Certificate 2711 - Red Hat Enterprise Linux NSS Cryptographic Module v4.0
intCertNum 2711
strVendorName Red Hat, Inc.
strURL http://www.redhat.com
strAddress1 100 East Davie Street
strAddress2
strAddress3
strCity Raleigh
strStateProv NC
strPostalCode 27601
strCountry 27601
strContact Steve Grubb
strEmail sgrubb@redhat.com
strPhone 978-392-1000
strFax 978-392-1001
strContact2 Jaroslav Reznik
strEmail2 jreznik@redhat.com
strFax2
strPhone2 +420 532 294 645
intCertNum 2711
strModuleName Red Hat Enterprise Linux NSS Cryptographic Module v4.0
strPartNumber Software Version: 4.0
memModuleNotes When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
str140Version 140-2
_sp_ Security Policy   [pdf][html][txt]
_cert_ Certificate   [pdf]
strPURL http://www.redhat.com/en/technologies/linux-platforms/enterprise-linux
strModuleType Software
strValidationDate 08/15/2016
intOverallLevel 1
memIndividualLevelNotes -Roles, Services, and Authentication: Level 2;-Physical Security: N/A;-Design Assurance: Level 2;-Operational Environment: Tested as meeting Level 1 with Red Hat Enterprise Linux 7.1 running on HP ProLiant DL380p Gen8 with PAA; Red Hat Enterprise Linux 7.1 running on HP ProLiant DL380p Gen8 without PAA; Red Hat Enterprise Linux 7.1 running on IBM POWER8 Little Endian 8286-41A; Red Hat Enterprise Linux 7.1 running on IBM z13 (single-user mode)
strFIPSAlgorithms AES (Certs. #3604, #3605, #3606, #3607, #3608, #3609 and #3610);
CVL (Certs. #625, #626, #627, #628 and #629);
DRBG (Certs. #935, #936, #937, #938 and #940);
DSA (Certs. #1001, #1002, #1003, #1004 and #1005);
ECDSA (Certs. #738, #739, #740, #741 and #742);
HMAC (Certs. #2299, #2300, #2301, #2303 and #2305);
RSA (Certs. #1853, #1854, #1855, #1856, #1857, #2031, #2032, #2033, #2034 and #2035);
SHS (Certs. #2965, #2966, #2967, #2969 and #2971);
Triple-DES (Certs. #2006, #2007, #2008, #2009 and #2010)
strOtherAlgorithms Camellia;
DES;
RC2;
RC4;
RC5;
SEED;
MD2;
MD5;
AES (Certs. #3604, #3605, #3606, #3607, #3608, #3609 and #3610, key wrapping;
key establishment methodology provides between 128 and 256 bits of encryption strength);
Triple-DES (Certs. #2006, #2007, #2008, #2009 and #2010, key wrapping;
key establishment methodology provides 112 bits of encryption strength);
RSA (key wrapping;
key establishment methodology provides between 112 and 256 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
Diffie-Hellman (key agreement: key establishment methodology provides between 112 and 256 bits of encryption strength;
non-compliant less than 112 bits of encryption strength);
EC Diffie-Hellman (key agreement: key establishment methodology provides between 128 and 256 bits of encryption strength);
JPAKE
strConfiguration Multi-Chip Stand Alone
memModuleDescription Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/
intModuleCount 1
memAdditionalNotes
strFirstValidtionDate 08/15/16 00:00:00
strLabName atsec
strValidationYear 2016