Red Hat Enterprise Linux 8 OpenSSL Cryptographic Module
Red Hat®, Inc. - FIPS 140 #4642
The OpenSSL FIPS Runtime Module is a general purpose cryptographic library designed to provide FIPS 140-2 validated cryptographic functionality for use with the high level API of the OpenSSL library.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4642
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- October 25, 2023
- Versions
- rhel8.20240917
- Caveat
- When operated in FIPS mode and installed, initialized and configured as specified in Section 9.1 of the Security Policy. The module generates cryptographic keys whose strengths are modified by available entropy
Algorithms
- AES
- CVL
- DRBG
- DSA
- ECDSA
- HMAC
- KAS
- KAS-SSC
- KBKDF
- KDA
- KTS
- KTS-RSA
- PBKDF
- RSA
- SHA-3
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2021-40438CRITICAL 9.0KEVEPSS 100.0%
- CVE-2025-31277HIGH 8.8KEVEPSS 1.6%
- CVE-2023-32373HIGH 8.8KEVEPSS 12.2%
- CVE-2019-11043HIGH 8.7KEVEPSS 99.7%
- CVE-2026-31431HIGH 7.8KEVEPSS 3.4%
- CVE-2023-4911HIGH 7.8KEVEPSS 63.8%
- CVE-2022-0847HIGH 7.8KEVEPSS 92.8%
- CVE-2022-0492HIGH 7.8KEVEPSS 5.5%
- CVE-2021-4034HIGH 7.8KEVEPSS 94.9%
- CVE-2019-13272HIGH 7.8KEVEPSS 52.2%
- CVE-2019-0211HIGH 7.8KEVEPSS 65.0%
- CVE-2026-34486HIGH 7.5KEVEPSS 6.6%
- CVE-2023-44487HIGH 7.5KEVEPSS 100.0%
- CVE-2026-53006CRITICAL 9.8EPSS 0.4%
- CVE-2026-53002CRITICAL 9.8EPSS 0.4%
- CVE-2022-30600CRITICAL 9.8EPSS 5.0%
- CVE-2022-30599CRITICAL 9.8EPSS 1.4%
- CVE-2021-3773CRITICAL 9.8EPSS 5.3%
- CVE-2021-3466CRITICAL 9.8EPSS 8.7%
- CVE-2021-20232CRITICAL 9.8EPSS 3.4%
- CVE-2021-20231CRITICAL 9.8EPSS 3.8%
- CVE-2020-36329CRITICAL 9.8EPSS 2.3%
- CVE-2020-36328CRITICAL 9.8EPSS 2.7%
- CVE-2020-27846CRITICAL 9.8EPSS 4.9%
- CVE-2019-9792CRITICAL 9.8EPSS 13.2%
- CVE-2019-9791CRITICAL 9.8EPSS 19.9%
- CVE-2019-9788CRITICAL 9.8EPSS 2.2%
- CVE-2019-9636CRITICAL 9.8EPSS 7.7%
- CVE-2019-7164CRITICAL 9.8EPSS 3.5%
- CVE-2019-3822CRITICAL 9.8EPSS 12.9%
- CVE-2019-19334CRITICAL 9.8EPSS 3.9%
- CVE-2019-19333CRITICAL 9.8EPSS 3.6%
- CVE-2019-19012CRITICAL 9.8EPSS 10.5%
- CVE-2019-15606CRITICAL 9.8EPSS 20.0%
- CVE-2019-15605CRITICAL 9.8EPSS 57.1%
- CVE-2019-14813CRITICAL 9.8EPSS 11.0%
- CVE-2019-12450CRITICAL 9.8EPSS 2.6%
- CVE-2019-11356CRITICAL 9.8EPSS 7.6%
- CVE-2019-10126CRITICAL 9.8EPSS 6.8%
- CVE-2019-1010238CRITICAL 9.8EPSS 6.3%
- CVE-2019-0160CRITICAL 9.8EPSS 1.3%
- CVE-2018-25014CRITICAL 9.8EPSS 2.2%
- CVE-2018-25011CRITICAL 9.8EPSS 2.5%
- CVE-2018-20784CRITICAL 9.8EPSS 4.2%
- CVE-2026-11861CRITICAL 9.6EPSS 0.2%
- CVE-2023-46846CRITICAL 9.3EPSS 6.2%
- CVE-2023-3961CRITICAL 9.1EPSS 2.7%
- CVE-2022-1586CRITICAL 9.1EPSS 3.4%
- CVE-2021-4048CRITICAL 9.1EPSS 2.8%
- CVE-2020-36331CRITICAL 9.1EPSS 2.3%
and 950 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain