Oracle Linux 9 OpenSSL FIPS Provider

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

Certificate details

Certificate ID #4779
Status historical
Historical reason Replaced by certificate #5294
Validation dates 25.08.2024 , 19.09.2025
Standard FIPS 140-3
Security level 1
Type Software
Embodiment Multi-Chip Stand Alone
Caveat Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11.1 of the Security Policy
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Description The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.
Tested configurations
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere® Altra® Q80-30 with PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere® Altra® Q80-30 without PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 with PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 without PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel® Xeon® Platinum 8358 with PAA
  • Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel® Xeon® Platinum 8358 without PAA
  • Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III without PAA
Vendor Oracle Corporation http://www.oracle.com
Lab atsec information security corporation
Algorithms
  • AES-CBC-CS1A4329
  • AES-CBC-CS2A4329
  • AES-CBC-CS3A4329
  • AES-CBCA4329
  • AES-CCMA4329
  • AES-CFB128A4329
  • AES-CFB1A4329
  • AES-CFB8A4329
  • AES-CMACA4329
  • AES-CTRA4329
  • AES-ECBA4334
  • AES-GCMA4343
  • AES-GMACA4343
  • AES-KWA4329
  • AES-KWPA4329
  • AES-OFBA4329
  • AES-XTS Testing Revision 2.0A4329
  • Counter DRBGA4311
  • ECDSA KeyGen (FIPS186-4)A4346
  • ECDSA KeyVer (FIPS186-4)A4346
  • ECDSA SigGen (FIPS186-4)A4346
  • ECDSA SigVer (FIPS186-4)A4346
  • Hash DRBGA4311
  • HMAC DRBGA4311
  • HMAC-SHA-1A4346
  • HMAC-SHA2-224A4346
  • HMAC-SHA2-256A4346
  • HMAC-SHA2-384A4346
  • HMAC-SHA2-512/224A4346
  • HMAC-SHA2-512/256A4346
  • HMAC-SHA2-512A4346
  • HMAC-SHA3-224A4319
  • HMAC-SHA3-256A4319
  • HMAC-SHA3-384A4319
  • HMAC-SHA3-512A4319
  • KAS-ECC-SSC Sp800-56Ar3A4346
  • KAS-FFC-SSC Sp800-56Ar3A4325
  • KDA HKDF Sp800-56Cr1A4310
  • KDA OneStep SP800-56Cr2A4309
  • KDF ANS 9.42A4346
  • KDF ANS 9.63A4346
  • KDF SP800-108A4324
  • KDF SSHA4334
  • PBKDFA4346
  • RSA KeyGen (FIPS186-4)A4346
  • RSA SigGen (FIPS186-4)A4346
  • RSA SigVer (FIPS186-4)A4346
  • Safe Primes Key GenerationA4325
  • Safe Primes Key VerificationA4325
  • SHA-1A4346
  • SHA2-224A4346
  • SHA2-256A4346
  • SHA2-384A4346
  • SHA2-512/224A4346
  • SHA2-512/256A4346
  • SHA2-512A4346
  • SHA3-224A4319
  • SHA3-256A4319
  • SHA3-384A4319
  • SHA3-512A4319
  • SHAKE-128A4319
  • SHAKE-256A4319
  • TLS v1.2 KDF RFC7627A4346
  • TLS v1.3 KDFA4310
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Extracted keywords

Symmetric Algorithms
AES, AES128, AES192, AES256, AES-128, AES-192, AES-256, AES-, CAST, HMAC, HMAC-SHA-256, HMAC-SHA-512, CMAC
Asymmetric Algorithms
RSA-PSS, RSA-OAEP, ECDH, ECDSA, ECC, DH, Diffie-Hellman
Hash functions
SHA-1, SHA-224, SHA-384, SHA-512, SHA-256, SHA3-224, SHA3-384, SHA3-256, SHA3-512, SHA-3, SHAKE128, SHAKE256, PBKDF2, PBKDF
Schemes
MAC, Key Exchange, Key Agreement
Protocols
SSH, TLS v1.3, TLS 1.2, TLS 1.3, TLS, IKE
Randomness
DRBG, RNG
Libraries
OpenSSL
Elliptic Curves
P-256, P-384, P-521, P-224, curve P-192, P-192
Block cipher modes
ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Trusted Execution Environments
PSP, SSC

Security level
Level 1

Title FIPS 140-3 Non-Proprietary Security Policy
Author David Cornwell
Creation date D:20250516172120+00'00'
Modification date D:20250516172120+00'00'
Pages 49
Creator Microsoft Word

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

CVE matches

ID Links Severity CVSS Score Published on
Base score
CVE-2022-21505
C N
MEDIUM 6.7 24.12.2024
CVE-2023-22024
C N
MEDIUM 5.5 20.09.2023
CVE-2025-4598
C N
MEDIUM 4.7 30.05.2025

Cross-references

No references are available for this certificate.

Processing updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4779,
  "dgst": "2ae8a105b8d7661e",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "#A4329",
        "HMAC-SHA2-384A4346",
        "#A4322",
        "#A4337",
        "KDF SP800-108A4324",
        "#A4330",
        "SHA2-512/256A4346",
        "#A4321",
        "Safe Primes Key GenerationA4325",
        "AES-GMACA4343",
        "ECDSA KeyGen (FIPS186-4)A4346",
        "#A4333",
        "AES-KWPA4329",
        "AES-ECBA4334",
        "SHAKE-256A4319",
        "SHA3-256A4319",
        "#A4335",
        "#A4319",
        "#A4341",
        "KDF ANS 9.42A4346",
        "AES-CFB8A4329",
        "#A4343",
        "HMAC-SHA2-224A4346",
        "ECDSA SigGen (FIPS186-4)A4346",
        "AES-CFB128A4329",
        "AES-XTS Testing Revision 2.0A4329",
        "RSA SigGen (FIPS186-4)A4346",
        "AES-OFBA4329",
        "Safe Primes Key VerificationA4325",
        "TLS v1.3 KDFA4310",
        "#A4342",
        "SHA2-512/224A4346",
        "#A4309",
        "#A4316",
        "#A4345",
        "HMAC-SHA2-512A4346",
        "#A4326",
        "#A4328",
        "SHA3-512A4319",
        "PBKDFA4346",
        "TLS v1.2 KDF RFC7627A4346",
        "AES-CCMA4329",
        "HMAC DRBGA4311",
        "HMAC-SHA3-256A4319",
        "SHA2-512A4346",
        "RSA KeyGen (FIPS186-4)A4346",
        "#A4336",
        "AES-KWA4329",
        "SHA2-384A4346",
        "KDA OneStep SP800-56Cr2A4309",
        "SHAKE-128A4319",
        "HMAC-SHA2-512/256A4346",
        "#A4313",
        "AES-CTRA4329",
        "#A4315",
        "HMAC-SHA2-512/224A4346",
        "#A4323",
        "AES-CBC-CS2A4329",
        "KDA HKDF Sp800-56Cr1A4310",
        "HMAC-SHA3-224A4319",
        "#A4320",
        "Counter DRBGA4311",
        "KDF ANS 9.63A4346",
        "#A4332",
        "HMAC-SHA3-384A4319",
        "#A4311",
        "#A4338",
        "#A4346",
        "#A4314",
        "AES-CBC-CS1A4329",
        "AES-CMACA4329",
        "ECDSA SigVer (FIPS186-4)A4346",
        "SHA2-256A4346",
        "HMAC-SHA3-512A4319",
        "KDF SSHA4334",
        "#A4325",
        "KAS-FFC-SSC Sp800-56Ar3A4325",
        "RSA SigVer (FIPS186-4)A4346",
        "AES-CBC-CS3A4329",
        "AES-CBCA4329",
        "#A4327",
        "#A4344",
        "SHA-1A4346",
        "#A4340",
        "#A4318",
        "#A4334",
        "HMAC-SHA-1A4346",
        "#A4317",
        "AES-GCMA4343",
        "#A4310",
        "KAS-ECC-SSC Sp800-56Ar3A4346",
        "SHA3-224A4319",
        "SHA3-384A4319",
        "SHA2-224A4346",
        "#A4331",
        "#A4339",
        "#A4312",
        "Hash DRBGA4311",
        "AES-CFB1A4329",
        "HMAC-SHA2-256A4346",
        "ECDSA KeyVer (FIPS186-4)A4346",
        "#A4324"
      ]
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2025-4598",
        "CVE-2023-22024",
        "CVE-2022-21505"
      ]
    },
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 4,
    "br1_tables": {
      "_type": "sec_certs.heuristics.br1.table_parsing.model.br1_tables.BR1Tables",
      "approved_algorithms": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 3
      },
      "authentication_methods": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 1
      },
      "cond_self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 2
      },
      "error_states": {
        "entries": [
          {
            "conditions": "Software integrity test failure CAST failure",
            "description": "The module immediately stops functioning due to a self-test failure",
            "indicator": "Module will not load",
            "name": "Error State",
            "recoveryMethod": "Restart of the module"
          },
          {
            "conditions": "PCT failure",
            "description": "The module immediately stops functioning due to a self-test failure",
            "indicator": "Module stops functioning",
            "name": "Error State",
            "recoveryMethod": "Restart of the module"
          }
        ],
        "found": true,
        "section": 10,
        "subsection": 4
      },
      "mechanisms_actions": {
        "entries": [],
        "found": false,
        "section": 7,
        "subsection": 1
      },
      "modes_of_operation": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 4
      },
      "non_approved_allowed_NSC": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_allowed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "non_approved_not_allowed": {
        "entries": [
          {
            "name": "AES GCM with external IV",
            "use": "Encryption"
          },
          {
            "name": "ANS X9.42 KDF (SHAKE128, SHAKE256)",
            "use": "Key Derivation"
          },
          {
            "name": "ANS X9.63 KDF (SHA-1, SHAKE128, SHAKE256)",
            "use": "Key Derivation"
          },
          {
            "name": "Hash_DRBG (SHA-224, SHA-384)",
            "use": "Random Number Generation"
          },
          {
            "name": "HMAC_DRBG (SHA-224, SHA-384)",
            "use": "Random Number Generation"
          },
          {
            "name": "ECDSA with curve P-192",
            "use": "Key Pair Generation, Key Pair Verification"
          },
          {
            "name": "HMAC (\u003c 112-bit keys)",
            "use": "Message Authentication Code Generation, Message Authentication Code Verification"
          },
          {
            "name": "KAS1, KAS2",
            "use": "Shared Secret Computation"
          },
          {
            "name": "KBKDF, KDA OneStep, HKDF, ANS X9.42 KDF, ANS X9.63 KDF (\u003c 112-bit keys)",
            "use": "Key Derivation"
          },
          {
            "name": "KDA OneStep, HKDF (SHAKE128, SHAKE256)",
            "use": "Key Derivation"
          },
          {
            "name": "PBKDF2 (short password; short salt; insufficient iterations; \u003c 112-bit keys)",
            "use": "Password-Based Key Derivation"
          },
          {
            "name": "RSA and ECDSA (pre-hashed message), ECDSA with curve P-192",
            "use": "Signature Generation, Signature Verification"
          },
          {
            "name": "RSA-PSS (invalid salt length)",
            "use": "Signature Generation, Signature Verification"
          },
          {
            "name": "RSA-OAEP",
            "use": "Asymmetric Encryption, Asymmetric Decryption"
          },
          {
            "name": "SSH KDF (SHA-512/224, SHA-512/256, SHA-3, SHAKE128, SHAKE256)",
            "use": "Key Derivation"
          },
          {
            "name": "TLS 1.2 KDF (SHA-1, SHA-224, SHA-512/224, SHA-512/256, SHA-3)",
            "use": "Key Derivation"
          },
          {
            "name": "TLS 1.2 KDF using master secret non-compliant with RFC 7627",
            "use": "Key Derivation"
          },
          {
            "name": "TLS 1.3 KDF (SHA-1, SHA-224, SHA-512, SHA-512/224, SHA-512/256, SHA-3)",
            "use": "Key Derivation"
          }
        ],
        "found": true,
        "section": 2,
        "subsection": 5
      },
      "non_approved_services": {
        "entries": [],
        "found": false,
        "section": 4,
        "subsection": 4
      },
      "ports_interfaces": {
        "entries": [],
        "found": false,
        "section": 3,
        "subsection": 1
      },
      "roles": {
        "entries": [
          {
            "authMethodList": "N/A (Implicitly assumed)",
            "name": "Crypto Officer",
            "operatorType": "CO",
            "type": "Role"
          }
        ],
        "found": true,
        "section": 4,
        "subsection": 2
      },
      "security_levels": {
        "entries": [],
        "found": false,
        "section": 1,
        "subsection": 2
      },
      "self_tests": {
        "entries": [],
        "found": false,
        "section": 10,
        "subsection": 1
      },
      "ssp_io_methods": {
        "entries": [],
        "found": false,
        "section": 9,
        "subsection": 2
      },
      "ssp_zeroization_methods": {
        "entries": [
          {
            "description": "Zeroizes the SSPs",
            "method": "Calling the zeroization API",
            "operatorId": "By calling the appropriate zeroization functions: AES key: EVP_CIPHER_CTX_free, EVP_MAC_CTX_free HMAC key: EVP_MAC_CTX_free Key-derivation key : EVP_KDF_CTX_free Shared secret: EVP_KDF_CTX_free PBKDF Password: EVP_KDF_CTX_free Derived key: EVP_KDF_CTX_free Entropy input: EVP_RAND_CTX_free DRBG seed: EVP_RAND_CTX_free DRBG Internal state: EVP_RAND_CTX_free DH private key: EVP_PKEY_free DH public key: EVP_PKEY_free EC private key: EVP_PKEY_free EC public key: EVP_PKEY_free RSA private key: EVP_PKEY_free RSA public key: EVP_PKEY_free TLS pre-master secret: EVP_KDF_CTX_free TLS master secret: EVP_KDF_CTX_free TLS derived secret: EVP_KDF_CTX_free",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. All data output is inhibited during zeroization."
          },
          {
            "description": "Zeroizes the SSPs",
            "method": "Automatic",
            "operatorId": "Intermediate key generation value: zeroized automatically by the module (after the requested service completed)",
            "rationale": "Memory occupied by SSPs is overwritten with zeroes, which renders the SSP values irretrievable. All data output is inhibited during zeroization."
          },
          {
            "description": "De-allocates the volatile memory used to store SSPs",
            "method": "Remove power from the module",
            "operatorId": "By removing power",
            "rationale": "Volatile memory used by the module is overwritten within nanoseconds when power is removed"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 3
      },
      "storage_areas": {
        "entries": [
          {
            "description": "Temporary storage for SSPs used by the module as part of service execution. The module does not perform persistent storage of SSPs.",
            "name": "RAM",
            "persistance": "Dynamic"
          }
        ],
        "found": true,
        "section": 9,
        "subsection": 1
      },
      "tested_module_id_hw": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_hw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_module_id_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "tested_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      },
      "vendor_affirmed_algos": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 5
      },
      "vendor_affirmed_op_env_sw_fw_hy": {
        "entries": [],
        "found": false,
        "section": 2,
        "subsection": 2
      }
    },
    "is_br1_format": true,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDH": {
            "ECDH": 3
          },
          "ECDSA": {
            "ECDSA": 30
          }
        },
        "FF": {
          "DH": {
            "DH": 42,
            "Diffie-Hellman": 3
          }
        },
        "RSA": {
          "RSA-OAEP": 3,
          "RSA-PSS": 1
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CCM": {
          "CCM": 8
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 3
        },
        "GCM": {
          "GCM": 24
        },
        "OFB": {
          "OFB": 1
        },
        "XTS": {
          "XTS": 10
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 56
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 3
        },
        "SSH": {
          "SSH": 15
        },
        "TLS": {
          "TLS": {
            "TLS": 39,
            "TLS 1.2": 14,
            "TLS 1.3": 13,
            "TLS v1.3": 10
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "KEX": {
          "Key Exchange": 1
        },
        "MAC": {
          "MAC": 13
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-192": 5,
          "P-224": 22,
          "P-256": 30,
          "P-384": 18,
          "P-521": 26,
          "curve P-192": 5
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 3
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES- 128": 1,
          "AES-128": 3,
          "AES-192": 2,
          "AES-256": 5,
          "AES128": 1,
          "AES192": 1,
          "AES256": 1,
          "HMAC SHA-1": 2,
          "HMAC SHA-256": 2,
          "HMAC-SHA-1": 8,
          "HMAC-SHA-256": 2,
          "HMAC-SHA-512": 2,
          "PKCS#1": 10,
          "RSA PKCS#1": 4,
          "SHA- 224": 1,
          "SHA- 256": 2,
          "SHA- 512": 2,
          "SHA-1": 22,
          "SHA-224": 13,
          "SHA-256": 19,
          "SHA-3": 5,
          "SHA-384": 13,
          "SHA-512": 10,
          "SHA2- 224": 1,
          "SHA2- 256": 1,
          "SHA2- 384": 2,
          "SHA2- 512": 1,
          "SHA2-224": 12,
          "SHA2-256": 15,
          "SHA2-384": 13,
          "SHA2-512": 14,
          "SHA3- 224": 4,
          "SHA3- 256": 3,
          "SHA3- 384": 3,
          "SHA3- 512": 2,
          "SHA3-224": 11,
          "SHA3-256": 14,
          "SHA3-384": 12,
          "SHA3-512": 11
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF": 1,
          "PBKDF2": 20
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 22
          },
          "SHA2": {
            "SHA-224": 13,
            "SHA-256": 19,
            "SHA-384": 13,
            "SHA-512": 10
          },
          "SHA3": {
            "SHA-3": 5,
            "SHA3-224": 11,
            "SHA3-256": 14,
            "SHA3-384": 12,
            "SHA3-512": 11
          }
        },
        "SHAKE": {
          "SHAKE128": 6,
          "SHAKE256": 9
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 38
        },
        "RNG": {
          "RNG": 4
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 23,
          "FIPS 180-4": 3,
          "FIPS 186-4": 15,
          "FIPS 186-5": 2,
          "FIPS 197": 17,
          "FIPS 198-1": 2,
          "FIPS 202": 4,
          "FIPS PUB 140-3": 2
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-132": 9,
          "SP 800-140B": 1,
          "SP 800-38A": 20,
          "SP 800-38B": 2,
          "SP 800-38C": 3,
          "SP 800-38D": 7,
          "SP 800-38E": 3,
          "SP 800-38F": 6,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS#1": 7
        },
        "RFC": {
          "RFC 3526": 2,
          "RFC 5288": 2,
          "RFC 7627": 9,
          "RFC 7919": 2,
          "RFC 8446": 2,
          "RFC8446": 2
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 70,
            "AES-": 1,
            "AES-128": 3,
            "AES-192": 2,
            "AES-256": 5,
            "AES128": 1,
            "AES192": 1,
            "AES256": 1
          },
          "CAST": {
            "CAST": 5
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 5,
            "HMAC": 19,
            "HMAC-SHA-256": 1,
            "HMAC-SHA-512": 1
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 6
        },
        "IBM": {
          "SSC": 5
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-384A4346",
        "Safe Primes Key VerificationA4325",
        "TLS v1.3 KDFA4310",
        "AES-CBC-CS3A4329",
        "AES-CTRA4329",
        "HMAC-SHA2-512/224A4346",
        "SHA2-512/224A4346",
        "AES-CBCA4329",
        "SHA-1A4346",
        "KDF SP800-108A4324",
        "SHA2-512/256A4346",
        "AES-CBC-CS2A4329",
        "HMAC-SHA-1A4346",
        "HMAC-SHA2-512A4346",
        "KDA HKDF Sp800-56Cr1A4310",
        "AES-GCMA4343",
        "Safe Primes Key GenerationA4325",
        "HMAC-SHA3-224A4319",
        "Counter DRBGA4311",
        "KDF ANS 9.63A4346",
        "AES-GMACA4343",
        "KAS-ECC-SSC Sp800-56Ar3A4346",
        "PBKDFA4346",
        "ECDSA KeyGen (FIPS186-4)A4346",
        "SHA2-224A4346",
        "SHA3-224A4319",
        "SHA3-384A4319",
        "AES-KWPA4329",
        "SHA3-512A4319",
        "TLS v1.2 KDF RFC7627A4346",
        "HMAC-SHA3-384A4319",
        "AES-ECBA4334",
        "SHAKE-256A4319",
        "AES-CCMA4329",
        "KAS-FFC-SSC Sp800-56Ar3A4325",
        "HMAC DRBGA4311",
        "HMAC-SHA3-256A4319",
        "Hash DRBGA4311",
        "AES-CFB1A4329",
        "AES-CBC-CS1A4329",
        "SHA3-256A4319",
        "AES-CMACA4329",
        "ECDSA SigVer (FIPS186-4)A4346",
        "HMAC-SHA2-256A4346",
        "SHA2-512A4346",
        "SHA2-256A4346",
        "RSA KeyGen (FIPS186-4)A4346",
        "AES-KWA4329",
        "HMAC-SHA3-512A4319",
        "ECDSA KeyVer (FIPS186-4)A4346",
        "SHA2-384A4346",
        "KDF ANS 9.42A4346",
        "AES-CFB8A4329",
        "HMAC-SHA2-512/256A4346",
        "HMAC-SHA2-224A4346",
        "KDA OneStep SP800-56Cr2A4309",
        "KDF SSHA4334",
        "ECDSA SigGen (FIPS186-4)A4346",
        "AES-CFB128A4329",
        "SHAKE-128A4319",
        "AES-XTS Testing Revision 2.0A4329",
        "RSA SigVer (FIPS186-4)A4346",
        "RSA SigGen (FIPS186-4)A4346",
        "AES-OFBA4329"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A4329",
        "#A4322",
        "#A4315",
        "#A4342",
        "#A4309",
        "#A4327",
        "#A4316",
        "#A4344",
        "#A4337",
        "#A4345",
        "#A4340",
        "#A4318",
        "#A4323",
        "#A4330",
        "#A4321",
        "#A4334",
        "#A4326",
        "#A4317",
        "#A4328",
        "#A4320",
        "#A4310",
        "#A4332",
        "#A4331",
        "#A4333",
        "#A4339",
        "#A4311",
        "#A4338",
        "#A4346",
        "#A4312",
        "#A4314",
        "#A4335",
        "#A4319",
        "#A4336",
        "#A4341",
        "#A4343",
        "#A4325",
        "#A4324",
        "#A4313"
      ]
    },
    "policy_metadata": {
      "/Author": "David Cornwell",
      "/CreationDate": "D:20250516172120+00\u002700\u0027",
      "/Creator": "Microsoft Word",
      "/ModDate": "D:20250516172120+00\u002700\u0027",
      "/Title": "FIPS 140-3 Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 856970,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://www.ietf.org/rfc/rfc7919.txt",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36948",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36940",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36944",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36941",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16887",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36936",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://www.ietf.org/rfc/rfc3526.txt",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36956",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36928",
