*** NOTE: Module descriptions were provided by the vendors, and their contents have not been verified for accuracy by NIST or CSE. The descriptions do not imply endorsement by the U.S. or Canadian Governments or NIST. Additionally, the descriptions may not necessarily reflect the capabilities of the modules when operated in the FIPS-approved mode. The algorithms, protocols, and cryptographic functions listed as "other algorithms" (non-FIPS-approved algorithms) have not been validated or tested through the CMVP. ***
Questions regarding modules on this list should first be directed to the appropriate vendor.
Cert# | Vendor | Cryptographic Module | Val. Date |
Level / Description | |
---|---|---|---|---|---|
84 | Pitney Bowes, Inc. 35 Waterview Dr Shelton, CT 06484 USA -David Riley
|
(ID: CCV assembly, ClickStamp™ Online CCV 1.40.5 and 1.40.23; KMS, K180034-AAA; IBM 4758-001 Cert. #35) Validated to FIPS 140-1 Security Policy |
Hardware | 12/22/1999; 08/21/2001 |
Overall Level: 3
-Physical Security: Level 4 +EFP/EFT
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #23); Triple-DES (vendor affirmed) -Other algorithms: DES (Cert. #58); RSA Multi-chip embedded"The module provides security services to support the secure accounting and cryptographic functions necessary for value evidencing of electronic transactions, such as the United States Postal Service Information-Based Indicium Program (USPS IBIP)." |
83 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Glenn Constable
|
(Firmware versions 1.25 and 1.26) Validated to FIPS 140-1 Security Policy |
Hardware | 12/22/1999; 12/04/2003; 10/18/2004 |
Overall Level: 2
-Physical Security: Level 3
-Software Security: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #5); Triple-DES (DES Certs. #11 and #26, vendor affirmed) -Other algorithms: DES (Certs. #11 and #26); Diffie-Hellman (key agreement) Multi-chip standalone"Cylink Link Encryptors secure sensitive data transmitted over high-speed, point-to-point communication links. The system supports synchronous, full-duplex data rates up to 2 Mbps over public and private data networks." |
82 | Motorola, Inc. Secure Design Center IL02 Room 0509A 1301 East Algonquin Rd Schaumburg, IL 60196 USA -Geoff Hobar
|
(Software versions 3.40, 3.43, 3.44, 3.46, 3.47 and 3.53a) (When operated in FIPS mode by selecting the DES algorithm
Universal Crypto Module (UCM), (v3.44)) Revoked |
Hardware | 12/22/1999; 03/30/2001; 08/17/2001; 10/04/2001; 05/15/2002; 09/10/2002 |
Overall Level: 1
-Roles & Services: Level 2
-Software Security: Level 3
-FIPS-approved algorithms: Triple-DES (vendor affirmed) -Other algorithms: DES; DES-XL, DVP-XL, DVI-XL, DVI-SPFL Multi-chip embedded"Encryption modules used in Motorola Astro™ Saber, Astro™ Spectra, Astro™ Consolette, and XTS3000 radios. Provides secure voice and data capabilities as well as APCO Over-the-Air-Rekeying and advanced key management." |
81 | IBM® Corporation 2455 South Rd Mail Station P339 Poughkeepsie, NY 12601-5400 USA -Helmy El-Sherif
|
(ID: PN IBM 4758-013, Miniboot 0 version B, Miniboot 1 version B) Validated to FIPS 140-1 Security Policy |
Hardware | 11/29/1999 | Overall Level: 3
-Physical Security: Level 3 +EFP/EFT
-Cryptomodule Design: Level 4 -Module Interfaces: Level 4 -Roles& Services: Level 4 -Finite State Machine Model: Level 4 -Software Security: Level 4 -EMI/EMC: Level 4 -Self Tests: Level 4 -Key Mgmnt.: Level 4 -FIPS-approved algorithms: DSA/SHA-1 (Cert. #16); Triple-DES (vendor affirmed) -Other algorithms: DES (Cert. #41); RSA Multi-chip embedded"The 4758 is a tamper-responding, programmable, cryptographic PCI card, containing CPU, encryption hardware, RAM, EEPROM, hardware random number generator, time of day clock, firmware, and software." |
80 | Dallas Semiconductor, Inc. 4401 Beltwood Pkwy Dallas, TX 75244-3292 USA -Mr. Dennis Jarrett
|
