Red Hat Enterprise Linux 7 Libreswan Cryptographic Module
Red Hat®, Inc. - FIPS 140 #3563
Red Hat Enterprise Linux Libreswan Cryptographic Module is a software only cryptographic module that provides the IKE protocol version 1 and version 2 key agreement services required for IPSec.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3563
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- SP 800-56Arev3 transition
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- November 15, 2019
- Versions
- 7.0[1] and rhel7.20190509[2]
- Caveat
- With module Red Hat Enterprise Linux NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3270[1] and Red Hat Enterprise Linux 7 NSS Cryptographic Module validated to FIPS 140-2 under Cert. #3860[2] and Red Hat Enterprise Linux OpenSSL Module validated to FIPS140-2 under Cert. #3538[1] and Red Hat Enterprise Linux 7 OpenSSL Module validated to FIPS 140-2 under Cert. #3867[2] operating in FIPS mode
- Level exceptions
- Mitigation of Other Attacks: N/A; Physical Security: N/A
Algorithms
- AES
- CVL
- DRBG
- ECDSA
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (18)
- AES 5600
- AES 5601
- AES 5602
- AES 5603
- CVL 2024
- CVL 2026
- DRBG 2245
- DRBG 2246
- ECDSA 1514
- ECDSA 1515
- HMAC 3734
- HMAC 3735
- RSA 3012
- RSA 3013
- SHS 4498
- SHS 4499
- Triple-DES 2816
- Triple-DES 2817
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Red Hat Enterprise Linux 7 running on Dell PowerEdge R630 with an Intel(R) Xeon(R) E5 with PAA
- Red Hat Enterprise Linux 7 running on Dell PowerEdge R630 with an Intel(R) Xeon(R) E5 without PAA (single-user mode)
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
- CVE-2017-1000253HIGH 7.8KEVEPSS 10.7%
- CVE-2000-0017HIGH 10.0EPSS 8.9%
- CVE-1999-0894HIGH 10.0EPSS 1.9%
- CVE-1999-0798HIGH 10.0EPSS 1.6%
- CVE-2019-9636CRITICAL 9.8EPSS 7.7%
- CVE-2018-18314CRITICAL 9.8EPSS 6.1%
- CVE-2018-18312CRITICAL 9.8EPSS 12.8%
- CVE-2018-18311CRITICAL 9.8EPSS 11.7%
- CVE-2018-17456CRITICAL 9.8EPSS 97.4%
- CVE-2018-16850CRITICAL 9.8EPSS 5.1%
- CVE-2018-16395CRITICAL 9.8EPSS 10.7%
- CVE-2017-5645CRITICAL 9.8EPSS 89.8%
- CVE-2011-2767CRITICAL 9.8EPSS 8.9%
- CVE-2018-18313CRITICAL 9.1EPSS 9.5%
- CVE-2016-3616HIGH 8.8EPSS 4.4%
- CVE-2018-1079HIGH 8.7EPSS 1.1%
- CVE-2018-16396HIGH 8.1EPSS 8.0%
- CVE-2017-15715HIGH 8.1EPSS 85.5%
- CVE-2019-14816HIGH 7.8EPSS 0.9%
- CVE-2018-1124HIGH 7.8EPSS 1.9%
- CVE-2016-9675HIGH 7.8EPSS 1.9%
- CVE-2018-8778HIGH 7.5EPSS 7.5%
- CVE-2018-8777HIGH 7.5EPSS 4.5%
- CVE-2018-6914HIGH 7.5EPSS 10.2%
- CVE-2018-3760HIGH 7.5EPSS 26.7%
- CVE-2018-20615HIGH 7.5EPSS 4.5%
- CVE-2018-14645HIGH 7.5EPSS 3.1%
- CVE-2018-14618HIGH 7.5EPSS 11.1%
- CVE-2018-1111HIGH 7.5EPSS 97.9%
- CVE-2018-10184HIGH 7.5EPSS 8.3%
- CVE-2017-15710HIGH 7.5EPSS 17.1%
- CVE-2017-15134HIGH 7.5EPSS 3.9%
- CVE-2015-5229HIGH 7.5EPSS 2.2%
- CVE-2001-0889HIGH 7.5EPSS 6.4%
- CVE-2001-0690HIGH 7.5EPSS 11.9%
- CVE-1999-0037HIGH 7.5EPSS 3.5%
- CVE-2000-1207HIGH 7.2EPSS 0.4%
- CVE-1999-0297HIGH 7.2EPSS 0.4%
- CVE-2018-12373MEDIUM 6.5EPSS 2.4%
- CVE-2018-12372MEDIUM 6.5EPSS 2.5%
- CVE-2007-3103MEDIUM 6.2EPSS 0.9%
- CVE-2019-12384MEDIUM 5.9EPSS 45.2%
- CVE-2018-1301MEDIUM 5.9EPSS 15.0%
- CVE-2018-11763MEDIUM 5.9EPSS 50.8%
- CVE-2021-3672MEDIUM 5.6EPSS 2.8%
- CVE-2018-1002200MEDIUM 5.5EPSS 11.6%
- CVE-2018-1000199MEDIUM 5.5EPSS 1.2%
- CVE-2015-7837MEDIUM 5.5EPSS 0.4%
- CVE-2018-1283MEDIUM 5.3EPSS 9.7%
- CVE-2015-7833MEDIUM 4.9EPSS 0.7%
and 6 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 3270
- 3538
- 3860
- 3867
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain