Module Name
Cloudera Cryptographic Module for Libgcrypt
Historical Reason
Moved to historical list due to sunsetting
Caveat
When installed and configured per Security Policy section 3.1 and operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. This validation entry is a non-security-relevant modification to Cert. #3604
Security Level Exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Embodiment
Multi-Chip Stand Alone
Description
The Cloudera Cryptographic Module for Libgcrypt is a general purpose FIPS 140-2 Validated Cryptographic library for use with Cloudera Data Platform (CDP) products.
Tested Configuration(s)
- Oracle Linux 7.6 64 bit running on an Oracle Server X7-2 with an Intel(R) Xeon(R) Silver 4114
- Oracle Linux 7.6 64 bit running on an Oracle X7-2 Server with an AMD(R) EPYC(R) 7551 (single-user mode)
Approved Algorithms
AES |
Cert. #C709 |
CKG |
vendor affirmed |
DRBG |
Cert. #C709 |
DSA |
Cert. #C709 |
HMAC |
Cert. #C709 |
RSA |
Cert. #C709 |
SHS |
Cert. #C709 |
Triple-DES |
Cert. #C709 |
Allowed Algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)