SUSE Rancher Kubernetes Cryptographic Library

Certificate details

Certificate ID	#4691
Status	historical
Historical reason	Moved to historical list due to sunsetting
Validation dates	12.04.2024
Standard	FIPS 140-2
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Exceptions	Physical Security: N/A Mitigation of Other Attacks: N/A
Description	A software library that contains cryptography to serve SUSE’s Rancher Kubernetes Engine and its ecosystem of supported cloud-native tools written in the Go programming language.
Tested configurations	Red Hat Enterprise Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA Red Hat Enterprise Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA Red Hat Enterprise Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA Red Hat Enterprise Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA (single-user mode) SUSE Liberty Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA SUSE Liberty Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA SUSE Liberty Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA SUSE Liberty Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA
Vendor	SUSE LLC http://www.suse.com
Lab	Acumen Security
Algorithms	AES#A5181 CVL#A5181 DRBG#A5181 ECDSA#A5181 HMAC#A5181 KAS#A5181 KAS-SSC#A5181 KTS#A5181 RSA#A5181 SHS#A5181 Triple-DES#A5181
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES, AES-256, DES, Triple-DES, TDEA, HMAC, HMAC-SHA-224, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512

Asymmetric Algorithms

ECDSA, ECC, DH, Diffie-Hellman

Hash functions

SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, MD4, MD5

Schemes

MAC, Key Agreement

Protocols

SSL, TLS, TLS v1.2

Randomness

DRBG

Libraries

BoringSSL

Elliptic Curves

P-224, P-256, P-384, P-521

Block cipher modes

ECB, CBC, CTR, CFB, OFB, GCM, CCM

Security level

Level 1

Author	Rahul Kalsariya
Creation date	D:20240329001216-05'00'
Modification date	D:20240329001216-05'00'
Pages	18
Creator	Microsoft® Word for Microsoft 365
Producer	Microsoft® Word for Microsoft 365

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

24.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The keywords property was updated, with the {'fips_security_level': {'__insert__': {'Level': {'Level 1': 1}}}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 6}}}}}}} data.

The br1_deviations property was set to 39.
23.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'is_br1_format': False, 'br1_deviations': 0, 'br1_tables': None}.

The keywords property was updated, with the {'fips_security_level': {'__delete__': ['Level']}, 'asymmetric_crypto': {'__update__': {'FF': {'__update__': {'DH': {'__update__': {'Diffie-Hellman': 7}}}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-2': 36}}}}} data.
21.09.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The status property was set to historical.

The historical_reason property was set to Moved to historical list due to sunsetting.

The date_sunset property was set to None.

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['KAS-SSC#A5181', 'RSA#A5181', 'CVL#A5181', 'SHS#A5181', 'KTS#A5181', 'HMAC#A5181', 'Triple-DES#A5181', 'DRBG#A5181', 'AES#A5181', 'ECDSA#A5181', 'KAS#A5181']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A5181']}}.

The keywords property was updated, with the {'fips_certlike': {'__update__': {'Certlike': {'__insert__': {'HMAC -SHA-256': 1}, '__update__': {'HMAC-SHA-256': 4, 'SHA-1': 3}, '__delete__': ['PAA 2', 'PAA 3', 'PAA 4', 'PAA 5', 'PAA 6', 'PAA 7', 'PAA 8']}}}, 'symmetric_crypto': {'__update__': {'AES_competition': {'__update__': {'AES': {'__update__': {'AES': 19}}}}, 'DES': {'__update__': {'3DES': {'__update__': {'Triple-DES': 16, 'TDEA': 2}}}}, 'constructions': {'__update__': {'MAC': {'__update__': {'HMAC': 7, 'HMAC-SHA-256': 2}}}}}}, 'asymmetric_crypto': {'__update__': {'ECC': {'__update__': {'ECDSA': {'__update__': {'ECDSA': 19}}}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 3}}}}}}, 'crypto_protocol': {'__update__': {'TLS': {'__update__': {'TLS': {'__delete__': ['TLS 1.0']}}}}}, 'cipher_mode': {'__update__': {'CFB': {'__update__': {'CFB': 5}}, 'OFB': {'__update__': {'OFB': 5}}}}, 'standard_id': {'__update__': {'FIPS': {'__insert__': {'FIPS 140': 1}, '__update__': {'FIPS 140-2': 35}}, 'NIST': {'__update__': {'SP 800-90A': 3}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A5181']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '4080a73e7799797a1122cd731f1a2c539e745d155366f54665dbe2d625f2d7d1', 'json_hash': 'd82b5709d7bcd8678f77ea88888733cff68aa26005be702655a65e8153c2a65f'} data.
15.12.2025

The certificate data changed.
Certificate changed

The state was updated.

The following values were inserted: {'policy_json_hash': None}.

The following properties were deleted: ['policy_convert_garbage'].
08.09.2025

The certificate data changed.
Certificate changed

The web extraction data was updated.

The validation_history property was updated.
04.07.2024

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 4691,
  "dgst": "eaa7de80f155ad3c",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "AES#A5181",
        "KAS-SSC#A5181",
        "#A5181",
        "ECDSA#A5181",
        "KAS#A5181",
        "DRBG#A5181",
        "Triple-DES#A5181",
        "KTS#A5181",
        "CVL#A5181",
        "HMAC#A5181",
        "RSA#A5181",
        "SHS#A5181"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "-"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "br1_deviations": 39,
    "br1_tables": null,
    "is_br1_format": false,
    "keywords": {
      "asymmetric_crypto": {
        "ECC": {
          "ECC": {
            "ECC": 2
          },
          "ECDSA": {
            "ECDSA": 19
          }
        },
        "FF": {
          "DH": {
            "DH": 7,
            "Diffie-Hellman": 6
          }
        }
      },
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 3
        },
        "CCM": {
          "CCM": 1
        },
        "CFB": {
          "CFB": 5
        },
        "CTR": {
          "CTR": 2
        },
        "ECB": {
          "ECB": 2
        },
        "GCM": {
          "GCM": 4
        },
        "OFB": {
          "OFB": 5
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {
        "BoringSSL": {
          "BoringSSL": 2
        }
      },
      "crypto_protocol": {
        "TLS": {
          "SSL": {
            "SSL": 1
          },
          "TLS": {
            "TLS": 10,
            "TLS v1.2": 1
          }
        }
      },
      "crypto_scheme": {
        "KA": {
          "Key Agreement": 4
        },
        "MAC": {
          "MAC": 1
        }
      },
      "device_model": {},
      "ecc_curve": {
        "NIST": {
          "P-224": 6,
          "P-256": 10,
          "P-384": 6,
          "P-521": 6
        }
      },
      "eval_facility": {},
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES-256": 1,
          "HMAC -SHA-256": 1,
          "HMAC-SHA-1": 4,
          "HMAC-SHA-224": 2,
          "HMAC-SHA-256": 4,
          "HMAC-SHA-384": 2,
          "HMAC-SHA-512": 4,
          "SHA-1": 3,
          "SHA-224": 1,
          "SHA-256": 3,
          "SHA-384": 1,
          "SHA-512": 2
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 1
        }
      },
      "hash_function": {
        "MD": {
          "MD4": {
            "MD4": 4
          },
          "MD5": {
            "MD5": 5
          }
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 3
          },
          "SHA2": {
            "SHA-224": 1,
            "SHA-256": 3,
            "SHA-384": 1,
            "SHA-512": 2
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 6
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140": 1,
          "FIPS 140-2": 36,
          "FIPS 180-4": 2,
          "FIPS 186-4": 3,
          "FIPS 197": 2,
          "FIPS 198-1": 2,
          "FIPS PUB 140-2": 1
        },
        "NIST": {
          "NIST SP 800-131A": 1,
          "NIST SP 800-133": 1,
          "NIST SP 800-38D": 1,
          "NIST SP 800-52": 1,
          "NIST SP 800-90A": 1,
          "SP 800-133": 1,
          "SP 800-135": 3,
          "SP 800-38A": 2,
          "SP 800-38C": 1,
          "SP 800-38D": 2,
          "SP 800-38F": 2,
          "SP 800-67": 2,
          "SP 800-90A": 3
        },
        "RFC": {
          "RFC 2313": 1,
          "RFC 5246": 2,
          "RFC 5288": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 19,
            "AES-256": 1
          }
        },
        "DES": {
          "3DES": {
            "TDEA": 2,
