Red Hat Enterprise Linux 8 NSS Cryptographic Module
Red Hat®, Inc. - FIPS 140 #4458
Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4458
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- March 24, 2023
- Versions
- rhel8.20211124
- Caveat
- When operated in FIPS mode and installed, initialized and configured as specified in Section 9.1 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Algorithms
- AES
- CVL
- DRBG
- DSA
- ECDSA
- HMAC
- KAS
- KAS-SSC
- KBKDF
- KTS
- KTS-RSA
- PBKDF
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2021-40438CRITICAL 9.0KEVEPSS 100.0%
- CVE-2025-31277HIGH 8.8KEVEPSS 1.6%
- CVE-2023-32373HIGH 8.8KEVEPSS 12.2%
- CVE-2019-11043HIGH 8.7KEVEPSS 99.7%
- CVE-2026-31431HIGH 7.8KEVEPSS 3.4%
- CVE-2023-4911HIGH 7.8KEVEPSS 63.8%
- CVE-2022-0847HIGH 7.8KEVEPSS 92.8%
- CVE-2022-0492HIGH 7.8KEVEPSS 5.5%
- CVE-2021-4034HIGH 7.8KEVEPSS 94.9%
- CVE-2019-13272HIGH 7.8KEVEPSS 52.2%
- CVE-2019-0211HIGH 7.8KEVEPSS 65.0%
- CVE-2026-34486HIGH 7.5KEVEPSS 6.6%
- CVE-2023-44487HIGH 7.5KEVEPSS 100.0%
- CVE-2026-53006CRITICAL 9.8EPSS 0.4%
- CVE-2026-53002CRITICAL 9.8EPSS 0.4%
- CVE-2022-30600CRITICAL 9.8EPSS 5.0%
- CVE-2022-30599CRITICAL 9.8EPSS 1.4%
- CVE-2021-3773CRITICAL 9.8EPSS 5.3%
- CVE-2021-3466CRITICAL 9.8EPSS 8.7%
- CVE-2021-20232CRITICAL 9.8EPSS 3.4%
- CVE-2021-20231CRITICAL 9.8EPSS 3.8%
- CVE-2020-36329CRITICAL 9.8EPSS 2.3%
- CVE-2020-36328CRITICAL 9.8EPSS 2.7%
- CVE-2020-27846CRITICAL 9.8EPSS 4.9%
- CVE-2019-9792CRITICAL 9.8EPSS 13.2%
- CVE-2019-9791CRITICAL 9.8EPSS 19.9%
- CVE-2019-9788CRITICAL 9.8EPSS 2.2%
- CVE-2019-9636CRITICAL 9.8EPSS 7.7%
- CVE-2019-7164CRITICAL 9.8EPSS 3.5%
- CVE-2019-3822CRITICAL 9.8EPSS 12.9%
- CVE-2019-19334CRITICAL 9.8EPSS 3.9%
- CVE-2019-19333CRITICAL 9.8EPSS 3.6%
- CVE-2019-19012CRITICAL 9.8EPSS 10.5%
- CVE-2019-15606CRITICAL 9.8EPSS 20.0%
- CVE-2019-15605CRITICAL 9.8EPSS 57.1%
- CVE-2019-14813CRITICAL 9.8EPSS 11.0%
- CVE-2019-12450CRITICAL 9.8EPSS 2.6%
- CVE-2019-11356CRITICAL 9.8EPSS 7.6%
- CVE-2019-10126CRITICAL 9.8EPSS 6.8%
- CVE-2019-1010238CRITICAL 9.8EPSS 6.3%
- CVE-2019-0160CRITICAL 9.8EPSS 1.3%
- CVE-2018-25014CRITICAL 9.8EPSS 2.2%
- CVE-2018-25011CRITICAL 9.8EPSS 2.5%
- CVE-2018-20784CRITICAL 9.8EPSS 4.2%
- CVE-2026-11861CRITICAL 9.6EPSS 0.2%
- CVE-2023-46846CRITICAL 9.3EPSS 6.2%
- CVE-2023-3961CRITICAL 9.1EPSS 2.7%
- CVE-2022-1586CRITICAL 9.1EPSS 3.4%
- CVE-2021-4048CRITICAL 9.1EPSS 2.8%
- CVE-2020-36331CRITICAL 9.1EPSS 2.3%
and 950 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain