Module Name
Ubuntu 18.04 OpenSSL Cryptographic Module
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in Sections 9.1 of the Security Policy
Security Level Exceptions
Embodiment
Multi-Chip Stand Alone
Description
OpenSSL is an open-source library of various cryptographic algorithms written mainly in C.
Tested Configuration(s)
- Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 with PAI
- Ubuntu 18.04 LTS 64-bit on IBM z/VM running on IBM z/14 with z14 without PAI (single-user mode)
- Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 with PAA
- Ubuntu 18.04 LTS 64-bit running on Supermicro SYS-5018R-WR with Intel Xeon CPU E5-2620v3 without PAA
Approved Algorithms
| AES |
Certs. #C79, #C670, #C671, #C672, #C673, #C674, #C675, #C676, #C677, #C678, #C679, #C680, #C687, #C688, #C689, #C690, #C691 and #C692 |
| CVL |
Certs. #C682, #C683, #C684, #C685, #C687 and #C688 |
| DRBG |
Certs. #C670, #C673, #C677, #C687 and #C688 |
| DSA |
Certs. #C682, #C683, #C684, #C685, #C687 and #C688 |
| ECDSA |
Certs. #C682, #C683, #C684, #C685, #C687 and #C688 |
| HMAC |
Certs. #C682, #C683, #C684, #C685, #C687 and #C688 |
| KTS |
AES Certs. #C673, #C687 and #C688; key establishment methodology provides between 128 and 256 bits of encryption strength |
| RSA |
Certs. #C682, #C683, #C684, #C685, #C687 and #C688 |
| SHA-3 |
Certs. #C682, #C687 and #C688 |
| SHS |
Certs. #C79, #C682, #C683, #C684, #C685, #C687 and #C688 |
| Triple-DES |
Certs. #C669 and #C686 |
Allowed Algorithms
Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688 with CVL Certs. #C682, #C683, #C684, #C685, #C687 and #C688, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