            "Triple-DES": 16
          },
          "DES": {
            "DES": 3
          }
        },
        "constructions": {
          "MAC": {
            "HMAC": 7,
            "HMAC-SHA-224": 1,
            "HMAC-SHA-256": 2,
            "HMAC-SHA-384": 1,
            "HMAC-SHA-512": 2
          }
        }
      },
      "tee_name": {},
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "AES#A5181",
        "KAS-SSC#A5181",
        "ECDSA#A5181",
        "KAS#A5181",
        "DRBG#A5181",
        "Triple-DES#A5181",
        "KTS#A5181",
        "CVL#A5181",
        "HMAC#A5181",
        "RSA#A5181",
        "SHS#A5181"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A5181"
      ]
    },
    "policy_metadata": {
      "/Author": "Rahul Kalsariya",
      "/CreationDate": "D:20240329001216-05\u002700\u0027",
      "/Creator": "Microsoft\u00ae Word for Microsoft 365",
      "/ModDate": "D:20240329001216-05\u002700\u0027",
      "/Producer": "Microsoft\u00ae Word for Microsoft 365",
      "pdf_file_size_bytes": 535947,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://github.com/ninja-build/ninja/releases",
          "http://releases.llvm.org/download.html",
          "https://golang.org/dl/"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 18
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "d82b5709d7bcd8678f77ea88888733cff68aa26005be702655a65e8153c2a65f",
      "source_hash": "afe3c9bc3740c028162bd23c46c53abcabc68abbf62a9a25cf6389309c8e03bb",
      "txt_hash": "4080a73e7799797a1122cd731f1a2c539e745d155366f54665dbe2d625f2d7d1"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in FIPS mode. No assurance of the minimum strength of generated keys.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/April 2024_010524_0757.pdf",
    "date_sunset": null,
    "description": "A software library that contains cryptography to serve SUSE\u2019s Rancher Kubernetes Engine and its ecosystem of supported cloud-native tools written in the Go programming language.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical Security: N/A",
      "Mitigation of Other Attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": "Moved to historical list due to sunsetting",
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "SUSE Rancher Kubernetes Cryptographic Library",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-2",
    "status": "historical",
    "sw_versions": "853ca1ea1168dff08011e5d42d94609cc0ca2e27",
    "tested_conf": [
      "Red Hat Enterprise Linux 7.9 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R with PAA",
      "Red Hat Enterprise Linux 7.9 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R without PAA",
      "Red Hat Enterprise Linux 8.8 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R with PAA",
      "Red Hat Enterprise Linux 8.8 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R without PAA (single-user mode)",
      "SUSE Liberty Linux 7.9 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R with PAA",
      "SUSE Liberty Linux 7.9 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R without PAA",
      "SUSE Liberty Linux 8.8 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R with PAA",
      "SUSE Liberty Linux 8.8 running on Dell PowerEdge R440 with Intel\u00ae Xeon\u00ae Silver 4214R without PAA"
    ],
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2024-04-12",
        "lab": "Acumen Security",
        "validation_type": "Initial"
      }
    ],
    "vendor": "SUSE LLC",
    "vendor_url": "http://www.suse.com"
  }
}

Sections

SUSE Rancher Kubernetes Cryptographic Library

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

SUSE Rancher Kubernetes Cryptographic Library

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Asymmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Libraries

Elliptic Curves

Block cipher modes

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data