808bits

Outlook Cryptographic Provider (EXCHCSP)

FIPS 140-1 certificate #110 · Microsoft Corporation · data as of 2026-08-28
Historical. Validation Sunsetting Policy - FIPS 140-1 Certificate. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number110
StandardFIPS 140-1
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorMicrosoft Corporation · website
Software versionsSR-1A (3821)

Module description

The Microsoft Outlook Cryptographic Provider (EXCHCSP) is a FIPS 140-1 Level 1 compliant general-purpose software-based cryptographic module. EXCHCSP encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible via the Microsoft CryptoAPI. It can be dynamically linked into applications by software developers to permit the use of general-purpose FIPS 140-1 Level 1 compliant cryptography.

Security level exceptions

  • Operating System Security: Tested as meeting Level 1 with Microsoft Windows2000 with SP2 or higher (operated in single-user mode).

Approved algorithms

AlgorithmCAVP certificate
RSAvendor affirmed
SHA-132
Triple-DES18

Other algorithms

DES (Cert. #91); DES MAC; RC2; MD2; MD5

Validation history

DateTypeLab
2000-08-15InitialCYGNACOM SOLUTIONS INC
2007-10-15Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2000-08-15, 2007-10-15

Source documents