808bits

RSA BSAFE® Crypto-C

FIPS 140-1 certificate #163 · RSA, The Security Division of EMC · data as of 2026-10-21

RSA BSAFE® Crypto-C, from RSA, The Security Division of EMC, holds FIPS 140-1 certificate #163 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Validation Sunsetting Policy - FIPS 140-1 Certificate. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number163
StandardFIPS 140-1
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorRSA, The Security Division of EMC · website
Software versions5.2.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The RSA BSAFE® Crypto-C Module version 5.2.1 is a software development kit that allows software and hardware developers to incorporate encryption technologies directly into their products. It provides a variety of cryptographic services to calling applications that are documented in RSA’s RSA BSAFE® Crypto-C Security Components for C Library Reference Manual. RSA BSAFE® Crypto-C is a C-language API available as a static library, a dynamic library and as source code.

Security level exceptions

  • Operating System Security: Tested as meeting Level 1 with Windows 98 (single user mode)

Approved algorithms (5)

AlgorithmCAVP certificates
DSA49
ECDSAvendor affirmed
RSAvendor affirmed
SHA-159
Triple-DES70

Other algorithms

DES (Cert. #131); RSA Encryption; MD; MD5; HMAC SHA-1; HMAC MD5; AES (Rijndael); DESX; RC2; RC4; RC6; Elliptic Curve (F2&Fp); Elliptic Curve Encryption Scheme; EC Diffie-Hellman (key agreement); Bloom-Shamir; Diffie-Hellman (key agreement)

Validation history

DateTypeLab
2001-08-15InitialSAIC-VA
2001-08-27Update
2008-01-04Update
2008-10-16Update
2010-09-07UpdateSAIC-VA
2011-03-28UpdateSAIC-VA
2013-01-24Update
2016-02-12UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2001-08-15, 2001-08-27, 2008-01-04, 2008-10-16, 2010-09-07, 2011-03-28, 2013-01-24, 2016-02-12

Source documents