This page was not yet optimized for use on mobile devices.

SUSE Linux Enterprise Libica Cryptographic Module

Certificate details

Certificate ID	#4822
Status	active
Validation dates	07.10.2024
Sunset date	06-10-2029
Standard	FIPS 140-3
Security level	1
Type	Software-Hybrid
Embodiment	Multi-Chip Stand Alone
Caveat	Interim validation. When operated in approved mode with module SUSE Linux Enterprise OpenSSL Cryptographic Module validated to FIPS 140-3 under Cert. #4725 operating in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy
Exceptions	Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The SUSE Linux Enterprise Server Libica Cryptographic Module is a software-hybrid module that provides general purpose cryptographic algorithms to applications running in the user space of the underlying operating system through a C language application program interface (API). The module is composed by a software library, which provides the API and a subset of the cryptographic algorithms, and the Central Processor Assist for Cryptographic Functions (CPACF), which is part of the z15 processor and provides cryptographic algorithms implemented in firmware and hardware.
Version (Hardware)	IBM z15
Tested configurations	SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with FC3863 with z15 with PAI
Vendor	SUSE, LLC http://www.suse.com
Lab	atsec information security corporation
Algorithms	AES-CBC-CS1A3378 AES-CBC-CS2A3378 AES-CBC-CS3A3378 AES-CBCA3378 AES-CCMA3378 AES-CFB128A3378 AES-CFB8A3378 AES-CMACA3378 AES-CTRA3378 AES-ECBA3378 AES-GCMA3378 AES-GMACA3378 AES-OFBA3378 AES-XTS Testing Revision 2.0A3378 Counter DRBGA3150 ECDSA KeyGen (FIPS186-4)A3147 ECDSA SigGen (FIPS186-4)A3378 ECDSA SigVer (FIPS186-4)A3378 HMAC-SHA2-256A3147 KAS-ECC-SSC Sp800-56Ar3A3378 RSA KeyGen (FIPS186-4)A3147 SHA-1A3378 SHA2-224A3378 SHA2-256A3378 SHA2-384A3378 SHA2-512/224A3378 SHA2-512/256A3378 SHA2-512A3378 SHA3-224A3378 SHA3-256A3378 SHA3-384A3378 SHA3-512A3378 SHAKE-128A3378 SHAKE-256A3378
References	This certificate's webpage directly references 1 certificates, transitively this expands into 1 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-256, AES-, CAST, DES, HMAC, CMAC

Asymmetric Algorithms

ECDH, ECDSA, ECC, Diffie-Hellman

Hash functions

SHA-1, SHA1, SHA-2, SHA-3, SHA3-224, SHA3-384, SHA3-512, SHA3-256

Schemes

MAC, Key Agreement

Protocols

SSL

Randomness

DRBG, RNG

Libraries

OpenSSL

Elliptic Curves

P-256, P-384, P-521, P-224

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM, XTS

Security level

level 1

Standards

FIPS 140-3, FIPS197, FIPS186-4, FIPS202, FIPS180-5, FIPS198-1, FIPS 186-4, FIPS140-3, FIPS PUB 140-3, FIPS180-4, SP 800-140B, SP 800-90B, PKCS#1, ISO/IEC 24759

Cross-references

Outgoing

4725 - historical - SUSE Linux Enterprise OpenSSL Cryptographic Module

Title	FIPS 140-3 Non-Proprietary Security Policy
Author	Alejandro Fabio Masino
Creation date	D:20241001163401-05'00'
Modification date	D:20241001163401-05'00'
Pages	36
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

Processing updates

06.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'AES 11': 1, 'AES key 128, 192': 1}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 57}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'CMAC': 7}}}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 2}}}}} data.
05.10.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__delete__': ['AES 11', 'AES key 128, 192']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 65}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'CMAC': 9}}}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 1}}}}} data.
24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'AES 11': 1, 'AES key 128, 192': 1}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 57}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'CMAC': 7}}}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 2}}}}} data.

The br1_deviations property was set to 30.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__delete__': ['AES 11', 'AES key 128, 192']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 65}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'CMAC': 9}}}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS PUB 140-3': 1}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['SHA2-512A3378', 'SHA2-224A3378', 'ECDSA SigVer (FIPS186-4)A3378', 'SHAKE-128A3378', 'SHA3-384A3378', 'AES-CTRA3378', 'AES-CFB8A3378', 'AES-ECBA3378', 'AES-CMACA3378', 'SHA2-256A3378', 'AES-CBC-CS2A3378', 'AES-OFBA3378', 'AES-GMACA3378', 'Counter DRBGA3150', 'AES-CBC-CS3A3378', 'AES-CBC-CS1A3378', 'SHA-1A3378', 'SHA2-384A3378', 'SHA3-224A3378', 'AES-GCMA3378', 'HMAC-SHA2-256A3147', 'ECDSA SigGen (FIPS186-4)A3378', 'SHA2-512/256A3378', 'AES-CBCA3378', 'KAS-ECC-SSC Sp800-56Ar3A3378', 'ECDSA KeyGen (FIPS186-4)A3147', 'SHA3-512A3378', 'SHAKE-256A3378', 'AES-XTS Testing Revision 2.0A3378', 'RSA KeyGen (FIPS186-4)A3147', 'SHA2-512/224A3378', 'AES-CFB128A3378', 'AES-CCMA3378', 'SHA3-256A3378']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A3150', '#A3377', '#A3378', '#A3147']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__delete__': ['Level 1']}}}, 'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'SHA1': 1, 'AES 11': 1}, '__delete__': ['SHA- 1']}}}, 'eval_facility': {'__update__': {'atsec': {'__update__': {'atsec': 36}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 36}}}}, 'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 10}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__insert__': {'SHA1': 1}}}}}}, 'crypto_scheme': {'__update__': {'MAC': {'__update__': {'MAC': 12}}}}, 'cipher_mode': {'__update__': {'XTS': {'__update__': {'XTS': 8}}}}, 'crypto_library': {'__update__': {'OpenSSL': {'__update__': {'OpenSSL': 39}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS186-4': 6, 'FIPS PUB 140-3': 2}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A3150', '#A3377', '#A3378', '#A3147']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '9f58eec5465511899297a8ffe627928ab95dafa5d1d15d5ed0c3408be0af53a8', 'json_hash': '02ee009cda66ab39ec067516fdbd465a79877ed67582c6b273ebb7dc4ce2ed92'} data.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2024_041124_0733 (1).pdf.
29.12.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The date_sunset property was set to 2029-10-06.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
24.02.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The exceptions property was updated.
08.10.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4822,
  "dgst": "d95936051b112558",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CBC-CS3A3378",
        "ECDSA SigVer (FIPS186-4)A3378",
        "AES-CFB128A3378",
        "SHA3-512A3378",
        "SHA2-384A3378",
        "AES-CBC-CS1A3378",
        "ECDSA KeyGen (FIPS186-4)A3147",
        "AES-CBC-CS2A3378",
        "SHAKE-128A3378",
        "AES-GCMA3378",
        "AES-GMACA3378",
        "AES-CTRA3378",
        "RSA KeyGen (FIPS186-4)A3147",
        "AES-CFB8A3378",
        "AES-CMACA3378",
        "SHA2-512A3378",
        "AES-ECBA3378",
        "SHA2-512/224A3378",
        "SHAKE-256A3378",
        "SHA3-256A3378",
        "HMAC-SHA2-256A3147",
        "SHA3-224A3378",
        "AES-CCMA3378",
        "SHA-1A3378",
        "SHA2-512/256A3378",
        "AES-XTS Testing Revision 2.0A3378",
        "#A3378",
        "KAS-ECC-SSC Sp800-56Ar3A3378",
        "AES-CBCA3378",
        "SHA2-224A3378",
        "Counter DRBGA3150",
        "SHA3-384A3378",
        "#A3147",
        "#A3377",
        "AES-OFBA3378",
        "#A3150",
        "SHA2-256A3378",
        "ECDSA SigGen (FIPS186-4)A3378"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "4725"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "4725"
        ]
      }
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": [
        "4725"
      ]
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": {
        "_type": "Set",
        "elements": [
          "4725"
        ]
      },
      "indirectly_referenced_by": null,
      "indirectly_referencing": {
        "_type": "Set",
        "elements": [
          "4725"
        ]
      }
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": [
        "4725"
      ]
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 30,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 5
          },
          "ECDH": {
            "ECDH": 4
          },
          "ECDSA": {
            "ECDSA": 36
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 10
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 4
        },
        "CCM": {
          "CCM": 4
        },
        "CFB": {
          "CFB": 2
        },
        "CTR": {
          "CTR": 3
        },
        "ECB": {
          "ECB": 3
        },
        "GCM": {
          "GCM": 12
        },
        "OFB": {
          "OFB": 3
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "OpenSSL": {
          "OpenSSL": 39
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "MAC": {
          "MAC": 12
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 2,
          "P-256": 14,
          "P-384": 10,
          "P-521": 10
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 36
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#4725": 1
        }
      },
      "fips_certlike": {
        "Certlike": {
          "AES 11": 1,
          "AES key 128, 192": 1,
          "AES-256": 2,
          "PKCS#1": 2,
          "SHA-1": 7,
          "SHA-2": 3,
          "SHA-3": 7,
          "SHA1": 1,
          "SHA2- 224": 2,
          "SHA2- 256": 1,
          "SHA2- 384": 1,
          "SHA2-224": 3,
          "SHA2-256": 10,
          "SHA2-384": 4,
          "SHA2-512": 6,
          "SHA3- 256": 1,
          "SHA3-224": 3,
          "SHA3-256": 3,
          "SHA3-384": 3,
          "SHA3-512": 3
        }
      },
      "fips_security_level": {
        "Level": {
          "level 1": 2
        }
      },
      "hash_function": {
        "SHA": {
