Cryptographic Module Validation Program CMVP

Certificate #3582

Details

Module Name
Oracle Linux 7 OpenSSH Client Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
12/11/2024
Validation Dates
12/12/2019;05/06/2020
Overall Level
1
Caveat
When operated in FIPS mode with module Oracle Linux OpenSSL Cryptographic Module validated to FIPS 140-2 under Cert. #3474 operating in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Oracle Linux OpenSSH Cryptographic Module is a software module that supplies cryptographic support for the SSH protocol.
Tested Configuration(s)
  • Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with an Intel(R) Xeon(R) Silver 4114 with PAA
  • Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with an Intel(R) Xeon(R) Silver 4114 without PAA
  • Oracle Linux 7.6 64 bit running on Oracle X7-2 Server with AMD® EPYC® 7551 with PAA
  • Oracle Linux 7.6 64 bit running on Oracle X7-2 Server with AMD® EPYC® 7551 without PAA (single user mode)
FIPS Algorithms
AES Certs. #C422, #C423 and #C429
CVL Certs. #C429 and #C611
DRBG Certs. #C422, #C423 and #C429
ECDSA Cert. #C429
HMAC Certs. #C422, #C423 and #C429
RSA Cert. #C429
SHS Certs. #C422, #C423 and #C429
Triple-DES Cert. #C429
Allowed Algorithms
Diffie-Hellman (CVL Cert #C429 with CVL Cert #C611, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C429 with CVL Cert #C611, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG
Software Versions
R7-4.0.0

Vendor

Oracle Corporation
500 Oracle Parkway
Redwood Shores, CA 94065
USA

Chris Brych
chris.brych@oracle.com
Phone: +1 613.216.3078
Fax: n/a

Lab

ACUMEN SECURITY, LLC
NVLAP Code: 201029-0