdhe4096, ffdhe6144, ffdhe8192, MODP-
2048, MODP-3072, MODP-4096, MODP-6144,
MODP-8192 groups (112-200 bits)
Key Type:Asymmetric
N/A SP 800-133r2
Section 4
example 1
RSA Signature
Generation
PKCS#1v1.5 and PKCSPSS:SHA3-224, SHA3-256,
SHA3-384, SHA3-512
Key:2048-16384 bits
Strength:112-256 bits
N/A FIPS 140-3 IG
C.C Resolution
2.c
RSA Signature
Verification
PKCS#1v1.5 and PKCSPSS:SHA3-224, SHA3-256,
SHA3-384, SHA3-512
Key:1024-16384 bits
Strength:80-256 bits
N/A FIPS 140-3 IG
C.C Resolution
2.c
Table 6: Vendor-Affirmed Algorithms
Non-Approved, Allowed Algorithms:
N/A for this module.
The module does not implement non-approved algorithms that are allowed in the approved mode of operation.
Non-Approved, Allowed Algorithms with No Security Claimed:
N/A for this module.
The module does not implement non-approved algorithms that are allowed in the approved mode of operation
with no security claimed.
Non-Approved, Not Allowed Algorithms:
Name Use and Function
AES GCM (external IV) Authentication Encryption
HMAC (< 112-bit keys) Message Authentication Code
KBKDF, KDA OneStep, KDA TwoStep, HKDF, ANS X9.42 KDF,
ANS X9.63 KDF (< 112-bit keys)
Key Derivation
KDA OneStep, KDA TwoStep (SHAKE128, SHAKE256) Key Derivation
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Use and Function
ANS X9.42 KDF (SHAKE128, SHAKE256) Key Derivation
ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256) Key Derivation
SSH KDF (SHA-512/224, SHA-512/256, SHA-3, SHAKE128,
SHAKE256)
Key Derivation
TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224, SHA-512/256, SHA-
3)
TLS Key Derivation
TLS 1.3 KDF (SHA-1, SHA-224, SHA-512, SHA-512/224, SHA-
512/256, SHA-3)
TLS Key Derivation
PBKDF2 (< 8 characters password; < 128 salt length; < 1000
iterations; < 112-bit keys)
Password-based Key Derivation
RSA (KAS1, KAS2 schemes) Shared secret computation
RSA and ECDSA (pre-hashed message) Signature generation; Signature
verification
RSA-PSS (invalid salt length) Signature generation; Signature
verification
RSA-OAEP Asymmetric encryption; Asymmetric
decryption
Table 7: Non-Approved, Not Allowed Algorithms
The table above lists all non-approved cryptographic algorithms of the module employed by the non-approved
services of the Non-Approved Services table in Section 4.4 Non-Approved Services.
2.6 Security Function Implementations
Name Type Description Properties Algorithms
Symmetric
Encryption with
AES
BC-UnAuth Symmetric
encryption using
AES
AES-ECB: (A4054,
A4056, A4057,
A4058, A4061,
A4062, A4063,
A4064, A4065,
A4066)
AES-CBC: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-CBC-CS1:
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CBC-CS2:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CBC-CS3:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CFB1: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-CFB128:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CFB8: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-CTR: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-OFB: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-XTS Testing
Revision 2.0:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
Symmetric
Decryption with
AES
BC-UnAuth Symmetric
decryption using
AES
AES-ECB: (A4054,
A4056, A4057,
A4058, A4061,
A4062, A4063,
A4064, A4065,
A4066)
AES-CBC: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
AES-CBC-CS1:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CBC-CS2:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CBC-CS3:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CFB1: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-CFB128:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-CFB8: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-CTR: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-OFB: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-XTS Testing
Revision 2.0:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
Key Derivation
with KDA OneStep
KAS-56CKDF Key Derivation
using KDA
OneStep
KDA OneStep
SP800-56Cr2:
(A4051)
Key Derivation
with KDA TwoStep
KAS-56CKDF Key Derivation
using KDA
TwoStep
KDA TwoStep
SP800-56Cr2:
(A4051)
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
Key Derivation
with X9.42 KDF
KAS-135KDF Key Derivation
using X9.42 KDF
KDF ANS 9.42:
(A4055, A4059,
A4079, A4080,
A4081, A4082)
Key Derivation
with X9.63 KDF
KAS-135KDF Key Derivation
using X9.63 KDF
KDF ANS 9.63:
(A4055, A4059,
A4079, A4080,
A4081, A4082)
Key Derivation
with SSH KDF
KAS-135KDF Key Derivation KDF SSH: (A4054,
A4064, A4065,
A4066)
Key Derivation
with HKDF
KAS-56CKDF Key Derivation
using HKDF
KDA HKDF Sp800-
56Cr1: (A4052)
TLS Key
Derivation
KAS-135KDF TLS 1.2 / 1.3 Key
Derivation
TLS v1.3 KDF:
(A4052)
TLS v1.2 KDF
RFC7627: (A4059,
A4079, A4080,
A4081, A4082)
Key Derivation
with KBKDF
KBKDF Key derivation
using KBKDF
KDF SP800-108:
(A4084)
Password-based
Key Derivation
PBKDF Password-based
Key Derivation
PBKDF: (A4055,
A4059, A4079,
A4080, A4081,
A4082)
Random Number
Generation
DRBG Random Number
Generation
Counter DRBG:
(A4053)
HMAC DRBG:
(A4053)
Hash DRBG:
(A4053)
Signature
Generation
DigSig-SigGen Signature
Generation
ECDSA SigGen
(FIPS186-4):
(A4055, A4059,
A4079, A4080,
A4081, A4082)
RSA SigGen
(FIPS186-4):
(A4059, A4079,
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
A4080, A4081,
A4082)
Signature
Verification
DigSig-SigVer Signature
Verification
RSA SigVer
(FIPS186-4):NIST
SP 800-131Ar2
Legacy use: 1024-
2047 bits with 80-
111 bits of security
strength; NIST SP
800-131Ar2
Acceptable: 2048-
16384 bits with
112-256 bits of
security strength
IG C.F
Compliance:The
module supports
RSA modulus sizes
which are not
tested by CAVP in
compliance with
FIPS 140-3 IG C.F
ECDSA SigVer
(FIPS186-4):
(A4055, A4059,
A4079, A4080,
A4081, A4082)
RSA SigVer
(FIPS186-4):
(A4059, A4079,
A4080, A4081,
A4082)
Message
Authentication
Code
MAC Message
Authentication
Code
HMAC-SHA3-224:
(A4055)
HMAC-SHA3-256:
(A4055)
HMAC-SHA3-384:
(A4055)
HMAC-SHA3-512:
(A4055)
HMAC-SHA-1:
(A4059, A4079,
A4080, A4081,
A4082)
HMAC-SHA2-224:
(A4059, A4079,
A4080, A4081,
A4082)
HMAC-SHA2-256:
(A4059, A4060,
A4079, A4080,
A4081, A4082)
HMAC-SHA2-384:
(A4059, A4079,
A4080, A4081,
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
A4082)
HMAC-SHA2-512:
(A4059, A4079,
A4080, A4081,
A4082)
HMAC-SHA2-
512/224: (A4059,
A4079, A4080,
A4081, A4082)
HMAC-SHA2-
512/256: (A4059,
A4079, A4080,
A4081, A4082)
AES-CMAC:
(A4056, A4057,
A4058, A4061,
A4062, A4063)
AES-GMAC:
(A4067, A4068,
A4069, A4070,
A4071, A4072,
A4073, A4074,
A4075, A4076,
A4077, A4078)
Message digest SHA
XOF
Message digest SHA3-224: (A4055)
SHA3-256: (A4055)
SHA3-384: (A4055)
SHA3-512: (A4055)
SHAKE-128:
(A4055)
SHAKE-256:
(A4055)
SHA-1: (A4059,
A4079, A4080,
A4081, A4082)
SHA2-224: (A4059,
A4079, A4080,
A4081, A4082)
SHA2-256: (A4059,
A4060, A4079,
A4080, A4081,
A4082)
SHA2-384: (A4059,
A4079, A4080,
A4081, A4082)
SHA2-512: (A4059,
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
A4079, A4080,
A4081, A4082)
SHA2-512/224:
(A4059, A4079,
A4080, A4081,
A4082)
SHA2-512/256:
(A4059, A4079,
A4080, A4081,
A4082)
Authenticated
Symmetric
Encryption
BC-Auth Authenticated
Symmetric
Encryption
AES-CCM: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-GCM: (A4067,
A4068, A4069,
A4070, A4071,
A4072, A4073,
A4074, A4075,
A4076, A4077,
A4078)
AES-KW: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-KWP: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
Authenticated
Symmetric
Decryption
BC-Auth Authenticated
Symmetric
Decryption
AES-CCM: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-GCM: (A4067,
A4068, A4069,
A4070, A4071,
A4072, A4073,
A4074, A4075,
A4076, A4077,
A4078)
AES-KW: (A4056,
A4057, A4058,
A4061, A4062,
A4063)
AES-KWP: (A4056,
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Type Description Properties Algorithms
A4057, A4058,
A4061, A4062,
A4063)
Key Pair
Generation with
ECDSA
AsymKeyPair-
KeyGen
CKG
Key Pair
Generation using
ECDSA
ECDSA KeyGen
(FIPS186-4):
(A4059, A4079,
A4080, A4081,
A4082)
(CKG) Key Pair
Generation: ()
Key Pair
Generation with
RSA
AsymKeyPair-
KeyGen
CKG
Key Pair
Generation using
RSA
RSA KeyGen
(FIPS186-4):
(A4059, A4079,
A4080, A4081,
A4082)
(CKG) Key Pair
Generation: ()
Key Pair
Generation with
Safe Primes
AsymKeyPair-
KeyGen
CKG
Key Pair
Generation using
Safe Primes
Safe Primes Key
Generation:
(A4085)
(CKG) Key Pair
Generation: ()
Key Pair
Verification with
ECDSA
AsymKeyPair-
KeyVer
Key Pair
Verification using
ECDSA
ECDSA KeyVer
(FIPS186-4):
(A4059, A4079,
A4080, A4081,
A4082)
Key Pair
Verification with
Safe Primes
AsymKeyPair-
KeyVer
Key Pair
Verification using
Safe Primes
Safe Primes Key
Verification:
(A4085)
Shared Secret
Computation with
DH
KAS-SSC Shared Secret
Computation using
DH
Compliance:SP
800-56Arev3, FIPS
140-3 IG D.F.
Scenario 2 (1)
KAS-FFC-SSC
Sp800-56Ar3:
(A4085)
Shared Secret
Computation with
ECDH
KAS-SSC Shared Secret
Computation using
EC Diffie-Hellman
Compliance:SP
800-56Arev3, FIPS
140-3 IG D.F.
Scenario 2 (1)
KAS-ECC-SSC
Sp800-56Ar3:
(A4059, A4079,
A4080, A4081,
A4082)
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Table 8: Security Function Implementations
2.7 Algorithm Specific Information
2.7.1 AES GCM IV
For TLS 1.2, the module offers the AES GCM implementation and uses the context of Scenario 1 of FIPS 140-3
IG C.H. The module is compliant with SP 800-52r2 Section 3.3.1 and the mechanism for IV generation is
compliant with RFC 5288 and 8446.
The module does not implement the TLS protocol. The module’s implementation of AES GCM is used together
with an application that runs outside the module’s cryptographic boundary. The design of the TLS protocol
implicitly ensures that the counter (the nonce_explicit part of the IV) does not exhaust the maximum number
of possible values for a given session key.
In the event the module’s power is lost and restored, the consuming application must ensure that a new key for
use with the AES GCM key encryption or decryption under this scenario shall be established.
Alternatively, the Crypto Officer can use the module’s API to perform AES GCM encryption using internal IV
generation. These IVs are always 96 bits and generated using the approved DRBG internal to the module’s
boundary, compliant to Scenario 2 of FIPS 140-3 IG C.H.
The module also provides a non-approved AES GCM encryption service which accepts arbitrary external IVs
from the operator. This service can be requested by invoking the EVP_EncryptInit_ex2 API function with a
non-NULL IV value. When this is the case, the API will set a non-approved service indicator.
Finally, for TLS 1.3, the AES GCM implementation uses the context of Scenario 5 of FIPS 140-3 IG C.H. The
protocol that provides this compliance is TLS 1.3, defined in RFC8446 of August 2018, using the cipher-suites
that explicitly select AES GCM as the encryption/decryption cipher (Appendix B.4 of RFC8446). The module
supports acceptable AES GCM cipher suites from Section 3.3.1 of SP800-52r2. The module’s implementation of
AES GCM is used together with an application that runs outside the module’s cryptographic boundary.
2.7.2 AES XTS
The length of a single data unit encrypted or decrypted with AES XTS shall not exceed 2²⁰ AES blocks, that is
16MB, of data per XTS instance. An XTS instance is defined in Section 4 of SP 800-38E.
To meet the requirement stated in IG C.I, the module implements a check that ensures, before performing any
cryptographic operation, that the two AES keys used in AES XTS mode are not identical. Key_1 and Key_2 shall
be generated and/or established independently according to the rules for component symmetric keys from NIST
SP 800-133rev2, Sec. 6.3.
The XTS mode shall only be used for the cryptographic protection of data on storage devices. It shall not be
used for other purposes, such as the encryption of data in transit.
2.7.3 Key Derivation using SP 800-132 PBKDF2
The module provides password-based key derivation (PBKDF2), compliant with SP 800-132. The module
supports option 1a from Section 5.4 of SP 800-132, in which the Master Key (MK) or a segment of it is used
directly as the Data Protection Key (DPK). In accordance to SP 800-132 and FIPS 140-3 IG D.N, the following
requirements are met:
• Derived keys shall be used only for storage applications, and shall not be used for any other purposes.
The length of the MK or DPK is 112 bits or more.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
• Passwords or passphrases, used as an input for the PBKDF2, shall not be used as cryptographic keys.
• The minimum length of the password or passphrase accepted by the module is 8 characters. The
probability of guessing the value, assuming a worst-case scenario of all digits, is estimated to be at most
10-8. Combined with the minimum iteration count as described below, this provides an acceptable
trade-off between user experience and security against brute-force attacks.
• A portion of the salt shall be generated randomly using the SP 800-90Ar1 DRBG provided by the
module. The minimum length required is 128 bits.
• The iteration count shall be selected as large as possible, as long as the time required to generate the
key using the entered password is acceptable for the users. The minimum value accepted by the
module is 1000.
If any of these requirements are not met, the requested service is non-approved (see Non-Approved Services
table in Section 4.4 Non-Approved Services).
2.7.4 SP 800-56Ar3 Assurances
To comply with the assurances found in Section 5.6.2 of SP 800-56Ar3, the operator must use the module
together with an application that implements the TLS protocol. Additionally, the module’s approved key pair
generation service (see Approved Services table in Section 4.3 Approved Services) must be used to generate
ephemeral Diffie-Hellman or EC Diffie-Hellman key pairs, or the key pairs must be obtained from another
FIPS-validated module. As part of this service, the module will internally perform the full public key validation
of the generated public key.
The module’s shared secret computation service will internally perform the full public key validation of the
peer public key, complying with Sections 5.6.2.2.1 and 5.6.2.2.2 of SP 800-56Ar3.
2.7.5 SHA-3
The module implements the SHA-3 algorithms as both standalone and part of higher-level algorithms (in
compliance with FIPS 140-3 IG C.C). As detailed in Section 2.6 Security Function Implementations with
corresponding certificates, the cryptographic algorithms that use of SHA-3 include RSA signature generation
and verification, ECDSA signature generation and verification, KBKDF, KDA HKDF, X9.63 KDF, X9.42 KDF,
PBKDF, OneStep KDA, and HMAC. In addition, the implementation of the extendable output functions
SHAKE128 and SHAKE256 were verified to have a standalone usage.
2.7.6 RSA Signatures
The module implements only the approved modulus sizes of 2048, 3072, and 4096 bits for signature generation.
For signature verification, the module implements the approved module sizes of 1024, 2048, 3072, and 4096
bits. Each algorithm was tested, and corresponding certificates can be found detailed in Section 2.6 Security
Function Implementations.
The module also supports RSA signature verification with 1280, 1536 and 1792 modulus bits. These modulus
sizes are allowed only for legacy use, in compliance with FIPS 140-3 IG C.F.
2.7.7 Key Agreement
The module does not establish SSPs using an approved key agreement scheme (KAS). However, it does offer
some or all of the underlying KAS cryptographic functionality to be used by an external operator/application as
part of an approved KAS.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
2.7.8 Key Transport
The module does not establish SSPs using an approved key transport scheme (KTS). However, it does offer
approved authenticated algorithms that can be used by an external operator/application as part of an approved
KTS.
2.8 RBG and Entropy
Cert
Number
Vendor Name
E76 Cloudlinux Inc., TuxCare division
Table 9: Entropy Certificates
Name Type Operational Environment Sample
Size
Entropy
per
Sample
Conditioning
Component
Cloudlinux Inc.,
TuxCare division
OpenSSL FIPS
provider CPU Time
Jitter RNG Entropy
Source
Non-
Physical
AlmaLinux 9.2 running on
Amazon Web Services (AWS)
m5.metal with Intel Xeon
Platinum 8259CL; AlmaLinux
9.2 running on Amazon Web
Services (AWS) a1.metal with
AWS Graviton
256
bits
Full
Entropy
SHA2-512-HMAC-
DRBG: A4025;
SHA3-256: A4026;
AES-256-CTR-
DRBG: A4053
Table 10: Entropy Sources
The module employs two Deterministic Random Bit Generator (DRBG) implementations based on SP 800-
90Ar1. These DRBGs are used internally by the module (e.g. to generate seeds for asymmetric key pairs and
random numbers for security functions). They can also be accessed using the specified API functions. The
following parameters are used:
1. Private DRBG: AES-256 CTR_DRBG with derivation function. This DRBG is used to generate secret
random values (e.g. during asymmetric key pair generation). It can be accessed using
RAND_priv_bytes.
2. Public DRBG: AES-256 CTR_DRBG with derivation function. This DRBG is used to generate general
purpose random values that do not need to remain secret (e.g. initialization vectors). It can be accessed
using RAND_bytes.
These DRBGs will always employ prediction resistance. More information regarding the configuration and
design of these DRBGs can be found in the module’s manual pages.
As per the Public Use Document of entropy certificate E76, the entropy source provides full entropy of 256 bits.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
2.9 Key Generation
The module implements Cryptographic Key Generation (CKG, vendor affirmed), compliant with SP 800-133r2.
When random values are required, they are obtained from the SP 800-90Ar1 approved DRBG, compliant with
Section 4 of SP 800-133r2 (without XOR):
• Safe primes key pair generation: compliant with SP 800-133r2, Section 5.2, which maps to SP 800-56Ar3.
The method described in Section 5.6.1.1.4 of SP 800-56Ar3 (“Testing Candidates”) is used.
• RSA key pair generation: compliant with SP 800-133r2, Section 5.1, which maps to FIPS 186-4. The
method described in Appendix B.3.6 of FIPS 186-4 (“Probable Primes with Conditions Based on
Auxiliary Probable Primes”) is used.
• ECC (ECDH and ECDSA) key pair generation: compliant with SP 800-133r2, Section 5.1, which maps to
FIPS 186-4. The method described in Appendix B.4.2 of FIPS 186-4 (“Testing Candidates”) is used.
Additionally, the module implements the following key derivation methods:
• KBKDF: compliant with SP 800-108r1. This implementation can be used to generate secret keys from a
pre-existing key-derivation-key.
• KDA OneStep, HKDF: compliant with SP 800-56Cr2. These implementations shall only be used to
generate secret keys in the context of an SP 800-56Ar3 key agreement scheme.
• ANS X9.42 KDF, ANS X9.63 KDF: compliant with SP 800-135r1. These implementations shall only be
used to generate secret keys in the context of an ANS X9.42-2001 resp. ANS X9.63-2001 key agreement
scheme.
• SSH KDF, TLS 1.2 KDF, TLS 1.3 KDF: compliant with SP 800-135r1. These implementations shall only
be used to generate secret keys in the context of the SSH, TLS 1.2, or TLS 1.3 protocols, respectively.
• PBKDF2: compliant with option 1a of SP 800-132. This implementation shall only be used to derive keys
for use in storage applications.
Intermediate key generation values are not output from the module and are explicitly zeroized after processing
the service.
2.10 Key Establishment
The module provides Diffie-Hellman (DH) and Elliptic Curve Diffie-Hellman (ECDH) shared secret
computation compliant with SP800-56Ar3, in accordance with scenario 2 (1) of FIPS 140-3 IG D.F.
For Diffie-Hellman, the module supports the use of the safe primes defined in RFC 3526 (IKE) and RFC 7919
(TLS). Note that the module only implements key pair generation, key pair verification, and shared secret
computation. No other part of the IKE or TLS protocols is implemented (with the exception of the TLS 1.2 and
1.3 KDFs):
• IKE (RFC 3526):
o MODP-2048 (ID = 14)
o MODP-3072 (ID = 15)
o MODP-4096 (ID = 16)
o MODP-6144 (ID = 17)
o MODP-8192 (ID = 18)
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
• TLS (RFC 7919)
o ffdhe2048 (ID = 256)
o ffdhe3072 (ID = 257)
o ffdhe4096 (ID = 258)
o ffdhe6144 (ID = 259)
o ffdhe8192 (ID = 260)
For Elliptic Curve Diffie-Hellman, the module supports the NIST-defined P-224, P-256, P-384, and P-521
curve.
According to FIPS 140-3 IG D.B, the key sizes of DH and ECDH shared secret computation provide 112-200
and 112-256 bits of respective bits of security strength in an approved mode of operation.
2.11 Industry Protocols
The module implements the SSH key derivation function for use in the SSH protocol (RFC 4253 and RFC 6668).
