808bits

Kernel Mode Cryptographic Module for Windows XP

FIPS 140-1 certificate #241 · Microsoft Corporation · data as of 2026-10-21

Kernel Mode Cryptographic Module for Windows XP, from Microsoft Corporation, holds FIPS 140-1 certificate #241 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Validation Sunsetting Policy - FIPS 140-1 Certificate. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: For services provided by the FIPS-Approved algorithms listed on the reverse

Certificate

Certificate number241
StandardFIPS 140-1
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorMicrosoft Corporation · website
Software versions5.1.2600.0

Module description

Quoted from the NIST CMVP entry for this certificate.

Microsoft Kernel Mode Cryptographic Module (FIPS.SYS) is a FIPS 140-1 Level 1 compliant, general-purpose, software-based, cryptographic module residing at the Kernel Mode level of the Windows Operating System. It runs as a kernel mode export driver (a kernel-mode DLL) and encapsulates several different cryptographic algorithms in an easy-touse cryptographic module accessible by other kernel mode drivers. It can be linked into other kernel mode services to permit the use of FIPS 140-1 Level 1 compliant cryptography.

Security level exceptions

  • EMI/EMC: Level 3
  • Operating System Security: Tested as meeting Level 1 with Microsoft Windows XP (single user mode)

Approved algorithms (3)

AlgorithmCAVP certificates
DSA/SHA-1
HMAC-SHA-1vendor affirmed
Triple-DES16

Other algorithms

DES (Cert. #89)

Validation history

DateTypeLab
2002-08-01InitialCYGNACOM SOLUTIONS INC
2007-10-15Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2002-08-01, 2007-10-15

Source documents