808bits

SafeGuard Cryptographic Engine

FIPS 140-2 certificate #1549 · Sophos Ltd. · data as of 2026-10-09

SafeGuard Cryptographic Engine, from Sophos Ltd., holds FIPS 140-2 certificate #1549 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: None

Certificate

Certificate number1549
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorSophos Ltd. · website
Software versions5.60

Module description

Quoted from the NIST CMVP entry for this certificate.

SafeGuard Cryptographic Engine is the core cryptographic component of Sophos' encryption products SafeGuard Enterprise, SafeGuard PrivateDisk, SafeGuard LAN Crypt and SafeGuard PrivateCrypto. It provides a solid implementation of standard algorithms used for disk and file encryption, key generation, key management, and integrity protection.

Security level exceptions

  • EMI/EMC: Level 3
  • Design Assurance: Level 3

Approved algorithms (5)

AlgorithmCAVP certificates
AES1447, 1448
HMAC849
RNG792
SHS1311, 1312, 1317
Triple-DES982

Tested configurations

  • FreeBSD 6.1 (single-user mode)
  • Microsoft Windows 7 Ultimate Edition 32-bit
  • Microsoft Windows 7 Ultimate Edition 64-bit

Validation history

DateTypeLab
2011-05-27InitialCYGNACOM SOLUTIONS INC

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2011-05-27

Source documents