          "SHA1": {
            "SHA-1": 7,
            "SHA1": 1
          },
          "SHA2": {
            "SHA-2": 3
          },
          "SHA3": {
            "SHA-3": 7,
            "SHA3-224": 3,
            "SHA3-256": 3,
            "SHA3-384": 3,
            "SHA3-512": 3
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 35
        },
        "RNG": {
          "RNG": 3
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 48,
          "FIPS 186-4": 4,
          "FIPS PUB 140-3": 2,
          "FIPS140-3": 1,
          "FIPS180-4": 1,
          "FIPS180-5": 2,
          "FIPS186-4": 6,
          "FIPS197": 9,
          "FIPS198-1": 2,
          "FIPS202": 2
        },
        "ISO": {
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-140B": 1,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS#1": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 57,
            "AES-": 4,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 1
          }
        },
        "DES": {
          "DES": {
            "DES": 1
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 7,
            "HMAC": 10
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES-CBC-CS3A3378",
        "ECDSA SigVer (FIPS186-4)A3378",
        "AES-CFB128A3378",
        "SHA3-512A3378",
        "SHA2-384A3378",
        "AES-CBC-CS1A3378",
        "ECDSA KeyGen (FIPS186-4)A3147",
        "AES-CBC-CS2A3378",
        "SHAKE-128A3378",
        "AES-GCMA3378",
        "AES-GMACA3378",
        "AES-CTRA3378",
        "RSA KeyGen (FIPS186-4)A3147",
        "AES-CFB8A3378",
        "AES-CMACA3378",
        "SHA2-512A3378",
        "AES-ECBA3378",
        "SHA2-512/224A3378",
        "SHAKE-256A3378",
        "SHA3-256A3378",
        "HMAC-SHA2-256A3147",
        "SHA3-224A3378",
        "AES-CCMA3378",
        "SHA-1A3378",
        "SHA2-512/256A3378",
        "AES-XTS Testing Revision 2.0A3378",
        "KAS-ECC-SSC Sp800-56Ar3A3378",
        "AES-CBCA3378",
        "SHA2-224A3378",
        "Counter DRBGA3150",
        "SHA3-384A3378",
        "AES-OFBA3378",
        "SHA2-256A3378",
        "ECDSA SigGen (FIPS186-4)A3378"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A3378",
        "#A3147",
        "#A3377",
        "#A3150"
      ]
    },
    "policy_metadata": {
      "/Author": "Alejandro Fabio Masino",
      "/CreationDate": "D:20241001163401-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20241001163401-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "/Title": "FIPS 140-3 Non-Proprietary Security Policy",
      "pdf_file_size_bytes": 599910,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/29",
          "https://documentation.suse.com/smart/linux/html/concept-bci/index.html",
          "https://www.ietf.org/rfc/rfc3447.txt",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/28",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-57pt1r5.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4725",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35760",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://documentation.suse.com/sle-micro/5.3/single-html/SLE-Micro-security/#sec-fips-slemicro-install",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://csrc.nist.gov/csrc/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS-140-3-CMVP%20Management%20Manual.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35988",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35987",
          "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp4725.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38c.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/details?validation=35757",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38e.pdf",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140B.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 36
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "02ee009cda66ab39ec067516fdbd465a79877ed67582c6b273ebb7dc4ce2ed92",
      "source_hash": "7d8bb02ff9a04ca4c5e7a15fc244c28d7ebb3bed886ff58970700e079c482662",
      "txt_hash": "9f58eec5465511899297a8ffe627928ab95dafa5d1d15d5ed0c3408be0af53a8"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "Interim validation. When operated in approved mode with module SUSE Linux Enterprise OpenSSL Cryptographic Module validated to FIPS 140-3 under Cert. #4725 operating in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/October 2024_041124_0733 (1).pdf",
    "date_sunset": "2029-10-06",
    "description": "The SUSE Linux Enterprise Server Libica Cryptographic Module is a software-hybrid module that provides general purpose cryptographic algorithms to applications running in the user space of the underlying operating system through a C language application program interface (API). The module is composed by a software library, which provides the API and a subset of the cryptographic algorithms, and the Central Processor Assist for Cryptographic Functions (CPACF), which is part of the z15 processor and provides cryptographic algorithms implemented in firmware and hardware.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": "IBM z15",
    "level": 1,
    "mentioned_certs": {
      "4725": 1
    },
    "module_name": "SUSE Linux Enterprise Libica Cryptographic Module",
    "module_type": "Software-Hybrid",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": "1.1",
    "tested_conf": [
      "SUSE Linux Enterprise Server 15 SP4 running on IBM z/15 with FC3863 with z15 with PAI"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-10-07",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "SUSE, LLC",
    "vendor_url": "http://www.suse.com"
  }
}

Sections

SUSE Linux Enterprise Libica Cryptographic Module

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Security level

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

SUSE Linux Enterprise Libica Cryptographic Module

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Security

Security level

Other

Standards

Cross-references

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data