Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Cryptographic Module Validation Program CMVP

Certificate #3348

Details

Module Name
Oracle Linux Unbreakable Enterprise Kernel (UEK) Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
1/1/2024
Validation Dates
01/02/2019
Overall Level
1
Caveat
When operated in FIPS mode with module Oracle Linux NSS Cryptographic Module validated to FIPS 140-2 under Certs. #3111[1] and #3143[2] operating in FIPS mode. The module generates random strings whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Oracle Linux Unbreakable Enterprise Kernel Cryptographic Module provides general-purpose cryptographic services to the remainder of the Linux kernel.
Tested Configuration(s)
  • Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 with PAA [1]
  • Oracle Linux 6.9 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 without PAA [1]
  • Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 with PAA [1]
  • Oracle Linux 6.9 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 without PAA [1]
  • Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 with PAA [2]
  • Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with Intel(R) Xeon(R) CPU E5-2699 v4 without PAA [2]
  • Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 with PAA [2]
  • Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with Intel(R) Xeon(R) Silver 4114 without PAA [2] (single-user mode)
FIPS Algorithms
AES Certs. #5398, #5400, #5401, #5402, #5403, #5423, #5424, #5425, #5614, #5615, #5617, #5618, #5619, #5620, #5621, #5622, #5623, #5624, #5625, #5626, #5627, #5628, #5629, #5630, #5631, #5632, #5633, #5634, #5635, #5636, #5637 and #5638
DRBG Certs. #2092, #2093, #2097, #2098, #2099, #2100, #2101, #2254, #2255, #2256, #2257, #2258, #2259, #2260, #2261, #2262, #2263, #2264, #2265, #2266, #2267, #2268, #2269, #2270, #2271, #2272, #2273 and #2274
HMAC Certs. #3077, #3184, #3574, #3575, #3577, #3578, #3628, #3744, #3745, #3746, #3747, #3748, #3749, #3750, #3751, #3752, #3753, #3754, #3755 and #3767
RSA Certs. #2886, #2887, #2888, #2889, #3021, #3022, #3023, #3024, #3025, #3026, #3027, #3028, #3029, #3030, #3031 and #3032
SHS Certs. #4330, #4331, #4336, #4337, #4510, #4511, #4512, #4513, #4514, #4515, #4516, #4517, #4518, #4519, #4520 and #4521
Triple-DES Certs. #2721, #2728, #2826, #2827, #2828, #2829, #2830 and #2831
Allowed Algorithms
NDRNG
Software Versions
R6-1.0.0[1] and R7-2.0.0[2]

Vendor

Oracle Corporation
500 Oracle Parkway
Redwood Shores, CA 94065
USA

Honglin Su
honglin.su@oracle.com
Phone: +1 650-607-0970

Lab

ATSEC INFORMATION SECURITY CORP
NVLAP Code: 200658-0