Red Hat Enterprise Linux 9 OpenSSL FIPS Provider
Red Hat®, Inc. - FIPS 140 #4746
The Red Hat Enterprise Linux 9 OpenSSL FIPS Provider provides a C language application program interface (API) for use by other applications that require cryptographic functionality.
Key facts
- Scheme
- FIPS 140
- Certificate
- 4746
- Standard
- FIPS 140-3
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- July 31, 2024
- Versions
- 3.0.1-3f45e68ee408cd9c
- Caveat
- Interim validation. When operated in approved mode. When installed, initialized and configured as specified in Section 11 of the Security Policy. The module generates SSPs (e.g., keys) whose strengths are modified by available entropy.
Algorithms
- AES-CBC
- AES-CBC-CS1
- AES-CBC-CS2
- AES-CBC-CS3
- AES-CCM
- AES-CFB1
- AES-CFB128
- AES-CFB8
- AES-CMAC
- AES-CTR
- AES-ECB
- AES-GCM
- AES-GMAC
- AES-KW
- AES-KWP
- AES-OFB
- AES-XTS Testing Revision 2.0
- Counter DRBG
- ECDSA KeyGen (FIPS186-4)
- ECDSA KeyVer (FIPS186-4)
- ECDSA SigGen (FIPS186-4)
- ECDSA SigVer (FIPS186-4)
- Hash DRBG
- HMAC DRBG
- HMAC-SHA-1
- HMAC-SHA2-224
- HMAC-SHA2-256
- HMAC-SHA2-384
- HMAC-SHA2-512
- HMAC-SHA2-512/224
- HMAC-SHA2-512/256
- HMAC-SHA3-224
- HMAC-SHA3-256
- HMAC-SHA3-384
- HMAC-SHA3-512
- KAS-ECC-SSC Sp800-56Ar3
- KAS-FFC-SSC Sp800-56Ar3
- KDA HKDF Sp800-56Cr1
- KDA OneStep SP800-56Cr2
- KDF ANS 9.42
- KDF ANS 9.63
- KDF SP800-108
- KDF SSHA4460
- PBKDF
- RSA KeyGen (FIPS186-4)
- RSA SigGen (FIPS186-4)
- RSA SigVer (FIPS186-4)
- Safe Primes Key Generation
- Safe Primes Key Verification
- SHA-1
- SHA2-224
- SHA2-256
- SHA2-384
- SHA2-512
- SHA2-512/224
- SHA2-512/256
- SHA3-224
- SHA3-256
- SHA3-384
- SHA3-512
- SHAKE-128
- SHAKE-256
- TLS v1.2 KDF RFC7627
- TLS v1.3 KDF
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2025-31277HIGH 8.8KEVEPSS 1.6%
- CVE-2023-5217HIGH 8.8KEVEPSS 49.0%
- CVE-2023-32373HIGH 8.8KEVEPSS 12.2%
- CVE-2026-31431HIGH 7.8KEVEPSS 3.4%
- CVE-2023-4911HIGH 7.8KEVEPSS 63.8%
- CVE-2026-34486HIGH 7.5KEVEPSS 6.6%
- CVE-2023-44487HIGH 7.5KEVEPSS 100.0%
- CVE-2026-53006CRITICAL 9.8EPSS 0.4%
- CVE-2026-53002CRITICAL 9.8EPSS 0.4%
- CVE-2026-11861CRITICAL 9.6EPSS 0.2%
- CVE-2026-1709CRITICAL 9.4EPSS 5.8%
- CVE-2023-46846CRITICAL 9.3EPSS 6.2%
- CVE-2022-1587CRITICAL 9.1EPSS 2.8%
- CVE-2022-1586CRITICAL 9.1EPSS 3.4%
- CVE-2026-4480CRITICAL 9.0EPSS 13.9%
- CVE-2026-4408CRITICAL 9.0EPSS 1.8%
- CVE-2023-5869HIGH 8.8EPSS 4.3%
- CVE-2023-5178HIGH 8.8EPSS 9.5%
- CVE-2023-2203HIGH 8.8EPSS 0.9%
- CVE-2026-28369HIGH 8.7EPSS 0.9%
- CVE-2026-28368HIGH 8.7EPSS 0.9%
- CVE-2026-13097HIGH 8.7EPSS 0.4%
- CVE-2023-46848HIGH 8.6EPSS 10.2%
- CVE-2023-46847HIGH 8.6EPSS 88.4%
- CVE-2022-4904HIGH 8.6EPSS 1.2%
- CVE-2022-2132HIGH 8.6EPSS 2.2%
- CVE-2026-59090HIGH 8.4EPSS 0.6%
- CVE-2023-40547HIGH 8.3EPSS 5.4%
- CVE-2026-35091HIGH 8.2EPSS 1.1%
- CVE-2026-19550HIGH 8.2EPSS 0.3%
- CVE-2026-0966HIGH 8.2EPSS 0.6%
- CVE-2023-39191HIGH 8.2EPSS 0.5%
- CVE-2026-9256HIGH 8.1EPSS 2.7%
- CVE-2026-42055HIGH 8.1EPSS 6.5%
- CVE-2024-6387HIGH 8.1EPSS 99.5%
- CVE-2026-3012HIGH 8.0EPSS 0.2%
- CVE-2024-1488HIGH 8.0EPSS 0.3%
- CVE-2022-2625HIGH 8.0EPSS 2.0%
- CVE-2026-6846HIGH 7.8EPSS 0.2%
- CVE-2026-66758HIGH 7.8EPSS 0.3%
- CVE-2026-59087HIGH 7.8EPSS 0.5%
- CVE-2026-53145HIGH 7.8EPSS 0.1%
- CVE-2026-53009HIGH 7.8EPSS 0.1%
- CVE-2026-53000HIGH 7.8EPSS 0.1%
- CVE-2026-50264HIGH 7.8EPSS 0.2%
- CVE-2026-50261HIGH 7.8EPSS 0.2%
- CVE-2026-50260HIGH 7.8EPSS 0.2%
- CVE-2026-50259HIGH 7.8EPSS 0.2%
- CVE-2026-50258HIGH 7.8EPSS 0.2%
- CVE-2026-50257HIGH 7.8EPSS 0.2%
and 497 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain