Red Hat Enterprise Linux 9 OpenSSL FIPS Provider

Webpage information ?

Heuristics ?

References ?

No references are available for this certificate.

Updates ?

• 12.08.2024 The certificate data changed. Show diff

  Certificate changed

  The web extraction data was updated.

  • The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf.
• 03.08.2024 The certificate was first processed. Show diff

  New certificate

  A new FIPS 140 certificate with the product name was processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4746,
  "dgst": "2293091e01f7ea66",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-512A4459",
        "KDF SP800-108A3553",
        "HMAC-SHA2-512/224A4459",
        "SHA2-512/224A4459",
        "HMAC-SHA-1A4459",
        "Safe Primes Key GenerationA3554",
        "SHA2-384A4459",
        "KDF ANS 9.42A4459",
        "AES-OFBA4465",
        "Hash DRBGA3570",
        "KDF ANS 9.63A4459",
        "ECDSA SigGen (FIPS186-4)A4459",
        "HMAC-SHA2-256A4459",
        "HMAC DRBGA3570",
        "PBKDFA4459",
        "AES-GCMA4462",
        "HMAC-SHA3-384A4024",
        "AES-XTS Testing Revision 2.0A4465",
        "KAS-FFC-SSC Sp800-56Ar3A3554",
        "HMAC-SHA2-512A4459",
        "SHA2-512/256A4459",
        "TLS v1.3 KDFA3526",
        "SHA3-224A4024",
        "SHA-1A4459",
        "KDA OneStep SP800-56Cr2A3525",
        "SHA3-384A4024",
        "ECDSA KeyGen (FIPS186-4)A4459",
        "AES-GMACA4462",
        "KDF SSHA4460",
        "RSA SigGen (FIPS186-4)A4459",
        "AES-CMACA4465",
        "SHAKE-256A4024",
        "SHA2-256A4459",
        "AES-CBCA4465",
        "AES-CBC-CS1A4465",
        "AES-CBC-CS2A4465",
        "Counter DRBGA3570",
        "TLS v1.2 KDF RFC7627A4459",
        "SHA2-224A4459",
        "AES-CBC-CS3A4465",
        "AES-KWPA4465",
        "RSA SigVer (FIPS186-4)A4459",
        "SHA3-512A4024",
        "KDA HKDF Sp800-56Cr1A3526",
        "AES-CFB128A4465",
        "HMAC-SHA3-256A4024",
        "HMAC-SHA3-512A4024",
        "HMAC-SHA2-512/256A4459",
        "AES-KWA4465",
        "AES-CFB1A4465",
        "AES-ECBA4465",
        "HMAC-SHA2-224A4459",
        "KAS-ECC-SSC Sp800-56Ar3A4459",
        "RSA KeyGen (FIPS186-4)A4459",
        "SHA3-256A4024",
        "HMAC-SHA3-224A4024",
        "AES-CCMA4465",
        "ECDSA SigVer (FIPS186-4)A4459",
        "AES-CFB8A4465",
        "ECDSA KeyVer (FIPS186-4)A4459",
        "SHAKE-128A4024",
        "Safe Primes Key VerificationA3554",
        "AES-CTRA4465",
        "HMAC-SHA2-384A4459"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
        "cpe:2.3:o:redhat:linux:9.0:*:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2022-0987",
        "CVE-2002-1155",
        "CVE-2021-3839",
        "CVE-2022-1355",
        "CVE-2021-3997",
        "CVE-2022-2211",
        "CVE-2022-4904",
        "CVE-2023-0778",
        "CVE-2022-34303",
        "CVE-2022-4743",
        "CVE-2023-0494",
        "CVE-2022-2963",
        "CVE-2022-1354",
        "CVE-2022-2989",
        "CVE-2023-1073",
        "CVE-2007-3103",
        "CVE-1999-0894",
        "CVE-2020-14394",
        "CVE-2022-2132",
        "CVE-2022-1706",
        "CVE-2022-25309",
        "CVE-1999-1288",
        "CVE-2022-0934",
        "CVE-2001-0690",
        "CVE-2022-1789",
        "CVE-2023-2004",
        "CVE-2022-3715",
        "CVE-2022-1586",
        "CVE-2023-27561",
        "CVE-2022-1198",
        "CVE-2000-1207",
        "CVE-2023-1095",
        "CVE-2022-1247",
        "CVE-2021-3864",
        "CVE-2023-1652",
        "CVE-2022-2639",
        "CVE-1999-0297",
        "CVE-2022-3821",
        "CVE-2023-0664",
        "CVE-2022-0168",
        "CVE-2021-3695",
        "CVE-2022-2964",
        "CVE-2003-0442",
        "CVE-2021-35938",
        "CVE-2022-2393",
        "CVE-2022-2990",
        "CVE-1999-0798",
        "CVE-2022-1016",
        "CVE-2022-2850",
        "CVE-2000-0017",
        "CVE-2022-1852",
        "CVE-2022-1184",
        "CVE-2000-0701",
        "CVE-2022-3500",
        "CVE-2023-1513",
        "CVE-2022-0480",
        "CVE-2022-25310",
        "CVE-2022-3560",
        "CVE-2003-0461",
        "CVE-2021-4204",
        "CVE-2022-4285",
        "CVE-2022-2509",
        "CVE-2022-2873",
        "CVE-2022-2625",
        "CVE-2022-1263",
        "CVE-2022-2153",
        "CVE-2003-0434",
        "CVE-2023-1289",
        "CVE-2001-0889",
        "CVE-2003-0464",
        "CVE-2021-35937",
        "CVE-2022-34302",
        "CVE-2023-1380",
        "CVE-2022-1587",
        "CVE-2022-0171",
        "CVE-2022-1652",
        "CVE-2023-0179",
        "CVE-2022-1462",
        "CVE-2021-3697",
        "CVE-1999-0037",
        "CVE-2003-0364",
        "CVE-2022-1949",
        "CVE-2022-3707",
        "CVE-2022-34301",
        "CVE-2022-2078",
        "CVE-2021-4217",
        "CVE-2022-4283",
        "CVE-2016-7091",
        "CVE-2022-1158",
        "CVE-2022-1708",
        "CVE-2022-25308",
        "CVE-2023-0361",
        "CVE-2021-3696",
        "CVE-2022-3424",
        "CVE-2021-4158"
      ]
    },
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDH": {
            "ECDH": 23
          },
          "ECDSA": {
            "ECDSA": 17
          }
        },
        "FF": {
          "DH": {
            "DH": 42,
            "Diffie-Hellman": 8
          }
        },
        "RSA": {
          "RSA-OAEP": 2,
          "RSA-PSS": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 5
        },
        "GCM": {
          "GCM": 20
        },
        "OFB": {
          "OFB": 3
        },
        "XTS": {
          "XTS": 11
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 54
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 5
        },
        "SSH": {
          "SSH": 27
        },
        "TLS": {
          "TLS": {
            "TLS": 11,
            "TLS 1.2": 28,
            "TLS 1.3": 30
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2
        },
        "KEX": {
          "Key Exchange": 2
        },
        "MAC": {
          "MAC": 5
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 12,
          "P-256": 14,
          "P-384": 10,
          "P-521": 10
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 50
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-128": 4,
          "AES-192": 2,
          "AES-256": 4,
          "HMAC SHA-1": 2,
          "HMAC SHA-224": 1,
          "HMAC SHA-256": 7,
          "HMAC SHA-384": 1,
          "HMAC SHA-512": 1,
          "HMAC SHA-512/224": 1,
          "HMAC SHA-512/256": 1,
          "PKCS#1": 11,
          "RSA PKCS#1": 3,
          "SHA- 224": 2,
          "SHA- 256": 2,
          "SHA- 3": 1,
          "SHA- 384": 3,
          "SHA- 512": 2,
          "SHA-1": 23,
          "SHA-224": 17,
          "SHA-256": 33,
          "SHA-3": 9,
          "SHA-384": 12,
          "SHA-512": 18,
          "SHA3- 256": 3,
          "SHA3- 384": 7,
          "SHA3- 512": 2,
          "SHA3-224": 13,
          "SHA3-256": 12,
          "SHA3-384": 6,
          "SHA3-512": 11
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2,
          "level 1": 1
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF2": 18
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 23
          },
          "SHA2": {
            "SHA-224": 17,
            "SHA-256": 33,
            "SHA-384": 12,
            "SHA-512": 18
          },
          "SHA3": {
            "SHA-3": 9,
            "SHA3-224": 13,
            "SHA3-256": 12,
            "SHA3-384": 6,
            "SHA3-512": 11
          }
        },
        "SHAKE": {
          "SHAKE128": 10,
          "SHAKE256": 10
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 17
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 60,
          "FIPS 180-4": 2,
          "FIPS 186-4": 13,
          "FIPS 197": 7,
          "FIPS 198-1": 1,
          "FIPS 202": 4,
          "FIPS PUB 140-3": 2
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-132": 7,
          "SP 800-140B": 1,
          "SP 800-38A": 3,
          "SP 800-38B": 2,
          "SP 800-38C": 2,
          "SP 800-38D": 4,
          "SP 800-38E": 2,
          "SP 800-38F": 2,
          "SP 800-90B": 2
        },
        "PKCS": {
          "PKCS#1": 7
        },
        "RFC": {
          "RFC 3526": 3,
          "RFC 5288": 2,
          "RFC 7919": 3,
          "RFC 8446": 2,
          "RFC8446": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 48,
            "AES-128": 4,
            "AES-192": 2,
            "AES-256": 4
          },
          "CAST": {
            "CAST": 2
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 6,
            "HMAC": 31
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        },
        "IBM": {
          "SSC": 1
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/CreationDate": "D:20240614124154Z00\u002700\u0027",
      "/Creator": "Word",
      "/ModDate": "D:20240614124154Z00\u002700\u0027",
      "/Producer": "macOS Versione 13.4.1 (c) (Build 22F770820d) Quartz PDFContext",
      "/Title": "Microsoft Word - 140sp.docx",
      "pdf_file_size_bytes": 671523,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": []
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 46
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_garbage": false,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_pdf_hash": "55f2d96ef9c6789575dc8213c9e45dc7edb6daa2cd42e9e30766c0a2bca36098",
    "policy_txt_hash": "a28a3ded079db40c284659ab3481b8d06796b9f7c3ddb5bb02deb89e7b51e283"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2024_010824_1146.pdf",
    "date_sunset": "2026-07-30",
    "description": "The Red Hat Enterprise Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Documentation requirements: N/A",
      "Cryptographic module security policy: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Red Hat Enterprise Linux 9 OpenSSL FIPS Provider",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "3.0.1-3f45e68ee408cd9c",
    "tested_conf": [
      "Red Hat Enterprise Linux 9 on IBM 9080 HEX with IBM POWER10 with PAA",
      "Red Hat Enterprise Linux 9 on IBM 9080 HEX with IBM POWER10 without PAA",
      "Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 with PAI",
      "Red Hat Enterprise Linux 9 on IBM z16 3931-A01 with IBM z16 without PAI",
      "Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 with PAA",
      "Red Hat Enterprise Linux 9 running on Dell PowerEdge R440 with Intel(R) Xeon(R) Silver 4216 without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-07-31",
        "lab": "ATSEC INFORMATION SECURITY CORP",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Red Hat\u00ae, Inc.",
    "vendor_url": "http://www.redhat.com"
  }
}