808bits

Centrify Cryptographic Module

FIPS 140-2 certificate #3275 · Centrify Corporation · data as of 2026-09-13

Centrify Cryptographic Module, from Centrify Corporation, holds FIPS 140-2 certificate #3275 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When installed, initialized, and configured as specified in the Security Policy Section Secure Operation. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number3275
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorCentrify Corporation · website
Software versions2.0 [1], 2.1 [2]

Module description

Quoted from the NIST CMVP entry for this certificate.

Centrify Cryptographic Module is a general purpose cryptographic library. The Centrify Cryptographic Module provides the cryptographic services for all Centrify products.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AES4087, 5181
CVL903, 1683
DRBG1226, 1956
DSA1110, 1345
ECDSA923, 1344
HMAC2667, 3437
RSA2212, 2782
SHS3363, 4185
Triple-DES2232, 2636

Allowed algorithms

EC Diffie-Hellman (CVL Certs. #903 and #1683; key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • AIX 7.2 (32-bit) running on a PowerPC Power7 Processor [1]
  • AIX 7.2 (64-bit) running on a PowerPC Power7 Processor without PAA [1]
  • Mac OS 10.11.5 running on a MacBook Pro Intel Core i7 without PAA [1]
  • Red Hat Enterprise Linux 7.2 running on an Intel Xeon E5520 x86_64 without PAA [1]
  • Red Hat Enterprise Linux 7.2 running on an Intel Xeon X5650 x86_64 with PAA [2]

Validation history

DateTypeLab
2018-08-30InitialEWA - Canada

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2018-08-30

Source documents