Module Name
SUSE Linux Enterprise Server libgcrypt Cryptographic Module
Historical Reason
Moved to historical list due to sunsetting
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in section 9 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy.
Security Level Exceptions
Embodiment
Multi-Chip Stand Alone
Description
SUSE Libgcrypt is a general purpose cryptographic library based on the code from GnuPG.
Tested Configuration(s)
- SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 with PAA
- SUSE Linux Enterprise Server 15 SP2 running on Dell EMC PowerEdge 640 with Intel Cascade Lake Xeon Gold 6234 without PAA
- SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 with PAA
- SUSE Linux Enterprise Server 15 SP2 running on Gigabyte R181-T90 with Cavium ThunderX2 CN9975 ARMv8 without PAA (single-user mode)
- SUSE Linux Enterprise Server 15 SP2 running on IBM System Z/15 with IBM z15
Approved Algorithms
| AES |
Certs. #A482, #A485, #A486 and #A1152 |
| DRBG |
Certs. #A482, #A485, #A486, #A487 and #A1152 |
| DSA |
Certs. #A482, #A485, #A486, #A487 and #A1152 |
| ECDSA |
Certs. #A482, #A485, #A486, #A487 and #A1152 |
| HMAC |
Certs. #A482, #A484, #A485, #A486, #A487, #A488 and #A1152 |
| KTS |
AES Certs. #A482, #A485, #A486 and #A1152; key establishment methodology provides between 128 and 256 bits of encryption strength |
| PBKDF |
vendor affirmed |
| RSA |
Certs. #A482, #A485, #A486, #A487 and #A1152 |
| SHA-3 |
Certs. #A482, #A487 and #A1152 |
| SHS |
Certs. #A482, #A484, #A485, #A486, #A488 and #A1152 |
| Triple-DES |
Cert. #A482 |
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
