Skip to content

FIPS 140-3 Cryptographic Module Status

This page tracks the FIPS 140-3 certification status of all cryptographic modules across RLC Pro Hardened versions.

Status Definitions

  • CMVP (Validated/Certified) — The module has completed NIST validation and holds an active FIPS 140-3 certificate. It is approved for use in environments requiring FIPS compliance.
  • MIP (Modules In Process) — The module has been approved by the testing lab and submitted to NIST for validation. The NIST review process typically takes at least 12 months. MIP modules have completed lab testing but are awaiting final NIST certification.

Certified Modules (CMVP)

The following modules have completed NIST validation and hold active FIPS 140-3 certificates.

Certificate # Module Name RLC Pro Versions Validation Date
5117 Rocky Linux 8 and 9 libgcrypt Cryptographic Module 8.6, 8.10, 9.2, 9.6 January 6, 2026
5116 Rocky Linux 9 OpenSSL FIPS Provider 9.2, 9.6 January 6, 2026
5113 Rocky Linux 9 Kernel Cryptographic API 9.2 December 18, 2025
5095 Rocky Linux 8 Kernel Cryptographic API 8.6, 8.10 November 24, 2025

Modules In Process (MIP)

The following modules have completed testing and have been submitted to NIST for validation.

Module RLC Pro Versions Submitted to NIST
OpenSSL 8.6, 8.10 January 2025
GnuTLS 8.6, 8.10, 9.2 January 2025
NSS 8.6, 8.10, 9.2 December 2024
GnuTLS 9.6 October 2025
Kernel 9.6 October 2025
NSS 9.6 January 2026

Coverage by Version

Module RLC Pro 8.6 RLC Pro 8.10 RLC Pro 9.2 RLC Pro 9.6
Kernel Certified Certified Certified MIP
OpenSSL MIP MIP Certified Certified
libgcrypt Certified Certified Certified Certified
GnuTLS MIP MIP MIP MIP
NSS MIP MIP MIP MIP

Last updated: March 16, 2026