GCM with internal IV generation in the approved mode is compliant with versions 1.2 and 1.3 of the TLS
protocol (RFC 5288 and 8446) and shall only be used in conjunction with the TLS protocol. Additionally, the
module implements the TLS 1.2 and TLS 1.3 key derivation functions for use in the TLS protocol.
No parts of the SSH, TLS, or IKE protocols, other than those mentioned above, have been tested by the CAVP
and CMVP.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
3 Cryptographic Module Interfaces
3.1 Ports and Interfaces
Physical
Port
Logical
Interface(s)
Data That Passes
N/A Data Input API input parameters
N/A Data Output API output parameters
N/A Control Input API function calls
N/A Status Output API return codes, error queue
Table 11: Ports and Interfaces
The logical interfaces are the APIs through which the applications request services. These logical interfaces are
logically separated from each other by the API design. The module does not implement a control output
interface.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
4 Roles, Services, and Authentication
4.1 Authentication Methods
N/A for this module.
The module does not support authentication methods.
4.2 Roles
Name Type Operator Type Authentication Methods
Crypto Officer Role CO None
Table 12: Roles
The module supports the Crypto Officer role only. This sole role is implicitly and always assumed by the
operator of the module when performing a service. The module does not support multiple concurrent operators.
4.3 Approved Services
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Symmetri
c
Encryptio
n
Used to
perform
symmetr
ic
encrypti
on of an
entry
plaintext
OSSL_RH_FIPSINDICATOR_APPROV
ED,
EVP_CIPHER_REDHAT_FIPS_INDIC
ATOR_APPROVED
Plainte
xt, AES
key
Ciphert
ext
Symmetri
c
Encryptio
n with
AES
Crypto
Officer
- AES
key:
W,E
Symmetri
c
Decryptio
n
Used to
perform
symmetr
ic
decrypti
on of an
entry
cipherte
xt
OSSL_RH_FIPSINDICATOR_APPROV
ED,
EVP_CIPHER_REDHAT_FIPS_INDIC
ATOR_APPROVED
Cipher
text,
AES
key
Plainte
xt
Symmetri
c
Decryptio
n with
AES
Crypto
Officer
- AES
key:
W,E
Authenti
cated
Encryptio
n
Used to
perform
authenti
cated
symmetr
ic
OSSL_RH_FIPSINDICATOR_APPROV
ED,
EVP_CIPHER_REDHAT_FIPS_INDIC
ATOR_APPROVED
Plainte
xt, AES
key, IV
Ciphert
ext,
MAC
tag
Authenti
cated
Symmetri
c
Crypto
Officer
- AES
key:
W,E
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
encrypti
on with
AES
Encryptio
n
Authenti
cated
Decryptio
n
Used to
perform
authenti
cated
symmetr
ic
decrypti
on with
AES
OSSL_RH_FIPSINDICATOR_APPROV
ED,
EVP_CIPHER_REDHAT_FIPS_INDIC
ATOR_APPROVED
Cipher
text,
AES
key, IV
Plainte
xt or
failure
Authenti
cated
Symmetri
c
Decryptio
n
Crypto
Officer
- AES
key:
W,E
Message
Authenti
cation
Code
Comput
e a MAC
tag
OSSL_RH_FIPSINDICATOR_APPROV
ED,
EVP_MAC_REDHAT_FIPS_INDICAT
OR_APPROVED
Messag
e, AES
key or
HMAC
key
MAC
tag
Message
Authenti
cation
Code
Crypto
Officer
-
HMAC
key:
W,E
Message
Digest
Used to
generate
a SHA-1,
SHA-2,
or SHA-
3/SHAK
E
message
digest
OSSL_RH_FIPSINDICATOR_APPROV
ED
Messag
e
Messag
e digest
Message
digest
Crypto
Officer
Key
Derivatio
n with
KBKDF
Derive a
key from
a key-
derivatio
n key
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Key-
derivat
ion key
KBKDF
Derive
d Key
Key
Derivatio
n with
KBKDF
Crypto
Officer
- Key
Derivati
on Key:
W,E
-
KBKDF
Derived
Key:
G,R
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Key
Derivatio
n with
HKDF
Derive a
key from
a shared
secret
using
HKDF
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Shared
secret
HKDF
Derive
d Key
Key
Derivatio
n with
HKDF
Crypto
Officer
- Shared
Secret:
W,E
- HKDF
Derived
Key:
G,R
Key
Derivatio
n with
SSH KDF
Derive a
key from
a shared
secret
using
SSH
KDF
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Shared
secret
SSH
Derive
d Key
Key
Derivatio
n with
SSH KDF
Crypto
Officer
- Shared
Secret:
W,E
- SSH
Derived
Key:
G,R
Key
Derivatio
n with
X9.63
KDF
Derive a
key from
a shared
secret
using
X9.63
KDF
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Shared
secret
X9.63
Derive
d Key
Key
Derivatio
n with
X9.63
KDF
Crypto
Officer
- Shared
Secret:
W,E
- X9.63
Derived
Key:
G,R
Key
Derivatio
n with
X9.42
KDF
Derive a
key from
a shared
secret
using
X9.63
KDF
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Shared
secret
X9.42
Derive
d Key
Key
Derivatio
n with
X9.42
KDF
Crypto
Officer
- Shared
Secret:
W,E
- X9.42
Derived
Key:
G,R
Key
Derivatio
n with
KDA
OneStep
Derive a
key from
a shared
secret
using
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Shared
secret
KDA
OneSte
p
Derive
d Key
Key
Derivatio
n with
KDA
OneStep
Crypto
Officer
- Shared
Secret:
W,E
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
KDA
OneStep
- KDA
OneStep
Derived
Key:
G,R
Key
Derivatio
n with
KDA
TwoStep
Derive a
key from
a shared
secret
using
KDA
TwoStep
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Shared
secret
KDA
TwoSte
p
Derive
d Key
Key
Derivatio
n with
KDA
TwoStep
Crypto
Officer
- Shared
Secret:
W,E
- KDA
TwoSte
p
Derived
Key:
G,R
TLS Key
Derivatio
n
Derive a
key from
a shared
secret
using
TLS 1.2
KDF /
TLS 1.3
KDF
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
TLS
pre-
master
secret
TLS
Derive
d Key
TLS Key
Derivatio
n
Crypto
Officer
- TLS
pre-
master
secret:
W,E
- TLS
master
secret:
G,E,Z
- TLS
Derived
Key:
G,R
Password
-based
Key
Derivatio
n
Derive a
key from
a
passwor
d
OSSL_RH_FIPSINDICATOR_APPROV
ED
EVP_KDF_REDHAT_FIPS_INDICATO
R_APPROVED
Passwo
rd or
passph
rase
PBKDF
Derive
d Key
Password
-based
Key
Derivatio
n
Crypto
Officer
-
Passwor
d or
passphr
ase:
W,E
-
PBKDF
Derived
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Key:
G,R
Shared
Secret
Computat
ion
Comput
e a
shared
secret
OSSL_RH_FIPSINDICATOR_APPROV
ED
DH
private
key,
DH
public
key;
EC
private
key,
EC
public
key
Shared
secret
Shared
Secret
Computat
ion with
DH
Shared
Secret
Computat
ion with
ECDH
Crypto
Officer
- DH
Private
key:
W,E
- EC
Public
key:
W,E
- DH
Public
key:
W,E
- Shared
Secret:
G,R
- EC
Private
key:
W,E
Signature
Generatio
n
Generat
e a
digital
signatur
e
OSSL_RH_FIPSINDICATOR_APPROV
ED
OSSL_SIGNATURE_PARAM_REDHA
T_FIPS_INDICATOR
Messag
e,
private
key
Signatu
re
Signature
Generatio
n
Crypto
Officer
- RSA
private
key:
W,E
- EC
Private
key:
W,E
Signature
Verificati
on
Verify a
digital
signatur
e
OSSL_RH_FIPSINDICATOR_APPROV
ED
OSSL_SIGNATURE_PARAM_REDHA
T_FIPS_INDICATOR
Messag
e,
public
key,
signatu
re
Pass/fai
l
Signature
Verificati
on
Crypto
Officer
- RSA
public
key:
W,E
- EC
Public
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
key:
W,E
Key Pair
Generatio
n
Generat
e a key
pair
OSSL_RH_FIPSINDICATOR_APPROV
ED
Group;
Curve;
Modul
us bits
Module
-
generat
ed DH
private
key,
Module
-
generat
ed DH
public
key or
Module
-
generat
ed EC
private
key,
Module
-
generat
ed EC
public
key or
Module
-
generat
ed RSA
private
key,
Module
-
generat
ed RSA
public
key
Key Pair
Generatio
n with
RSA
Key Pair
Generatio
n with
ECDSA
Key Pair
Generatio
n with
Safe
Primes
Crypto
Officer
-
Module
-
generate
d RSA
private
key:
G,R
-
Module
-
generate
d DH
private
key:
G,R
-
Module
-
generate
d RSA
public
key:
G,R
-
Module
-
generate
d DH
public
key:
G,R
-
Module
-
generate
d EC
private
key:
G,R
-
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Module
-
generate
d EC
public
key:
G,R
-
Interme
diate
key
generati
on
value:
G,E,Z
Key Pair
Verificati
on
Verify a
key pair
OSSL_RH_FIPSINDICATOR_APPROV
ED
Key
pair
Pass/fai
l
Key Pair
Verificati
on with
Safe
Primes
Key Pair
Verificati
on with
ECDSA
Crypto
Officer
- DH
Public
key:
W,E
- EC
Public
key:
W,E
- DH
Private
key:
W,E
- EC
Private
key:
W,E
Random
Number
Generatio
n
Generat
e
random
bytes
OSSL_RH_FIPSINDICATOR_APPROV
ED
Output
length
Rando
m bytes
Random
Number
Generatio
n
Crypto
Officer
-
Entropy
input:
W,E
- DRBG
internal
state (V
value, C
value):
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
G,W,E
- DRBG
internal
state (V
value,
Key):
G,W,E
- DRGB
seed:
G,E
Show
status
Show
the
current
status of
the
module
None N/A Module
status
None Crypto
Officer
Show
module
name and
version
Show
module
name
and the
version
of the
module
None N/A Name
and
version
informa
tion
None Crypto
Officer
Self-test Perform
CASTs
and
integrity
test
None N/A Pass/fai
l result
of self-
tests
Message
digest
Message
Authenti
cation
Code
Symmetri
c
Encryptio
n with
AES
Symmetri
c
Decryptio
n with
AES
Authenti
cated
Symmetri
c
Crypto
Officer
- AES
key: E
-
HMAC
key: E
- RSA
private
key: E
- RSA
public
key: E
- DH
Private
key: E
- DH
Public
key: E
- EC
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Encryptio
n
Authenti
cated
Symmetri
c
Decryptio
n
Signature
Generatio
n
Signature
Verificati
on
Key
Derivatio
n with
KBKDF
Key
Derivatio
n with
KDA
OneStep
Key
Derivatio
n with
HKDF
Key
Derivatio
n with
X9.42
KDF
Key
Derivatio
n with
X9.63
KDF
Key
Derivatio
n with
SSH KDF
TLS Key
Derivatio
n
Password
-based
Private
key: E
- EC
Public
key: E
- Key
Derivati
on Key:
E
-
Passwor
d or
passphr
ase: E
-
PBKDF
Derived
Key:
E,G
-
KBKDF
Derived
Key:
E,G
- HKDF
Derived
Key:
E,G
- SSH
Derived
Key:
E,G
- X9.42
Derived
Key:
E,G
- X9.63
Derived
Key:
E,G
- KDA
OneStep
Derived
Key:
E,G
- KDA
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Key
Derivatio
n
Random
Number
Generatio
n
Shared
Secret
Computat
ion with
DH
Shared
Secret
Computat
ion with
ECDH
TwoSte
p
Derived
Key:
E,G
- TLS
Derived
Key:
E,G
- Shared
Secret:
E,G
- DRBG
internal
state (V
value,
Key):
E,G
- DRGB
seed:
E,G
Zeroizati
on
Zeroize
SSPs.
