808bits

PGP Software Developer's Kit (SDK) Cryptographic Module

FIPS 140-2 certificate #1681 · Symantec Corporation · data as of 2026-10-21

PGP Software Developer's Kit (SDK) Cryptographic Module, from Symantec Corporation, holds FIPS 140-2 certificate #1681 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number1681
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorSymantec Corporation · website
Software versions4.2.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The PGP Software Developer's Kit (SDK) Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.

Security level exceptions

  • Design Assurance: Level 3

Approved algorithms (7)

AlgorithmCAVP certificates
AES1777
DRBG124
DSA558
HMAC1042
RSA888
SHS1558
Triple-DES1150

Other algorithms

AES (EME2 mode; non-compliant); DSA (FIPS 186-3 with SHA-256; non-compliant); CAST-5; IDEA; Two-Fish; Blow-Fish; ARC4-128; MD5; HMAC-MD5; RIPEMD-160; ElGamal; EC Diffie-Hellman; ECDSA (non-compliant); RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength); Shamir Threshold Secret Sharing

Tested configurations

  • iOS 5 (single-user mode)
  • Linux, 32-bit: CentOS 5.5
  • Mac OS X 10.7
  • Windows XP Professional SP3

Validation history

DateTypeLab
2012-02-28InitialAEGISOLVE, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2012-02-28

Source documents