This page was not yet optimized for use on mobile
devices.
Oracle Linux 9 OpenSSL FIPS Provider
Known vulnerabilities detected
Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.Certificate #4779
Webpage information
Security policy
Symmetric Algorithms
AES, AES128, AES192, AES256, AES-128, AES-192, AES-256, AES-, CAST, HMAC, HMAC-SHA-256, HMAC-SHA-512, CMACAsymmetric Algorithms
RSA-PSS, RSA-OAEP, ECDH, ECDSA, ECC, DH, Diffie-HellmanHash functions
SHA-1, SHA-224, SHA-384, SHA-512, SHA-256, SHA3-224, SHA3-384, SHA3-256, SHA3-512, SHA-3, SHAKE128, SHAKE256, PBKDF2, PBKDFSchemes
MAC, Key Exchange, Key AgreementProtocols
SSH, TLS v1.3, TLS 1.2, TLS 1.3, TLS, IKERandomness
DRBG, RNGLibraries
OpenSSLElliptic Curves
P-256, P-384, P-521, P-224, curve P-192, P-192Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTSTrusted Execution Environments
PSP, SSCSecurity level
Level 1Standards
FIPS 140-3, FIPS PUB 140-3, FIPS 197, FIPS 186-4, FIPS 198-1, FIPS 202, FIPS 180-4, FIPS 186-5, SP 800-132, SP 800-38A, SP 800-38B, SP 800-38D, SP 800-38F, SP 800-38E, SP 800-38C, SP 800-90B, SP 800-140B, PKCS#1, RFC 7627, RFC 8446, RFC 5288, RFC8446, RFC 3526, RFC 7919, ISO/IEC 24759File metadata
| Title | FIPS 140-3 Non-Proprietary Security Policy |
|---|---|
| Author | David Cornwell |
| Creation date | D:20250516172120+00'00' |
| Modification date | D:20250516172120+00'00' |
| Pages | 49 |
| Creator | Microsoft Word |
Heuristics
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.CPE matches
Related CVEs
| ID | Links | Severity | CVSS Score | Published on | ||
|---|---|---|---|---|---|---|
| Base | Exploitability | Impact | ||||
| CVE-2022-21505 | MEDIUM | 6.7 | 5.9 | 24.12.2024 | ||
| CVE-2023-22024 | MEDIUM | 5.5 | 3.6 | 20.09.2023 | ||
| CVE-2025-4598 | MEDIUM | 4.7 | 3.6 | 30.05.2025 | ||
References
No references are available for this certificate.
Updates Feed
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
Raw data
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4779,
"dgst": "2ae8a105b8d7661e",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"SHA-1A4346",
"HMAC-SHA2-512A4346",
"Safe Primes Key GenerationA4325",
"ECDSA KeyGen (FIPS186-4)A4346",
"PBKDFA4346",
"KDA HKDF Sp800-56Cr1A4310",
"AES-GMACA4343",
"AES-CBCA4329",
"AES-CBC-CS1A4329",
"KDF SP800-108A4324",
"Safe Primes Key VerificationA4325",
"HMAC-SHA2-512/256A4346",
"AES-CFB1A4329",
"Hash DRBGA4311",
"AES-CCMA4329",
"AES-KWPA4329",
"ECDSA SigVer (FIPS186-4)A4346",
"KDF ANS 9.63A4346",
"SHA3-384A4319",
"HMAC-SHA2-384A4346",
"SHAKE-128A4319",
"AES-XTS Testing Revision 2.0A4329",
"KDF SSHA4334",
"TLS v1.2 KDF RFC7627A4346",
"AES-ECBA4334",
"HMAC-SHA2-256A4346",
"AES-CTRA4329",
"SHA2-512A4346",
"AES-CMACA4329",
"HMAC-SHA3-384A4319",
"HMAC DRBGA4311",
"KAS-FFC-SSC Sp800-56Ar3A4325",
"SHA2-256A4346",
"RSA KeyGen (FIPS186-4)A4346",
"AES-CFB8A4329",
"KAS-ECC-SSC Sp800-56Ar3A4346",
"ECDSA KeyVer (FIPS186-4)A4346",
"SHA3-512A4319",
"AES-GCMA4343",
"HMAC-SHA3-256A4319",
"SHA2-512/256A4346",
"SHAKE-256A4319",
"HMAC-SHA-1A4346",
"HMAC-SHA2-224A4346",
"TLS v1.3 KDFA4310",
"AES-CBC-CS3A4329",
"Counter DRBGA4311",
"HMAC-SHA2-512/224A4346",
"HMAC-SHA3-512A4319",
"RSA SigVer (FIPS186-4)A4346",
"SHA2-224A4346",
"SHA3-256A4319",
"HMAC-SHA3-224A4319",
"AES-CBC-CS2A4329",
"SHA2-384A4346",
"KDA OneStep SP800-56Cr2A4309",
"KDF ANS 9.42A4346",
"AES-KWA4329",
"AES-OFBA4329",
"SHA2-512/224A4346",
"RSA SigGen (FIPS186-4)A4346",
"ECDSA SigGen (FIPS186-4)A4346",
"AES-CFB128A4329",
"SHA3-224A4319"
]
},
"cpe_matches": {
"_type": "Set",
"elements": [
"cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*"
]
},
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"9"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": {
"_type": "Set",
"elements": [
"CVE-2022-21505",
"CVE-2025-4598",
"CVE-2023-22024"
]
},
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECC": {
"ECC": 1
},
"ECDH": {
"ECDH": 3
},
"ECDSA": {
"ECDSA": 28
}
},
"FF": {
"DH": {
"DH": 42,
"Diffie-Hellman": 3
}
},
"RSA": {
"RSA-OAEP": 3,
"RSA-PSS": 1
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 3
},
"CCM": {
"CCM": 8
},
"CFB": {
"CFB": 1
},
"CTR": {
"CTR": 3
},
"ECB": {
"ECB": 3
},
"GCM": {
"GCM": 23
},
"OFB": {
"OFB": 1
},
"XTS": {
"XTS": 10
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {
"OpenSSL": {
"OpenSSL": 57
}
},
"crypto_protocol": {
"IKE": {
"IKE": 3
},
"SSH": {
"SSH": 17
},
"TLS": {
"TLS": {
"TLS": 38,
"TLS 1.2": 16,
"TLS 1.3": 14,
"TLS v1.3": 10
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"KEX": {
"Key Exchange": 1
},
"MAC": {
"MAC": 11
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-192": 5,
"P-224": 16,
"P-256": 24,
"P-384": 18,
"P-521": 20,
"curve P-192": 5
}
},
"eval_facility": {
"atsec": {
"atsec": 3
}
},
"fips_cert_id": {},
"fips_certlike": {
"Certlike": {
"AES- 128": 1,
"AES-128": 3,
"AES-192": 2,
"AES-256": 5,
"AES128": 1,
"AES192": 1,
"AES256": 1,
"HMAC SHA-1": 2,
"HMAC SHA-256": 2,
"HMAC-SHA-1": 8,
"HMAC-SHA-256": 2,
"HMAC-SHA-512": 2,
"PKCS#1": 9,
"RSA PKCS#1": 3,
"SHA- 224": 1,
"SHA- 256": 2,
"SHA- 512": 2,
"SHA-1": 25,
"SHA-224": 15,
"SHA-256": 19,
"SHA-3": 7,
"SHA-384": 13,
"SHA-512": 11,
"SHA2- 224": 1,
"SHA2- 256": 1,
"SHA2- 384": 2,
"SHA2- 512": 1,
"SHA2-224": 11,
"SHA2-256": 14,
"SHA2-384": 12,
"SHA2-512": 13,
"SHA3- 224": 4,
"SHA3- 256": 3,
"SHA3- 384": 3,
"SHA3- 512": 2,
"SHA3-224": 11,
"SHA3-256": 14,
"SHA3-384": 12,
"SHA3-512": 12
}
},
"fips_security_level": {
"Level": {
"Level 1": 4
}
},
"hash_function": {
"PBKDF": {
"PBKDF": 1,
"PBKDF2": 20
},
"SHA": {
"SHA1": {
"SHA-1": 25
},
"SHA2": {
"SHA-224": 15,
"SHA-256": 19,
"SHA-384": 13,
"SHA-512": 11
},
"SHA3": {
"SHA-3": 7,
"SHA3-224": 11,
"SHA3-256": 14,
"SHA3-384": 12,
"SHA3-512": 12
}
},
"SHAKE": {
"SHAKE128": 10,
"SHAKE256": 10
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 33
},
"RNG": {
"RNG": 4
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-3": 20,
"FIPS 180-4": 2,
"FIPS 186-4": 14,
"FIPS 186-5": 2,
"FIPS 197": 8,
"FIPS 198-1": 2,
"FIPS 202": 3,
"FIPS PUB 140-3": 2
},
"ISO": {
"ISO/IEC 24759": 2
},
"NIST": {
"SP 800-132": 8,
"SP 800-140B": 1,
"SP 800-38A": 8,
"SP 800-38B": 2,
"SP 800-38C": 3,
"SP 800-38D": 4,
"SP 800-38E": 3,
"SP 800-38F": 5,
"SP 800-90B": 1
},
"PKCS": {
"PKCS#1": 6
},
"RFC": {
"RFC 3526": 2,
"RFC 5288": 2,
"RFC 7627": 10,
"RFC 7919": 2,
"RFC 8446": 2,
"RFC8446": 2
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 69,
"AES-": 1,
"AES-128": 3,
"AES-192": 2,
"AES-256": 5,
"AES128": 1,
"AES192": 1,
"AES256": 1
},
"CAST": {
"CAST": 3
}
},
"constructions": {
"MAC": {
"CMAC": 5,
"HMAC": 18,
"HMAC-SHA-256": 1,
"HMAC-SHA-512": 1
}
}
},
"tee_name": {
"AMD": {
"PSP": 6
},
"IBM": {
"SSC": 5
}
},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"policy_metadata": {
"/Author": "David Cornwell",
"/CreationDate": "D:20250516172120+00\u002700\u0027",
"/Creator": "Microsoft Word",
"/ModDate": "D:20250516172120+00\u002700\u0027",
"/Title": "FIPS 140-3 Non-Proprietary Security Policy",
"pdf_file_size_bytes": 856970,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://www.ietf.org/rfc/rfc8446.txt",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36924",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36946",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36940",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16887",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36954",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36922",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36936",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36919",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16896",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36953",
"https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
"https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/90",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36926",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36949",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36925",
"https://webstore.ansi.org/standards/ascx9/ansix9422001",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36937",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36930",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16885",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36928",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36935",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36956",