(ID: B7-V1.02) (When using vendor-initialized SHA-1 in transaction group 1 NOTE: This validation supersedes validation certificate #63.) Validated to FIPS 140-1 Security Policy |
Hardware | 11/29/1999 | Overall Level: 3
-Physical Security: Level 3 +EFP
-FIPS-approved algorithms: SHA-1 (Cert. #8) -Other algorithms: MD5, RSA Multi-chip standalone"Inside the steel perimeter, the secure accounting and cryptographic services are performed to meet the requirements of the United States Postal Service Information Based Indicia Program. See Cert. #41." |
79 | Motorola, Inc. Secure Design Center IL02 Room 0509A 1301 East Algonquin Rd Schaumburg, IL 60196 USA -Jennifer Mitchell
|
(Hardware version CLN6738B; Firmware version R02.50.00) (When operated in FIPS mode by selection of the DES algorithm) Revoked |
Hardware | 11/29/1999 | Overall Level: 1
-FIPS-approved algorithms: -Other algorithms: DES (Cert. #5); DES-XL, DVP-XL, DVI-XL, DVI-SPEL Multi-chip standalone"The KVL3000 Key Variable Loader is a battery-powered portable unit used to create, store, and transfer encryption keys used by Motorola's secure communications products. The KVL3000 supports the following Motorola encryption protocols: SECURENET(TM), Advanced SECURENET(TM), ASTRO(TM), and ASTRO(TM)25 systems." |
78 | SPYRUS, Inc. 2355 Oakland Road Suite 1 San Jose, CA 95131 USA -Tom Dickens
|
(Hardware version 2.0; firmware version 1.2) (For services provided by the listed FIPS-approved algorithms) Validated to FIPS 140-1 Security Policy |
Hardware | 11/29/1999 | Overall Level: 2
-FIPS-approved algorithms: Skipjack (Cert. #1); DSA/SHA-1 (Cert. #1); Triple-DES (vendor affirmed) -Other algorithms: DES (Cert. #50); RSA, Diffie-Hellman (key agreement), KEA, MD5 Multi-chip standalone"The SPYRUS family of LYNKS Privacy Card tokens provides high performance, high assurance cryptographic processing in a personal, portable PC card form factor. The LYNKS Privacy Card product enables security- critical capabilities such as user authentication, message privacy and integrity, authentication, and secure storage in rugged, tamper-evident hardware." |
77 | Attachmate Corporation 424 Wards Corner Road Loveland, OH 45140 USA -Bill Evans
|
(Version 2.2.1) (For services provided by the listed FIPS-approved algorithms) Validated to FIPS 140-1 Security Policy |
Software | 11/29/1999 | Overall Level: 1
-EMI/EMC: Level 3
-Operating System Security: Tested as meeting Level 1 with Microsoft Windows95, Windows98, and WindowsNT 4.0, with SP3 or later (single- user mode).
-FIPS-approved algorithms: Triple-DES (vendor affirmed); DSA/SHA-1 (Cert. #18) -Other algorithms: DES (Cert. #46); RSA (encryption), RC2, RC4 Multi-chip standalone"CryptoConnect ETS is an INFOConnect transport system that provides encryption of all data between Attachmate's PEP/UTS client and Unisys 2200/ClearPath/IX Systems." |
76 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
|
(Version 5.0.2150.1) (For services provided by the listed FIPS-approved algorithms) Validated to FIPS 140-1 Security Policy |
Software | 11/09/1999; 10/15/2007 |
Overall Level: 1
-EMI/EMC: Level 3
-Operating System Security: Tested as meeting Level 1 with Microsoft Windows2000 (operated in single-user mode).
-FIPS-approved algorithms: Triple-DES (vendor affirmed); DSA/SHA-1 (Certs. #28 and 29); RSA (vendor affirmed) -Other algorithms: DES (Certs. #65, 66, 67 and 68); RC2, RC4, MD2, MD4, MD5; Diffie-Hellman (key agreement) Multi-chip standalone"These are general-purpose software-based cryptomodules. They provide services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation." |
75 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
|
(Version 5.0.1877.6 and 5.0.1877.7) (For services provided by the listed FIPS-approved algorithms) Validated to FIPS 140-1 Security Policy |
Software | 11/09/1999; 10/15/2007 |
Overall Level: 1
-EMI/EMC: Level 3
-Operating System Security: Tested as meeting Level 1 with Microsoft Windows95 and Windows98 (operated in single-user mode).