          "https://www.ietf.org/rfc/rfc8446.txt",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36945",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36924",
          "http://www.oracle.com/",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36949",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr1.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36943",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36938",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36930",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36935",
          "https://csrc.nist.gov/publications/nistpubs/800-38E/nist-sp-800-38E.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36926",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16872",
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16699",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36937",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36920",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/90",
          "https://www.ietf.org/rfc/rfc5288.txt",
          "https://webstore.ansi.org/standards/ascx9/ansix9422001",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36922",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36927",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36939",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16886",
          "http://www.atsec.com/",
          "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36919",
          "https://docs.oracle.com/en/operating-systems/oracle-linux/9/fips/about_fips_1403.html#about-fips-140-3",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36925",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16882",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16885",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36921",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36946",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36955",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36953",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36942",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36932",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36923",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36933",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16393",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36954",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36934",
          "https://webstore.ansi.org/standards/ascx9/ansix9632001",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36931",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=36929",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?product=16896"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 49
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "33ec20fc7c890d08eabfdb3c9f6ab2b1f6a2f10f4c19c2e60b6350b694d75756",
      "source_hash": "41031bde866ef957ba7f2556c13193784252079c347d44bc3b02cb0fc1c1185f",
      "txt_hash": "c1e61fbcd7defb4d628d65f7d47d3b01c19e2c8919e415425c6cfbe784278f90"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation; When operated in approved mode; When installed, initialized and configured as specified in Section 11.1 of the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/August 2024_010924_0336.pdf",
    "date_sunset": null,
    "description": "The Oracle Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Replaced by certificate #5294",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Oracle Linux 9 OpenSSL FIPS Provider",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "historical",
    "sw_versions": "3.0.7-b27cdeb3ba51be46",
    "tested_conf": [
      "Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere\u00ae Altra\u00ae Q80-30 with PAA",
      "Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER A1-2c with Ampere\u00ae Altra\u00ae Q80-30 without PAA",
      "Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 with PAA",
      "Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER E4-2c with AMD EPYCTM 7J13 without PAA",
      "Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel\u00ae Xeon\u00ae Platinum 8358 with PAA",
      "Oracle Linux 9 on KVM on Oracle Linux 8 running on ORACLE SERVER X9-2c with Intel\u00ae Xeon\u00ae Platinum 8358 without PAA",
      "Oracle Linux 9 running on Marvell Liquid IO II with OCTEON III without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-08-25",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-09-19",
        "lab": "atsec information security corporation",
        "validation_type": "Update"
      }
    ],
    "vendor": "Oracle Corporation",
    "vendor_url": "http://www.oracle.com"
  }
}