808bits

RSA BSAFE Crypto-C ME Toolkit Module

FIPS 140-2 certificate #309 · RSA, The Security Division of EMC · data as of 2026-10-21

RSA BSAFE Crypto-C ME Toolkit Module, from RSA, The Security Division of EMC, holds FIPS 140-2 certificate #309 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number309
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorRSA, The Security Division of EMC · website
Software versions1.7

Module description

Quoted from the NIST CMVP entry for this certificate.

The Crypto-C ME Module is RSA Security, Inc.’s cryptographic library designed for securing mobile devices like wireless phones and personal digital assistants. It contains assembly-level optimizations on key wireless processors while offering great flexibility and choice by allowing developers to select only the algorithms needed in reduced code sizes. Its functionality includes a wide range of data encryption and signing algorithms, including Triple-DES, the high-performing RC5, the RSA Public Key Cryptosystem, the DSA government signature algorithm, MD5 and SHA1 message digest routines, and more.

Approved algorithms (6)

AlgorithmCAVP certificates
AES26
DSA72
HMAC-SHA-1vendor affirmed
RSAvendor affirmed
SHA-1121
Triple-DES135

Other algorithms

DES (Cert. #186); SHA-2 (256, 384, 512); MD2; MD5; HMAC-MD5; RC2; RC4; RC5; Diffie-Hellman (key agreement); RSA (encryption/decryption)

Tested configurations

  • Microsoft Windows 2000 (single user mode)

Validation history

DateTypeLab
2003-03-07InitialSAIC-VA
2004-10-01Update
2008-01-04Update
2008-10-16Update
2010-09-07UpdateSAIC-VA
2011-03-28UpdateSAIC-VA
2013-01-24Update
2016-02-12UpdateLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2003-03-07, 2004-10-01, 2008-01-04, 2008-10-16, 2010-09-07, 2011-03-28, 2013-01-24, 2016-02-12

Source documents