-FIPS-approved algorithms: Triple-DES (vendor affirmed); SHA-1 (Certs. #20 and 21); DSA/SHA-1 (Certs. #25 and 26); RSA (vendor- affirmed) -Other algorithms: DES (Certs. #61, 62, 63 and 64); RC2, RC4, MD2, MD4, MD5; Diffie-Hellman (key agreement) Multi-chip standalone"These are general-purpose software-based cryptomodules. They provide services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation." |
74 | RedCreek Communications 3900 Newpark Mall Rd Newark, CA 94056 USA -Nicholas Brigman, Product Marketing
|
(Hardware v08; Firmware v3.32 Standard) (For services provided by the listed FIPS-approved algorithms) Validated to FIPS 140-1 Security Policy |
Hardware | 11/04/1999 | Overall Level: 2
-FIPS-approved algorithms: Triple-DES (vendor affirmed); DSA/SHA-1 (Cert. #22) -Other algorithms: DES (Cert. #53); MD5 Multi-chip standalone"The Personal Ravlin is a cost-effective network security solution. It addresses the needs of individual remote users who access corporations via cable, xDSL, and ISDN modems. It is also an ideal solution for network administrators who seek to establish private communications within a corporate intranet by providing security at the desktop level." |
73 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Glenn Constable
|
(Firmware v1.25 and v1.26) Validated to FIPS 140-1 Security Policy |
Hardware | 10/25/1999; 12/04/2003; 10/18/2004 |
Overall Level: 2
-Physical Security: Level 3
-Software Security: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #5) -Other algorithms: DES (Certs. #11 and #26); Triple-DES (allowed for US and Canadian Government use); Diffie-Hellman (key agreement) Multi-chip standalone"Cylink Link Encryptors secure sensitive data transmitted over high-speed, point-to-point communication links. The system supports synchronous, full-duplex data rates up to 2 Mbps over public and private data networks." |
72 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Glenn Constable
|
(Firmware v1.25 and v1.26) Validated to FIPS 140-1 Security Policy |
Hardware | 10/25/1999; 12/04/2003; 10/18/2004 |
Overall Level: 2
-Physical Security: Level 3
-Software Security: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #5) -Other algorithms: DES (Certs. #11 and #26); Triple-DES (allowed for US and Canadian Government use); Diffie-Hellman (key agreement) Multi-chip standalone"Cylink Link Encryptors secure sensitive data transmitted over high-speed, point-to-point communication links. The system supports synchronous, full-duplex data rates up to 2 Mbps over public and private data networks." |
71 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Glenn Constable
|
(Firmware v4.02 and v4.04; Hardware revisions 4 and 5) (When operated in FIPS mode) Validated to FIPS 140-1 Security Policy |
Hardware | 09/13/1999; 12/04/2003; 10/18/2004 |
Overall Level: 3
-Module Interfaces: Level 3*
-Roles and Services: Level 3* *(Level 3 - Console interface disabled; Level 2 - Console interface enabled.) -FIPS-approved algorithms: DSA/SHA-1 (Cert. #5) -Other algorithms: DES (Certs. #11 and #20); Triple-DES (allowed for US and Canadian Government use); Diffie-Hellman (key agreement) Multi-chip standalone"Cylink Frame Encryptors secure sensitive data transmitted over high-speed, Frame Relay communication links." |
70 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Glenn Constable
|
(Firmware v4.02 and v4.04; Hardware revisions 4 and 5) (When operated in FIPS mode) Validated to FIPS 140-1 Security Policy |
Hardware | 09/13/1999; 07/18/2002; 12/04/2003; 10/18/2004 |
Overall Level: 3
-Module Interfaces: Level 3*
-Roles and Services: Level 3* *(Level 3 - Console interface disabled; Level 2 - Console interface enabled.) -FIPS-approved algorithms: DSA/SHA-1 (Cert. #5) -Other algorithms: DES (Certs. #11 and #20); Triple-DES (allowed for US and Canadian Government use); Diffie-Hellman (key agreement) Multi-chip standalone"Cylink Frame Encryptors secure sensitive data transmitted over high-speed, Frame Relay communication links." |
69 | Mykotronx, Inc. 357 Van Ness Way Suite 200 Torrance, CA 90501 USA -Kevin Cook
|
(Part Number 650000-2) Validated to FIPS 140-1 Security PolicyVendor Product Link |
Hardware | 09/13/1999 | Overall Level: 2
-EMI/EMC: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #2); Skipjack (Cert. #2) -Other algorithms: KEA Multi-chip standalone"The Mykotronx FORTEZZA card is a PC Card hardware token for advanced cryptography and authorization methods. The card incorporates the National Security Agency-certified CAPSTONE RISC-based cryptographic processor." |
68 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
|
(Version 5.0.1877.6 and 5.0.1877.7) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Software | 09/13/1999; 10/15/2007 |
Overall Level: 1
-EMI/EMC: Level 3
-Operating System Security: Tested as meeting Level 1 with Microsoft WindowsNT 4.0 with Service Pack 6 (operated in single-user mode).
-FIPS-approved algorithms: SHA-1 (Certs. #20 and 21); DSA/SHA- 1 (Certs. #25 and 26); RSA (vendor affirmed) -Other algorithms: DES (Certs. #61, 62, 63 and 64); Triple-DES (allowed for US and Canadian Government use); RC2, RC4, MD2, MD4, MD5; Diffie-Hellman (key agreement) Multi-chip standalone"These are general-purpose software-based cryptomodules. They provide services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation." |
67 | Admiral Secure Products, Ltd. 866 Mantle Crescent Mississauga, Ontario L5V 2G3 Canada -Alex Chartier
|
(ID: firmware version 2.21) (When operated in FIPS mode using the listed FIPS-approved algorithms, and Triple DES not valid for FS1000 interoperability) Validated to FIPS 140-1 Security Policy |
Firmware | 09/13/1999; 10/24/2002 |
Overall Level: 3
-Self Tests: Level 4
-FIPS-approved algorithms: SHA-1 (Cert. #15) -Other algorithms: DES (Cert. #42); Triple-DES (allowed for US and Canadian Government use); ECDSA; ECMQV2; Discrete Log Diffie-Hellman (key agreement) Multi-chip standalone"CERTIFAX 3000 secures sensitive facsimile communications from inadvertent or intentional disclosure. CERTIFAX ensures faxes get to the intended recipient every time, that the contents are never disclosed to unauthorized parties, that the sender is who it claims to be, and that the message is always kept private and unaltered. CERTIFAX provides two-way authentication using Certicom's Elliptic Curve Cryptography, and strong encryption using Triple DES. CERTIFAX's secure mailbox memory provides storage and retrieval for incoming faxes, and CERTIFAX can support up to 99 secure Virtual Private Fax Networks. The CF3102 also implements a non-FIPS mode for communications with Certicom's Legacy Fax Secret 1000 fax encryptor." |
66 | Thales e-Security 2200 North Commerce Parkway Suite 200 Weston, FL 33326 USA -Juan C. Asenjo
|
(Hardware Version Issue 2 Motherboard; Software Version 1.02.36) (When key zeroization is enabled) Validated to FIPS 140-1 Security PolicyVendor Product Link |
Hardware | 09/08/1999; 01/08/2003; 05/19/2003; 10/13/2005 |
Overall Level: 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #24) -Other algorithms: DES (Cert. #57); Triple-DES (allowed for US and Canadian Government use), Diffie-Hellman (key agreement) Multi-chip standalone"The Datacryptor 2000 is a stand-alone multi-chip cryptographic module that secures communications using signed Diffie-Hellman key exchange and Triple-DES encryption. The unit also provides integrated secure unit management capability employing the same techniques used for traffic encryption." |
65 | RedCreek Communications 3900 Newpark Mall Rd Newark, CA 94056 USA -Nicholas Brigman, Product Marketing
|
(Hardware v 09; Software v 3.32 Radius) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Hardware | 09/08/1999 | Overall Level: 2
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #22) -Other algorithms: DES (Cert. #53); Triple-DES (allowed for US and Canadian Government use), MD5 Multi-chip standalone"The Ravlin 10/5100 is a network security solution that performs encryption and decryption with a throughput of the theoretical maximum of Ethernet (or wire speed). Network administrators use it to establish private communications within secure intranets (between corporate divisions, workgroups, branch offices, and individuals) or within secure extranets (between customers, suppliers, and strategic partners). This may be done over private or public IP networks." |
64 | PGP Corporation 3460 West Bayshore Palo Alto, CA 94303 USA -Jon Callas
|
(Version 1.5) (When operated in FIPS mode using the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Software | 08/26/1999; 02/20/2003 |
Overall Level: 2
-Operating System Security: Tested as meeting Level 2 with Compaq DeskPro 5/166 w/ WindowsNT Workstation 3.51 w/ Service Pack 4 (ITSEC-rated).
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #20) -Other algorithms: DES (Cert. #40); Triple-DES (allowed for US Government use), RSA, El Gamal, CAST5, IDEA, MD5, RIPEMD60, HMAC, Shamir Threshold Secret Sharing Multi-chip standalone"The PGP SDK provides all cryptographic and key management functionality for the PGP suite of products, including PGP Desktop Security, PGPnet VPN Client, PGPdisk and the PGP Certificate Server. This is a high-level toolkit for use with C/C++ applications on Windows. It also supports PGP/MIME, TLS, Certificate Server management, LDAP, and Blakely-Shamir Key Splitting, as well as many user interface components for simple integration into other applications. PGP SDK implements only strong cryptography, and the source code is published in book form for peer review." |
63 | Dallas Semiconductor, Inc. 4401 Beltwood Pkwy Dallas, TX 75244-3292 USA -Mr. Dennis Jarrett
|
(ID: B7-V1.02) (When using vendor-initialized SHA-1 in transaction group 1 NOTE: This validation is superseded by validation certificate #80.) Validated to FIPS 140-1 Security Policy |
Hardware | 08/26/1999 | Overall Level: 3
-Physical Security: Level 3 +EFP
-FIPS-approved algorithms: SHA-1 (Cert. #8) -Other algorithms: MD5, RSA Multi-chip standalone"Inside the steel perimeter, the secure accounting and cryptographic services are performed to meet the requirements of the United States Postal Service Information Based Indicia Program. See Cert. #41." |
62 | Francotyp-Postalia Triftweg 21-26 Birkenwerder, D-16547 Germany |
(Software Version 1.1; Hardware Version 1.0) (When operated in FIPS mode using using Triple DES) Validated to FIPS 140-1 Security Policy |
Hardware | 08/17/1999 | Overall Level: 2
-Physical Security: Level 3
-Key Management: Level 3 -Module Interfaces: Level 3 -Software Security: Level 3 -Self Tests: Level 3 -EMI/EMC: Level 3 -FIPS-approved algorithms: -Other algorithms: DES (Cert. #59); Triple-DES (allowed for US Government use) Multi-chip embedded"The FPSM is a multi-chip embedded cryptomodule. The FPSM is embedded in Postage Meters and provides security services to support the secure accounting and cryptographic functions necessary to implement a value evidencing apparatus." |
61 | Kasten Chase Applied Research, Ltd. 5100 Orbitor Drive Mississauga, Ontario L4W 4Z4 Canada -Cyril Fernandes
|
(Hardware Version 1.5; Software Version p1.81) Validated to FIPS 140-1 Security Policy |
Hardware | 08/11/1999 | Overall Level: 1
-EMI/EMC: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #2); Skipjack (Cert. #2) -Other algorithms: Multi-chip standalone |
60 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
|
(Version 5.0.1998.1) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Software | 08/05/1999; 10/15/2007 |
Overall Level: 1
-EMI/EMC: Level 3
-Operating System Security: Tested as meeting Level 1 with Microsoft WindowsNT 4.0 with Service Pack 4 (operated in single-user mode).
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #17) -Other algorithms: DES (Cert. #45); Triple-DES (allowed for US Government use); RC2, RC4, MD5; Diffie-Hellman (key agreement) Multi-chip standalone"Microsoft's DSSENH is a general-purpose software-based cryptographic module. It provides services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation." |
59 | Admiral Secure Products, Ltd. 866 Mantle Crescent Mississauga, Ontario L5V 2G3 Canada -Alex Chartier
|
(ID: firmware version 2.20) (When operated in FIPS mode) Validated to FIPS 140-1 Security Policy |
Firmware | 08/05/1999; 10/24/2002 |
Overall Level: 3
-Self Tests: Level 4
-FIPS-approved algorithms: SHA-1 (Cert. #15) -Other algorithms: DES (Cert. #42); Triple-DES (allowed for US Government use); ECDSA; ECMQV2; Discrete Log Diffie-Hellman (key agreement) Multi-chip standalone"CERTIFAX 3000 secures sensitive facsimile communications from inadvertent or intentional disclosure. CERTIFAX ensures faxes get to the intended recipient every time, that the contents are never disclosed to unauthorized parties, that the sender is who it claims to be, and that the message is always kept private and unaltered. CERTIFAX provides two-way authentication using Certicom's Elliptic Curve Cryptography, and strong encryption using Triple DES. CERTIFAX's secure mailbox memory provides storage and retrieval for incoming faxes, and CERTIFAX can support up to 99 secure Virtual Private Fax Networks." |
58 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 Canada -Randy Kun
|
(Firmware versions 3.2, 3.9 and 3.93) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Hardware | 08/05/1999; 09/14/2001; 10/18/2004 |
