Barracuda OpenSSL FIPS Provider
Barracuda Networks - FIPS 140 #4587
The Module is a software library providing a C-language application program interface (API) for use by applications that require cryptographic functionality. The Module is classified under FIPS 140-2 as a software module, with a multi-chip standalone module embodiment. The physical cryptographic boundary is the general-purpose computer on which the module is installed. The logical cryptographic boundary of the Module is the FIPS Provider, a dynamically loadable library. The Module performs no communication other than with the calling application via APIs that invoke the Module.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4587
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- Moved to historical list due to sunsetting
- Vendor
- Barracuda Networks
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- Acumen Security
- First validated
- September 6, 2023
- Versions
- 3.0.8
- Caveat
- When operated in FIPS mode. No assurance of the minimum strength of generated keys.
- Level exceptions
- Design Assurance: Level 3; Physical Security: N/A
Algorithms
- AES
- CVL
- DRBG
- DSA
- ECDSA
- HMAC
- KAS-RSA-SSC
- KAS-SSC
- KBKDF
- KDA
- KMAC
- KTS
- KTS-RSA
- PBKDF
- RSA
- SHA-3
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (18)
- AES A3500
- CVL A3500
- DRBG A3500
- DSA A3500
- ECDSA A3500
- HMAC A3500
- KAS-RSA-SSC A3500
- KAS-SSC A3500
- KBKDF A3500
- KDA A3500
- KMAC A3500
- KTS A3500
- KTS-RSA A3500
- PBKDF A3500
- RSA A3500
- SHA-3 A3500
- SHS A3500
- Triple-DES A3500
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Debian 11.5 running on Dell Inspiron 7591 with Intel i7(x86) with PAA
- Debian 11.5 running on Dell Inspiron 7591 with Intel i7(x86) without PAA
- FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
- FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7(x64) without PAA
- macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7(x64) with PAA
- macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7(x64) without PAA (single user mode)
- Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7(x64) with PAA
- Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7(x64) without PAA
- Windows 10 running on Dell Inspiron 7591 with Intel i7(x64) with PAA
- Windows 10 running on Dell Inspiron 7591 with Intel i7(x64) without PAA
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain