Module Name
Oracle Linux 8 NSS Cryptographic Module
Caveat
When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Security Level Exceptions
- Roles, Services, and Authentication: Level 2
- Physical Security: N/A
- Design Assurance: Level 3
Embodiment
Multi-Chip Stand Alone
Description
Oracle Linux 8 NSS Cryptographic Module is a set of libraries designed to support cross-platform development of security-enabled applications.
Tested Configuration(s)
- Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 with PAA
- Oracle Linux 8.4 64 bit running on Oracle Server A1-2C with Ampere(R) Altra(R) Neoverse-N1 without PAA (single-user mode)
- Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 with PAA
- Oracle Linux 8.4 64 bit running on Oracle Server E1-2C with AMD EPYC(TM) 7551 without PAA
- Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M with PAA
- Oracle Linux 8.4 64 bit running on Oracle Server X7-2C with Intel(R) Xeon(R) Platinum 8167M without PAA
Approved Algorithms
| AES |
Certs. #A1623, #A1624, #A1625, #A1626, #A1627 and #A1629 |
| CKG |
vendor affirmed |
| CVL |
Certs. #A1623 and #A1628 |
| DRBG |
Cert. #A1623 |
| DSA |
Cert. #A1623 |
| ECDSA |
Cert. #A1623 |
| ENT |
NP |
| HMAC |
Cert. #A1623 |
| KAS-SSC |
Cert. #A1623 |
| KBKDF |
Cert. #A1623 |
| KDA |
Cert. #A1622 |
| KTS |
AES Certs. #A1623, #A1624, #A1625 and #A1627; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS |
AES Certs. #A1623 and #A1624 and HMAC Cert. #A1623; key establishment methodology provides 128 or 256 bits of encryption strength |
| KTS |
Triple-DES Cert. #A1623 and HMAC Cert. #A1623; key establishment methodology provides 112 bits of encryption strength |
| KTS-RSA |
Cert. #A1623; key establishment methodology provides between 112 and 200 bits of encryption strength |
| PBKDF |
Cert. #A1623 |
| RSA |
Cert. #A1623 |
| SHS |
Cert. #A1623 |
| Triple-DES |
Cert. #A1623 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
R8-8.4.0
