Rocky Linux 8 Kernel Cryptographic API

Certificate details

Certificate ID	#5095
Status	active
Validation dates	24.11.2025
Sunset date	23-11-2030
Standard	FIPS 140-3
Security level	1
Type	Software
Embodiment	Multi-Chip Stand Alone
Caveat	When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Exceptions	Physical security: N/A Non-invasive security: N/A Mitigation of other attacks: N/A
Description	The Rocky Linux 8 Kernel Cryptographic API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality.
Vendor	Ctrl IQ, Inc. https://ciq.com/
Lab	atsec information security corporation
Algorithms	AES-CBC-CS3A5819 AES-CBCA5819 AES-CCMA5819 AES-CFB128A5819 AES-CMACA5819 AES-CTRA5819 AES-ECBA5821 AES-GCMA5821 AES-GMACA5819 AES-KWA5819 AES-XTS Testing Revision 2.0A5819 Counter DRBGA5821 Hash DRBGA5824 HMAC DRBGA5824 HMAC-SHA-1A5824 HMAC-SHA2-224A5824 HMAC-SHA2-256A5824 HMAC-SHA2-384A5824 HMAC-SHA2-512A5824 HMAC-SHA3-224A5807 HMAC-SHA3-256A5807 HMAC-SHA3-384A5807 HMAC-SHA3-512A5807 RSA SigVer (FIPS186-5)A5807 SHA-1A5824 SHA2-224A5824 SHA2-256A5824 SHA2-384A5824 SHA2-512A5824 SHA3-224A5807 SHA3-256A5807 SHA3-384A5807 SHA3-512A5807
References	This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates.

Certificate

Webpage

Security policy

Security policy PDF TXT

Extracted keywords

Symmetric Algorithms

AES-128, AES-, AES-256, AES, AES-192, CAST, HMAC, CMAC

Hash functions

SHA-1, SHA-512, SHA3-224, SHA3-256, SHA3-384, SHA3-512, SHA-3, PBKDF2

Schemes

MAC

Protocols

IKEv2, IPsec

Randomness

DRBG, RNG, RBG

Block cipher modes

ECB, CBC, CTR, CFB, GCM, CCM, XTS

Trusted Execution Environments

PSP

Security level

Level 1

Creation date	D:20251121064023-05'00'
Modification date	D:20251121064221-05'00'
Pages	51
Creator	Acrobat PDFMaker 25 for Word
Producer	Adobe PDF Library 25.1.51

Automated analysis

Automated inference - use with caution

All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.

No automatically derived data are available in this section.

Cross-references

No references are available for this certificate.

Processing updates

21.09.2026

The certificate data changed.
Certificate changed

The PDF extraction data was updated.

The following values were inserted: {'module_algorithms': {'_type': 'Set', 'elements': ['Hash DRBGA5824', 'HMAC-SHA3-384A5807', 'HMAC-SHA2-512A5824', 'HMAC-SHA-1A5824', 'HMAC-SHA2-224A5824', 'SHA-1A5824', 'HMAC-SHA3-256A5807', 'AES-CTRA5819', 'AES-CCMA5819', 'HMAC-SHA2-256A5824', 'SHA3-512A5807', 'SHA2-256A5824', 'SHA3-384A5807', 'AES-GCMA5821', 'HMAC-SHA3-224A5807', 'HMAC DRBGA5824', 'RSA SigVer (FIPS186-5)A5807', 'AES-XTS Testing Revision 2.0A5819', 'AES-KWA5819', 'AES-CMACA5819', 'Counter DRBGA5821', 'SHA3-256A5807', 'SHA2-384A5824', 'AES-GMACA5819', 'SHA3-224A5807', 'SHA2-224A5824', 'AES-CFB128A5819', 'SHA2-512A5824', 'AES-ECBA5821', 'HMAC-SHA3-512A5807', 'AES-CBCA5819', 'HMAC-SHA2-384A5824', 'AES-CBC-CS3A5819']}, 'policy_algorithms': {'_type': 'Set', 'elements': ['#A5816', '#A5824', '#A5807', '#A5814', '#A5818', '#A5821', '#A5808', '#A5812', '#A5822', '#A5817', '#A5823', '#A5810', '#A5811', '#A5809', '#A5813', '#A5819', '#A5815', '#A5820']}}.

The keywords property was updated, with the {'fips_security_level': {'__update__': {'Level': {'__update__': {'Level 1': 2}}}}, 'fips_certlike': {'__update__': {'Certlike': {'__update__': {'SHA-1': 20}}}}, 'hash_function': {'__update__': {'SHA': {'__update__': {'SHA1': {'__update__': {'SHA-1': 20}}}}}}, 'randomness': {'__update__': {'RNG': {'__update__': {'RBG': 11}}}}, 'standard_id': {'__update__': {'FIPS': {'__update__': {'FIPS 140-3': 55, 'FIPS PUB 140-3': 1}}, 'RFC': {'__update__': {'RFC 4106': 1}}}}} data.

The computed heuristics were updated.

The algorithms property was updated, with the {'_type': 'Set', 'elements': ['#A5816', '#A5824', '#A5807', '#A5814', '#A5818', '#A5821', '#A5808', '#A5812', '#A5822', '#A5817', '#A5823', '#A5810', '#A5811', '#A5809', '#A5813', '#A5819', '#A5815', '#A5820']} values added.

The state was updated.

The policy property was updated, with the {'txt_hash': '29610bd7ff2c2d52d909fb6e4033ef7b95bd3b45cf74b79a6968c3a4dcb7723f', 'json_hash': 'fc99a90ad59375669e2d419c3f1ff1780e43ee4abb6429f8dc43d23e05f1decc'} data.
31.08.2026

The certificate data changed.
Certificate changed

The computed heuristics were updated.

The algorithms property was set to {'_type': 'Set', 'elements': ['Hash DRBGA5824', 'HMAC-SHA3-384A5807', 'HMAC-SHA-1A5824', 'HMAC-SHA3-256A5807', 'HMAC-SHA2-224A5824', 'HMAC-SHA2-512A5824', 'SHA-1A5824', 'AES-CTRA5819', 'AES-CCMA5819', 'HMAC-SHA2-256A5824', 'SHA3-512A5807', 'SHA3-384A5807', 'SHA2-256A5824', 'AES-CBC-CS3A5819', 'AES-GCMA5821', 'HMAC-SHA3-224A5807', 'HMAC DRBGA5824', 'AES-XTS Testing Revision 2.0A5819', 'RSA SigVer (FIPS186-5)A5807', 'AES-KWA5819', 'AES-CMACA5819', 'SHA3-256A5807', 'Counter DRBGA5821', 'SHA2-384A5824', 'SHA2-224A5824', 'SHA3-224A5807', 'AES-CFB128A5819', 'SHA2-512A5824', 'AES-ECBA5821', 'HMAC-SHA3-512A5807', 'AES-CBCA5819', 'HMAC-SHA2-384A5824', 'AES-GMACA5819']}.
20.06.2026

The certificate data changed.
Certificate changed

The web extraction data was updated.

The certificate_pdf_url property was set to https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2025_181225_1202.pdf.
15.12.2025

The certificate was first processed.

Raw data

{
  "_type": "sec_certs.sample.fips.FIPSCertificate",
  "cert_id": 5095,
  "dgst": "f3a2520e31202df1",
  "heuristics": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
    "algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-384A5824",
        "#A5820",
        "HMAC-SHA2-512A5824",
        "#A5824",
        "#A5817",
        "#A5810",
        "#A5808",
        "#A5816",
        "AES-CBC-CS3A5819",
        "HMAC-SHA3-384A5807",
        "#A5818",
        "#A5822",
        "AES-CTRA5819",
        "#A5812",
        "#A5807",
        "#A5821",
        "HMAC-SHA2-256A5824",
        "SHA3-224A5807",
        "AES-ECBA5821",
        "HMAC-SHA3-512A5807",
        "#A5811",
        "HMAC-SHA2-224A5824",
        "RSA SigVer (FIPS186-5)A5807",
        "AES-GCMA5821",
        "#A5809",
        "SHA3-512A5807",
        "SHA-1A5824",
        "HMAC DRBGA5824",
        "SHA3-384A5807",
        "AES-XTS Testing Revision 2.0A5819",
        "Counter DRBGA5821",
        "AES-CFB128A5819",
        "HMAC-SHA-1A5824",
        "AES-CCMA5819",
        "AES-CMACA5819",
        "SHA2-384A5824",
        "SHA2-512A5824",
        "Hash DRBGA5824",
        "#A5813",
        "SHA2-224A5824",
        "SHA3-256A5807",
        "AES-CBCA5819",
        "HMAC-SHA3-256A5807",
        "AES-GMACA5819",
        "AES-KWA5819",
        "HMAC-SHA3-224A5807",
        "#A5819",
        "#A5814",
        "SHA2-256A5824",
        "#A5815",
        "#A5823"
      ]
    },
    "cpe_matches": null,
    "direct_transitive_cves": null,
    "extracted_versions": {
      "_type": "Set",
      "elements": [
        "8"
      ]
    },
    "indirect_transitive_cves": null,
    "module_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "module_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "policy_processed_references": {
      "_type": "sec_certs.sample.certificate.References",
      "directly_referenced_by": null,
      "directly_referencing": null,
      "indirectly_referenced_by": null,
      "indirectly_referencing": null
    },
    "policy_prunned_references": {
      "_type": "Set",
      "elements": []
    },
    "related_cves": null,
    "verified_cpe_matches": null
  },
  "pdf_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
    "keywords": {
      "asymmetric_crypto": {},
      "certification_process": {},
      "cipher_mode": {
        "CBC": {
          "CBC": 2
        },
        "CCM": {
          "CCM": 2
        },
        "CFB": {
          "CFB": 1
        },
        "CTR": {
          "CTR": 1
        },
        "ECB": {
          "ECB": 1
        },
        "GCM": {
          "GCM": 4
        },
        "XTS": {
          "XTS": 7
        }
      },
      "cplc_data": {},
      "crypto_engine": {},
      "crypto_library": {},
      "crypto_protocol": {
        "IKE": {
          "IKEv2": 1
        },
        "IPsec": {
          "IPsec": 6
        }
      },
      "crypto_scheme": {
        "MAC": {
          "MAC": 9
        }
      },
      "device_model": {},
      "ecc_curve": {},
      "eval_facility": {
        "atsec": {
          "atsec": 53
        }
      },
      "fips_cert_id": {},
      "fips_certlike": {
        "Certlike": {
          "AES- 192": 1,
          "AES-128": 2,
          "AES-192": 1,
          "AES-256": 2,
          "AES-CMAC 128": 1,
          "HMAC- SHA-1": 2,
          "HMAC-SHA-1": 6,
          "PKCS#1": 14,
          "RSA PKCS#1": 8,
          "SHA-1": 20,
          "SHA-3": 1,
          "SHA-512": 1,
          "SHA2- 256": 3,
          "SHA2-224": 11,
          "SHA2-256": 15,
          "SHA2-384": 11,
          "SHA2-512": 16,
          "SHA3-224": 4,
          "SHA3-256": 5,
          "SHA3-384": 4,
          "SHA3-512": 4
        }
      },
      "fips_security_level": {
        "Level": {
          "Level 1": 2
        }
      },
      "hash_function": {
        "PBKDF": {
          "PBKDF2": 2
        },
        "SHA": {
          "SHA1": {
            "SHA-1": 20
          },
          "SHA2": {
            "SHA-512": 1
          },
          "SHA3": {
            "SHA-3": 1,
            "SHA3-224": 4,
            "SHA3-256": 5,
            "SHA3-384": 4,
            "SHA3-512": 4
          }
        }
      },
      "ic_data_group": {},
      "javacard_api_const": {},
      "javacard_packages": {},
      "javacard_version": {},
      "os_name": {},
      "pq_crypto": {},
      "randomness": {
        "PRNG": {
          "DRBG": 21
        },
        "RNG": {
          "RBG": 11,
          "RNG": 1
        }
      },
      "side_channel_analysis": {},
      "standard_id": {
        "FIPS": {
          "FIPS 140-3": 55,
          "FIPS 180-4": 6,
          "FIPS 186-5": 2,
          "FIPS 197": 1,
          "FIPS 198-1": 10,
          "FIPS 202": 5,
          "FIPS PUB 140-3": 1,
          "FIPS186-5": 5
        },
        "ISO": {
          "ISO/IEC 19790": 2,
          "ISO/IEC 24759": 2
        },
        "NIST": {
          "SP 800-38A": 6,
          "SP 800-38B": 2,
          "SP 800-38C": 2,
          "SP 800-38D": 4,
          "SP 800-38E": 3,
          "SP 800-38F": 2,
          "SP 800-90A": 3,
          "SP 800-90B": 1
        },
        "PKCS": {
          "PKCS#1": 11
        },
        "RFC": {
          "RFC 4106": 1,
          "RFC 7296": 1
        }
      },
      "symmetric_crypto": {
        "AES_competition": {
          "AES": {
            "AES": 25,
            "AES-": 7,
            "AES-128": 2,
            "AES-192": 1,
            "AES-256": 2
          },
          "CAST": {
            "CAST": 93
          }
        },
        "constructions": {
          "MAC": {
            "CMAC": 2,
            "HMAC": 13
          }
        }
      },
      "tee_name": {
        "AMD": {
          "PSP": 1
        }
      },
      "tls_cipher_suite": {},
      "vendor": {},
      "vulnerability": {}
    },
    "module_algorithms": {
      "_type": "Set",
      "elements": [
        "HMAC-SHA2-384A5824",
        "HMAC-SHA2-512A5824",
        "SHA2-256A5824",
        "AES-CBC-CS3A5819",
        "HMAC-SHA3-384A5807",
        "AES-CTRA5819",
        "HMAC-SHA2-256A5824",
        "SHA3-224A5807",
        "AES-ECBA5821",
        "HMAC-SHA3-512A5807",
        "HMAC-SHA2-224A5824",
        "RSA SigVer (FIPS186-5)A5807",
        "AES-GCMA5821",
        "SHA3-512A5807",
        "SHA-1A5824",
        "HMAC DRBGA5824",
        "AES-XTS Testing Revision 2.0A5819",
        "Counter DRBGA5821",
        "AES-CFB128A5819",
        "HMAC-SHA-1A5824",
        "AES-CCMA5819",
        "AES-CMACA5819",
        "SHA2-384A5824",
        "SHA2-512A5824",
        "Hash DRBGA5824",
        "SHA2-224A5824",
        "SHA3-256A5807",
        "AES-CBCA5819",
        "HMAC-SHA3-256A5807",
        "AES-GMACA5819",
        "AES-KWA5819",
        "HMAC-SHA3-224A5807",
        "SHA3-384A5807"
      ]
    },
    "policy_algorithms": {
      "_type": "Set",
      "elements": [
        "#A5807",
        "#A5820",
        "#A5821",
        "#A5822",
        "#A5813",
        "#A5817",
        "#A5811",
        "#A5810",
        "#A5808",
        "#A5824",
        "#A5809",
        "#A5816",
        "#A5819",
        "#A5814",
        "#A5818",
        "#A5815",
        "#A5812",
        "#A5823"
      ]
    },
    "policy_metadata": {
      "/Author": "",
      "/Comments": "",
      "/Company": "",
      "/CreationDate": "D:20251121064023-05\u002700\u0027",
      "/Creator": "Acrobat PDFMaker 25 for Word",
      "/Keywords": "",
      "/ModDate": "D:20251121064221-05\u002700\u0027",
      "/Producer": "Adobe PDF Library 25.1.51",
      "/SourceModified": "",
      "/Subject": "",
      "/Title": "",
      "pdf_file_size_bytes": 619692,
      "pdf_hyperlinks": {
        "_type": "Set",
        "elements": [
          "https://doi.org/10.6028/NIST.SP.800-131Ar2",
          "https://doi.org/10.6028/NIST.SP.800-38B",
          "https://doi.org/10.6028/NIST.FIPS.140-3",
          "https://doi.org/10.6028/NIST.SP.800-38A",
          "https://doi.org/10.6028/NIST.SP.800-38D",
          "https://doi.org/10.6028/NIST.SP.800-38A-Add",
          "https://doi.org/10.6028/NIST.SP.800-140Br1",
          "https://doi.org/10.6028/NIST.SP.800-90Ar1",
          "https://doi.org/10.17487/RFC8017",
          "https://doi.org/10.6028/NIST.FIPS.180-4",
          "https://doi.org/10.6028/NIST.SP.800-38C",
          "https://doi.org/10.6028/NIST.FIPS.202",
          "https://doi.org/10.6028/NIST.FIPS.197-upd1",
          "https://doi.org/10.6028/NIST.SP.800-90B",
          "https://doi.org/10.6028/NIST.FIPS.186-5",
          "https://csrc.nist.gov/CSRC/media/Projects/cryptographic-module-validation-program/documents/fips%20140-3/FIPS%20140-3%20IG.pdf",
          "https://doi.org/10.6028/NIST.SP.800-38E",
          "https://doi.org/10.6028/NIST.SP.800-38F",
          "https://doi.org/10.6028/NIST.FIPS.198-1"
        ]
      },
      "pdf_is_encrypted": false,
      "pdf_number_of_pages": 51
    }
  },
  "state": {
    "_type": "sec_certs.sample.fips.InternalState",
    "module": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": null,
      "source_hash": null,
      "txt_hash": null
    },
    "policy": {
      "_type": "sec_certs.sample.document_state.DocumentState",
      "convert_ok": true,
      "download_ok": true,
      "extract_ok": true,
      "json_hash": "fc99a90ad59375669e2d419c3f1ff1780e43ee4abb6429f8dc43d23e05f1decc",
      "source_hash": "e32189097f1746a1a0f7756bf3dede07f69c86a6e8f69eccea2dd4b4bfc2e17b",
      "txt_hash": "29610bd7ff2c2d52d909fb6e4033ef7b95bd3b45cf74b79a6968c3a4dcb7723f"
    }
  },
  "web_data": {
    "_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
    "caveat": "When operated in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.",
    "certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/November 2025_181225_1202.pdf",
    "date_sunset": "2030-11-23",
    "description": "The Rocky Linux 8 Kernel Cryptographic API provides a C language API for use by other (kernel space and user space) processes that require cryptographic functionality.",
    "embodiment": "Multi-Chip Stand Alone",
    "exceptions": [
      "Physical security: N/A",
      "Non-invasive security: N/A",
      "Mitigation of other attacks: N/A"
    ],
    "fw_versions": null,
    "historical_reason": null,
    "hw_versions": null,
    "level": 1,
    "mentioned_certs": {},
    "module_name": "Rocky Linux 8 Kernel Cryptographic API",
    "module_type": "Software",
    "revoked_link": null,
    "revoked_reason": null,
    "standard": "FIPS 140-3",
    "status": "active",
    "sw_versions": null,
    "tested_conf": null,
    "validation_history": [
      {
        "_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
        "date": "2025-11-24",
        "lab": "atsec information security corporation",
        "validation_type": "Initial"
      }
    ],
    "vendor": "Ctrl IQ, Inc.",
    "vendor_url": "https://ciq.com/"
  }
}

Sections

Rocky Linux 8 Kernel Cryptographic API

Certificate details

Security policy

Extracted keywords

Symmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

Trusted Execution Environments

Security level

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Certificate changed

Certificate changed

Certificate changed

New certificate

Raw data

Sections

Rocky Linux 8 Kernel Cryptographic API

Certificate details

Security policy

Extracted keywords

Cryptography

Symmetric Algorithms

Hash functions

Schemes

Protocols

Randomness

Block cipher modes

Device

Trusted Execution Environments

Security

Security level

Other

Standards

File metadata

Automated analysis

Automated inference - use with caution

Cross-references

Processing updates

Raw data

Toggle raw data