Red Hat Enterprise Linux 8 NSS Cryptographic Module
Red Hat, Inc. - FIPS 140 #5513
Red Hat Enterprise Linux 8 NSS Cryptographic Module consists of the Softoken and Freebl libraries offering various cryptographic mechanisms.
Key facts
- Scheme
- FIPS 140
- Certificate
- 5513
- Standard
- FIPS 140-3
- Security level
- Level 1
- Status
- active
- Vendor
- Red Hat, Inc.
- Module type
- Software
- Embodiment
- MultiChipStand
- Lab
- atsec information security corporation
- First validated
- September 8, 2026
- Sunset date
- September 7, 2031
- Caveat
- When operated in approved mode and installed, initialized and configured as specified in Section 11 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. The module generates random numbers whose strengths are modified by available entropy.
Algorithms
- AES-CBC
- AES-CBC-CS1
- AES-CMAC
- AES-CTR
- AES-ECB
- AES-GCM
- AES-KW
- AES-KWP
- ECDSA KeyGen (FIPS186-5)
- ECDSA SigGen (FIPS186-5)
- ECDSA SigVer (FIPS186-5)
- Hash DRBG
- HMAC-SHA2-224
- HMAC-SHA2-256
- HMAC-SHA2-384
- HMAC-SHA2-512
- KAS-ECC-SSC Sp800-56Ar3
- KAS-FFC-SSC Sp800-56Ar3
- KDA HKDF SP800-56Cr2
- KDF IKEv2
- KDF SP800-108
- KTS-IFC
- PBKDF
- RSA KeyGen (FIPS186-5)
- RSA SigGen (FIPS186-5)
- RSA SigVer (FIPS186-2)
- RSA SigVer (FIPS186-4)
- RSA SigVer (FIPS186-5)
- Safe Primes Key Generation
- SHA2-224
- SHA2-256
- SHA2-384
- SHA2-512
- TLS v1.2 KDF RFC7627
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2021-40438CRITICAL 9.0KEVEPSS 100.0%
- CVE-2025-31277HIGH 8.8KEVEPSS 1.6%
- CVE-2023-32373HIGH 8.8KEVEPSS 12.2%
- CVE-2019-11043HIGH 8.7KEVEPSS 99.7%
- CVE-2026-31431HIGH 7.8KEVEPSS 3.4%
- CVE-2023-4911HIGH 7.8KEVEPSS 63.8%
- CVE-2022-0847HIGH 7.8KEVEPSS 92.8%
- CVE-2022-0492HIGH 7.8KEVEPSS 5.5%
- CVE-2021-4034HIGH 7.8KEVEPSS 94.9%
- CVE-2019-13272HIGH 7.8KEVEPSS 52.2%
- CVE-2019-0211HIGH 7.8KEVEPSS 65.0%
- CVE-2026-34486HIGH 7.5KEVEPSS 6.6%
- CVE-2023-44487HIGH 7.5KEVEPSS 100.0%
- CVE-2026-53006CRITICAL 9.8EPSS 0.4%
- CVE-2026-53002CRITICAL 9.8EPSS 0.4%
- CVE-2022-30600CRITICAL 9.8EPSS 5.0%
- CVE-2022-30599CRITICAL 9.8EPSS 1.4%
- CVE-2021-3773CRITICAL 9.8EPSS 5.3%
- CVE-2021-3466CRITICAL 9.8EPSS 8.7%
- CVE-2021-20232CRITICAL 9.8EPSS 3.4%
- CVE-2021-20231CRITICAL 9.8EPSS 3.8%
- CVE-2020-36329CRITICAL 9.8EPSS 2.3%
- CVE-2020-36328CRITICAL 9.8EPSS 2.7%
- CVE-2020-27846CRITICAL 9.8EPSS 4.9%
- CVE-2019-9792CRITICAL 9.8EPSS 13.2%
- CVE-2019-9791CRITICAL 9.8EPSS 19.9%
- CVE-2019-9788CRITICAL 9.8EPSS 2.2%
- CVE-2019-9636CRITICAL 9.8EPSS 7.7%
- CVE-2019-7164CRITICAL 9.8EPSS 3.5%
- CVE-2019-3822CRITICAL 9.8EPSS 12.9%
- CVE-2019-19334CRITICAL 9.8EPSS 3.9%
- CVE-2019-19333CRITICAL 9.8EPSS 3.6%
- CVE-2019-19012CRITICAL 9.8EPSS 10.5%
- CVE-2019-15606CRITICAL 9.8EPSS 20.0%
- CVE-2019-15605CRITICAL 9.8EPSS 57.1%
- CVE-2019-14813CRITICAL 9.8EPSS 11.0%
- CVE-2019-12450CRITICAL 9.8EPSS 2.6%
- CVE-2019-11356CRITICAL 9.8EPSS 7.6%
- CVE-2019-10126CRITICAL 9.8EPSS 6.8%
- CVE-2019-1010238CRITICAL 9.8EPSS 6.3%
- CVE-2019-0160CRITICAL 9.8EPSS 1.3%
- CVE-2018-25014CRITICAL 9.8EPSS 2.2%
- CVE-2018-25011CRITICAL 9.8EPSS 2.5%
- CVE-2018-20784CRITICAL 9.8EPSS 4.2%
- CVE-2026-11861CRITICAL 9.6EPSS 0.2%
- CVE-2023-46846CRITICAL 9.3EPSS 6.2%
- CVE-2023-3961CRITICAL 9.1EPSS 2.7%
- CVE-2022-1586CRITICAL 9.1EPSS 3.4%
- CVE-2021-4048CRITICAL 9.1EPSS 2.8%
- CVE-2020-36331CRITICAL 9.1EPSS 2.3%
and 950 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain