Citrix FIPS Cryptographic Module
Citrix FIPS Cryptographic Module, from Citrix Systems, Inc., holds FIPS 140-2 certificate #2988 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS Mode. No assurance of the minimum strength of generated keys
Certificate
| Certificate number | 2988 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software-Hybrid |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Citrix Systems, Inc. · website |
| Software versions | 1.0, 1.0.1 and 1.0.2 |
| Hardware versions | ARM v8-A, ARM v7-A, Intel Core i7 4th Generation, Intel Core i7 6th Generation, Intel Core i7 8th Generation, Intel Xeon 5600 series, Intel Xeon E5-2400 v4 series, Intel Xeon E5-2600 v2 series, Intel Xeon E5-2600 v3 series and Intel Xeon E5-2600 v4 series |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Citrix FIPS Cryptographic Module is a software toolkit which provides various cryptographic functions to support the Citrix product portfolio.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms (13)
| Algorithm | CAVP certificates |
|---|---|
| AES | 4397 |
| CKG | vendor affirmed |
| CVL | 1101, 1102, 1103, 1104, 1105, 1106 |
| DRBG | 1417 |
| DSA | 1174 |
| ECDSA | 1056 |
| HMAC | 2923 |
| KAS | vendor affirmed |
| KTS | |
| PBKDF | vendor affirmed |
| RSA | 2379 |
| SHS | 3626 |
| Triple-DES | 2371 |
Allowed algorithms
MD5
Tested configurations
- Android 4.4 running on a Google Nexus 5 (LG D820) with PAA
- Android 5 running on a Google Nexus 6 (Motorola Nexus 6 XT11003) with PAA
- Android 6 running on a Google Nexus 6 (Motorola Nexus 6 XT11003) with PAA
- Android 6 running on a Samsung Galaxy S6 (SM-G920T) with PAA
- Android 7 running on a Google Nexus 5X (LG H790) with PAA
- Android 7 running on a Google Nexus 6 (Motorola Nexus 6 XT11003) with PAA
- Android 8 64bit running on a Google Pixel 2 with ARM v8-A with PAA
- Android 9 running on a Google Pixel 2 with ARM v8-A with PAA
- FreeBSD 8.4 32bit running on a Citrix NetScaler MPX-14000-FIPS with PAA
- FreeBSD 8.4 64bit running on a Citrix NetScaler MPX-14000-FIPS with PAA
- iOS 10 64bit running on an Apple 12.9-inch iPad Pro (A1584) with PAA
- iOS 11 running on an iPhone X with ARM v8-A with PAA
- Linux 3.10 64bit running on a CyberPowerPC GLC2460 with Intel Core i7 [8th Generation] with PAA
- Linux 3.13 64bit running on a Lenovo 20EV002JUS with PAA
- Linux 3.16 on ESXi 5 64bit running on a HP ProLiant DL2000 with PAA
- Linux 3.16 on Hyper-V on Windows Server 2012 R2 64bit running on a HP ProLiant DL2000 with PAA
- Linux 3.16 on XenServer 6 64bit running on a Dell PowerEdge C6100 with PAA
- Linux 4.15 64bit running on a CyberPowerPC GLC2460 with Intel Core i7 [8th Generation with PAA
- Linux 4.15 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v3 with PAA
- Linux 4.15 64bit running on a HPE Proliant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
- Linux 4.x on ESXi 5 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
- Linux 4.x on Hyper-V on Windows Server 2012 R2 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
- Linux 4.x on XenServer 7 64bit running on a Dell PowerEdge R320 with Intel Xeon E5-24XX v2 series with PAA
- Linux 4.x on XenServer 7 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA
- Mac OS X 10.12 64bit running on an Apple Macbook Pro (A1398) with PAA
- Mac OS X 10.13 64bit running on an Apple Mac Mini with Intel Corei7 [4th Generation] with PAA
- NoTouch Desktop running on an N-computing RX-HDX for Citrix with ARM v8-A with PAA
- ViewSonic Thin OS running on a ViewSonic VS16585 with PAA
- Windows 10 32bit running on a Lenovo 20CD00B2US with PAA
- Windows 10 64bit running on a CyberPowerPC GLC2460 with Intel Core i7 [8th Generation] with PAA
- Windows 10 64bit running on a Lenovo 20EV002JUS with PAA
- Windows 8.1 64bit running on a CyberPowerPC GLC2460 with Intel Corei7 [8th Generation] with PAA
- Windows Server 2016 on HyperV on Windows Server 2016 64bit running on a HPE ProLiant BL460c Gen9 with Intel Xeon E5-26XX v3 series with PAA
- Windows Server 2016 on HyperV on Windows Server 2016 64bit running on HPE Proliant BL460c Gen9 with Intel Xeon E5-26XX v4 series with PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2017-08-10 | Initial | UL Verification Services, Inc. |
| 2019-02-07 | Update | UL Verification Services, Inc. |
| 2019-08-23 | Update | UL Verification Services, Inc. |
| 2020-09-30 | Update | UL Verification Services, Inc. |
| 2021-01-06 | Update | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2017-08-10, 2019-02-07, 2019-08-23, 2020-09-30, 2021-01-06