None Any
SSP
N/A None Crypto
Officer
- AES
key: Z
-
HMAC
key: Z
-
Module
-
generate
d RSA
private
key: Z
-
Module
-
generate
d RSA
public
key: Z
- RSA
private
key: Z
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
- RSA
public
key: Z
-
Module
-
generate
d DH
private
key: Z
-
Module
-
generate
d DH
public
key: Z
- DH
Private
key: Z
- DH
Public
key: Z
-
Module
-
generate
d EC
private
key: Z
-
Module
-
generate
d EC
public
key: Z
- EC
Private
key: Z
- EC
Public
key: Z
- Key
Derivati
on Key:
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Z
-
Passwor
d or
passphr
ase: Z
-
PBKDF
Derived
Key: Z
-
KBKDF
Derived
Key: Z
- HKDF
Derived
Key: Z
- SSH
Derived
Key: Z
- X9.42
Derived
Key: Z
- X9.63
Derived
Key: Z
- KDA
OneStep
Derived
Key: Z
- KDA
TwoSte
p
Derived
Key: Z
- TLS
pre-
master
secret: Z
- TLS
master
secret: Z
- TLS
Derived
Key: Z
- Shared
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Descripti
on
Indicator Inputs Output
s
Security
Functions
SSP
Access
Secret:
Z
-
Entropy
input: Z
- DRGB
seed: Z
- DRBG
internal
state (V
value, C
value):
Z
- DRBG
internal
state (V
value,
Key): Z
-
Interme
diate
key
generati
on
value: Z
Table 13: Approved Services
The module provides services to operators that assume the available role. All services are described in detail in
the API documentation (manual pages). The convention below applies when specifying the access permissions
(types) that the service has for each SSP.
• Generate (G): The module generates or derives the SSP.
• Read (R): The SSP is read from the module (e.g. the SSP is output).
• Write (W): The SSP is updated, imported, or written to the module.
• Execute (E): The module uses the SSP in performing a cryptographic operation.
• Zeroize (Z): The module zeroizes the SSP.
To interact with the module, a calling application must use the EVP API layer provided by OpenSSL. This layer
will delegate the request to the FIPS provider, which will in turn perform the requested service. Additionally,
this EVP API layer can be used to retrieve the approved service indicator for the module. The
redhat_ossl_query_fipsindicator() function indicates whether an EVP API function is approved.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
4.4 Non-Approved Services
Name Description Algorithms Role
AES GCM
(external IV)
Authenticated Encryption AES GCM (external IV) CO
HMAC (< 112-bit
keys)
Compute a MAC tag HMAC (< 112-bit keys) CO
Key derivation Derive a key from a key-
derivation key or a shared
secret
KBKDF, KDA OneStep, KDA TwoStep, HKDF,
ANS X9.42 KDF, ANS X9.63 KDF (< 112-bit
keys)
KDA OneStep, KDA TwoStep (SHAKE128,
SHAKE256)
ANS X9.42 KDF (SHAKE128, SHAKE256)
ANS X9.63 KDF (SHA-1, SHAKE128,
SHAKE256)
SSH KDF (SHA-512/224, SHA-512/256, SHA-
3, SHAKE128, SHAKE256)
TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224,
SHA-512/256, SHA-3)
TLS 1.3 KDF (SHA-1, SHA-224, SHA-512,
SHA-512/224, SHA-512/256, SHA-3)
CO
PBKDF2 (< 112-
bit keys)
Derive a key from a password PBKDF2 (< 8 characters password; < 128 salt
length; < 1000 iterations; < 112-bit keys)
CO
Signature
generation
Generate a signature RSA and ECDSA (pre-hashed message)
RSA-PSS (invalid salt length)
CO
Signature
verification
Verify a signature RSA and ECDSA (pre-hashed message)
RSA-PSS (invalid salt length)
CO
Asymmetric
encryption
Encrypt a plaintext RSA-OAEP CO
Asymmetric
decryption
Decrypt a ciphertext RSA-OAEP CO
Shared secret
computation
Compute a shared secret RSA (KAS1, KAS2 schemes) CO
Table 14: Non-Approved Services
The table above lists the non-approved services in this module, the algorithms involved and the roles that can
request the service. In this table, CO specifies the Crypto Officer role.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
4.5 External Software/Firmware Loaded
The module does not load external software or firmware.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
5 Software/Firmware Security
5.1 Integrity Techniques
The integrity of the module is verified by comparing a HMAC SHA-256 value calculated at run time with the
HMAC SHA-256 value embedded in the fips.so file that was computed at build time. This operation is
performed by the verify_integrity() function which performs a KAT for the HMAC SHA-256 algorithm in
order to test its proper operation before performing the checksum of the module file.
5.2 Initiate on Demand
Integrity tests are performed as part of the pre-operational self-tests, which are executed when the module is
initialized. The integrity test may be invoked on-demand by unloading and subsequently re-initializing the
module, or by calling the OSSL_PROVIDER_self_test function. This will perform (among others) the software
integrity test.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
6 Operational Environment
6.1 Operational Environment Type and Requirements
Type of Operational Environment: Modifiable
How Requirements are Satisfied:
Any SSPs contained within the module are protected by the process isolation and memory separation
mechanisms, and only the module has control over these SSPs.
6.2 Configuration Settings and Restrictions
The module shall be installed as stated in Section 11 Life-Cycle Assurance. If properly installed, the operating
system provides process isolation and memory protection mechanisms that ensure appropriate separation for
memory access among the processes on the system. Each process has control over its own data and uncontrolled
access to the data of other processes is prevented.
Instrumentation tools like the ptrace system call, gdb and strace, userspace live patching, as well as other
tracing mechanisms offered by the Linux environment such as ftrace or systemtap, shall not be used in the
operational environment. The use of any of these tools implies that the cryptographic module is running in a
non-validated operational environment.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
7 Physical Security
The module is comprised of software only and therefore this section is Not Applicable (N/A).
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
8 Non-Invasive Security
This module does not implement any non-invasive security mechanism, and therefore this section is not
applicable.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
9 Sensitive Security Parameters Management
9.1 Storage Areas
Storage
Area
Name
Description Persistence
Type
RAM Temporary storage for SSPs used by the module as part of service execution. SSPs are
stored until they are zeroized by the operator (using a zeroization call or removing
power from the module) or zeroized automatically
Dynamic
Table 15: Storage Areas
The module does not perform persistent storage of SSPs. The SSPs are temporarily stored in the RAM in
plaintext form.
9.2 SSP Input-Output Methods
Name From To Format
Type
Distribution
Type
Entry
Type
SFI or
Algorithm
API input
parameters
Operator calling
application
(TOEPP)
Cryptographic
module
Plaintext Manual Electronic
API output
parameters
Cryptographic
module
Operator calling
application
(TOEPP)
Plaintext Manual Electronic
Table 16: SSP Input-Output Methods
The module only supports SSP entry and output to and from the calling application running on the same
operational environment. This corresponds to manual distribution, electronic entry/output (“CM Software
to/from App via TOEPP Path”) per FIPS 140-3 IG 9.5.A Table 1.
9.3 SSP Zeroization Methods
Zeroization
Method
Description Rationale Operator
Initiation
Free cipher
handle
Zeroizes the SSPs
contained within
the cipher handle.
By calling the appropriate zeroization functions: AES
key: EVP_CIPHER_CTX_free and
EVP_MAC_CTX_free; HMAC key:
EVP_MAC_CTX_free; Key-derivation key:
EVP_KDF_CTX_free; Shared secret:
EVP_KDF_CTX_free; Password: EVP_KDF_CTX_free;
KBKDF Derived Key: EVP_KDF_CTX_free; HKDF
By calling the
cipher related
zeroization
API
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Zeroization
Method
Description Rationale Operator
Initiation
Derived Key: EVP_KDF_CTX_free; TLS pre-master
secret, TLS master secret, TLS Derived Key:
EVP_KDF_CTX_free; SSH Derived Key:
EVP_KDF_CTX_free; X9.63 Derived Key:
EVP_KDF_CTX_free; X9.42 Derived Key:
EVP_KDF_CTX_free; PBKDF Derived Key:
EVP_KDF_CTX_free; KDA OneStep Derived Key:
EVP_KDF_CTX_free; KDA TwoStep Derived Key:
EVP_KDF_CTX_free; Entropy input:
EVP_RAND_CTX_free; DRBG seed:
EVP_RAND_CTX_free; DRBG internal state (V value,
Key), DRBG internal state (V value, C value):
EVP_RAND_CTX_free; DH public & private key:
EVP_PKEY_free; EC public & private key:
EVP_PKEY_free; RSA public & private key:
EVP_PKEY_free
Automatic Automatically
zeroized by the
module when no
longer needed
Memory occupied by SSPs is overwritten with zeroes,
which renders the SSP values irretrievable.
N/A
Module
Reset
De-allocates the
volatile memory
used to store SSPs
Volatile memory used by the module is overwritten
within nanoseconds when power is removed.
By unloading
and reloading
the module
Table 17: SSP Zeroization Methods
The application that uses the module is responsible for the appropriate zeroization of SSPs. The module
provides key allocation and destruction functions, which overwrites the memory occupied by the SSP´s
information with zeros before its deallocation.
Memory allocation of SSPs is performed by the OPENSSL_malloc() API call and the application in use of the
module is responsible for the calling of the appropriate zeroization functions from the OpenSSL API. The
zeroization functions then overwrite the memory occupied by SSPs and de-allocate the memory with the
OPENSSL_free() call. OPENSSL_cleanse() should be used to overwrite sensitive data such as private keys.
In case of abnormal termination, or swap in/out of a physical memory page of a process, the SSPs in physical
memory are overwritten by the Linux kernel before the physical memory is allocated to another process.
