Red Hat Enterprise Linux Kernel Crypto API Cryptographic Module v4.0
Red Hat®, Inc. - FIPS 140 #2742
The Linux kernel Crypto API implemented in Red Hat Enterprise Linux 7.1 provides services operating inside the Linux kernel with various ciphers, message digests and an approved random number generator.
Key facts
- Scheme
- FIPS 140
- Certificate
- 2742
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- September 12, 2016
- Versions
- 4.0
- Caveat
- When operated in FIPS mode with modules Red Hat Enterprise Linux NSS Cryptographic Module v4.0 validated to FIPS 140-2 under Cert. #2711 operating in FIPS mode and Red Hat Enterprise Linux Libreswan Cryptographic Module v4.0 validated to FIPS 140-2 under Cert. #2721 operating in FIPS mode. The module generates random strings whose strengths are modified by available entropy
Algorithms
- AES
- DRBG
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2014-7169CRITICAL 9.8KEVEPSS 99.9%
- CVE-2014-6271CRITICAL 9.8KEVEPSS 100.0%
- CVE-2009-0846HIGH 10.0EPSS 8.9%
- CVE-2000-1220HIGH 10.0EPSS 14.2%
- CVE-2000-0017HIGH 10.0EPSS 8.9%
- CVE-1999-1299HIGH 10.0EPSS 1.8%
- CVE-1999-0894HIGH 10.0EPSS 1.9%
- CVE-1999-0798HIGH 10.0EPSS 1.6%
- CVE-1999-0192HIGH 10.0EPSS 10.0%
- CVE-1999-0042HIGH 10.0EPSS 12.7%
- CVE-1999-0009HIGH 10.0EPSS 29.0%
- CVE-1999-0002HIGH 10.0EPSS 27.9%
- CVE-2011-2897CRITICAL 9.8EPSS 1.9%
- CVE-2011-2717CRITICAL 9.8EPSS 3.9%
- CVE-1999-0043CRITICAL 9.8EPSS 44.6%
- CVE-2011-3188CRITICAL 9.1EPSS 5.0%
- CVE-2011-3191HIGH 8.8EPSS 1.1%
- CVE-2012-1097HIGH 7.8EPSS 0.4%
- CVE-2011-2525HIGH 7.8EPSS 0.5%
- CVE-2011-1145HIGH 7.8EPSS 0.4%
- CVE-2011-4967HIGH 7.5EPSS 2.7%
- CVE-2011-2699HIGH 7.5EPSS 5.6%
- CVE-2010-4805HIGH 7.5EPSS 3.6%
- CVE-2010-4251HIGH 7.5EPSS 3.9%
- CVE-2010-0013HIGH 7.5EPSS 12.5%
- CVE-2009-1837HIGH 7.5EPSS 4.3%
- CVE-2006-5170HIGH 7.5EPSS 4.1%
- CVE-2001-0889HIGH 7.5EPSS 6.4%
- CVE-2001-0690HIGH 7.5EPSS 11.9%
- CVE-1999-1346HIGH 7.5EPSS 1.5%
- CVE-1999-1333HIGH 7.5EPSS 3.4%
- CVE-1999-0041HIGH 7.5EPSS 9.1%
- CVE-1999-0037HIGH 7.5EPSS 3.5%
- CVE-2000-1207HIGH 7.2EPSS 0.4%
- CVE-2000-0170HIGH 7.2EPSS 2.0%
- CVE-2000-0118HIGH 7.2EPSS 0.8%
- CVE-1999-1329HIGH 7.2EPSS 0.4%
- CVE-1999-1182HIGH 7.2EPSS 0.4%
- CVE-1999-0872HIGH 7.2EPSS 0.4%
- CVE-1999-0868HIGH 7.2EPSS 1.5%
- CVE-1999-0769HIGH 7.2EPSS 0.8%
- CVE-1999-0390HIGH 7.2EPSS 0.4%
- CVE-1999-0297HIGH 7.2EPSS 0.4%
- CVE-1999-0130HIGH 7.2EPSS 1.1%
- CVE-1999-0034HIGH 7.2EPSS 1.2%
- CVE-2009-4067MEDIUM 6.8EPSS 2.1%
- CVE-2011-3363MEDIUM 6.5EPSS 0.8%
- CVE-2009-2416MEDIUM 6.5EPSS 1.8%
- CVE-1999-1335MEDIUM 6.4EPSS 1.9%
- CVE-2007-6285MEDIUM 6.2EPSS 0.4%
and 17 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 2711
- 2721
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain