808bits

IBM® Crypto for C

FIPS 140-2 certificate #1433 · IBM® Corporation · data as of 2026-10-21

IBM® Crypto for C, from IBM® Corporation, holds FIPS 140-2 certificate #1433 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number1433
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorIBM® Corporation · website
Software versions8.0.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The IBM Crypto for C® v8.0 (ICC) cryptographic module is implemented in the C programming language. It is packaged as dynamic (shared) libraries usable by applications written in a language that supports C language linking conventions (e.g. C, C++, Java, Assembler, etc.) for use on commercially available operating systems. The ICC allows these applications to access cryptographic functions using an Application Programming Interface (API) provided through an ICC import library and based on the API defined by the OpenSSL group.

Approved algorithms (8)

AlgorithmCAVP certificates
AES1318, 1319, 1320, 1321, 1322, 1323, 1324, 1325, 1326, 1327, 1328, 1329, 1330, 1331
DRBG34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47
DSA422, 423, 424, 425, 426, 427, 428, 429, 430, 431, 432, 433, 434, 435
ECDSA157, 158, 159, 160, 161, 162, 163, 164, 165, 166, 167, 168, 169, 170
HMAC766, 767, 768, 769, 770, 771, 772, 773, 774, 775, 776, 777, 778, 779
RSA630, 631, 632, 633, 634, 635, 636, 637, 638, 639, 640, 641, 642, 643
SHS1204, 1205, 1206, 1207, 1208, 1209, 1210, 1211, 1212, 1213, 1214, 1215, 1216, 1217
Triple-DES917, 918, 919, 920, 921, 922, 923, 924, 925, 926, 927, 928, 929, 930

Other algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength; non-compliant less than 112 bits of encryption strength); MD2; MD4; MD5; MDC2; RIPEMD; HMAC MD5; DES; CAST; Camellia; Blowfish; RC4; RC2

Tested configurations

  • AIX® 6.1 64-bit operating system (PowerPC 64)
  • Microsoft Windows Server 2008® 32-bit operating system (x86-64)
  • Microsoft Windows Server 2008® 64-bit operating system (x86-64)
  • Red Hat Linux Enterprise Server 5 32-bit operating system (x86-64)
  • Red Hat Linux Enterprise Server 5 64-bit operating system (x86-64, zSeries-64 and PowerPC-64) (single user mode)
  • Solaris® 10 64-bit operating system (UltraSparc-64)

Validation history

DateTypeLab
2010-11-02Initialatsec information security corporation
2010-12-21Updateatsec information security corporation

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2010-11-02, 2010-12-21

Source documents