U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

This is an archive
(replace .gov by .rip)

Cryptographic Module Validation Program CMVP

Certificate #2294

Details

Module Name
RSA BSAFEĀ® Crypto-C Micro Edition
Standard
FIPS 140-2
Status
Active
Sunset Date
1/17/2022
Validation Dates
12/12/2014;12/21/2015;01/19/2016;01/22/2016;02/12/2016;01/18/2017;08/11/2017;01/29/2018;07/19/2019
Overall Level
1
Caveat
When operated in FIPS mode. When entropy is externally loaded, no assurance of the minimum strength of generated keys
Security Level Exceptions
  • Cryptographic Module Specification: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-chip standalone
Description
The Crypto-C Micro Edition (ME) Module is RSA, The Security Division of EMC's cryptographic library designed for securing mobile devices like wireless phones and personal digital assistants. It contains assembly-level optimizations on key wireless processors. Its functionality includes a wide range of data encryption and signing algorithms, including Triple-DES, the Advanced Encryption Standard (AES) algorithm, the RSA Public Key Cryptosystem, the DSA government signature algorithm, MD5 and SHA1 message digest routines, and more.
Tested Configuration(s)
  • AIX 6.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E2B [1][3]
  • AIX 6.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E2B [1][3]
  • AIX 7.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E1C [1][3]
  • AIX 7.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E1C [1][3]
  • Android 2.3.6 running on a Samsung Galaxy S2 [1]
  • Android 4.0.3 running on a Motorola RAZR I [1]
  • Android 4.1 running on a Motorola RAZR I [3]
  • Android 4.1.2 running on a Google Nexus 7
  • Android 4.4 running on a Google Nexus 7 Tablet [3]
  • Android 5.1 running on a Google Nexus 5 [3]
  • Android 5.1 running on a Google Nexus 9 Tablet [3]
  • CentOS 6.6 running on a Dell R730xd [3]
  • CentOS 7.2 running on a Dell Latitude E6420 with PAA [3]
  • CentOS 7.2 running on a Dell Latitude E6420 without PAA [3]
  • Fedora Core 17 running on a Beagle dev board [1]
  • Fedora Core 20 running on a Wandboard Quad [3]
  • Fedora Core 22 running on an AMD Seattle A0 Overdrive Development System [3]
  • FreeBSD 10.2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • FreeBSD 10.2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • FreeBSD 8.3 on ESXi 5.0 running on a Dell M610 with PAA [1]
  • FreeBSD 8.3 on ESXi 5.0 running on a Dell M610 without PAA [1]
  • HPUX 11.31 running on a HP 9000/800/RP3410 [1][3]
  • HPUX 11.31 running on a HP 9000/800/RP3410 [1][3]
  • HPUX 11.31 running on a HP RX2620 [1][3]
  • HPUX 11.31 running on a HP RX2620 [1][3]
  • iOS 7.1 running on an Apple iPad 3 [1]
  • iOS 7.1 running on an Apple iPad 4 [1]
  • Linaro Linux 3.10.68 running on a Fujitsu MB86S72 [2]
  • Mac OS X 10.8 running on an Apple Mac Pro 5.1 with PAA [1]
  • Mac OS X 10.8 running on an Apple MacBook6,1 without PAA [1]
  • Mac OSX 10.10 on vCenter SUSE 11 running on a Mac Pro 6.10 with PAA [3]
  • Mac OSX 10.10 on vCenter SUSE 11 running on a Mac Pro 6.10 without PAA [3]
  • Oracle Linux 5.6 (x86-64) running on a Dell XPS 8700 with an Intel Core i7 with PAA [4]
  • Oracle Linux 5.6 (x86-64) running on a Dell XPS 8700 with an Intel Core i7 without PAA [4]
  • Oracle Linux 6.10 for Oracle Key Vault 18.1 (x86-64) running on a Dell OptiPlex 7040M with an Intel Core i5 with PAA [4]
  • Oracle Linux 6.10 for Oracle Key Vault 18.1 (x86-64) running on a Dell OptiPlex 7040M with an Intel Core i5 without PAA [4]
  • Oracle Linux 6.9 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 with PAA [4]
  • Oracle Linux 6.9 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 without PAA [4]
  • Oracle Linux 7.3 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 with PAA [4]
  • Oracle Linux 7.3 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 without PAA [4]
  • Oracle Linux 7.6 (x86-64) running on a Dell Latitude 5590 with an Intel Core i7 with PAA [4]
  • Oracle Linux 7.6 (x86-64) running on a Dell Latitude 5590 with an Intel Core i7 without PAA [4] (single-user mode)
  • Red Hat Enterprise Linux 5.11 on PowerVM 2.2 running on an IBM 8231-E2B [3]
  • Red Hat Enterprise Linux 5.11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Red Hat Enterprise Linux 5.11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Red Hat Enterprise Linux 5.11 on z/VM 6.2 running on a IBM s390x [3]
  • Red Hat Enterprise Linux 5.11 running on a HP Integrity RX2620 [3]
  • Red Hat Enterprise Linux 5.3 running on a IBM Power 710 8231 - E2B [1]
  • Red Hat Enterprise Linux 5.3 running on a IBM Power 710 8231 - E2B [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 5.5 running on a Server HP RX 2620 [1]
  • Red Hat Enterprise Linux 5.8 on z/VM 6.2 running on a IBM s390x [1]
  • Red Hat Enterprise Linux 5.8 on z/VM 6.2 running on a IBM s390x [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 6.7 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Red Hat Enterprise Linux 6.7 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Red Hat Enterprise Linux 7.1 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Red Hat Enterprise Linux 7.1 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Solaris 10 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • Solaris 10 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • Solaris 10 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Solaris 10 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Solaris 10 running on a Oracle SPARC T4-2 [1][3]
