Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Cryptographic Module Validation Program

Certificate #2564

Details

Module Name
Red Hat Enterprise Linux 6.6 NSS Module
Standard
FIPS 140-2
Status
Active
Sunset Date
2/16/2021
Validation Dates
2/17/2016
Overall Level
2
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/
Tested Configuration(s)
  • Red Hat Enterprise Linux 6.6 running on ProLiant DL380p Gen8 with PAA
  • Red Hat Enterprise Linux 6.6 running on ProLiant DL380p Gen8 without PAA
  • Red Hat Enterprise Linux 6.6 running on System x3500 M4 with PAA
  • Red Hat Enterprise Linux 6.6 running on System x3500 M4 without PAA
FIPS Algorithms
AES Certs. #3076, #3077, #3078, #3079, #3080, #3081, #3082, #3083, #3084, #3085, #3086 and #3087
CVL Certs. #368, #369, #370 and #371
DRBG Certs. #603, #604, #605 and #606
DSA Certs. #892, #893, #894 and #895
ECDSA Certs. #554, #555, #556 and #557
HMAC Certs. #1933, #1934, #1935 and #1936
RSA Certs. #1577, #1578, #1579 and #1580
SHS Certs. #2549, #2550, #2551 and #2552
Triple-DES Certs. #1776, #1777, #1778 and #1779
Other Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; MD2; RC2; Camellia; J-PAKE; DES; SEED; Triple-DES (Certs. #1776, #1777, #1778 and #1779, key wrapping; key establishment methodology provides 112 bits of encryption strength); AES (Certs. #3076, #3077, #3078, #3079, #3080, #3081, #3082, #3083, #3084, #3085, #3086 and #3087, key wrapping; key establishment methodology provides between 128 and 256 bits of encryption strength); CTS block chaining mode
Software Versions
3.14.3-22

Vendor

Red Hat®, Inc.
100 East Davie Street
Raleigh, NC 27601
USA

Steve Grubb
sgrubb@redhat.com
Phone: 978-392-1000
Fax: 978-392-1001
Jaroslav Reznik
jreznik@redhat.com
Phone: +420 532 294 111
Fax: +420 541 426 177

Lab

atsec information security corporation
NVLAP Code: 200658-0