Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Cryptographic Algorithm Validation Program

Description
The OpenSSL FIPS Object Module is a full featured general purpose cryptographic library that is distributed in source code form under an open source license. It can be downloaded from www.openssl.org/source/.
Version
2.0.11
Type
SOFTWARE
Vendor
OpenSSL Software Foundation, Inc.
1829 Mount Ephraim Road
Adamstown, MD 27101
USA
Contacts
Steve Marquess
info@openssl.com
301‐874‐2571

Validations

Number
Date
Operating Environments
Algorithm Capabilities
DRBG 845
7/2/2015
  • AIX 6.1 32-bit on IBM POWER 7 (PPC)
  • AIX 6.1 32-bit on IBM POWER 7 (PPC) with optimizations
  • AIX 6.1 64-bit on IBM POWER 7 (PPC)
  • AIX 6.1 64-bit on IBM POWER 7 (PPC) with optimizations
  • AIX 7.1 32-bit on IBM POWER 7 (PPC)
  • AIX 7.1 64-bit on IBM POWER 7 (PPC)
  • DataGravity Discovery Series OS V2.0 on Intel Xeon E5-2420 (x86) with AES-NI
  • DataGravity Discovery Series OS V2.0 on Intel Xeon E5-2420 (x86) without AES-NI
  • Linux 3.10 32-bit on Intel Atom E3845 (x86) with AES-NI optimizations
  • Linux 3.10 32-bit on Intel Atom E3845 (x86) without AES-NI optimizations
  • Ubuntu 12.04 on Intel Xeon E5-2430L (x86) with AES-NI optimizations
  • Ubuntu 12.04 on Intel Xeon E5-2430L (x86) without optimizations
  • VxWorks 6.7 on Intel Core 2 Duo (x86)
  • Counter DRBG
    • Prediction Resistance: Yes, No
      • Capabilities:
        • Mode: AES-128
        • Derivation Function Enabled: No
      • Capabilities:
        • Mode: AES-128
        • Derivation Function Enabled: Yes
      • Capabilities:
        • Mode: AES-192
        • Derivation Function Enabled: No
      • Capabilities:
        • Mode: AES-192
        • Derivation Function Enabled: Yes
      • Capabilities:
        • Mode: AES-256
        • Derivation Function Enabled: No
      • Capabilities:
        • Mode: AES-256
        • Derivation Function Enabled: Yes
    Prerequisites:
  • Hash DRBG
    • Prediction Resistance: Yes, No
      • Capabilities:
        • Mode: SHA-1
      • Capabilities:
        • Mode: SHA2-224
      • Capabilities:
        • Mode: SHA2-256
      • Capabilities:
        • Mode: SHA2-384
      • Capabilities:
        • Mode: SHA2-512
    Prerequisites:
  • HMAC DRBG
    • Prediction Resistance: Yes, No
      • Capabilities:
        • Mode: SHA-1
      • Capabilities:
        • Mode: SHA2-224
      • Capabilities:
        • Mode: SHA2-256
      • Capabilities:
        • Mode: SHA2-384
      • Capabilities:
        • Mode: SHA2-512
    Prerequisites: