Red Hat Enterprise Linux libgcrypt Cryptographic Module v4.0 [1] and Red Hat Enterprise Linux libgcrypt Cryptographic Module v5.0 [2]
Red Hat®, Inc. - FIPS 140 #2657
The libgcrypt FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the libgcrypt library delivered with RHEL 7.1 [1] and RHEL 7.4 [2].
Key facts
- Scheme
- FIPS 140
- Certificate
- 2657
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- June 13, 2016
- Versions
- 4.0 [1], 5.0 [2]
- Caveat
- When operated in FIPS mode
Algorithms
- AES
- DRBG
- DSA
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2018-14667CRITICAL 9.8KEVEPSS 74.2%
- CVE-2014-7169CRITICAL 9.8KEVEPSS 99.9%
- CVE-2014-6271CRITICAL 9.8KEVEPSS 100.0%
- CVE-2010-3904HIGH 7.8KEVEPSS 15.9%
- CVE-2016-9079HIGH 7.5KEVEPSS 87.5%
- CVE-2015-5477HIGH 7.5KEVEPSS 99.4%
- CVE-2015-3246HIGH 7.4KEVEPSS 8.5%
- CVE-2015-0408HIGH 10.0EPSS 6.9%
- CVE-2014-6601HIGH 10.0EPSS 6.9%
- CVE-2009-0846HIGH 10.0EPSS 8.9%
- CVE-2000-1221HIGH 10.0EPSS 16.7%
- CVE-2000-1220HIGH 10.0EPSS 14.2%
- CVE-2000-1010HIGH 10.0EPSS 4.6%
- CVE-2000-0844HIGH 10.0EPSS 15.6%
- CVE-2000-0017HIGH 10.0EPSS 8.9%
- CVE-1999-1299HIGH 10.0EPSS 1.8%
- CVE-1999-0894HIGH 10.0EPSS 1.9%
- CVE-1999-0798HIGH 10.0EPSS 1.6%
- CVE-1999-0368HIGH 10.0EPSS 39.8%
- CVE-1999-0192HIGH 10.0EPSS 10.0%
- CVE-1999-0042HIGH 10.0EPSS 12.7%
- CVE-1999-0009HIGH 10.0EPSS 29.0%
- CVE-1999-0002HIGH 10.0EPSS 27.9%
- CVE-2017-7793CRITICAL 9.8EPSS 2.3%
- CVE-2017-7792CRITICAL 9.8EPSS 3.2%
- CVE-2017-7786CRITICAL 9.8EPSS 4.1%
- CVE-2017-7785CRITICAL 9.8EPSS 4.1%
- CVE-2017-7784CRITICAL 9.8EPSS 3.6%
- CVE-2017-5410CRITICAL 9.8EPSS 3.4%
- CVE-2017-5404CRITICAL 9.8EPSS 17.3%
- CVE-2017-5402CRITICAL 9.8EPSS 2.9%
- CVE-2017-5401CRITICAL 9.8EPSS 3.0%
- CVE-2017-5396CRITICAL 9.8EPSS 4.1%
- CVE-2017-5390CRITICAL 9.8EPSS 3.9%
- CVE-2017-5380CRITICAL 9.8EPSS 3.2%
- CVE-2017-5376CRITICAL 9.8EPSS 3.2%
- CVE-2016-9899CRITICAL 9.8EPSS 21.1%
- CVE-2016-9898CRITICAL 9.8EPSS 3.5%
- CVE-2016-9893CRITICAL 9.8EPSS 2.5%
- CVE-2015-8980CRITICAL 9.8EPSS 6.7%
- CVE-2014-4650CRITICAL 9.8EPSS 24.7%
- CVE-2011-2897CRITICAL 9.8EPSS 1.9%
- CVE-2011-2717CRITICAL 9.8EPSS 3.9%
- CVE-2010-2941CRITICAL 9.8EPSS 6.4%
- CVE-1999-0043CRITICAL 9.8EPSS 44.6%
- CVE-1999-0704HIGH 9.3EPSS 4.5%
- CVE-2011-3188CRITICAL 9.1EPSS 5.0%
- CVE-2011-3631HIGH 8.8EPSS 2.7%
- CVE-2011-3630HIGH 8.8EPSS 2.7%
- CVE-2011-3191HIGH 8.8EPSS 1.1%
and 145 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain