Red Hat Enterprise Linux 8 libgcrypt Cryptographic Module
Red Hat®, Inc. - FIPS 140 #3784
The libgcrypt FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the libgcrypt library delivered with RHEL 8.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3784
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- December 21, 2020
- Versions
- rhel8.20190624
- Caveat
- When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
Algorithms
- AES
- DRBG
- DSA
- ECDSA
- HMAC
- RSA
- SHA-3
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2021-40438CRITICAL 9.0KEVEPSS 100.0%
- CVE-2025-31277HIGH 8.8KEVEPSS 1.6%
- CVE-2023-32373HIGH 8.8KEVEPSS 12.2%
- CVE-2019-11043HIGH 8.7KEVEPSS 99.7%
- CVE-2026-31431HIGH 7.8KEVEPSS 3.4%
- CVE-2023-4911HIGH 7.8KEVEPSS 63.8%
- CVE-2022-0847HIGH 7.8KEVEPSS 92.8%
- CVE-2022-0492HIGH 7.8KEVEPSS 5.5%
- CVE-2021-4034HIGH 7.8KEVEPSS 94.9%
- CVE-2019-13272HIGH 7.8KEVEPSS 52.2%
- CVE-2019-0211HIGH 7.8KEVEPSS 65.0%
- CVE-2026-34486HIGH 7.5KEVEPSS 6.6%
- CVE-2023-44487HIGH 7.5KEVEPSS 100.0%
- CVE-2026-53006CRITICAL 9.8EPSS 0.4%
- CVE-2026-53002CRITICAL 9.8EPSS 0.4%
- CVE-2022-30600CRITICAL 9.8EPSS 5.0%
- CVE-2022-30599CRITICAL 9.8EPSS 1.4%
- CVE-2021-3773CRITICAL 9.8EPSS 5.3%
- CVE-2021-3466CRITICAL 9.8EPSS 8.7%
- CVE-2021-20232CRITICAL 9.8EPSS 3.4%
- CVE-2021-20231CRITICAL 9.8EPSS 3.8%
- CVE-2020-36329CRITICAL 9.8EPSS 2.3%
- CVE-2020-36328CRITICAL 9.8EPSS 2.7%
- CVE-2020-27846CRITICAL 9.8EPSS 4.9%
- CVE-2019-9792CRITICAL 9.8EPSS 13.2%
- CVE-2019-9791CRITICAL 9.8EPSS 19.9%
- CVE-2019-9788CRITICAL 9.8EPSS 2.2%
- CVE-2019-9636CRITICAL 9.8EPSS 7.7%
- CVE-2019-7164CRITICAL 9.8EPSS 3.5%
- CVE-2019-3822CRITICAL 9.8EPSS 12.9%
- CVE-2019-19334CRITICAL 9.8EPSS 3.9%
- CVE-2019-19333CRITICAL 9.8EPSS 3.6%
- CVE-2019-19012CRITICAL 9.8EPSS 10.5%
- CVE-2019-15606CRITICAL 9.8EPSS 20.0%
- CVE-2019-15605CRITICAL 9.8EPSS 57.1%
- CVE-2019-14813CRITICAL 9.8EPSS 11.0%
- CVE-2019-12450CRITICAL 9.8EPSS 2.6%
- CVE-2019-11356CRITICAL 9.8EPSS 7.6%
- CVE-2019-10126CRITICAL 9.8EPSS 6.8%
- CVE-2019-1010238CRITICAL 9.8EPSS 6.3%
- CVE-2019-0160CRITICAL 9.8EPSS 1.3%
- CVE-2018-25014CRITICAL 9.8EPSS 2.2%
- CVE-2018-25011CRITICAL 9.8EPSS 2.5%
- CVE-2018-20784CRITICAL 9.8EPSS 4.2%
- CVE-2026-11861CRITICAL 9.6EPSS 0.2%
- CVE-2023-46846CRITICAL 9.3EPSS 6.2%
- CVE-2023-3961CRITICAL 9.1EPSS 2.7%
- CVE-2022-1586CRITICAL 9.1EPSS 3.4%
- CVE-2021-4048CRITICAL 9.1EPSS 2.8%
- CVE-2020-36331CRITICAL 9.1EPSS 2.3%
and 950 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain