PGP Software Developer's Kit (SDK) Cryptographic Module
PGP Software Developer's Kit (SDK) Cryptographic Module, from PGP Corporation, holds FIPS 140-2 certificate #1049 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1049 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | PGP Corporation · website |
| Software versions | 3.10.3 and 3.11.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.
Approved algorithms (7)
Other algorithms
AES (EME2 mode; non-compliant); DSA (FIPS 186-3 with SHA-256; non-compliant); CAST-5; IDEA; Two-Fish; Blow-Fish; ARC4-128; MD5; HMAC-MD5; RIPEMD60; ElGamal; RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength); Shamir Threshold Secret Sharing
Tested configurations
- Mac OS X 10.5 (single-user mode)
- Windows XP Professional SP2
Validation history
| Date | Type | Lab |
|---|---|---|
| 2008-10-27 | Initial | AEGISOLVE, Inc. |
| 2008-12-03 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2008-10-27, 2008-12-03