This page was not yet optimized for use on mobile devices.

Rocky Linux 8 and 9 GnuTLS Cryptographic Module

Certificate #5350

Webpage information

Status	active
Validation dates	23.06.2026
Sunset date	22-06-2031
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	MultiChipStand
Caveat	When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	Rocky Linux 8 and 9 GnuTLS Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.
Vendor	Ctrl IQ, Inc.
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES-256, AES, AES-, CAST, RC2, RC4, DES, Triple-DES, ChaCha20, Salsa20, Poly1305, Camellia, HMAC, CMAC

Asymmetric Algorithms

ECDSA, ECC, Diffie-Hellman, DH, DSA

Hash functions

SHA-1, SHA-256, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD5, PBKDF, PBKDF2

Schemes

MAC, Key agreement, Key Agreement

Protocols

TLS, TLS v1.2, TLS 1.2, TLSv1.3, TLS v1.3, TLS 1.3

Randomness

DRBG, RNG, RBG

Libraries

GnuTLS

Elliptic Curves

P-256, P-384, P-521, P-512

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

TLS cipher suites

TLS_DH_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DH_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, TLS_DH_RSA_WITH_AES_256_CBC_SHA256, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, TLS_PSK_WITH_AES_128_CBC_SHA, TLS_PSK_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, TLS_DH_RSA_WITH_AES_128_GCM_SHA256, TLS_DH_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_128_CCM, TLS_DHE_RSA_WITH_AES_256_CCM, TLS_DHE_RSA_WITH_AES_128_CCM_8, TLS_DHE_RSA_WITH_AES_256_CCM_8

Trusted Execution Environments

PSP, SSC

Security level

Level 1, level 1

Standards

FIPS 140-3, FIPS PUB 140-3, FIPS186-5, FIPS 186-5, FIPS 198-1, FIPS 180-4, FIPS 202, FIPS140-3, FIPS180-4, FIPS197, FIPS198-1, FIPS202, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38D, SP 800-38E, SP 800-90A, SP 800-56A, SP 800-56C, SP 800-132, SP 800-135, SP 800-52, SP 800-133, SP 800-131A, PKCS#1, RFC7627, RFC5288, RFC8446, RFC3268, RFC5246, RFC4279, RFC4492, RFC5289, RFC6655

File metadata

Author	Christopher Dickerman
Creation date	D:20260622082145-04'00'
Modification date	D:20260622082146-04'00'
Pages	88
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates Feed

31.08.2026

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The algorithms property was set to {'_type': 'Set', 'elements': ['ECDSA KeyGen (FIPS186-5)A6484', 'SHA3-512A6486', 'AES-GMACA6484', 'SHA2-512A6484', 'SHA3-384A6486', 'SHA3-224A6486', 'AES-CCMA6476', 'SHA-1A6484', 'KAS-FFC-SSC Sp800-56Ar3A6484', 'AES-CFB8A6487', 'AES-ECBA6533', 'SHA3-256A6486', 'TLS v1.2 KDF RFC7627A6484', 'AES-XTS Testing Revision 2.0A6485', 'HMAC-SHA2-224A6484', 'Safe Primes Key GenerationA6484', 'HMAC-SHA2-512A6484', 'SHA2-384A6484', 'RSA SigVer (FIPS186-5)A6484', 'SHA2-256A6484', 'KDA HKDF Sp800-56Cr1A6483', 'Counter DRBGA6484', 'KAS-ECC-SSC Sp800-56Ar3A6484', 'ECDSA SigGen (FIPS186-5)A6484', 'PBKDFA6484', 'HMAC-SHA2-256A6484', 'RSA SigGen (FIPS186-5)A6484', 'SHA2-224A6484', 'HMAC-SHA2-384A6484', 'AES-CBCA6484', 'AES-GCMA6484', 'HMAC-SHA-1A6484', 'RSA KeyGen (FIPS186-5)A6484', 'ECDSA SigVer (FIPS186-5)A6484', 'ECDSA KeyVer (FIPS186-5)A6484', 'AES-CMACA6484']}.
20.07.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf.
30.06.2026

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5350,
  "dgst": "cc1acd99ace85a8a",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "SHA2-512A6484",
        "HMAC-SHA2-512A6484",
        "HMAC-SHA-1A6484",
        "SHA3-384A6486",
        "AES-GCMA6484",
        "PBKDFA6484",
        "SHA-1A6484",
        "AES-CFB8A6487",
        "ECDSA SigVer (FIPS186-5)A6484",
        "HMAC-SHA2-256A6484",
        "RSA SigGen (FIPS186-5)A6484",
        "SHA2-224A6484",
        "AES-CCMA6476",
        "Safe Primes Key GenerationA6484",
        "Counter DRBGA6484",
        "RSA KeyGen (FIPS186-5)A6484",
        "AES-CMACA6484",
        "RSA SigVer (FIPS186-5)A6484",
        "SHA2-384A6484",
        "ECDSA KeyVer (FIPS186-5)A6484",
        "ECDSA SigGen (FIPS186-5)A6484",
        "SHA3-224A6486",
        "TLS v1.2 KDF RFC7627A6484",
        "KAS-FFC-SSC Sp800-56Ar3A6484",
        "SHA3-512A6486",
        "HMAC-SHA2-224A6484",
        "AES-GMACA6484",
        "ECDSA KeyGen (FIPS186-5)A6484",
        "KAS-ECC-SSC Sp800-56Ar3A6484",
        "HMAC-SHA2-384A6484",
        "AES-CBCA6484",
        "SHA3-256A6486",
        "KDA HKDF Sp800-56Cr1A6483",
        "AES-ECBA6533",
        "SHA2-256A6484",
        "AES-XTS Testing Revision 2.0A6485"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "8",
        "9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 1
          },
          "ECDSA": {
            "ECDSA": 98
          }
        },
        "FF": {
          "DH": {
            "DH": 1,
            "Diffie-Hellman": 53
          },
          "DSA": {
            "DSA": 5
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 14
        },
        "OFB": {
          "OFB": 1
        },
        "XTS": {
          "XTS": 6
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "GnuTLS": {
          "GnuTLS": 93
        }
      },
      "crypto_protocol": {
        "TLS": {
          "TLS": {
            "TLS": 64,
            "TLS 1.2": 6,
            "TLS 1.3": 1,
            "TLS v1.2": 15,
            "TLS v1.3": 1,
            "TLSv1.3": 6
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 2,
          "Key agreement": 5
        },
        "MAC": {
          "MAC": 37
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-256": 54,
          "P-384": 26,
          "P-512": 7,
          "P-521": 10
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 89
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 2,
          "Diffie-Hellman 2048": 1,
          "HMAC-SHA- 1": 8,
          "HMAC-SHA-1": 10,
          "PKCS#1": 2,
          "SHA-1": 9,
          "SHA-256": 4,
          "SHA-3": 5,
          "SHA2- 256": 6,
          "SHA2- 384": 3,
          "SHA2-224": 14,
          "SHA2-256": 23,
          "SHA2-384": 13,
          "SHA2-512": 14,
          "SHA3-224": 9,
          "SHA3-256": 10,
          "SHA3-384": 9,
          "SHA3-512": 9
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3,
          "level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "PBKDF": {
          "PBKDF": 31,
          "PBKDF2": 3
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 9
          },
          "SHA2": {
            "SHA-256": 4
          },
          "SHA3": {
            "SHA-3": 5,
            "SHA3-224": 9,
            "SHA3-256": 10,
            "SHA3-384": 9,
            "SHA3-512": 9
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 32
        },
        "RNG": {
          "RBG": 2,
          "RNG": 2
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 98,
          "FIPS 180-4": 5,
          "FIPS 186-5": 9,
          "FIPS 198-1": 5,
          "FIPS 202": 4,
          "FIPS PUB 140-3": 2,
          "FIPS140-3": 1,
          "FIPS180-4": 1,
          "FIPS186-5": 39,
          "FIPS197": 1,
          "FIPS198-1": 1,
          "FIPS202": 1
        },
        "NIST": {
          "SP 800-131A": 1,
          "SP 800-132": 4,
          "SP 800-133": 2,
          "SP 800-135": 1,
          "SP 800-38A": 3,
          "SP 800-38B": 1,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-38E": 2,
          "SP 800-52": 2,
          "SP 800-56A": 3,
          "SP 800-56C": 1,
          "SP 800-90A": 5
        },
        "PKCS": {
          "PKCS#1": 1
        },
        "RFC": {
          "RFC3268": 4,
          "RFC4279": 2,
          "RFC4492": 8,
          "RFC5246": 4,
          "RFC5288": 5,
          "RFC5289": 16,
          "RFC6655": 4,
          "RFC7627": 8,
          "RFC8446": 5
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 59,
            "AES-": 13,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 237
          },
          "RC": {
