808bits

PGP Software Developer's Kit (SDK) Cryptographic Module

FIPS 140-2 certificate #1101 · PGP Corporation · data as of 2026-08-28
Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number1101
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPGP Corporation · website
Software versions4.0.0 and 4.0.1

Module description

The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.

Security level exceptions

  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
AES1288, 1289, 1290
DSA414, 415, 416
HMAC748, 749, 750
RNG717, 718, 719
RSA614, 615, 616
SHS1182, 1183, 1184
Triple-DES905, 906, 907

Other algorithms

AES (EME2 mode; non-compliant); DSA (FIPS 186-3 with SHA-256; non-compliant); CAST-5; IDEA; Two-Fish; Blow-Fish; ARC4-128; MD5; HMAC-MD5; RIPEMD60; ElGamal; RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength); Shamir Threshold Secret Sharing

Tested configurations

  • Linux, 32-bit: CentOS 5.4 (single-user mode)
  • Mac OS X 10.6
  • Windows XP Professional SP2

Validation history

DateTypeLab
2009-03-26InitialAEGISOLVE, Inc.
2010-07-02Update
2010-07-30Update
2011-01-13UpdateAEGISOLVE, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2009-03-26, 2010-07-02, 2010-07-30, 2011-01-13

Source documents