Module Name
Oracle Linux 7 GnuTLS Cryptographic Module
Historical Reason
SP 800-56Arev3 transition
Transitional Note
Pending SP 800-56Arev3 transition revalidation
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 7 GnuTLS Cryptographic Module is a set of libraries implementing general purpose cryptographic algorithms and network protocols.
Tested Configuration(s)
- Oracle Linux 7.3 64 bit running on Oracle Server X6-2 with PAA
- Oracle Linux 7.3 64 bit running on Oracle Server X6-2 without PAA
- Oracle Linux 7.3 64 bit running on Oracle Server X7-2 with PAA
- Oracle Linux 7.3 64 bit running on Oracle Server X7-2 without PAA (single-user mode)
Approved Algorithms
| AES |
Certs. #5038, #5042, #5043, #5080, #5858, #5862, #5863 and #5864 |
| CVL |
Certs. #1592, #1593, #2113 and #2114 |
| DRBG |
Certs. #1859 and #2437 |
| DSA |
Certs. #1324 and #1480 |
| ECDSA |
Certs. #1297 and #1566 |
| HMAC |
Certs. #3360 and #3860 |
| KTS |
AES Certs. #5038, #5043, #5080, #5862, #5863 and #5864; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Certs. #5038, #5043, #5080, #5862, #5863 and #5864 and HMAC Certs. #3360 and #3860; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
Triple-DES Certs. #2601 and #2863 and HMAC Certs. #3360 and #3860; key establishment methodology provides 112 bits of encryption strength |
| RSA |
Certs. #2727 and #3083 |
| SHS |
Certs. #4105, #4134, #4634 and #4635 |
| Triple-DES |
Certs. #2601 and #2863 |
Allowed Algorithms
Diffie-Hellman (CVL Certs. #1592 and #2113 with CVL Certs. #1593 and #2114, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #1592 and #2113 with CVL Certs. #1593 and #2114, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R7-2.0.0
