| CARVIEW |
Select Language
HTTP/2 200
date: Sat, 11 Oct 2025 13:08:23 GMT
content-type: text/html; charset=utf-8
content-encoding: gzip
cache-control: no-cache
pragma: no-cache
expires: -1
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=.TwXzephs7nsbbj3E.u8D1SBpK2k6YBNcSI_P6rlyyg-1760188103-1.0.1.1-8M4tz8CcF1wvxdkwaET.glkSZCOatFNI3yoi0G6lo2nHgzKDKZqzzVyTjcWxOzJVDIOBlGA2t9wRjdvz47LWwgCCKzSxeDvNaE24nMDb2lk; path=/; expires=Sat, 11-Oct-25 13:38:23 GMT; domain=.nist.gov; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=P9ipFdW3qrLbdt2fVnVy6u6Ks_B6qDlzAELmJNMaI54-1760188103363-0.0.1.1-604800000; path=/; domain=.nist.gov; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 98ce95fc7f883478-LAX
Cryptographic Module Validation Program | CSRC
October 1, 2025: Due to a lapse in federal funding, this website is not being updated. Learn more.
Certificate #4282
You are viewing this page in an unauthorized frame window.
This is a potential security issue, you are being redirected to https://csrc.nist.gov.
An official website of the United States government
Here’s how you know
Official websites use .gov
A
.gov website belongs to an official government
organization in the United States.
Secure .gov websites use HTTPS
A
lock (
) or https:// means you’ve safely connected to
the .gov website. Share sensitive information only on official,
secure websites.
Cryptographic Module Validation Program CMVP
Project Links
Certificate #4282
Details
Module Name
OpenSSL FIPS Provider
Standard
FIPS
140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode. No assurance of the minimum strength of generated keys.
Security Level Exceptions
- Physical Security: N/A
- Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The OpenSSL FIPS Provider is a software library providing a C-language application program interface (API) for use by applications that require cryptographic functionality.
Tested Configuration(s)
- Debian 11.5 running on Dell Inspiron 7591 with Intel i7 (x64) with PAA
- Debian 11.5 running on Dell Inspiron 7591 with Intel i7 (x64) without PAA
- FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7 (x64) with PAA
- FreeBSD 13.1 running on Dell Inspiron 7591 with Intel i7 (x64) without PAA
- macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7 (x64) with PAA
- macOS 11.5.2 running on Apple i7 Mac Mini with Intel i7 (x64) without PAA
- macOS 11.5.2 running on Apple M1 Mac Mini with M1 with PAA
- macOS 11.5.2 running on Apple M1 Mac Mini with M1 without PAA
- Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7 (x64) with PAA
- Ubuntu Linux 22.04.1 LTS running on Dell Inspiron 7591 with Intel i7 (x64) without PAA
- Windows 10 running on Dell Inspiron 7591 with Intel i7 (x64) with PAA
- Windows 10 running on Dell Inspiron 7591 with Intel i7 (x64) without PAA (single-user mode)
Approved Algorithms
| AES | Certs. #A3500 and #A4086 |
| CKG | vendor affirmed |
| CVL | Certs. #A3500 and #A4086 |
| DRBG | Certs. #A3500 and #A4086 |
| DSA | Certs. #A3500 and #A4086 |
| ECDSA | Certs. #A3500 and #A4086 |
| HMAC | Certs. #A3500 and #A4086 |
| KAS-RSA-SSC | Certs. #A3500 and #A4086 |
| KAS-SSC | Certs. #A3500 and #A4086 |
| KBKDF | Certs. #A3500 and #A4086 |
| KDA | Certs. #A3500 and #A4086 |
| KMAC | Certs. #A3500 and #A4086 |
| KTS | AES Certs. #A3500 and #A4086; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS | AES Certs. #A3500 and #A4086 and AES Certs. #A3500 and #A4086; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS | AES Certs. #A3500 and #A4086 and HMAC Certs. #A3500 and #A4086; key establishment methodology provides between 128 and 256 bits of encryption strength |
| KTS | Triple-DES Certs. #A3500 and #A4086 and HMAC Certs. #A3500 and #A4086; key establishment methodology provides 112 bits of encryption strength |
| KTS-RSA | Certs. #A3500 and #A4086; key establishment methodology provides between 112 and 256 bits of encryption strength |
| PBKDF | Certs. #A3500 and #A4086 |
| RSA | Certs. #A3500 and #A4086 |
| SHA-3 | Certs. #A3500 and #A4086 |
| SHS | Certs. #A3500 and #A4086 |
| Triple-DES | Certs. #A3500 and #A4086 |
Software Versions
3.0.8, 3.0.9
Vendor
Related Files
Validation History
| Date | Type | Lab |
|---|---|---|
| 8/23/2022 | Initial | Acumen Security |
| 3/10/2023 | Update | Acumen Security |
| 5/23/2023 | Update | Acumen Security |
| 1/22/2024 | Update | Acumen Security |
| 7/10/2024 | Update | Acumen Security |