Module Name
SUSE Rancher Kubernetes Cryptographic Library
Historical Reason
Moved to historical list due to sunsetting
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Security Level Exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Embodiment
Multi-Chip Stand Alone
Description
A software library that contains cryptography to serve SUSE’s Rancher Kubernetes Engine and its ecosystem of supported cloud-native tools written in the Go programming language.
Tested Configuration(s)
- Red Hat Enterprise Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA
- Red Hat Enterprise Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA
- Red Hat Enterprise Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA
- Red Hat Enterprise Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA (single-user mode)
- SUSE Liberty Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA
- SUSE Liberty Linux 7.9 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA
- SUSE Liberty Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R with PAA
- SUSE Liberty Linux 8.8 running on Dell PowerEdge R440 with Intel® Xeon® Silver 4214R without PAA
Approved Algorithms
| AES |
Cert. #A5181 |
| CVL |
Cert. #A5181 |
| DRBG |
Cert. #A5181 |
| ECDSA |
Cert. #A5181 |
| HMAC |
Cert. #A5181 |
| KAS |
KAS-SSC Cert. #A5181, CVL Cert. #A5181 |
| KAS-SSC |
Cert. #A5181 |
| KTS |
AES Cert #A5181; key establishment methodology provides between 128 and 256 bits of encryption strength |
| RSA |
Cert. #A5181 |
| SHS |
Cert. #A5181 |
| Triple-DES |
Cert. #A5181 |
Allowed Algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Software Versions
853ca1ea1168dff08011e5d42d94609cc0ca2e27