Overall Level: 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #13); RSA (vendor affirmed) -Other algorithms: DES (Cert. #32); Triple-DES (allowed for US Government use) CAST, CAST3, CAST5, RC2, RC4, MD2, MD5; Diffie-Hellman (key agreement) Multi-chip standalone |
57 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Randy Kun
|
(Firmware version 3.2) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Hardware | 08/05/1999; 10/18/2004 |
Overall Level: 2
-Software Security: Level 3
-Self Tests: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #13); RSA (vendor affirmed) -Other algorithms: DES (Cert. #32); Triple-DES (allowed for US Government use) CAST, CAST3, CAST5, RC2, RC4, RC5, MD2, MD5; Diffie-Hellman (key agreement) Multi-chip standalone"LunaCA is a hardware crypto engine for identification and authentication (I&A) and digital signing; supports encryption/decryption and random number generation. Its target is certification authority systems that require a secure key generation and signing capability. LunCA is a token based on the PCMCIA standard - now known as PC Card." |
56 | SafeNet, Inc. 4690 Millennium Drive Belcamp, MD 21017 USA -Randy Kun
|
(Firmware versions 3.2 and 3.9) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Hardware | 08/08/1999; 09/14/2001; 10/18/2004 |
Overall Level: 2
-Software Security: Level 3
-Self Tests: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #13); RSA (vendor affirmed) -Other algorithms: DES (Cert. #32); Triple-DES (allowed for US Government use) CAST, CAST3, CAST5, RC2, RC4, RC5, MD2, MD5; Diffie-Hellman (key agreement) Multi-chip standalone"Luna2 is a hardware crypto engine for identification and authentication (I&A) and digital signing; supports encryption/decryption and random number generation. Its target is certification authority systems that require a secure key generation and signing capability. Luna2 is a token based on the PCMCIA standard - now known as PC Card." |
55 | Admiral Secure Products, Ltd. 866 Mantle Crescent Mississauga, Ontario L5V 2G3 Canada -Alex Chartier
|
(Hardware version R4, firmware version R1.4.1) Validated to FIPS 140-1 Security Policy |
Hardware | 06/21/1999; 10/24/2002 |
Overall Level: 2
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #19) -Other algorithms: DES (Cert. #51); Triple-DES (allowed for US Government use); EC-DH Multi-chip embedded |
54 | TimeStep Corporation 359 Terry Fox Dr Kanata, Ontario K2K 2E7 Canada -Brett Howard
|
(Hardware version 1.20) (When operated in FIPS mode) Validated to FIPS 140-1 Security Policy |
Hardware | 06/15/1999 | Overall Level: 2
-Software Security: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #21) -Other algorithms: DES; Triple-DES (allowed for US Government use), MD5 Multi-chip standalone"PERMIT/Gate 2520(TM) is a high-speed VPN component of the PERMIT(TM) Enterprise product suite. It is a tamper-resistant gateway that secures data communications for Intranets, Extranets, and Internet remote access. The 2520 has 4Mbps throughput." |
53 | TimeStep Corporation 359 Terry Fox Dr Kanata, Ontario K2K 2E7 Canada -Brett Howard
|
(Hardware version 1.20) (When operated in FIPS mode) Validated to FIPS 140-1 Security Policy |
Hardware | 06/15/1999 | Overall Level: 2
-Software Security: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #21) -Other algorithms: DES; Triple-DES (allowed for US Government use), MD5 Multi-chip standalone"PERMIT/Gate 4520(TM) is a high-speed VPN component of the PERMIT(TM) Enterprise product suite. It is a tamper-resistant gateway that secures data communications for Intranets, Extranets, and Internet remote access. The 4520 has 10Mbps throughput. The 4520 is the same as the 2520, except that the 4520 has a faster CPU, running at a higher bus frequency." |
52 | Admiral Secure Products, Ltd. 866 Mantle Crescent Mississauga, Ontario L5V 2G3 Canada -Alex Chartier
|
(ID: firmware version 2.2) (When operated in FIPS mode) Validated to FIPS 140-1 Security Policy |
Hardware | 06/15/1999; 10/24/2002 |
Overall Level: 3
-Self Tests: Level 4
-FIPS-approved algorithms: SHA-1 (Cert. #15) -Other algorithms: DES (Cert. #42); Triple-DES (allowed for US Government use); ECDSA; ECMQV2 Multi-chip standalone"CERTIFAX 3000 secures sensitive facsimile communications from inadvertent or intentional disclosure. CERTIFAX provides two-way authentication using Certicom's Elliptic Curve Cryptography, and strong encryption using Triple DES. CERTIFAX can support up to 99 secure Virtual Private Fax Networks." |
51 | Pitney Bowes, Inc. 1 Elmcroft Rd Stamford, CT 06926-0700 USA -Frederick W. Ryan, Jr.
|
(Part #P200, Version AAA; Version AAB - 03/15/2000) (Validated only for the DES MAC authenticated services: Credit, Put IBIP Data, and Zeroize Keys) Revoked |
Hardware | 05/10/1999 | Overall Level: 3
-FIPS-approved algorithms: SHA-1 (Cert. #11) -Other algorithms: DES (Cert. #35); RSA Multi-chip standalone"The module provides security services to support the secure accounting and cryptographic functions necessary for value evidencing of electronic transactions, such as the United States Postal Service Information-Based Indicium Program (USPS IBIP)." |
50 | RSA Security, Inc. 177 Bovet Road Suite 200 San Mateo, CA 94402-3118 USA -Kathy Kriese
|
(Software Version 4.11) (For services provided by the listed FIPS-approved algorithms and using Triple DES) Validated to FIPS 140-1 Security Policy |
Software | 04/29/1999; 01/04/2008 |
Overall Level: 1
-EMI/EMC: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #18) -Other algorithms: DES (Cert. #46); Triple-DES (allowed for US Government use), RSA, MD2, MD5, HMAC, DESX, RC2, RC4, Elliptic Curve (F2&Fp), Elliptic Curve Encryption Scheme, Elliptic Curve DSA; Bloom-Shamir Multi-chip standalone"Cryptographic Toolkit provides cryptographic services to calling applications." |
49 | Intel Network Systems, Inc. 2 Eva Road Suite 220 Toronto, Ontario M9C 2A8 Canada -Robert Eng
|
(Firmware version V6.59) Validated to FIPS 140-1 Security Policy |
Hardware | 04/28/1999 | Overall Level: 2
-Software Security: Level 3
-EMI/EMC: Level 3
-FIPS-approved algorithms: SHA-1 (Cert. #18) -Other algorithms: DES; Triple-DES (allowed for US Government use) Multi-chip standalone"The LRVG is a network packet encryption device which incorporates firewall and tunneling functionality compatible with a variety of protocols over Ethernet, V.35, and RS-232." |
48 | SPYRUS, Inc. 2355 Oakland Road Suite 1 San Jose, CA 95131 USA -Tom Dickens
|
(Hardware Version 0.1, Firmware v0.5, v0.6 and v0.7) Jumbo FORTEZZA Crypto Card Validated to FIPS 140-1 Security Policy |
Hardware | 04/23/1999; 05/14/2001; 06/18/2003 |
Overall Level: 2
-FIPS-approved algorithms: Skipjack (Cert. #1); DSA/SHA-1 (Cert. #1) -Other algorithms: KEA Multi-chip standalone"SPYRUS's FORTEZZA is a PC Card that is used to provide cryptographic services." |
47 | Netscape Communications Corporation 6905 Rockledge Dr Suite 820 Bethesda, MD 20817 USA -Ed Hicks
|
(ID: fipscm_v1.01) (When operated in FIPS mode) Validated to FIPS 140-1 |
Software | 03/17/1999 | Overall Level: 2
-Physical Security: Level 2 met when correctly implementing the tamper evident mechanism specified in the security policy.
-Operating System Security: Tested as meeting Level 2 with Sun Ultra-5 w/ Sun Trusted Solaris version 2.5.1 (ITSEC-rated).
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #14); RSA (vendor affirmed) -Other algorithms: DES (Certs. #33 and #34); Triple-DES (allowed for US Government use), RC2, RC4, MD2, MD5 Multi-chip standalone"Security module used in various Netscape products." |
46 | SPYRUS, Inc. 2355 Oakland Road Suite 1 San Jose, CA 95131 USA -Tom Dickens
|
(Firmware version 9012) Validated to FIPS 140-1 Security Policy |
Hardware | 03/17/1999 | Overall Level: 2
-Physical Security: Level 3 +EFT
-FIPS-approved algorithms: Skipjack (Cert. #1); DSA/SHA-1 (Cert. #1) -Other algorithms: Multi-chip standalone |
45 | Netscape Communications Corporation 6905 Rockledge Dr Suite 820 Bethesda, MD 20817 USA -Ed Hicks
|
(ID: fipscm_v1.01) (When operated in FIPS mode) Validated to FIPS 140-1 |
Software | 03/17/1999 | Overall Level: 1
-Operating System Security: meets Level 1 for WindowsNT 4.0 workstation (operated in single user mode).
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #14); RSA (vendor affirmed) -Other algorithms: DES (Certs. #33 and #34); Triple-DES (allowed for US Government use), RC2, RC4, MD2, MD5 Multi-chip standalone"Security module used in various Netscape products." |
44 | M/A-Com, Inc. 221 Jefferson Ridge Parkway Lynchburg, VA 24501 USA -John Casler
|
VHF range: 136-174 MHz UHF range: 378-500 MHz 800 range: 806-870 MHz (Hardware Versions: PK1GEXE, PK1PEXE, PK1XEXE, PK18EXE, PK2GEXE, PK2PEXE, PK2XEXE, PK28EXE, PK3GEXE, PK3PEXE, PK3XEXE, PK38EXE, (SYSTEM) PK2NEXE, (SCAN) PK3NEXE; Software Load: CXC 112 1279/1, Version: M2G30408) Revoked |
Hardware | 03/04/1999; 11/16/2001; 12/06/2001; 04/05/2002; 03/07/2003; 03/13/2003 |
Overall Level: 1
-FIPS-approved algorithms: -Other algorithms: DES (04/22/1994) Multi-chip standalone"The M-RK II System/Scan (AEGIS) and M-RK I handheld personal portable two-way FM radio is a high-quality, high performance FM radio. The radio is synthesized and operates in both trunked (EDACS™) and conventional communications systems. The trunked mode allows selection of either a communications group or an individual radio within a system. Both the selected group and the individual radio are secured through AEGIS digital signaling and DES encryption." |
43 | SafeNet, Inc. 4690 Millennium Drive Suite 300 Belcamp, MD 21017 USA -Glenn Constable
|
(Part#: AB-14094-050-09) Validated to FIPS 140-1 Security Policy |
Hardware | 02/17/1999; 12/04/2003; 10/18/2004 |
Overall Level: 1
-EMI/EMC: Level 3
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #5) -Other algorithms: DES (Certs. #11and #20); Diffie-Hellman (key agreement) Multi-chip embedded"Turbo Crypto Card is used in a variety of Cylink's host encryption products, including the Secure Frame Unit (SFU) and the Secure Domain Unit (SDU)." |
42 | Fortress Technologies, Inc. 4025 Tampa Road Suite 1111 Oldsmar, FL 34677 USA -Dr. Stephen Kovacs
|
(Version - 1) (When factory configured in FIPS mode and using Triple-DES) Validated to FIPS 140-1 Security Policy |
Hardware | 01/27/1999 | Overall Level: 2
-EMI/EMC: Level 3
-FIPS-approved algorithms: -Other algorithms: DES (Cert.#23); Triple-DES (allowed for US Government use), IDEA Multi-chip standalone"VPN Encryptor." |
41 | Dallas Semiconductor, Inc. 4401 Beltwood Pkwy Dallas, TX 75244-3292 USA -Mr. Dennis Jarrett
|
(ID: B4-V1.02) (When using vendor-initialized SHA-1 in transaction group 1) Validated to FIPS 140-1 Security Policy |
Hardware | 01/26/1999 | Overall Level: 3
-Physical Security: Level 3 +EFP
-FIPS-approved algorithms: SHA-1 (Cert. #8) -Other algorithms: MD5, RSA Multi-chip standalone"Provides hardware cryptographic services (e.g., secure private key storage, high-speed math accelerator for 1024-bit public key crypto, hashing). Services are provided using a single silicon chip packaged in a 16mm stainless steel case. Can be worn or attached to an object for info at point of use. Can withstand harsh outdoor environments and is durable for everyday wear." |
40 | IBM® Corporation 2455 South Rd Mail Station P371 Poughkeepsie, NY 12601-5400 USA -Clark D. Norberg
|
(ID: IBM Part #s 88H3637 and 29L3659) (When configured for External Key Entry) Validated to FIPS 140-1 Security Policy |
Hardware | 01/07/1999 | Overall Level: 4
-FIPS-approved algorithms: DSA/SHA-1 (Cert. #4, 12); RSA (internal use) -Other algorithms: DES (Certs. #7 and 29); Triple-DES (allowed for US Government use); CDM; MDC-2; MDC-4; D-H key agreement; ANSI: X3106, X99, X919 Single-chip"Encryption module for S/390 CMOS Enterprise Server family." |