Rocky Linux 8 and 9 NSS Cryptographic Module

Certificate #5337

Webpage information

Status active
Validation dates 17.06.2026
Sunset date 16-06-2031
Standard FIPS 140-3
Security level 1
Type Software
Embodiment MultiChipStand
Caveat When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Description The Rocky Linux 8 and 9 NSS Cryptographic Module consists of the Softoken and Freebl libraries offering various cryptographic mechanisms.
Vendor Ctrl IQ, Inc.
References

This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.
Certificate
Webpage

Security policy

Security target PDF TXT

Symmetric Algorithms
AES, AES-, CAST, RC2, RC4, DES, Triple-DES, ChaCha20, Poly1305, Camellia, SEED, HMAC, HMAC-SHA-256, CBC-MAC, CMAC
Asymmetric Algorithms
ECDSA, ECC, Diffie-Hellman, DSA
Hash functions
SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-256, SHA-3, MD5, PBKDF2, PBKDF
Schemes
MAC, Key Exchange, Key Agreement
Protocols
SSL, TLS, TLS v1.2, TLS 1.2, TLS 1.3, IKEv2, IKEv1, IKE
Randomness
DRBG, RNG, RBG
Libraries
NSS
Elliptic Curves
P-256, P-384, P-521, Ed25519
Block cipher modes
ECB, CBC, CTR, GCM

JavaCard API constants
X25519
Trusted Execution Environments
PSP, SSC

Security level
Level 1
Side-channel analysis
Timing attacks, timing attack, timing attacks

File metadata

Creation date D:20260612143606-04'00'
Modification date D:20260612144050-04'00'
Pages 82
Creator Acrobat PDFMaker 26 for Word
Producer Adobe PDF Library 26.1.59

Heuristics

No heuristics are available for this certificate.

References

No references are available for this certificate.

Updates

  • The certificate data changed.
  • The certificate data changed.
  • The certificate was first processed.

Raw data 

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5337,
  "dgst": "ea1bcb3116150abb",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "ECDSA SigGen (FIPS186-5)A5921",
        "KDF SP800-108A5921",
        "AES-CBCA5923",
        "KAS-ECC-SSC Sp800-56Ar3A5921",
        "AES-CTRA5923",
        "AES-ECBA5923",
        "HMAC-SHA2-384A5925",
        "AES-KWA5923",
        "KDF IKEv2A5922",
        "RSA SigGen (FIPS186-5)A5921",
        "Safe Primes Key GenerationA5921",
        "HMAC-SHA2-512A5925",
        "AES-GCMA5924",
        "KDA HKDF SP800-56Cr2A5920",
        "AES-CBC-CS1A5923",
        "RSA SigVer (FIPS186-2)A5921",
        "HMAC-SHA2-224A5925",
        "RSA SigVer (FIPS186-4)A5921",
        "KAS-FFC-SSC Sp800-56Ar3A5921",
        "PBKDFA5921",
        "Hash DRBGA5921",
        "ECDSA SigVer (FIPS186-5)A5921",
        "TLS v1.2 KDF RFC7627A5921",
        "RSA KeyGen (FIPS186-5)A5921",
        "SHA2-512A5925",
        "SHA2-384A5925",
        "SHA2-256A5925",
        "ECDSA KeyGen (FIPS186-5)A5921",
        "AES-KWPA5923",
        "AES-CMACA5923",
        "SHA2-224A5925",
        "RSA SigVer (FIPS186-5)A5921",
        "HMAC-SHA2-256A5925"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "8",
        "9"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 4
          },
          "ECDSA": {
            "ECDSA": 52
          }
        },
        "FF": {
          "DH": {
            "Diffie-Hellman": 8
          },
          "DSA": {
            "DSA": 6
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 7
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "NSS": {
          "NSS": 89
        }
      },
      "crypto_protocol": {
        "IKE": {
          "IKE": 13,
          "IKEv1": 2,
          "IKEv2": 23
        },
        "TLS": {
          "SSL": {
            "SSL": 2
          },
          "TLS": {
            "TLS": 24,
            "TLS 1.2": 17,
            "TLS 1.3": 5,
            "TLS v1.2": 7
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 1
        },
        "KEX": {
          "Key Exchange": 2
        },
        "MAC": {
          "MAC": 12
        }
      },
      "device_model": {},
      "ecc_curve": {
        "Edwards": {
          "Ed25519": 2
        },
        "NIST": {
          "P-256": 32,
          "P-384": 16,
          "P-521": 28
        }
      },
      "eval_facility": {
        "atsec": {
          "atsec": 84
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "- PKCS 1": 4,
          "HMAC-SHA-256": 4,
          "PKCS 1": 4,
          "PKCS#1": 18,
          "PKCS#11": 2,
          "PKCS#12": 6,
          "PKCS#5": 6,
          "PKCS#7": 2,
          "SHA- 256": 2,
          "SHA-1": 15,
          "SHA-224": 2,
          "SHA-256": 10,
          "SHA-3": 1,
          "SHA-384": 4,
          "SHA-512": 4,
          "SHA2- 256": 4,
          "SHA2- 384": 4,
          "SHA2- 512": 8,
          "SHA2-224": 20,
          "SHA2-256": 40,
          "SHA2-384": 22,
          "SHA2-512": 18,
          "SHA3-256": 1
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 3
        }
      },
      "hash_function": {
        "MD": {
          "MD5": {
            "MD5": 12
          }
        },
        "PBKDF": {
          "PBKDF": 6,
          "PBKDF2": 18
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 15
          },
          "SHA2": {
            "SHA-224": 2,
            "SHA-256": 10,
            "SHA-384": 4,
            "SHA-512": 4
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3-256": 1
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {
        "curves": {
          "X25519": 4
        }
      },
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 28
        },
        "RNG": {
          "RBG": 2,
          "RNG": 1
        }
      },
      "side_channel_analysis": {
        "SCA": {
          "Timing attacks": 1,
          "timing attack": 1,
          "timing attacks": 1
        }
      },
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 95,
          "FIPS 180-4": 17,
          "FIPS 186-2": 3,
          "FIPS 186-4": 6,
          "FIPS 186-5": 18,
          "FIPS 197": 1,
          "FIPS 198-1": 17,
          "FIPS 202": 1,
          "FIPS PUB 140-3": 2,
          "FIPS186-2": 3,
          "FIPS186-4": 3,
          "FIPS186-5": 46
        },
        "NIST": {
          "SP 800-108": 2,
          "SP 800-132": 9,
          "SP 800-135": 4,
          "SP 800-38A": 18,
          "SP 800-38B": 5,
          "SP 800-38D": 7,
          "SP 800-38F": 9,
          "SP 800-56A": 6,
          "SP 800-56C": 2,
          "SP 800-90A": 2,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS 1": 4,
          "PKCS#1": 9,
          "PKCS#11": 1,
          "PKCS#12": 3,
          "PKCS#5": 3,
          "PKCS#7": 1
        },
        "RFC": {
          "RFC 3526": 4,
          "RFC 5288": 3,
          "RFC 7627": 2,
          "RFC 7919": 4,
          "RFC 8446": 4,
          "RFC7627": 6
        },
        "X509": {
          "X.509": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 61,
            "AES-": 1
          },
          "CAST": {
            "CAST": 153
          },
          "RC": {
            "RC2": 3,
            "RC4": 3
          }
        },
        "DES": {
          "3DES": {
            "Triple-DES": 5
          },
          "DES": {
            "DES": 5
          }
        },
        "constructions": {
          "MAC": {
            "CBC-MAC": 2,
            "CMAC": 8,
            "HMAC": 21,
            "HMAC-SHA-256": 2
          }
        },
        "djb": {
          "ChaCha": {
            "ChaCha20": 3
          },
          "Poly": {
            "Poly1305": 1
          }
        },
        "miscellaneous": {
          "Camellia": {
            "Camellia": 5
          },
          "SEED": {
            "SEED": 5
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 3
        },
        "IBM": {
          "SSC": 2
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "policy_metadata": {
      "/Author": "",
      "/ClassificationContentMarkingHeaderFontProps": "#008000,10,Aptos",
      "/ClassificationContentMarkingHeaderShapeIds": "461509c1,7b280525,351710bb",
      "/ClassificationContentMarkingHeaderText": "UNCLASSIFIED / NON CLASSIFI\u00c9//TLP:AMBER+STRICT",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20260612143606-04\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 26 for Word",
      "/Keywords": "",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ActionId": "86a1d044-d9de-4c0d-9ac1-5b80216ca79e",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_ContentBits": "1",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Enabled": "true",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Method": "Privileged",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Name": "TLP-Amber_Strict",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SetDate": "2026-06-12T18:27:01Z",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_SiteId": "da9cbe40-ec1e-4997-afb3-17d87574571a",
      "/MSIP_Label_74f313cf-d20a-406f-9af7-e4526ef74d9f_Tag": "10, 0, 1, 1",
      "/ModDate": "D:20260612144050-04\u002700\u0027",
      "/Producer": "Adobe PDF Library 26.1.59",
      "/SourceModified": "D:20260612183534",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 729334,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://www.ietf.org/rfc/rfc3526.txt",
          "https://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf",
          "https://www.ietf.org/rfc/rfc5288.txt",
          "https://csrc.nist.gov/publications/nistpubs/800-132/nist-sp800-132.pdf",
          "https://csrc.nist.gov/files/pubs/fips/186-2/final/docs/fips186-2.pdf",
          "https://www.ietf.org/rfc/rfc8446.txt",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38a-add.pdf",
          "https://csrc.nist.gov/publications/fips/fips197/fips-197.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-131Ar2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90B.pdf",
          "https://csrc.nist.gov/Projects/cryptographic-module-validation-program/fips-140-3-ig-announcements",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf",
          "https://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Ar3.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-133r2.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.202.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf",
          "https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-4.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-52r2.pdf",
          "https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-135r1.pdf",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-56Cr2.pdf",
          "https://www.rfc-editor.org/rfc/rfc8017.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-108r1-upd1.pdf",
          "https://www.ietf.org/rfc/rfc7919.txt",
          "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-90Ar1.pdf",
          "https://csrc.nist.gov/publications/nistpubs/800-38D/SP-800-38D.pdf"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 82
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": "472939018ccea2a9efe7fa12f495c28a85c925d889883f4fc911ee8fc323a2f5",
      "txt_hash": "d204cc2b35294f2105c66db1fa82e0cae8cf6a42632a5f1e8b29667940d87d7b"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/June 2026_080726_0648.pdf",
    "date_sunset": "2031-06-16",
    "description": "The Rocky Linux 8 and 9 NSS Cryptographic Module consists of the Softoken and Freebl libraries offering various cryptographic mechanisms.",
    "embodiment": "MultiChipStand",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Rocky Linux 8 and 9 NSS Cryptographic Module",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2026-06-17",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Ctrl IQ, Inc.",
    "vendor_url": "https://ciq.com/"
  }
}