All data output is inhibited during zeroization.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
9.4 SSPs
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
AES key AES key used for
encryption,
decryption, and
computing MAC
tags
AES-XTS:
256, 512 bits;
Other modes:
128, 192, 256
bits - AES-
XTS: 128, 256
bits; Other
modes: 128,
192, 256 bits
Symmetric
key - CSP
Symmetric
Encryption
with AES
Symmetric
Decryption
with AES
Authenticate
d Symmetric
Encryption
Authenticate
d Symmetric
Decryption
HMAC key HMAC key used
for computing
MAC tags
112-524288
bits - 112-256
bits
Symmetric
key - CSP
Message
Authenticatio
n Code
Module-
generated
RSA
private key
RSA private key
generated by the
module
2048-15360
bits - 112-256
bits
Private key
- CSP
Key Pair
Generatio
n with
RSA
Key Pair
Generation
with RSA
Module-
generated
RSA public
key
RSA public key
generated by the
module
2048-15360
bits - 112-256
bits
Public key
- PSP
Key Pair
Generatio
n with
RSA
Key Pair
Generation
with RSA
RSA
private key
RSA private key
written to the
module
2048-16384
bits - 112-256
bits
Private key
- CSP
Signature
Generation
RSA public
key
RSA public key
written to the
module
1024-16384
bits - 80-256
bits
Public key
- PSP
Signature
Verification
Module-
generated
DH private
key
DH private key
generated by the
module
2048-8192
bits - 112-200
bits
Private key
- CSP
Key Pair
Generatio
n with
Safe
Primes
Key Pair
Generation
with Safe
Primes
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
Module-
generated
DH public
key
DH public key
generated by the
module
2048-8192
bits - 112-200
bits
Public key
- PSP
Key Pair
Generatio
n with
Safe
Primes
Key Pair
Generation
with Safe
Primes
DH Private
key
DH Private key
written to the
module
2048-8192
bits - 112-200
bits
Private key
- CSP
Shared Secret
Computation
with DH
Key Pair
Verification
with Safe
Primes
DH Public
key
DH Public key
written to the
module
2048-8192
bits - 112-200
bits
Public key
- PSP
Shared Secret
Computation
with DH
Key Pair
Verification
with Safe
Primes
Module-
generated
EC private
key
EC private key
generated by the
module
P-224, P-256,
P-384, P-521
bits - 112,
128, 192, 256
bits
Private key
- CSP
Key Pair
Generatio
n with
ECDSA
Key Pair
Generation
with ECDSA
Module-
generated
EC public
key
EC public key
generated by the
module
P-224, P-256,
P-384, P-521
bits - 112,
128, 192, 256
bits
Public key
- PSP
Key Pair
Generatio
n with
ECDSA
Key Pair
Generation
with ECDSA
EC Private
key
EC Private key
written the
module and used
by ECDSA and
ECDH
P-224, P-256,
P-384, P-521
bits - 112,
128, 192, 256
bits
Private key
- CSP
Shared Secret
Computation
with ECDH
Signature
Generation
Key Pair
Verification
with ECDSA
EC Public
key
EC Public key
written the
P-224, P-256,
P-384, P-521
Public key
- PSP
Signature
Verification
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
module and used
by ECDSA and
ECDH
bits - 112,
128, 192, 256
bits
Shared Secret
Computation
with ECDH
Key Pair
Verification
with ECDSA
Key
Derivation
Key
Symmetric key
used to derive
symmetric keys
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivation
with KBKDF
KBKDF
Derived
Key
Symmetric key
derived from a
key-derivation
key
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
KBKDF
Key
Derivation
with KBKDF
HKDF
Derived
Key
Symmetric key
derived from a
shared secret
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
HKDF
Key
Derivation
with HKDF
SSH
Derived
Key
Symmetric key
derived from a
shared secret
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
SSH KDF
Key
Derivation
with SSH
KDF
X9.63
Derived
Key
Symmetric key
derived from a
shared secret
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
X9.63
KDF
Key
Derivation
with X9.63
KDF
X9.42
Derived
Key
Symmetric key
derived from a
shared secret
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
X9.42
KDF
Key
Derivation
with X9.42
KDF
Password
or
passphrase
Password or
passphrase used by
PBKDF to derive
symmetric keys
8-128
characters -
N/A
Password -
CSP
Password-
based Key
Derivation
PBKDF
Derived
Key
Key derived from
PBKDF
password/passphra
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Password-
based Key
Password-
based Key
Derivation
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
se during key
derivation
Derivatio
n
KDA
OneStep
Derived
Key
Symmetric key
derived from a
shared secret
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
KDA
OneStep
Key
Derivation
with KDA
OneStep
KDA
TwoStep
Derived
Key
Symmetric key
derived from a
shared secret
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
Key
Derivatio
n with
KDA
TwoStep
Key
Derivation
with KDA
TwoStep
TLS pre-
master
secret
Pre-master secret
used in Transport
Layer Security
(TLS) network
protocol key
derivation
112-4096 bits
- 112-256 bits
Shared
Secret -
CSP
Shared
Secret
Computatio
n with DH
Shared
Secret
Computatio
n with
ECDH
TLS Key
Derivation
TLS master
secret
Master secret used
in Transport Layer
Security (TLS)
network protocol
key derivation
function for
deriving the TLS
Derived Key
112-4096 bits
- 112-256 bits
based on TLS
pre-master
secret used
Secret -
CSP
TLS Key
Derivatio
n
TLS Key
Derivation
TLS
Derived
Key
Derived key used
in Transport Layer
Security (TLS)
network protocol
112-4096 bits
- 112-256 bits
Symmetric
key - CSP
TLS Key
Derivatio
n
Shared
Secret
Shared secret
generated by
ECDH/DH shared
secret
computation
224-8912 bits
- 112-256 bits
Shared
Secret -
CSP
Shared
Secret
Computatio
n with DH
Shared
Secret
Computatio
Shared Secret
Computation
with DH
Shared Secret
Computation
with ECDH
Key
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
n with
ECDH
Derivation
with KDA
OneStep
Key
Derivation
with KDA
TwoStep
Entropy
input
Entropy input
string used to seed
the DRBG (IG D.L
compliant)
128-256 bits -
128-256 bits
Entropy
Input - CSP
Random
Number
Generation
DRGB seed DRBG seed
derived from
entropy input (IG
D.L compliant)
CTR_DRBG:
256, 320, 348
bits;
Hash_DRBG:
440, 888 bits;
HMAC_DRB
G: 160, 256,
512 bits -
CTR_DRBG:
128, 192, 256
bits;
HMAC_DRB
G,
Hash_DRBG:
128, 256
Seed - CSP Random
Number
Generatio
n
Random
Number
Generation
DRBG
internal
state (V
value, C
value)
Internal state of
the Hash_DRBG
(IG D.L
compliant)
880, 1776 bits
- 128, 256 bits
Internal
state - CSP
Random
Number
Generatio
n
Random
Number
Generation
DRBG
internal
state (V
value, Key)
Internal state of
the CTR_DRBG
and
HMAC_DRBG (IG
D.L compliant)
CTR_DRBG:
256, 320, 348
bits;
HMAC_DRB
G: 320, 512,
1024 bits -
CTR_DRBG:
128, 192, 256
bits;
Internal
state - CSP
Random
Number
Generatio
n
Random
Number
Generation
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Description Size -
Strength
Type -
Category
Generated
By
Established
By
Used By
HMAC_DRB
G: 128, 256
Intermediat
e key
generation
value
Intermediate key
pair generation
value generated
during key
generation and
key derivation
services (SP 800-
133r2 Section 4,
5.1, and 5.2)
112-256 -
112-256 bits
Intermediat
e value -
CSP
Key Pair
Generatio
n with
RSA
Key Pair
Generatio
n with
ECDSA
Key Pair
Generatio
n with
Safe
Primes
Key Pair
Generation
with RSA
Key Pair
Generation
with ECDSA
Key Pair
Generation
with Safe
Primes
Table 18: SSP Table 1
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
AES key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
HMAC key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Module-
generated RSA
private key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Module-generated
RSA public key:Paired
With
Intermediate key
generation
value:Generated From
Module-
generated RSA
public key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Module-generated
RSA private
key:Paired With
Intermediate key
generation
value:Generated From
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
RSA private
key
API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
RSA Public key:Paired
With
RSA public key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
RSA private
key:Paired With
Intermediate key
generation
value:Generated From
Module-
generated DH
private key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Module-generated DH
public key:Paired
With
Intermediate key
generation
value:Generated From
Module-
generated DH
public key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Module-generated DH
private key:Paired
With
Intermediate key
generation
value:Generated From
DH Private key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
DH Public key:Paired
With
DH Public key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
DH Private key:Paired
With
Module-
generated EC
private key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Module-generated EC
public key:Paired
With
Intermediate key
generation
value:Generated From
Module-
generated EC
public key
API output
parameters
RAM:Plaintext From service
invocation until
Free cipher
handle
Module-generated EC
private key:Paired
With
Intermediate key
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
cipherhandle is
freed
Module
Reset
generation
value:Generated From
EC Private key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
EC Public key:Paired
With
EC Public key API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
EC private key:Paired
With
Key Derivation
Key
API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
KBKDF Derived
Key:Derives
KBKDF
Derived Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Key-derivation
key:Derived From
HKDF Derived
Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Shared secret:Derived
From
SSH Derived
Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Shared secret:Derived
From
X9.63 Derived
Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Shared secret:Derived
From
X9.42 Derived
Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Shared secret:Derived
From
Password or
passphrase
API input
parameters
RAM:Plaintext From service
invocation until
Free cipher
handle
PBKDF Derived
Key:Derives
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
cipherhandle is
freed
Module
Reset
PBKDF
Derived Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Password or
passphrase:Derived
From
KDA OneStep
Derived Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Shared secret:Derived
From
KDA TwoStep
Derived Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
Shared secret:Derived
From
TLS pre-master
secret
API input
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Automatic
Module
Reset
TLS master
secret:Generates
DH private
key:Established By
DH public
key:Established By
EC private
key:Established By
EC public
key:Established By
TLS master
secret
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Automatic
Module
Reset
TLS pre-master
secret:Generated From
TLS Derived
Key:Derives
TLS Derived
Key
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
TLS pre-master
secret:Derived From
TLS master
secret:Derived From
Shared Secret API input
parameters
API output
parameters
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Free cipher
handle
Module
Reset
DH private
key:Established By
DH public
key:Established By
EC private
key:Established By
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
EC public
key:Established By
HKDF Derived
Key:Derives
KDA OneStep Derived
Key:Derives
KDA TwoStep
Derived Key:Derives
TLS Derived
Key:Derives
SSH Derived
Key:Derives
X9.63 Derived
Key:Derives
X9.42 Derived
Key:Derives
Entropy input RAM:Plaintext From generation
until DRBG seed
is created
Automatic
Module
Reset
DRBG seed:Derives
DRGB seed RAM:Plaintext While the DRBG
is instantiated
Automatic
Module
Reset
Entropy input:Derived
From
DRBG internal state
(V value, C
value):Generates
DRBG internal state
(V value,
Key):Generates
DRBG internal
state (V value,
C value)
RAM:Plaintext From DRBG
instantiation
until DRBG
termination
Free cipher
handle
Module
Reset
DRBG seed:Generated
From
DRBG internal
state (V value,
Key)
RAM:Plaintext From DRBG
instantiation
until DRBG
termination
Free cipher
handle
Module
Reset
DRBG seed:Generated
From
Intermediate
key generation
value
RAM:Plaintext From service
invocation until
cipherhandle is
freed
Automatic DH private
key:Generates
DH public
key:Generates
EC private
key:Generates
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Name Input -
Output
Storage Storage Duration Zeroization Related SSPs
EC public
key:Generates
RSA private
key:Generates
RSA public
key:Generates
Table 19: SSP Table 2
9.5 Transitions
The SHA-1 algorithm as implemented by the module will be non-approved for all purposes, starting January 1,
2031.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
10 Self-Tests
10.1 Pre-Operational Self-Tests
Algorithm
or Test
Test
Properties
Test Method Test
Type
Indicator Details
HMAC-
SHA2-256
(A4059)
256-bits
key
Message
authentication
SW/FW
Integrity
Module
becomes
operational and
services are
available for use
Integrity test of the shared
library component of the
module. Verified by comparing
an HMAC SHA-256 value
calculated at run time with the
HMAC SHA-256 value
embedded in the fips.so file that
was computed at build time.
HMAC-
SHA2-256
(A4060)
256-bits
key
Message
authentication
SW/FW
Integrity
Module
becomes
operational and
services are
available for use
Integrity test of the shared
library component of the
module. Verified by comparing
an HMAC SHA-256 value
calculated at run time with the
HMAC SHA-256 value
embedded in the fips.so file that
was computed at build time.
HMAC-
SHA2-256
(A4079)
256-bits
key
Message
authentication
SW/FW
Integrity
Module
becomes
operational and
services are
available for use
Integrity test of the shared
library component of the
module. Verified by comparing
an HMAC SHA-256 value
calculated at run time with the
HMAC SHA-256 value
embedded in the fips.so file that
was computed at build time.
HMAC-
SHA2-256
(A4080)
256-bits
key
Message
authentication
SW/FW
Integrity
Module
becomes
operational and
services are
available for use
Integrity test of the shared
library component of the
module. Verified by comparing
an HMAC SHA-256 value
calculated at run time with the
HMAC SHA-256 value
embedded in the fips.so file that
was computed at build time.
HMAC-
SHA2-256
(A4081)
256-bits
key
Message
authentication
SW/FW
Integrity
Module
becomes
operational and
services are
available for use
Integrity test of the shared
library component of the
module. Verified by comparing
an HMAC SHA-256 value
calculated at run time with the
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm
or Test
Test
Properties
Test Method Test
Type
Indicator Details
HMAC SHA-256 value
embedded in the fips.so file that
was computed at build time.
HMAC-
SHA2-256
(A4082)
256-bits
key
Message
authentication
SW/FW
Integrity
Module
becomes
operational and
services are
available for use
Integrity test of the shared
library component of the
module. Verified by comparing
an HMAC SHA-256 value
calculated at run time with the
HMAC SHA-256 value
embedded in the fips.so file that
was computed at build time.
Table 20: Pre-Operational Self-Tests
The pre-operational software integrity tests are performed automatically when the module is initialized, before
the module transitions into the operational state. While the module is executing the self-tests, services are not
available, and data output (via the data output interface) is inhibited until the tests are successfully completed.
The module transitions to the operational state only after the pre-operational self-tests are passed successfully.
Prior the first use, a CAST is executed for the algorithms used in the Pre-operational Self-Tests.
10.2 Conditional Self-Tests
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
SHA-1
(A4059)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA-1
(A4079)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA-1
(A4080)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA-1
(A4081)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
SHA-1
(A4082)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A4059)
Message digest KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A4079)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A4080)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A4081)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA2-512
(A4082)
24-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
SHA3-256
(A4055)
32-bit message KAT CAST Module
becomes
operational
Message digest Test runs at
power-on
before the
integrity test
AES-GCM
(A4067) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4068) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-GCM
(A4069) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4070) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4071) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4072) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4073) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4074) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4075) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4076) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4077) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-GCM
(A4078) -
Encrypt
256-bit key and
96-bit IV,
encrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4067) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4068) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4069) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4070) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4071) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4072) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4073) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4074) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-GCM
(A4075) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4076) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4077) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-GCM
(A4078) -
Decrypt
256-bit key and
96-bit IV,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4054)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4056)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4057)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4058)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4061)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
AES-ECB
(A4062)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4063)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4064)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4065)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
AES-ECB
(A4066)
128-bit key,
decrypt
KAT CAST Module
becomes
operational
Symmetric
operation
Test runs at
power-on
before the
integrity test
RSA SigGen
(FIPS186-4)
(A4059)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
RSA SigGen
(FIPS186-4)
(A4079)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
RSA SigGen
(FIPS186-4)
(A4080)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
RSA SigGen
(FIPS186-4)
(A4081)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
RSA SigGen
(FIPS186-4)
(A4082)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
RSA SigVer
(FIPS186-4)
(A4059)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
RSA SigVer
(FIPS186-4)
(A4079)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
RSA SigVer
(FIPS186-4)
(A4080)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
RSA SigVer
(FIPS186-4)
(A4081)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
RSA SigVer
(FIPS186-4)
(A4082)
PKCS#1 v1.5
with SHA-256
and 2048-bit
key
KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
ECDSA
SigGen
(FIPS186-4)
(A4055)
SHA-256 and
P-224, P-256,
P-384, and P-
521
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
ECDSA
SigGen
(FIPS186-4)
(A4059)
SHA-256 and
P-224, P-256,
P-384, and P-
521
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
ECDSA
SigGen
(FIPS186-4)
(A4079)
SHA-256 and
P-224, P-256,
P-384, and P-
521
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
ECDSA
SigGen
(FIPS186-4)
(A4080)
SHA-256 and
P-224, P-256,
P-384, and P-
521
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
ECDSA
SigGen
(FIPS186-4)
(A4081)
SHA-256 and
P-224, P-256,
P-384, and P-
521
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
ECDSA
SigGen
(FIPS186-4)
(A4082)
SHA-256 and
P-224, P-256,
P-384, and P-
521
KAT CAST Module
becomes
operational
Digital signature
generation
Test runs at
power-on
before the
integrity test
ECDSA
SigVer
(FIPS186-4)
(A4055)
SHA-256 KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
ECDSA
SigVer
(FIPS186-4)
(A4059)
SHA-256 KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
ECDSA
SigVer
(FIPS186-4)
(A4079)
SHA-256 KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
ECDSA
SigVer
(FIPS186-4)
(A4080)
SHA-256 KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
ECDSA
SigVer
(FIPS186-4)
(A4081)
SHA-256 KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
ECDSA
SigVer
(FIPS186-4)
(A4082)
SHA-256 KAT CAST Module
becomes
operational
Digital signature
verification
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
KDF SP800-
108 (A4084)
HMAC-SHA2-
256 in counter
mode and 128-
bit input key
KAT CAST Module
becomes
operational
Key Derivation
with KBKDF
Test runs at
power-on
before the
integrity test
KDA OneStep
SP800-56Cr2
(A4051)
SHA2-224 and
448-bit input
secret
KAT CAST Module
becomes
operational
Shared secret key
derivation
Test runs at
power-on
before the
integrity test
KDA HKDF
Sp800-56Cr1
(A4052)
SHA2-256 and
48-bit secret
KAT CAST Module
becomes
operational
Shared secret key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.42 (A4055)
AES-128 KW
and SHA-1 and
160-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.42 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.42 (A4059)
AES-128 KW
and SHA-1 and
160-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.42 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.42 (A4079)
AES-128 KW
and SHA-1 and
160-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.42 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.42 (A4080)
AES-128 KW
and SHA-1 and
160-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.42 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.42 (A4081)
AES-128 KW
and SHA-1 and
160-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.42 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.42 (A4082)
AES-128 KW
and SHA-1 and
160-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.42 key
derivation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
KDF ANS
9.63 (A4055)
SHA2-256 and
192-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.63 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.63 (A4059)
SHA2-256 and
192-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.63 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.63 (A4079)
SHA2-256 and
192-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.63 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.63 (A4080)
SHA2-256 and
192-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.63 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.63 (A4081)
SHA2-256 and
192-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.63 key
derivation
Test runs at
power-on
before the
integrity test
KDF ANS
9.63 (A4082)
SHA2-256 and
192-bit input
secret
KAT CAST Module
becomes
operational
ANS X9.63 key
derivation
Test runs at
power-on
before the
integrity test
KDF SSH
(A4054)
SHA-1 and
1056-bit input
secret
KAT CAST Module
becomes
operational
SSH KDF key
derivation
Test runs at
power-on
before the
integrity test
KDF SSH
(A4064)
SHA-1 and
1056-bit input
secret
KAT CAST Module
becomes
operational
SSH KDF key
derivation
Test runs at
power-on
before the
integrity test
KDF SSH
(A4065)
SHA-1 and
1056-bit input
secret
KAT CAST Module
becomes
operational
SSH KDF key
derivation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
KDF SSH
(A4066)
SHA-1 and
1056-bit input
secret
KAT CAST Module
becomes
operational
SSH KDF key
derivation
Test runs at
power-on
before the
integrity test
TLS v1.2 KDF
RFC7627
(A4059)
SHA2-256 and
384-bit input
secret
KAT CAST Module
becomes
operational
TLS v1.2 KDF key
derivation
Test runs at
power-on
before the
integrity test
TLS v1.2 KDF
RFC7627
(A4079)
SHA2-256 and
384-bit input
secret
KAT CAST Module
becomes
operational
TLS v1.2 KDF key
derivation
Test runs at
power-on
before the
integrity test
TLS v1.2 KDF
RFC7627
(A4080)
SHA2-256 and
384-bit input
secret
KAT CAST Module
becomes
operational
TLS v1.2 KDF key
derivation
Test runs at
power-on
before the
integrity test
TLS v1.2 KDF
RFC7627
(A4081)
SHA2-256 and
384-bit input
secret
KAT CAST Module
becomes
operational
TLS v1.2 KDF key
derivation
Test runs at
power-on
before the
integrity test
TLS v1.2 KDF
RFC7627
(A4082)
SHA2-256 and
384-bit input
secret
KAT CAST Module
becomes
operational
TLS v1.2 KDF key
derivation
Test runs at
power-on
before the
integrity test
TLS v1.3 KDF
(A4052)
SHA2-256,
extract and
expand modes
KAT CAST Module
becomes
operational
TLS v1.3 KDF key
derivation
Test runs at
power-on
before the
integrity test
PBKDF
(A4055)
SHA2-256 KAT CAST Module
becomes
operational
Password-based
Key Derivation
Test runs at
power-on
before the
integrity test
PBKDF
(A4059)
SHA2-256 KAT CAST Module
becomes
operational
Password-based
Key Derivation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
PBKDF
(A4079)
SHA2-256 KAT CAST Module
becomes
operational
Password-based
Key Derivation
Test runs at
power-on
before the
integrity test
PBKDF
(A4080)
SHA2-256 KAT CAST Module
becomes
operational
Password-based
Key Derivation
Test runs at
power-on
before the
integrity test
PBKDF
(A4081)
SHA2-256 KAT CAST Module
becomes
operational
Password-based
Key Derivation
Test runs at
power-on
before the
integrity test
PBKDF
(A4082)
SHA2-256 KAT CAST Module
becomes
operational
Password-based
Key Derivation
Test runs at
power-on
before the
integrity test
Counter
DRBG
(A4053)
AES-128 with
derivation
function and
prediction
resistance
KAT CAST Module
becomes
operational
Instantiate;
Generate; Reseed
(compliant to SP
800-90Arev1
Section 11.3)
Test runs at
power-on
before the
integrity test
Hash DRBG
(A4053)
SHA2-256 KAT CAST Module
becomes
operational
Instantiate;
Generate; Reseed
(compliant to SP
800-90Arev1
Section 11.3)
Test runs at
power-on
before the
integrity test
HMAC DRBG
(A4053)
HMAC-SHA-1 KAT CAST Module
becomes
operational
Instantiate;
Generate; Reseed
(compliant to SP
800-90Arev1
Section 11.3)
Test runs at
power-on
before the
integrity test
KAS-FFC-SSC
Sp800-56Ar3
(A4085)
ffdhe2048 KAT CAST Module
becomes
operational
Shared secret
computation
Test runs at
power-on
before the
integrity test
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
KAS-ECC-
SSC Sp800-
56Ar3
(A4059)
P-256 KAT CAST Module
becomes
operational
Shared secret
computation
Test runs at
power-on
before the
integrity test
KAS-ECC-
SSC Sp800-
56Ar3
(A4079)
P-256 KAT CAST Module
becomes
operational
Shared secret
computation
Test runs at
power-on
before the
integrity test
KAS-ECC-
SSC Sp800-
56Ar3
(A4080)
P-256 KAT CAST Module
becomes
operational
Shared secret
computation
Test runs at
power-on
before the
integrity test
KAS-ECC-
SSC Sp800-
56Ar3
(A4081)
P-256 KAT CAST Module
becomes
operational
Shared secret
computation
Test runs at
power-on
before the
integrity test
KAS-ECC-
SSC Sp800-
56Ar3
(A4082)
P-256 KAT CAST Module
becomes
operational
Shared secret
computation
Test runs at
power-on
before the
integrity test
Safe Primes
Key
Generation
(A4085)
N/A PCT PCT Key pair
generation is
successful
SP 800-56Arev3
Section 5.6.2.1.4
Key pair
generation
RSA KeyGen
(FIPS186-4)
(A4059)
PKCS#1 v1.5
with SHA-256
PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
RSA KeyGen
(FIPS186-4)
(A4079)
PKCS#1 v1.5
with SHA-256
PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
RSA KeyGen
(FIPS186-4)
(A4080)
PKCS#1 v1.5
with SHA-256
PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
RSA KeyGen
(FIPS186-4)
(A4081)
PKCS#1 v1.5
with SHA-256
PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or
Test
Test Properties Test
Method
Test
Type
Indicator Details Conditions
RSA KeyGen
(FIPS186-4)
(A4082)
PKCS#1 v1.5
with SHA-256
PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
ECDSA
KeyGen
(FIPS186-4)
(A4059)
SHA-256 PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
ECDSA
KeyGen
(FIPS186-4)
(A4079)
SHA-256 PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
ECDSA
KeyGen
(FIPS186-4)
(A4080)
SHA-256 PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
ECDSA
KeyGen
(FIPS186-4)
(A4081)
SHA-256 PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
ECDSA
KeyGen
(FIPS186-4)
(A4082)
SHA-256 PCT PCT Key pair
generation is
sucessful
Signature
generation and
verification
Key pair
generation
KDA TwoStep
SP800-56Cr2
(A4051)
SHA2-224 and
448-bit input
secret
KAT CAST Module
becomes
operational
Shared secret key
derivation
Test runs at
power-on
before the
integrity test
Table 21: Conditional Self-Tests
Data output through the data output interface is inhibited during the conditional self-tests. The module does
not return control to the calling application until the tests are completed. If any of these tests fails, the module
transitions to the error state (Section 10.4 Error States).
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
10.3 Periodic Self-Test Information
Algorithm or Test Test Method Test Type Period Periodic Method
HMAC-SHA2-256
(A4059)
Message
authentication
SW/FW Integrity On demand Manually
HMAC-SHA2-256
(A4060)
Message
authentication
SW/FW Integrity On demand Manually
HMAC-SHA2-256
(A4079)
Message
authentication
SW/FW Integrity On demand Manually
HMAC-SHA2-256
(A4080)
Message
authentication
SW/FW Integrity On demand Manually
HMAC-SHA2-256
(A4081)
Message
authentication
SW/FW Integrity On demand Manually
HMAC-SHA2-256
(A4082)
Message
authentication
SW/FW Integrity On demand Manually
Table 22: Pre-Operational Periodic Information
Algorithm or Test Test Method Test Type Period Periodic Method
SHA-1 (A4059) KAT CAST On Demand Manually
SHA-1 (A4079) KAT CAST On Demand Manually
SHA-1 (A4080) KAT CAST On Demand Manually
SHA-1 (A4081) KAT CAST On Demand Manually
SHA-1 (A4082) KAT CAST On Demand Manually
SHA2-512 (A4059) KAT CAST On Demand Manually
SHA2-512 (A4079) KAT CAST On Demand Manually
SHA2-512 (A4080) KAT CAST On Demand Manually
SHA2-512 (A4081) KAT CAST On Demand Manually
SHA2-512 (A4082) KAT CAST On Demand Manually
SHA3-256 (A4055) KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
AES-GCM (A4067)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4068)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4069)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4070)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4071)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4072)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4073)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4074)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4075)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4076)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4077)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4078)
- Encrypt
KAT CAST On Demand Manually
AES-GCM (A4067)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4068)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4069)
- Decrypt
KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
AES-GCM (A4070)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4071)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4072)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4073)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4074)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4075)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4076)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4077)
- Decrypt
KAT CAST On Demand Manually
AES-GCM (A4078)
- Decrypt
KAT CAST On Demand Manually
AES-ECB (A4054) KAT CAST On Demand Manually
AES-ECB (A4056) KAT CAST On Demand Manually
AES-ECB (A4057) KAT CAST On Demand Manually
AES-ECB (A4058) KAT CAST On Demand Manually
AES-ECB (A4061) KAT CAST On Demand Manually
AES-ECB (A4062) KAT CAST On Demand Manually
AES-ECB (A4063) KAT CAST On Demand Manually
AES-ECB (A4064) KAT CAST On Demand Manually
AES-ECB (A4065) KAT CAST On Demand Manually
AES-ECB (A4066) KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
RSA SigGen
(FIPS186-4)
(A4059)
KAT CAST On Demand Manually
RSA SigGen
(FIPS186-4)
(A4079)
KAT CAST On Demand Manually
RSA SigGen
(FIPS186-4)
(A4080)
KAT CAST On Demand Manually
RSA SigGen
(FIPS186-4)
(A4081)
KAT CAST On Demand Manually
RSA SigGen
(FIPS186-4)
(A4082)
KAT CAST On Demand Manually
RSA SigVer
(FIPS186-4)
(A4059)
KAT CAST On Demand Manually
RSA SigVer
(FIPS186-4)
(A4079)
KAT CAST On Demand Manually
RSA SigVer
(FIPS186-4)
(A4080)
KAT CAST On Demand Manually
RSA SigVer
(FIPS186-4)
(A4081)
KAT CAST On Demand Manually
RSA SigVer
(FIPS186-4)
(A4082)
KAT CAST On Demand Manually
ECDSA SigGen
(FIPS186-4)
(A4055)
KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
ECDSA SigGen
(FIPS186-4)
(A4059)
KAT CAST On Demand Manually
ECDSA SigGen
(FIPS186-4)
(A4079)
KAT CAST On Demand Manually
ECDSA SigGen
(FIPS186-4)
(A4080)
KAT CAST On Demand Manually
ECDSA SigGen
(FIPS186-4)
(A4081)
KAT CAST On Demand Manually
ECDSA SigGen
(FIPS186-4)
(A4082)
KAT CAST On Demand Manually
ECDSA SigVer
(FIPS186-4)
(A4055)
KAT CAST On Demand Manually
ECDSA SigVer
(FIPS186-4)
(A4059)
KAT CAST On Demand Manually
ECDSA SigVer
(FIPS186-4)
(A4079)
KAT CAST On Demand Manually
ECDSA SigVer
(FIPS186-4)
(A4080)
KAT CAST On Demand Manually
ECDSA SigVer
(FIPS186-4)
(A4081)
KAT CAST On Demand Manually
ECDSA SigVer
(FIPS186-4)
(A4082)
KAT CAST On Demand Manually
KDF SP800-108
(A4084)
KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
KDA OneStep
SP800-56Cr2
(A4051)
KAT CAST On Demand Manually
KDA HKDF Sp800-
56Cr1 (A4052)
KAT CAST On Demand Manually
KDF ANS 9.42
(A4055)
KAT CAST On Demand Manually
KDF ANS 9.42
(A4059)
KAT CAST On Demand Manually
KDF ANS 9.42
(A4079)
KAT CAST On Demand Manually
KDF ANS 9.42
(A4080)
KAT CAST On Demand Manually
KDF ANS 9.42
(A4081)
KAT CAST On Demand Manually
KDF ANS 9.42
(A4082)
KAT CAST On Demand Manually
KDF ANS 9.63
(A4055)
KAT CAST On Demand Manually
KDF ANS 9.63
(A4059)
KAT CAST On Demand Manually
KDF ANS 9.63
(A4079)
KAT CAST On Demand Manually
KDF ANS 9.63
(A4080)
KAT CAST On Demand Manually
KDF ANS 9.63
(A4081)
KAT CAST On Demand Manually
KDF ANS 9.63
(A4082)
KAT CAST On Demand Manually
KDF SSH (A4054) KAT CAST On Demand Manually
KDF SSH (A4064) KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
KDF SSH (A4065) KAT CAST On Demand Manually
KDF SSH (A4066) KAT CAST On Demand Manually
TLS v1.2 KDF
RFC7627 (A4059)
KAT CAST On Demand Manually
TLS v1.2 KDF
RFC7627 (A4079)
KAT CAST On Demand Manually
TLS v1.2 KDF
RFC7627 (A4080)
KAT CAST On Demand Manually
TLS v1.2 KDF
RFC7627 (A4081)
KAT CAST On Demand Manually
TLS v1.2 KDF
RFC7627 (A4082)
KAT CAST On Demand Manually
TLS v1.3 KDF
(A4052)
KAT CAST On Demand Manually
PBKDF (A4055) KAT CAST On Demand Manually
PBKDF (A4059) KAT CAST On Demand Manually
PBKDF (A4079) KAT CAST On Demand Manually
PBKDF (A4080) KAT CAST On Demand Manually
PBKDF (A4081) KAT CAST On Demand Manually
PBKDF (A4082) KAT CAST On Demand Manually
Counter DRBG
(A4053)
KAT CAST On Demand Manually
Hash DRBG
(A4053)
KAT CAST On Demand Manually
HMAC DRBG
(A4053)
KAT CAST On Demand Manually
KAS-FFC-SSC
Sp800-56Ar3
(A4085)
KAT CAST On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
KAS-ECC-SSC
Sp800-56Ar3
(A4059)
KAT CAST On Demand Manually
KAS-ECC-SSC
Sp800-56Ar3
(A4079)
KAT CAST On Demand Manually
KAS-ECC-SSC
Sp800-56Ar3
(A4080)
KAT CAST On Demand Manually
KAS-ECC-SSC
Sp800-56Ar3
(A4081)
KAT CAST On Demand Manually
KAS-ECC-SSC
Sp800-56Ar3
(A4082)
KAT CAST On Demand Manually
Safe Primes Key
Generation
(A4085)
PCT PCT On Demand Manually
RSA KeyGen
(FIPS186-4)
(A4059)
PCT PCT On Demand Manually
RSA KeyGen
(FIPS186-4)
(A4079)
PCT PCT On Demand Manually
RSA KeyGen
(FIPS186-4)
(A4080)
PCT PCT On Demand Manually
RSA KeyGen
(FIPS186-4)
(A4081)
PCT PCT On Demand Manually
RSA KeyGen
(FIPS186-4)
(A4082)
PCT PCT On Demand Manually
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Algorithm or Test Test Method Test Type Period Periodic Method
ECDSA KeyGen
(FIPS186-4)
(A4059)
PCT PCT On Demand Manually
ECDSA KeyGen
(FIPS186-4)
(A4079)
PCT PCT On Demand Manually
ECDSA KeyGen
(FIPS186-4)
(A4080)
PCT PCT On Demand Manually
ECDSA KeyGen
(FIPS186-4)
(A4081)
PCT PCT On Demand Manually
ECDSA KeyGen
(FIPS186-4)
(A4082)
PCT PCT On Demand Manually
KDA TwoStep
SP800-56Cr2
(A4051)
KAT CAST On Demand Manually
Table 23: Conditional Periodic Information
10.4 Error States
Name Description Conditions Recovery
Method
Indicator
Error If the module fails any
of the self-tests, the
module enters the error
state. In the error state,
the module
immediately stops
functioning and ends
the application process
Software
integrity
test failure
CAST
failure
PCT failure
Module
reinitialization
Software integrity test failure, CAST
failure: OSSL_PROV_PARAM_STATUS
is set to 0. Module will not load; PCT
failure: module is aborted
Table 24: Error States
If the module fails any of the self-tests, the module enters the error state. In the error state, the module
immediately stops functioning and ends the application process. Consequently, the data output interface is
inhibited, and the module no longer accepts inputs or requests (as the module is no longer running)
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
10.5 Operator Initiation of Self-Tests
Both conditional and pre-operational self-tests can be executed on-demand by unloading and subsequently re-
initializing the module, or by calling the OSSL_PROVIDER_self_test function. The pair-wise consistency tests
can be invoked on demand by requesting the key pair generation service.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
11 Life-Cycle Assurance
11.1 Installation, Initialization, and Startup Procedures
The module is distributed as a part of the AlmaLinux 9 OpenSSL package in the form of the openssl-libs-3.0.7-
20.el9_2.tuxcare.1 RPM package.
