808bits

Phaos Crypto

FIPS 140-2 certificate #337 · Phaos Technology Corporation · data as of 2026-10-09

Phaos Crypto, from Phaos Technology Corporation, holds FIPS 140-2 certificate #337 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number337
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPhaos Technology Corporation · website
Software versions3.0 and 3.0.1

Module description

Quoted from the NIST CMVP entry for this certificate.

Phaos Crypto provides a state-of-the-art set of core cryptography algorithms in Java. It includes a comprehensive cryptographic library supporting the most current algorithms like AES, RSA-OAEP, SHA- 256/384/512, X.9-42 as well as legacy algorithms that are still used in corporate systems like 3DES, DES, MD2 etc.. Phaos Crypto allows developers to integrate cryptography into any Java application or applet. For high security deployments, Phaos Crypto provides transparent migration to cryptographic hardware without requiring any changes to existing applications.

Approved algorithms (7)

AlgorithmCAVP certificates
AES42
DSA81
ECDSAvendor affirmed
HMAC-SHA-1vendor affirmed
RSAvendor affirmed
SHA-1138
Triple-DES148

Other algorithms

DES (Cert. #195); RC2; RC4; Blowfish; MD2; MD4; MD5; SHA-2; RSA (encryption/decryption); Diffie-Hellman (key agreement); EC Diffie-Hellman (key agreement)

Tested configurations

  • Window 2000 (Single User mode), Sun Java 2 Runtime Environment (V1.3.1)

Validation history

DateTypeLab
2003-07-07InitialSAIC-VA
2004-04-30Update
2004-08-23Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2003-07-07, 2004-04-30, 2004-08-23

Source documents