RSA BSAFE® Crypto-C Micro Edition
RSA BSAFE® Crypto-C Micro Edition, from RSA, The Security Division of EMC, holds FIPS 140-2 certificate #1058 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Certificate
| Certificate number | 1058 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | RSA, The Security Division of EMC · website |
| Software versions | 3.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Crypto-C Micro Edition (ME) Module is RSA Security Inc.'s cryptographic library designed for securing mobile devices like wireless phones and personal digital assistants. It contains assembly-level optimizations on key wireless processors. Its functionality includes a wide range of data encryption and signing algorithms, including Triple-DES, the Advanced Encryption Standard (AES) algorithm, the RSA Public Key Cryptosystem, the DSA government signature algorithm, MD5 and SHA1 message digest routines, and more.
Security level exceptions
- Cryptographic Module Specification: Level 3
Approved algorithms (10)
| Algorithm | CAVP certificates |
|---|---|
| AES | 810 |
| AES GCM | 810 |
| DRBG | 2 |
| DSA | 300 |
| ECDSA | 92, 93 |
| HMAC | 449 |
| RNG | 466 |
| RSA | 390 |
| SHS | 807 |
| Triple-DES | 690 |
Other algorithms
DES; DES40; Diffie-Hellman; EC Diffie-Hellman; ECAES (non-compliant); ECIES; HMAC MD5; MD2; MD5; PBKDF1 SHA-1; PBKDF2 HMAC SHA-1/SHA-224/SHA-256/SHA-384/SHA-512 (non-compliant); RC2; RC4; RC5; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); RSA PKCS #1 v2.0 (OAEP; non-compliant)
Tested configurations
- AIX 5L v5.3 (PowerPC 32-bit)
- AIX 5L v5.3 (PowerPC 64-bit)
- HP-UX 11.11 (PA-RISC 2.0 32-bit)
- HP-UX 11.23 (PA-RISC 2.0W 64-bit)
- HP-UX 11.31 (Itanium2 32-bit)
- HP-UX 11.31 (Itanium2 64-bit)
- Red Hat Enterprise Linux AS 4.0 (x86 32-bit) with LSB 3.0.3
- Red Hat Enterprise Linux AS 5.0 (x86_64 64-bit) with LSB 3.0.3
- Solaris 10 (SPARC v8 32-bit)
- Solaris 10 (SPARC v8+ 32-bit)
- Solaris 10 (SPARC v9 64-bit)
- Solaris 10 (x86_64 64-bit)
- VxWorks 5.5 (PowerPC 603 32-bit)
- VxWorks 5.5 (PowerPC 604 32-bit)
- VxWorks General Purpose Platform 6.0 (PowerPC 604)
- Windows 2003 Server SP2 (Itanium 2 64-bit) - Visual Studio 2005 SP1 build /MD option
- Windows 2003 Server SP2 (Itanium 2 64-bit) - Visual Studio 2005 SP1 build /MT option
- Windows 2003 Server SP2 (x86_64 64-bit) - Visual Studio 2005 SP1 build /MT option
- Windows Mobile 2003/Pocket PC (ARM 32-bit)
- Windows Mobile 5.0 (ARM 32-bit)
- Windows Mobile 6.0 Professional (ARM 32-bit)
- Windows Vista Ultimate (x86 32-bit) - Visual Studio 2005 SP1 /MD option
- Windows Vista Ultimate (x86_64 64-bit) - Visual Studio 2005 SP1 /MD option
- Windows XP Professional SP2 (x86 32-bit) - Visual Studio 2005 SP1 /MT option (single user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2008-12-01 | Initial | SAIC-VA |
| 2010-09-07 | Update | SAIC-VA |
| 2011-03-28 | Update | SAIC-VA |
| 2013-01-24 | Update | |
| 2016-02-12 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2008-12-01, 2010-09-07, 2011-03-28, 2013-01-24, 2016-02-12