Module Name

Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016

Standard

FIPS 140-2

Status

Active

Sunset Date

1/25/2022

Validation Dates

01/26/2017;08/09/2019

Overall Level

1

Caveat

When operated in FIPS mode with the modules Code Integrity (ci.dll) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 under Cert. #2935 or #3510 operating in FIPS mode and Kernel Mode Cryptographic Primitives Library (cng.sys) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016 validated to FIPS 140-2 under Cert. #2936 operating in FIPS mode

Security Level Exceptions

• Physical Security: N/A
• Design Assurance: Level 2

Module Type

Software

Embodiment

Multi-Chip Stand Alone

Description

The Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) provides cryptographic services to Windows components and applications. It includes cryptographic algorithms in an easy-to-use cryptographic module via the Cryptography Next Generation (CNG) API. It can be dynamically linked into applications for the use of general-purpose FIPS 140-2 validated cryptography.

Tested Configuration(s)

• Windows 10 Anniversary Update (x64) running on a Dell XPS 8700 with PAA
• Windows 10 Anniversary Update (x64) running on a Microsoft Surface 3 with PAA
• Windows 10 Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
• Windows 10 Enterprise Anniversary Update (x64) running on a Dell Precision Tower 5810MT with PAA
• Windows 10 Enterprise Anniversary Update (x64) running on a HP Compaq Pro 6305 with PAA
• Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Book with PAA
• Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 3 with PAA
• Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 4 with PAA
• Windows 10 Enterprise Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
• Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell Precision Tower 5810MT with PAA
• Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell XPS 8700 with PAA
• Windows 10 Enterprise LTSB Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
• Windows 10 Mobile Anniversary Update (ARMv7) running on a Microsoft Lumia 950 (single-user mode)
• Windows 10 Pro Anniversary Update (x64) running on a Dell Precision Tower 5810MT with PAA
• Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Book with PAA
• Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 3 with PAA
• Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 4 with PAA
• Windows 10 Pro Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
• Windows Server 2016 Datacenter Edition (x64) running on a Dell PowerEdge R630 Server with PAA
• Windows Server 2016 Standard Edition (x64) running on a Dell PowerEdge R630 Server with PAA
• Windows Server 2016 Standard Edition (x64) running on a HP Compaq Pro 6305 with PAA
• Windows Storage Server 2016 (x64) running on a Dell PowerEdge R630 Server with PAA

FIPS Algorithms

AES	Certs. #4064 and #5295
CVL	Certs. #886, #887, #1762 and #1763
DRBG	Certs. #1217 and #2036
DSA	Certs. #1098 and #1371
ECDSA	Certs. #911 and #1384
HMAC	Certs. #2651 and #3497
KAS	Certs. #92 and #171
KBKDF	Certs. #101 and #185
KTS	AES Certs. #4062 and #5298; key establishment methodology provides between 128 and 256 bits of encryption strength
PBKDF	vendor affirmed
RSA	Certs. #2192, #2193, #2195, #2833, #2834 and #2847
SHS	Certs. #3347 and #4250
Triple-DES	Certs. #2227 and #2675

Other Algorithms

HMAC-MD5; MD5

Software Versions

10.0.14393 and 10.0.14393.1770