U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #3757

Details

Module Name
Oracle Linux 7 GnuTLS Cryptographic Module
Standard
FIPS 140-2
Status
Active
Sunset Date
12/6/2025
Validation Dates
12/07/2020;01/15/2021;10/18/2021
Overall Level
1
Caveat
When operated in FIPS mode. When installed, initialized and configured as specified in Section 10 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
  • Physical Security: N/A
  • Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Oracle Linux 7 GnuTLS Cryptographic Module is a set of libraries implementing general purpose cryptographic algorithms and network protocols.
Tested Configuration(s)
  • Oracle Linux 7.6 64 bit running on an Oracle X7-2 Server with AMD® EPYC® 7551 without PAA (single user mode)
  • Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with a Intel(R) Xeon(R) Silver 4114 with PAA
  • Oracle Linux 7.6 64 bit running on Oracle Server X7-2 with a Intel(R) Xeon(R) Silver 4114 without PAA Oracle Linux 7.6 64 bit running on an Oracle X7-2 Server with AMD® EPYC® 7551 with PAA
FIPS Algorithms
AES Certs. #C929, #C1001, #C1018 and #C1019
CKG vendor affirmed
CVL Cert. #C1018
DRBG Cert. #C1018
DSA Cert. #C1018
ECDSA Cert. #C1018
HMAC Cert. #C1018
KTS AES Certs. #C1001, #C1018 and #C1019; key establishment methodology provides 128 or 256 bits of encryption strength
KTS AES Certs. #C1001, #C1018 and #C1019 and HMAC Cert. #C1018; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS Triple-DES Cert. #C1018 and HMAC Cert. #C1018; key establishment methodology provides 112 bits of encryption strength
RSA Cert. #C1018
SHS Certs. #C1018 and #C1019
Triple-DES Cert. #C1018
Allowed Algorithms
Diffie-Hellman (CVL Cert. #C1018 with CVL Cert. #C1018, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); EC Diffie-Hellman (CVL Cert. #C1018 with CVL Cert. #C1018, key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength);
Software Versions
R7-4.0.0

Vendor

Oracle Corporation
500 Oracle Parkway
Redwood Shores, CA 94065
USA

Security Evaluation Team
seceval_us@oracle.com
Phone: N/A
Fax: N/A

Lab

ACUMEN SECURITY, LLC
NVLAP Code: 201029-0