  • Solaris 10 running on a Oracle Sun Fire X2100 with PAA [1]
  • Solaris 10 running on a Oracle Sun Fire X2100 without PAA [1]
  • Solaris 11 running on a Oracle SPARC Enterprise T5120 [1][3]
  • Solaris 11 running on a Oracle SPARC T4-2 [1][3]
  • Solaris 11 running on a Oracle SPARC T4-2 with PAA [1][3]
  • Solaris 11 running on a Oracle SPARC T4-2 without PAA [1][3]
  • SUSE Linux Enterprise Server 11 on ESX 4.0 running on a Dell M610 with PAA [1]
  • SUSE Linux Enterprise Server 11 on ESX 4.0 running on a Dell M610 without PAA [1]
  • SUSE Linux Enterprise Server 11 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • SUSE Linux Enterprise Server 11 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • SUSE Linux Enterprise Server 11 on PowerVM 2.2 running on an IBM 8231-E2B [3]
  • SUSE Linux Enterprise Server 11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • SUSE Linux Enterprise Server 11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • SUSE Linux Enterprise Server 11 running on a IBM Power 710 8231 - E2B [1]
  • SUSE Linux Enterprise Server 11 running on a IBM Power 710 8231 - E2B [1]
  • SUSE Linux Enterprise Server 12 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • SUSE Linux Enterprise Server 12 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Timesys Linux 4.2.8 running on a ARMv7 Cortex A53 [5]
  • Ubuntu 12.04 LTS running on a Beagle dev board [1][3]
  • VxWorks 6.4 running on a MVME6100 [1][3]
  • VxWorks 6.7 running on a MVME6100 [1][3]
  • VxWorks 6.8 running on a MX31 Lite Kit [1][3]
  • Windows 10 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows 10 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows 7 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows 7 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 with PAA [1]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 with PAA [1]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 without PAA [1]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 without PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay with PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay with PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay without PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay without PAA [1]
  • Windows 8 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows 8 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows 8.1 Enterprise running on an Intel Mahobay with PAA [1]
  • Windows 8.1 Enterprise running on an Intel Mahobay without PAA [1]
  • Windows Server 2003 Enterprise R2 on ESX 5.1 running on a Dell M610 with PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a HP Integrity RX2620 [1]
  • Windows Server 2003 Enterprise R2 running on a HP Integrity RX2620 [1]
  • Windows Server 2003 Enterprise R2 running on an Apple Mac Pro 1.1 with PAA [1]
  • Windows Server 2003 Enterprise R2 running on an Apple Mac Pro 1.1 with PAA [1]
  • Windows Server 2003 Enterprise R2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows Server 2008 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows Server 2008 Enterprise R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows Server 2008 Enterprise R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows Server 2008 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2008 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2008 Enterprise R2 running on a HP Integrity RX2620 [1]
  • Windows Server 2008 Enterprise R2 running on a HP Integrity RX2620 [1][3]
  • Windows Server 2008 Enterprise R2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise R2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay without PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay without PAA [1]
  • Windows Server 2012 R2 Standard running on a Compaq Pro 6305 with PAA [1]
  • Windows Server 2012 R2 Standard running on a Compaq Pro 6305 without PAA [1]
  • Windows Server 2012 Standard R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows Server 2012 Standard R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
FIPS Algorithms
AES Certs. #2859 [1], #3596 [3], #3767 [2], #4665 [5] and #C810 [4]
CVL Certs. #296 [1], #297 [1], #298 [1], #299 [1], #300 [1], #618 [3], #619 [3], #620 [3], #621 [3], #622 [3], #714 [2], #715 [2], #716 [2], #717 [2], #740 [2], #1311 [5], #1314 [5], #1315 [5], #1316 [5], #1317 [5] and #C810 [4]
DRBG Certs. #507 [1], #931 [3], #1037 [2], #1577 [5] and #C810 [4]
DSA Certs. #858 [1], #999 [3], #1047 [2], #1236 [5] and #C810 [4]
ECDSA Certs. #507 [1], #733 [3], #810 [2], #1149 [5] and #C810 [4]
HMAC Certs. #1799 [1], #2293 [3], #2467 [2], #3089 [5] and #C810 [4]
KTS AES Certs. #3596 [3], #4665 [5] and #C810 [4]; key establishment methodology provides between 128 and 256 bits of encryption strength
PBKDF vendor affirmed
RSA Certs. #1499 [1], #1850 [3], #1938 [2], #2545 [5] and #C810 [4]
SHS Certs. #2402 [1], #2958 [3], #3137 [2], #3822 [5] and #C810 [4]
Triple-DES Certs. #1706 [1], #2003 [3], #2095 [2], #2482 [5] and #C810 [4]
Other Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); HMAC-MD5; MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)
Software Versions
4.1 [1], 4.1.0.1 [2], 4.1.2 [3], 4.1.2.2 [4] and 4.1.3.2 [5]

Vendor

RSA
174 Middlesex Turnpike
Bedford, MA 01730
USA

FIPS Program
fips-program@rsa.com
Phone: +1 781-515-5025
Francois Lamoureux
francois.lamoureux@rsa.com
Phone: +1 781-515-5025

Lab

Leidos
NVLAP Code: 200427-0