Module Name
Oracle Linux 7 NSS Cryptographic Module
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
Embodiment
Multi-Chip Stand Alone
Description
Oracle Linux 7 NSS Cryptographic Module is a set of libraries designed to support cross-platform development of security-enabled applications.
Tested Configuration(s)
- Oracle Linux 7.8 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 with PAA
- Oracle Linux 7.8 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 without PAA (single-user mode)
- Oracle Linux 7.8 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
- Oracle Linux 7.8 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
- Oracle Linux 7.8 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
- Oracle Linux 7.8 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA
Approved Algorithms
| AES |
Certs. #A1059, #A1060, #A1072, #A1097, #A1179, #A1183, #A2579 and #A2580 |
| CKG |
vendor affirmed |
| CVL |
Certs. #A1061 and #A1179 |
| DRBG |
Cert. #A1179 |
| DSA |
Cert. #A1179 |
| ECDSA |
Cert. #A1179 |
| ENT |
NP |
| HMAC |
Cert. #A1179 |
| KAS |
KAS-SSC Cert. #A1179, CVL Cert. #A1179 |
| KAS |
KAS-SSC Cert. #A1179, KDA Cert. #A1071 |
| KAS-SSC |
Cert. #A1179 |
| KDA |
Cert. #A1071 |
| KTS |
AES Certs. #A1059, #A1072, #A1097, #A1179, #A2579 and #A2580; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Certs. #A1097, #A1179 and #A2580 and HMAC Cert. #A1179; key establishment methodology provides 128 or 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #A1179 and HMAC Cert. #A1179; key establishment methodology provides 112 bits of encryption strength |
| PBKDF |
Cert. #A1179 |
| RSA |
Cert. #A1179 |
| SHS |
Cert. #A1179 |
| Triple-DES |
Cert. #A1179 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R7-7.8.0
