SafeZone FIPS Cryptographic Module
SafeZone FIPS Cryptographic Module, from Rambus Global Inc., Finnish branch, holds FIPS 140-2 certificate #2389 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of the minimum strength of generated keys
Certificate
| Certificate number | 2389 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | Rambus Global Inc., Finnish branch · website |
| Software versions | 1.1.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
SafeZone FIPS Cryptographic Module is a FIPS 140-2 Security Level 1 validated software cryptographic module from Rambus. The module is a toolkit which provides the most commonly needed cryptographic primitives for a large variety of applications, including but not limited to, primitives needed for DAR, DRM, TLS, and VPN on mobile devices.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms (12)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3123 |
| CVL | 384, 385 |
| DRBG | 634, 637 |
| DSA | 905 |
| ECDSA | 567 |
| HMAC | 1980 |
| KBKDF | 37, 38, 39, 40 |
| KTS | vendor affirmed |
| PBKDF | vendor affirmed |
| RSA | 1593 |
| SHS | 2599 |
| Triple-DES | 1793 |
Other algorithms
NDRNG; MD5; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- Android 4.2 running on a Samsung Galaxy Tab 3 10.1
- Android 4.4 running on a Samsung Galaxy Note 3
- iOS 7.1 running on a iPad Mini with Retina Display (32-bit)
- iOS 7.1 running on a iPad Mini with Retina Display (64-bit)
- Linux kernel 3.10 running on a Raspberry Pi
- Linux kernel 3.13 running on an ASUS Transformer (x64) with AES-NI (single-user mode)
- Linux kernel 3.13 running on an ASUS Transformer (x64) without AES-NI
- Linux kernel 3.13 running on an ASUS Transformer (x86) with AES-NI
Validation history
| Date | Type | Lab |
|---|---|---|
| 2015-06-02 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2020-05-26 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2015-06-02, 2020-05-26