"http://www.atsec.com/",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36938",
"https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36948",
"https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36920",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36941",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36944",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16886",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
"http://www.oracle.com/",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36945",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36923",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36921",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36927",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36929",
"https://www.ietf.org/rfc/rfc5288.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
"https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
"https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
"https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16872",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36939",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36943",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36932",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36942",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16699",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36955",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36933",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36934",
"https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
"https://www.ietf.org/rfc/rfc3447.txt",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36931",
"https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
"https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16882",
"https://webstore.ansi.org/standards/ascx9/ansix9632001",
"https://www.ietf.org/rfc/rfc3526.txt",
"https://docs.oracle.com/en/operating-systems/oracle-linux/9/fips/about_fips_1403.html#about-fips-140-3",
"https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16393",
"https://www.ietf.org/rfc/rfc7919.txt"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 49
}
},
"state": {
"_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
"module_download_ok": true,
"module_extract_ok": true,
"policy_convert_ok": true,
"policy_download_ok": true,
"policy_extract_ok": true,
"policy_json_hash": null,
"policy_pdf_hash": "41031bde866ef957ba7f2556c13193784252079c347d44bc3b02cb0fc1c1185f",
"policy_txt_hash": "40b8f67a715d936ff87a7eb15655cbf0ee754e2aef3c3fbacbd290e09b2e4b3a"
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11.1 of the Security Policy",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
"date_sunset": "2029-08-24",
"description": "The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Physical security: N/A",
"Non-invasive security: N/A"
],
"fw_versions": null,
"historical_reason": null,
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Oracle Linux 9 OpenSSL FIPS Provider",
"module_type": "Software",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-3",
"status": "active",
"sw_versions": "3.0.7-b27cdeb3ba51be46",
"tested_conf": [
"Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere\u00ae Altra\u00ae Q80-30 with PAA",
"Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere\u00ae Altra\u00ae Q80-30 without PAA",
"Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 with PAA",
"Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 without PAA",
"Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel\u00ae Xeon\u00ae Platinum 8358 with PAA",
"Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel\u00ae Xeon\u00ae Platinum 8358 without PAA",
"Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III without PAA"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2024-08-25",
"lab": "atsec information security corporation",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-09-19",
"lab": "atsec information security corporation",
"validation_type": "Update"
}
],
"vendor": "Oracle Corporation",
"vendor_url": "http://www.oracle.com"
}
}