FIPS 140-2 Level 1 Certificate References for Oracle Solaris Systems

The security policies for the FIPS 140 providers on an Oracle Solaris system document the module specifications and interfaces and provide a complete list of cryptographic mechanisms that are validated to run in FIPS 140 mode.

Table 1  FIPS 140 Certificates and Security Policies for Provider Modules in Oracle Solaris

Certificate Provider Module Security Policy 2077 Oracle Solaris Userland Cryptographic Framework http://www.oracle.com/technetwork/topics/security/140sp2077-2133432.pdf 2076 Oracle Solaris Userland Cryptographic Framework with SPARC T4 and SPARC T5 http://www.oracle.com/technetwork/topics/security/140sp2076-2133433.pdf 2061 Oracle Solaris Kernel Cryptographic Framework http://www.oracle.com/technetwork/topics/security/140sp2061-2082028.pdf 2060 Oracle Solaris Kernel Cryptographic Framework with SPARC T4 and SPARC T5 http://www.oracle.com/technetwork/topics/security/140sp2060-2082025.pdf 1747 OpenSSL FIPS Object Module Version 2 http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1747.pdf 1051 OpenSSL FIPS Object Module Version 1.2 http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1051.pdf

The following FIPS 140 standard document and Transitions document provide guidance about the FIPS 140 process and deprecated or restricted algorithms and their weaker variants:

• NIST Standards: FIPS PUB 140-2

• Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths