This page was not yet optimized for use on mobile devices.

Oracle Linux 9 libgcrypt Cryptographic Module

Known vulnerabilities detected

Our automated heuristics have identified vulnerabilities that may be associated with this certificate. See the CVEs section for details.

Certificate #4993

Webpage information

Status	active
Validation dates	28.03.2025 , 15.08.2025 , 26.11.2025
Sunset date	27-03-2030
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions	Physical security: N/A Non-invasive security: N/A
Vendor	Oracle Corporation
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms

AES, AES-128, AES-192, AES-256, AES-, CAST, HMAC, HMAC-SHA-256, HMAC-SHA-224, HMAC-SHA-384, HMAC-SHA-512, CMAC

Asymmetric Algorithms

ECDH, ECDSA, Diffie-Hellman

Hash functions

SHA-1, SHA-384, SHA-256, SHA-224, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, MD5, PBKDF, PBKDF2

Schemes

MAC

Randomness

DRBG, RBG

Libraries

libgcrypt

Elliptic Curves

P-224, P-256, P-384, P-521, P-512

Block cipher modes

ECB, CBC, CTR, CFB, GCM, CCM, XTS

Trusted Execution Environments

PSP

Security level

Level 1

Side-channel analysis

Timing Attacks, timing attacks

Standards

FIPS 140-3, FIPS PUB 140-3, FIPS186-4, FIPS 186-4, FIPS 198-1, FIPS186-2, FIPS 180-4, FIPS 202, FIPS 186-5, FIPS 197, SP 800-132, SP 800-38A, SP 800-38C, SP 800-38B, SP 800-38F, SP 800-38E, SP 800-90A, SP 800-90B, PKCS 1, PKCS #1

File metadata

Creation date	D:20251126091208-05'00'
Modification date	D:20251126091431-05'00'
Pages	78
Creator	Acrobat PDFMaker 25 for Word
Producer	Adobe PDF Library 25.1.51

Heuristics

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. For details on our data sources and inference methods, see our methodology. If you believe any information here is inaccurate or harmful, please submit feedback.

CPE matches

cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*

Related CVEs

ID	Links	Severity	CVSS Score			Published on
ID	Links	Severity	Base	Exploitability	Impact	Published on
CVE-2022-21505	C N	MEDIUM	6.7		5.9	24.12.2024
CVE-2023-22024	C N	MEDIUM	5.5		3.6	20.09.2023
CVE-2025-4598	C N	MEDIUM	4.7		3.6	30.05.2025

References

No references are available for this certificate.

Updates Feed

15.12.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated, with the [[2, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2025-11-26', 'validation_type': 'Update', 'lab': 'atsec information security corporation'}]] values inserted.

The description property was set to None.

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-1': 60, 'SHA2-256': 46, 'SHA2-512': 44, 'SHA2-224': 51, 'SHA2-384': 36, 'SHA3-224': 22, 'SHA3-256': 24, 'SHA3-384': 22, 'SHA3-512': 24, 'SHA3- 224': 1, 'SHA-512': 4}}}}, 'symmetric_crypto': {'__update__': {'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 35}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 60}}, 'SHA2': {'__update__': {'SHA-512': 4}}, 'SHA3': {'__update__': {'SHA3-224': 22, 'SHA3-256': 24, 'SHA3-384': 22, 'SHA3-512': 24}}}}}}, 'crypto_scheme': {'__update__': {'MAC': {'__update__': {'MAC': 70}}}}, 'randomness': {'__update__': {'RNG': {'__delete__': ['RNG']}}}, 'crypto_library': {'__update__': {'libgcrypt': {'__update__': {'libgcrypt': 94}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS186-4': 102}}}}} data.

The policy_metadata property was updated, with the {'pdf_file_size_bytes': 915573, 'pdf_number_of_pages': 78, '/CreationDate': "D:20251126091208-05'00'", '/ModDate': "D:20251126091431-05'00'"} data.

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The policy_pdf_hash property was set to 63244ee19ea76190ba1919714eb66b76044b07f5b5b3a123dbfebf84e37db2f5.

The policy_txt_hash property was set to 7b859c0e38b828383bc3f2676be1ee38ccdb0b12ed4df866cfb9fae254b4fc6d.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
01.09.2025

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The related_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2025-4598']} values added.
18.08.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated, with the [[1, {'_type': 'sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry', 'date': '2025-08-15', 'validation_type': 'Update', 'lab': 'ATSEC INFORMATION SECURITY CORP'}]] values inserted.

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC- SHA-1': 6, 'SHA- 512': 4, 'SHA3- 224': 2, 'SHA3- 384': 2, '- PKCS 1': 15, 'AES-128': 4, 'AES-192': 4, 'AES-256': 4, 'PKCS 1': 15}, '__update__': {'HMAC-SHA-256': 18, 'HMAC-SHA-1': 38, 'SHA-1': 55, 'SHA2-224': 21, 'SHA2-256': 31, 'SHA2-384': 21, 'SHA2-512': 29, 'SHA3-224': 7, 'SHA3-256': 9, 'SHA3-384': 7, 'SHA3-512': 9, 'SHA-512': 5}}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__insert__': {'AES-128': 4, 'AES-192': 4, 'AES-256': 4}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 30, 'HMAC-SHA-256': 9}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 120}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 55}}, 'SHA2': {'__update__': {'SHA-512': 5}}, 'SHA3': {'__update__': {'SHA3-224': 7, 'SHA3-256': 9, 'SHA3-384': 7, 'SHA3-512': 9}}}}, 'PBKDF': {'__update__': {'PBKDF': 25}}}}, 'randomness': {'__update__': {'PRNG': {'__update__': {'DRBG': 96}}}}, 'ecc_curve': {'__update__': {'NIST': {'__update__': {'P-256': 82, 'P-384': 58, 'P-521': 58, 'P-224': 44}}}}, 'crypto_library': {'__update__': {'libgcrypt': {'__update__': {'libgcrypt': 86}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS186-4': 87, 'FIPS186-2': 6}}, 'NIST': {'__update__': {'SP 800-132': 13}}, 'PKCS': {'__insert__': {'PKCS 1': 15}}}}} data.

The policy_metadata property was updated, with the {'pdf_file_size_bytes': 870179, 'pdf_number_of_pages': 70, '/CreationDate': "D:20250807132200-04'00'", '/Creator': 'Acrobat PDFMaker 25 for Word', '/ModDate': "D:20250807132414-04'00'", '/Producer': 'Adobe PDF Library 25.1.51'} data.

The state was updated.

The policy_pdf_hash property was set to 4b017d9d732fce7c17745f1e09da4c9ea01f3aefb6725a45338d3dcca6787e9d.

The policy_txt_hash property was set to 6cf9d883401952b0b6de90885551aab813d1d4bcb2b33b82997fc98eaa9ab39f.
23.06.2025

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The cpe_matches property was updated, with the {'_type': 'Set', 'elements': ['cpe:2.3:o:oracle:linux:9:0:*:*:*:*:*:*']} values discarded.

