FIPS Algorithm Validation (ACVP)
Each certified module's cryptographic algorithms are individually validated through NIST's Cryptographic Algorithm Validation Program (CAVP). The tables below list the ACVP algorithm validation certificate numbers for each module, as documented in their NIST Security Policies.
Rocky Linux 8 Kernel Crypto API: #5095 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A5807, A5810, A5813, A5816 |
| AES-CBC-CS3 | A5807, A5810, A5816, A5819 |
| AES-CCM | A5807, A5810, A5816, A5819 |
| AES-CFB128 | A5807, A5810, A5816, A5819 |
| AES-CMAC | A5807, A5810, A5816, A5819 |
| AES-CTR | A5807, A5810, A5813, A5816 |
| AES-ECB | A5807, A5808, A5809, A5810 |
| AES-GCM | A5807, A5808, A5809, A5810, A5811, A5812, A5814, A5817 |
| AES-GMAC | A5807, A5810, A5816, A5819 |
| AES-KW | A5807, A5810, A5816, A5819 |
| Counter DRBG | A5807, A5808, A5809, A5810 |
| Hash DRBG | A5807, A5822, A5823, A5824 |
| HMAC-SHA-1 | A5807, A5822, A5823, A5824 |
| SHA-1 | A5807, A5822, A5823, A5824 |
| SHA2-224 | A5807, A5822, A5823, A5824 |
| SHA2-256 | A5807, A5822, A5823, A5824 |
| SHA2-384 | A5807, A5822, A5823, A5824 |
| SHA2-512 | A5807, A5822, A5823, A5824 |
| SHA3-224 | A5807 |
| SHA3-256 | A5807 |
| SHA3-384 | A5807 |
| SHA3-512 | A5807 |
Rocky Linux 9 Kernel Crypto API: #5113 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A5837, A5840, A5843 |
| AES-CBC-CS3 | A5837, A5840, A5843 |
| AES-CCM | A5837, A5840, A5846 |
| AES-CFB128 | A5837, A5840, A5846 |
| AES-CMAC | A5837, A5840, A5846 |
| AES-CTR | A5837, A5840, A5843 |
| AES-ECB | A5837, A5838, A5839 |
| AES-GCM | A5837, A5838, A5839, A5840, A5841, A5844 |
| AES-GMAC | A5837, A5840, A5846 |
| AES-KW | A5837, A5840, A5846 |
| AES-OFB | A5837, A5840, A5846 |
| Counter DRBG | A5837, A5838, A5839 |
| Hash DRBG | A5837, A5849, A5850 |
| HMAC-SHA-1 | A5837, A5849, A5850 |
| SHA-1 | A5837, A5849, A5850, A5851 |
| SHA2-224 | A5837, A5849, A5850 |
| SHA2-256 | A5837, A5849, A5850 |
| SHA2-384 | A5837, A5849, A5850 |
| SHA2-512 | A5837, A5849, A5850 |
| SHA3-224 | A5837 |
| SHA3-256 | A5837 |
| SHA3-384 | A5837 |
| SHA3-512 | A5837 |
Rocky Linux 9 OpenSSL FIPS Provider: #5116 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A6603, A6607, A6608 |
| AES-CBC-CS1 | A6603, A6607, A6608 |
| AES-CBC-CS2 | A6603, A6607, A6608 |
| AES-CBC-CS3 | A6603, A6607, A6608 |
| AES-CCM | A6603, A6607, A6608 |
| AES-CFB1 | A6603, A6607, A6608 |
| AES-CFB8 | A6603, A6607, A6608 |
| AES-CFB128 | A6603, A6607, A6608 |
| AES-CMAC | A6603, A6607, A6608 |
| AES-CTR | A6603, A6607, A6608 |
| AES-ECB | A6603, A6607, A6608 |
| AES-GCM | A6604, A6609, A6610, A6611, A6612 |
| AES-GMAC | A6604, A6609, A6610, A6611, A6612 |
| AES-KW | A6603, A6607, A6608 |
| AES-OFB | A6603, A6607, A6608 |
| Counter DRBG | A5957 |
| Hash DRBG | A5957 |
| EdDSA | A6328 |
| HMAC-SHA-1 | A6605, A6617, A6618, A6619 |
| HMAC-SHA3-224 | A6606 |
| HMAC-SHA3-256 | A6606 |
| HMAC-SHA3-384 | A6606 |
| HMAC-SHA3-512 | A6606 |
| KAS-IFC-SSC | A6605, A6617, A6618, A6619 |
| KTS-IFC | A6605, A6617, A6618, A6619 |
| CVL | A6605, A6606, A6617, A6618, A6619 |
| PBKDF | A6605, A6606, A6617, A6618, A6619 |
| SHA-1 | A6605, A6617, A6618, A6619 |
| SHA2-224 | A6605, A6617, A6618, A6619 |
| SHA2-256 | A6605, A6617, A6618, A6619 |
| SHA2-384 | A6605, A6617, A6618, A6619 |
| SHA2-512 | A6605, A6617, A6618, A6619 |
| SHA3-224 | A6606 |
| SHA3-256 | A6606 |
| SHA3-384 | A6606 |
| SHA3-512 | A6606 |
| TLS v1.3 KDF | A6601 |
Rocky Linux 8 and 9 libgcrypt: #5117 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A6114 |
| AES-CCM | A6114 |
| AES-CFB8 | A6114 |
| AES-CTR | A6114 |
| AES-ECB | A6114 |
| AES-KW | A6114 |
| AES-OFB | A6114 |
| HMAC-SHA3-224 | A6116, A6117, A6118 |
| HMAC-SHA3-256 | A6116, A6117, A6118 |
| HMAC-SHA3-384 | A6116, A6117, A6118 |
| HMAC-SHA3-512 | A6116, A6117, A6118 |
| PBKDF | A6114, A6115, A6116, A6117, A6118, A6122, A6123, A6124, A6125, A6126 |
| SHA-1 | A6113, A6114, A6115, A6116, A6117, A6118, A6121, A6122, A6123, A6124, A6125, A6126 |
| SHA2-224 | A6114, A6115, A6116, A6117, A6118, A6122, A6123, A6124, A6125, A6126 |
| SHA2-256 | A6114, A6115, A6116, A6117, A6118, A6122, A6123, A6124, A6125, A6126 |
| SHA2-384 | A6114, A6115, A6116, A6117, A6118, A6122, A6123, A6124, A6125, A6126 |
| SHA2-512 | A6114, A6115, A6116, A6117, A6118, A6122, A6123, A6124, A6125, A6126 |
| SHA3-224 | A6116, A6117, A6118, A6124, A6125, A6126 |
| SHA3-256 | A6116, A6117, A6118, A6124, A6125, A6126 |
| SHA3-384 | A6116, A6117, A6118, A6124, A6125, A6126 |
| SHA3-512 | A6116, A6117, A6118, A6124, A6125, A6126 |
Rocky Linux 8 OpenSSL: #5200 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A6738, A6739 |
| AES-CCM | A6738, A6739 |
| AES-CFB1 | A6738, A6739 |
| AES-CFB8 | A6738, A6739 |
| AES-CFB128 | A6738, A6739 |
| AES-CMAC | A6738, A6739 |
| AES-CTR | A6738, A6739 |
| AES-ECB | A6738, A6739 |
| AES-GCM | A6741, A6742 |
| AES-GMAC | A6741, A6742 |
| AES-KW | A6738, A6739 |
| AES-OFB | A6738, A6739 |
| Counter DRBG | A6738, A6739 |
| CVL | A6751, A6753 |
| EdDSA | A6763 |
| HMAC-SHA-1 | A6750, A6752 |
| PBKDF | A6750, A6752, A6754, A6756, A6758, A6760 |
| SHA-1 | A6750, A6752, A6754, A6756, A6758 |
| SHA2-224 | A6750, A6752 |
| SHA2-256 | A6750, A6752, A6754, A6756, A6758 |
| SHA2-384 | A6750, A6752 |
| SHA2-512 | A6750, A6752, A6754, A6756, A6758 |
| SHA3-224 | A6760 |
| SHA3-256 | A6760 |
| SHA3-384 | A6760 |
| SHA3-512 | A6760 |
| TLS | A6750, A6752 |
Rocky Linux 8 and 9 NSS: #5337 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A5915, A5917, A5921, A5923 |
| AES-CBC-CS1 | A5915, A5917, A5921, A5923 |
| AES-CMAC | A5915, A5917, A5921, A5923 |
| AES-CTR | A5915, A5917, A5921, A5923 |
| AES-ECB | A5915, A5917, A5921, A5923 |
| AES-GCM | A5915, A5917, A5918, A5921, A5923, A5924 |
| AES-KW | A5915, A5917, A5921, A5923 |
| Hash DRBG | A5915, A5921 |
| PBKDF | A5915, A5921 |
| SHA2-224 | A5915, A5919, A5921, A5925 |
| SHA2-256 | A5915, A5919, A5921, A5925 |
| SHA2-384 | A5915, A5919, A5921, A5925 |
| SHA2-512 | A5915, A5919, A5921, A5925 |
Rocky Linux 8 and 9 GnuTLS: #5350 (Security Policy)
| Algorithm | ACVP Cert(s) |
|---|---|
| AES-CBC | A6464 |
| AES-CCM | A6464, A6476 |
| AES-CFB8 | A6469, A6470, A6475 |
| AES-CMAC | A6464, A6467, A6472 |
| AES-ECB | A6520, A6533 |
| AES-GCM | A6464 |
| AES-GMAC | A6472, A6484 |
| Counter DRBG | A6472, A6484 |
| HMAC-SHA-1 | A6467, A6472, A6479 |
| PBKDF | A6472, A6484 |
| SHA-1 | A6467, A6472, A6479, A6484 |
| SHA2-224 | A6467, A6472, A6479 |
| SHA2-256 | A6467, A6472, A6479, A6484 |
| SHA2-384 | A6467, A6472, A6479 |
| SHA2-512 | A6467, A6472, A6479 |
| SHA3-224 | A6468, A6474, A6480, A6486 |
| SHA3-256 | A6468, A6474, A6480, A6486 |
| SHA3-384 | A6468, A6474, A6480, A6486 |
| SHA3-512 | A6468, A6474, A6480, A6486 |