Suite B Cryptographic Module
Caveat: When operated in FIPS mode with module Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Microsoft Windows 8.1 Enterprise, Windows Server 2012 R2, Windows Storage Server 2012 R2, Surface Pro 3, Surface Pro 2, Surface Pro, Surface 2, Surface, Windows RT 8.1, Windows Phone 8.1, Windows Embedded 8.1 Industry Enterprise, StorSimple 8000 Series validated to FIPS 140-2 under Cert. #2357 operating in FIPS mode or BlackBerry OS Cryptographic Library validated to FIPS 140-2 under Cert. #1578 operating in FIPS mode
Certificate
| Certificate number | 2851 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | United States Special Operations Command (USSOCOM) · website |
| Software versions | v3.0.0.0 |
Module description
KEYW, in coordination with the United States Special Operations Command (USSOCOM), has developed a Suite B-compliant, standards based, AES/GCM-256 layer of encrypted communications between a BlackBerry Enterprise Server (BES) and a BlackBerry Mobile Set (MS) with Elliptic Curve (EC) key exchange used to negotiate symmetric keys.
Security level exceptions
- Physical Security: N/A
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 3328, 4312 |
| CVL | 484 |
| ECDSA | 657 |
| HMAC | 2119 |
| KAS | 55 |
| KBKDF | 116 |
| KTS | |
| PBKDF | vendor affirmed |
| SHS | 2761 |
Tested configurations
- BlackBerry OS 10.3 running on Qualcomm Snapdragon 801
- BlackBerry OS 10.3 running on Qualcomm Snapdragon S4
- Microsoft Windows Server 2012 R2 (64-bit) running on Intel Xeon E5530 (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2017-02-27 | Initial | COACT INC CAFE LAB |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2017-02-27