Before the openssl-libs-3.0.7-20.el9_2.tuxcare.1 RPM package is installed, the AlmaLinux 9 system must operate
in the FIPS validated configuration. This can be achieved by switching the system into the FIPS-validated
configuration after the installation. Execute the openssl list -providers command. Restart the system.
The Crypto Officer must verify the AlmaLinux 9 system operates in the FIPS-validated configuration by
executing the fips-mode-setup –check command, which should output “FIPS mode is enabled.”
11.2 Administrator Guidance
After the openssl-libs-3.0.7-20.el9_2.tuxcare.1 RPM package is installed, the Crypto Officer must execute the
openssl list -providers command. This command should display the base/default and FIPS providers as follows:
Providers
base
name: OpenSSL Base Provider
version: 3.0.7
status: active
default
name: OpenSSL Default Provider
version: 3.0.7
status: active
fips
name: OpenSSL FIPS Provider for AlmaLinux 9
version: 3.0.7-1d2bd88ee26b3c90
status: active
The cryptographic boundary consists only of the FIPS provider as listed. If any other OpenSSL or third-party
provider is invoked, the user is not interacting with the module specified in this Security Policy.
11.3 Non-Administrator Guidance
There is no non-administrator guidance.
11.4 Design and Rules
Not applicable.
11.5 Maintenance Requirements
Not applicable
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
11.6 End of Life
As the module does not persistently store SSPs, secure sanitization of the module consists of unloading the
module. This will zeroize all SSPs in volatile memory. Then, if desired, the openssl-libs-3.0.7-20.el9_2.tuxcare.1
RPM package can be uninstalled from the AlmaLinux 9 system
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
12 Mitigation of Other Attacks
12.1 Attack List
Certain cryptographic subroutines and algorithms are vulnerable to timing analysis. The module claims
mitigation of timing-based side-channel attacks implementing two methods: Constant-time Implementations
and Numeric Blinding:
• Constant-time Implementations protect cryptographic implementations in the module against timing
cryptanalysis ensuring that the variations in execution time for different cryptographic algorithms
cannot be traced back to the key, CSP or secret data.
• Numeric Blinding protects the RSA and ECDSA algorithms from timing attacks. These algorithms are
vulnerable to such attacks since attackers can measure the time of signature operations or RSA
decryption. To mitigate this, the module generates a random factor which is provided as an input to the
decryption/signature operation which discarded once the operation results in an output. This makes it
difficult for attackers to attempt timing attacks making impossible correlating execution time to the
RSA/ECDSA key.
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Appendix A. Glossary and Abbreviations
AES Advanced Encryption Standard
API Application Programming Interface
CAST Cryptographic Algorithm Self-Test
CAVP Cryptographic Algorithm Validation Program
CBC Cipher Block Chaining
CCM Counter with Cipher Block Chaining-Message Authentication Code
CFB Cipher Feedback
CKG Cryptographic Key Generation
CMAC Cipher-based Message Authentication Code
CMVP Cryptographic Module Validation Program
CSP Critical Security Parameter
CTR Counter
DH Diffie-Hellman
DRBG Deterministic Random Bit Generator
ECB Electronic Code Book
ECC Elliptic Curve Cryptography
ECDH Elliptic Curve Diffie-Hellman
ECDSA Elliptic Curve Digital Signature Algorithm
EVP Envelope
FFC Finite Field Cryptography
FIPS Federal Information Processing Standards
GCM Galois Counter Mode
GMAC Galois Counter Mode Message Authentication Code
HKDF HMAC-based Key Derivation Function
HMAC Keyed-Hash Message Authentication Code
IKE Internet Key Exchange
KAS Key Agreement Scheme
KAT Known Answer Test
KBKDF Key-based Key Derivation Function
KW Key Wrap
KWP Key Wrap with Padding
MAC Message Authentication Code
NIST National Institute of Science and Technology
OFB Output Feedback
PAA Processor Algorithm Acceleration
PCT Pair-wise Consistency Test
PBKDF2 Password-based Key Derivation Function v2
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
PSS Probabilistic Signature Scheme
RSA Rivest, Shamir, Adleman
SHA Secure Hash Algorithm
SSC Shared Secret Computation
SSH Secure Shell
SSP Sensitive Security Parameter
TLS Transport Layer Security
XOF Extendable Output Function
XTS XEX-based Tweaked-codebook mode with cipher text Stealing
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
Appendix B. References
ANS X9.42-2001 Public Key Cryptography for the Financial Services Industry: Agreement of
Symmetric Keys Using Discrete Logarithm Cryptography
2001
https://webstore.ansi.org/standards/ascx9/ansix9422001
ANS X9.63-2001 Public Key Cryptography for the Financial Services Industry, Key Agreement and
Key Transport Using Elliptic Curve Cryptography
2001
https://webstore.ansi.org/standards/ascx9/ansix9632001
FIPS 140-3 FIPS PUB 140-3 - Security Requirements for Cryptographic Modules
March 2019
https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf
FIPS 140-3 IG Implementation Guidance for FIPS PUB 140-3 and the Cryptographic Module
Validation Program
March 2024
https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-
program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf
FIPS 180-4 Secure Hash Standard (SHS)
August 2015
https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf
FIPS 186-4 Digital Signature Standard (DSS)
July 2013
https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf
FIPS 197 Advanced Encryption Standard
November 2001
https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf
FIPS 198-1 The Keyed Hash Message Authentication Code (HMAC)
July 2008
https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
FIPS 202 SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions
August 2015
https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf
RFC 3526 More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key
Exchange (IKE)
May 2003
https://www.ietf.org/rfc/rfc3526.txt
RFC 5288 AES Galois Counter Mode (GCM) Cipher Suites for TLS
August 2008
https://www.ietf.org/rfc/rfc5288.txt
RFC 7919 Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for Transport Layer
Security (TLS)
August 2016
https://www.ietf.org/rfc/rfc7919.txt
RFC 8446 The Transport Layer Security (TLS) Protocol Version 1.3
August 2018
https://www.ietf.org/rfc/rfc8446.txt
SP 800-140B NIST Special Publication 800-140B - CMVP Security Policy Requirements
March 2020
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140B.pdf
SP 800-38A Recommendation for Block Cipher Modes of Operation Methods and Techniques
December 2001
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf
SP 800-38A Addendum Recommendation for Block Cipher Modes of Operation: Three Variants of
Ciphertext Stealing for CBC Mode
October 2010
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
SP 800-38B Recommendation for Block Cipher Modes of Operation: The CMAC Mode for
Authentication
May 2005
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38b.pdf
SP 800-38C Recommendation for Block Cipher Modes of Operation: the CCM Mode for
Authentication and Confidentiality
July 2007
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf
SP 800-38D Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode
(GCM) and GMAC
November 2007
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf
SP 800-38E Recommendation for Block Cipher Modes of Operation: The XTS AES Mode for
Confidentiality on Storage Devices
January 2010
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf
SP 800-38F Recommendation for Block Cipher Modes of Operation: Methods for Key
Wrapping
December 2012
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf
SP 800-52r2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security
(TLS) Implementations
August 2019
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf
SP 800-56Ar3 Recommendation for Pair-Wise Key Establishment Schemes Using Discrete
Logarithm Cryptography
April 2018
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf
OpenSSL FIPS Provider for AlmaLinux 9 FIPS 140-3 Non-Proprietary Security Policy
© 2026 Cloudlinux Inc., TuxCare division/atsec information security corporation.
This document can be reproduced and distributed only whole and intact, including this copyright notice.
SP 800-56Cr1 Recommendation for Key-Derivation Methods in Key-Establishment Schemes
April 2018
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf
SP 800-56Cr2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes
August 2020
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf
SP 800-90Ar1 Recommendation for Random Number Generation Using Deterministic Random Bit
Generators
June 2015
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf
SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation
January 2018
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf
SP 800-108r1 NIST Special Publication 800-108r1 - Recommendation for Key Derivation Using
Pseudorandom Functions
August 2022
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf
SP 800-132 Recommendation for Password-Based Key Derivation - Part 1: Storage Applications
December 2010
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf
SP 800-133r2 Recommendation for Cryptographic Key Generation
June 2020
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf
SP 800-135r1 Recommendation for Existing Application-Specific Key Derivation Functions
December 2011
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf