FIPS 140-2 certificate 2936: Kernel Mode Cryptographic Primitives Library (cng.sys) in Microsoft...

Certificate

Certificate number	2936
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-Chip Stand Alone
Vendor	Microsoft Corporation · website
Software versions	10.0.14393, 10.0.14393.1770 and Azure Host OS version 1.65

Module description

Kernel Mode Cryptographic Primitives Library (cng.sys) runs as a kernel mode export driver, and provides cryptographic services, through their documented interfaces, to Windows kernel components. It supports several cryptographic algorithms accessible via a FIPS function table request IRP (I/O request packet).

Security level exceptions

Physical Security: N/A
Design Assurance: Level 2

Approved algorithms

Algorithm	CAVP certificate
AES	4064, 5295, C2046
CVL	886, 887, 1762, 1763, C2046, C2061
DRBG	1217, 2036, C2046
DSA	1098, 1371, C2046
ECDSA	911, 1384, C2046
HMAC	2651, 3497, C2046
KAS	92, 171, C2046
KBKDF	101, 185, C2061
KTS
PBKDF	vendor affirmed
RSA	2192, 2193, 2195, 2833, 2834, 2847, C2046
SHS	3347, 4250, C2046
Triple-DES	2227, 2675, C2046

Other algorithms

HMAC-MD5; MD5; NDRNG

Tested configurations

Azure Host OS (x64) running on a Dell PowerEdge R840 Server with an Intel Xeon Platinum 8260 with PAA
Windows 10 Anniversary Update (x64) running on a Dell XPS 8700 with PAA
Windows 10 Anniversary Update (x64) running on a Microsoft Surface 3 with PAA
Windows 10 Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
Windows 10 Enterprise Anniversary Update (x64) running on a Dell Precision Tower 5810MT with PAA
Windows 10 Enterprise Anniversary Update (x64) running on a HP Compaq Pro 6305 with PAA
Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Book with PAA
Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 3 with PAA
Windows 10 Enterprise Anniversary Update (x64) running on a Microsoft Surface Pro 4 with PAA
Windows 10 Enterprise Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell Precision Tower 5810MT with PAA
Windows 10 Enterprise LTSB Anniversary Update (x64) running on a Dell XPS 8700 with PAA
Windows 10 Enterprise LTSB Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
Windows 10 Mobile Anniversary Update (ARMv7) running on a Microsoft Lumia 950
Windows 10 Pro Anniversary Update (x64) running on a Dell Precision Tower 5810MT with PAA
Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Book with PAA
Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 3 with PAA
Windows 10 Pro Anniversary Update (x64) running on a Microsoft Surface Pro 4 with PAA
Windows 10 Pro Anniversary Update (x86) running on a Dell Inspiron 660s without PAA
Windows Server 2016 Datacenter Edition (x64) running on a Dell PowerEdge R630 Server with PAA
Windows Server 2016 Standard Edition (x64) running on a Dell PowerEdge R630 Server with PAA
Windows Server 2016 Standard Edition (x64) running on a HP Compaq Pro 6305 with PAA
Windows Storage Server 2016 (x64) running on a Dell PowerEdge R630 Server with PAA (single-user mode)

Validation history

Date	Type	Lab
2017-01-26	Initial	Leidos Accredited Testing & Evaluation (AT&E) Lab
2019-08-07	Update	Leidos Accredited Testing & Evaluation (AT&E) Lab
2022-09-01	Update	Leidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2017-01-26, 2019-08-07, 2022-09-01

Kernel Mode Cryptographic Primitives Library (cng.sys) in Microsoft Windows 10, Windows 10 Pro, Windows 10 Enterprise, Windows 10 Enterprise LTSB, Windows 10 Mobile, Windows Server 2016 Standard, Windows Server 2016 Datacenter, Windows Storage Server 2016, Azure Host OS (version 1.65)