            "RC2": 2,
            "RC4": 2
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 4
          },
          "DES": {
            "DES": 2
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 5,
            "HMAC": 28
          }
        },
        "djb": {
          "ChaCha": {
            "ChaCha20": 2
          },
          "Poly": {
            "Poly1305": 2
          },
          "Salsa": {
            "Salsa20": 2
          }
        },
        "miscellaneous": {
          "Camellia": {
            "Camellia": 2
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 9
        },
        "IBM": {
          "SSC": 4
        }
      },
      "tls_cipher_suite": {
        "TLS": {
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_DHE_RSA_WITH_AES_128_CCM": 1,
          "TLS_DHE_RSA_WITH_AES_128_CCM_8": 1,
          "TLS_DHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_DHE_RSA_WITH_AES_256_CBC_SHA256": 1,
          "TLS_DHE_RSA_WITH_AES_256_CCM": 1,
          "TLS_DHE_RSA_WITH_AES_256_CCM_8": 1,
          "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_DH_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_DH_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_DH_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_DH_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_DH_RSA_WITH_AES_256_CBC_SHA256": 1,
          "TLS_DH_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA": 1,
          "TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256": 1,
          "TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256": 1,
          "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA": 1,
          "TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384": 1,
          "TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384": 1,
          "TLS_PSK_WITH_AES_128_CBC_SHA": 1,
          "TLS_PSK_WITH_AES_256_CBC_SHA": 1
        }
      },
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "Christopher Dickerman",
      "/CreationDate": "D:20260622082145-04\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ActionId": "1978d42c-099a-4b7b-a1d2-0f6546975ed3",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_ContentBits": "1",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Enabled": "true",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Method": "Privileged",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Name": "UNCLASSIFIED",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SetDate": "2026-06-22T12:16:19Z",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
      "/MSIP_Label_4dd2c6e0-f1e3-4cf2-bd0b-256ab4cff3af_Tag": "10, 0, 1, 1",
      "/ModDate": "D:20260622082146-04\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 1012507,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "http://www.atsec.com/",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38b.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-132.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140Br1.pdf",
          "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/Draft%20FIPS-140-3-CMVP%20Management%20Manual%20v1.2%20%5BDec%2023%202022%5D.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://doi.org/10.6028/NIST.FIPS.140-3"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 88
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "6032ddbbc1fc45374a355d829b602f45c15c36fe42c9579d18043fa51323f2ac",
      "txt_hash": "35522c73da87fa93a649b7fb50350f0967f07ab98d68776cad02bc8f483cf60a"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2031-06-22",
    "description": "Rocky Linux 8 and 9 GnuTLS Cryptographic Module provides a C language application program interface (API) for use by other applications that require cryptographic functionality.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Rocky Linux 8 and 9 GnuTLS Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-23",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Ctrl IQ, Inc.",
    "vendor_url": "https://ciq.com/"
  }
}

Sections

Rocky Linux 8 and 9 GnuTLS Cryptographic Module

Certificate #5350

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

TLS cipher suites

Trusted Execution Environments

Security level

Standards

File metadata

Heuristics

References

Updates Feed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Rocky Linux 8 and 9 GnuTLS Cryptographic Module

Certificate #5350

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

TLS cipher suites

Device

Trusted Execution Environments

Security

Security level

Other

Standards

File metadata

Heuristics

References

Updates Feed

Raw data

Toggle raw data