The related_cves property was updated, with the {'_type': 'Set', 'elements': ['CVE-2022-21505']} values added.
04.04.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4993,
  "dgst": "e0a612f22ea3eab1",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": []
    },
    "cpe_matches": {
      "_type": "Set",
      "elements": [
        "cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:*"
      ]
    },
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": {
      "_type": "Set",
      "elements": [
        "CVE-2022-21505",
        "CVE-2025-4598",
        "CVE-2023-22024"
      ]
    },
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECDH": {
            "ECDH": 4
          },
          "ECDSA": {
            "ECDSA": 120
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 1
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 1
        },
        "CCM": {
          "CCM": 9
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 5
        },
        "GCM": {
          "GCM": 4
        },
        "XTS": {
          "XTS": 8
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "libgcrypt": {
          "libgcrypt": 94
        }
      },
      "crypto_protocol": {},
      "crypto_scheme": {
        "MAC": {
          "MAC": 70
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 44,
          "P-256": 82,
          "P-384": 58,
          "P-512": 2,
          "P-521": 58
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 3
        }
      },
      "fips_cert_id": {
        "Cert": {
          "#1": 10
        }
      },
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 15,
          "AES-128": 4,
          "AES-192": 4,
          "AES-256": 4,
          "HMAC SHA-256": 2,
          "HMAC- SHA-1": 6,
          "HMAC-SHA-1": 38,
          "HMAC-SHA-224": 10,
          "HMAC-SHA-256": 18,
          "HMAC-SHA-384": 10,
          "HMAC-SHA-512": 10,
          "PKCS #1": 20,
          "PKCS 1": 15,
          "SHA- 256": 4,
          "SHA- 512": 4,
          "SHA-1": 60,
          "SHA-224": 5,
          "SHA-256": 53,
          "SHA-3": 1,
          "SHA-384": 9,
          "SHA-512": 4,
          "SHA2-224": 51,
          "SHA2-256": 46,
          "SHA2-384": 36,
          "SHA2-512": 44,
          "SHA3- 224": 1,
          "SHA3- 384": 2,
          "SHA3-224": 22,
          "SHA3-256": 24,
          "SHA3-384": 22,
          "SHA3-512": 24
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 2
          }
        },
        "PBKDF": {
          "PBKDF": 25,
          "PBKDF2": 4
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 60
          },
          "SHA2": {
            "SHA-224": 5,
            "SHA-256": 53,
            "SHA-384": 9,
            "SHA-512": 4
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3-224": 22,
            "SHA3-256": 24,
            "SHA3-384": 22,
            "SHA3-512": 24
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 96
        },
        "RNG": {
          "RBG": 2
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Timing Attacks": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 8,
          "FIPS 180-4": 38,
          "FIPS 186-4": 49,
          "FIPS 186-5": 2,
          "FIPS 197": 1,
          "FIPS 198-1": 50,
          "FIPS 202": 19,
          "FIPS PUB 140-3": 2,
          "FIPS186-2": 6,
          "FIPS186-4": 102
        },
        "NIST": {
          "SP 800-132": 13,
          "SP 800-38A": 25,
          "SP 800-38B": 5,
          "SP 800-38C": 4,
          "SP 800-38E": 5,
          "SP 800-38F": 5,
          "SP 800-90A": 14,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS #1": 10,
          "PKCS 1": 15
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 82,
            "AES-": 3,
            "AES-128": 4,
            "AES-192": 4,
            "AES-256": 4
          },
          "CAST": {
            "CAST": 234
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 8,
            "HMAC": 35,
            "HMAC-SHA-224": 5,
            "HMAC-SHA-256": 9,
            "HMAC-SHA-384": 5,
            "HMAC-SHA-512": 5
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20251126091208-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/ModDate": "D:20251126091431-05\u002700\u0027",
      "/Producer": "Adobe PDF Library 25.1.51",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 915573,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "http://www.atsec.com/",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
          "http://www.oracle.com/",
          "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://gnupg.org/documentation/manuals/gcrypt.pdf",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 78
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.InternalState",
    "module_download_ok": true,
    "module_extract_ok": true,
    "policy_convert_ok": true,
    "policy_download_ok": true,
    "policy_extract_ok": true,
    "policy_json_hash": null,
    "policy_pdf_hash": "63244ee19ea76190ba1919714eb66b76044b07f5b5b3a123dbfebf84e37db2f5",
    "policy_txt_hash": "7b859c0e38b828383bc3f2676be1ee38ccdb0b12ed4df866cfb9fae254b4fc6d"
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": null,
    "date_sunset": "2030-03-27",
    "description": null,
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Oracle Linux 9 libgcrypt Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-03-28",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-08-15",
        "lab": "atsec information security corporation",
        "validation_type": "Update"
      },
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-11-26",
        "lab": "atsec information security corporation",
        "validation_type": "Update"
      }
    ],
    "vendor": "Oracle Corporation",
    "vendor_url": "http://www.oracle.com"
  }
}

Sections

Oracle Linux 9 libgcrypt Cryptographic Module

Known vulnerabilities detected

Certificate #4993

Webpage information

Security policy

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Libraries

Elliptic Curves

Block cipher modes

Trusted Execution Environments

Security level

Side-channel analysis

Standards

File metadata

Heuristics

Automated inference - use with caution

CPE matches

Related CVEs

References

Updates Feed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Oracle Linux 9 libgcrypt Cryptographic Module

Known vulnerabilities detected

Certificate #4993

Webpage information

Security policy

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Randomness

Libraries

Elliptic Curves

Block cipher modes

Device

Trusted Execution Environments

Security

Security level

Side-channel analysis

Other

Standards

File metadata

Heuristics

Automated inference - use with caution

CPE matches

Related CVEs

References

Updates Feed

Raw data

Toggle raw data