808bits

Cryptographic Primitives Library

FIPS 140-2 certificate #3544 · Microsoft Corporation · data as of 2026-10-21

Cryptographic Primitives Library, from Microsoft Corporation, holds FIPS 140-2 certificate #3544 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with modules Kernel Mode Cryptographic Primitives Library validated to FIPS 140-2 under Cert. #3527 operating in FIPS mode and Code Integrity validated to FIPS 140-2 under Cert. #3093 operating in FIPS mode or Secure Kernel Code Integrity validated to FIPS 140-2 under Cert. #3096 operating in FIPS mode

Certificate

Certificate number3544
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorMicrosoft Corporation · website
Software versions10.0.15063.728

Module description

Quoted from the NIST CMVP entry for this certificate.

The Cryptographic Primitives Library (bcryptprimitives.dll) provides cryptographic services to Windows components and applications. It includes cryptographic algorithms in an easy-to-use cryptographic module via the Cryptography Next Generation (CNG) API. It can be dynamically linked into applications for the use of general-purpose FIPS 140-2 validated cryptography.

Security level exceptions

  • Physical Security: N/A
  • Design Assurance: Level 2

Approved algorithms (14)

AlgorithmCAVP certificates
AES5300, 5317
CKGvendor affirmed
CVL1764, 1765
DRBG2037
DSA1373
ECDSA1386
HMAC3499
KAS173
KBKDF187
KTS
PBKDFvendor affirmed
RSA2522, 2836, 2844
SHS3790, 4253
Triple-DES2677

Allowed algorithms

HMAC-MD5; MD5; NDRNG

Tested configurations

  • Surface Hub (x64) running on a Microsoft Surface Hub with an Intel Core i5 with PAA
  • Windows 10 Education Creators Update (x64) running on a Microsoft Surface Pro with an Intel Core m3 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface 3 with an Intel Atom x7 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Book with an Intel Core i7 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Laptop with an Intel Core i5 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Pro 4 with an Intel Core i5 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Pro with an Intel Core m3 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on a Microsoft Surface Studio with an Intel Core i7 with PAA
  • Windows 10 Enterprise Creators Update (x64) running on an HP Pro x2 612 G2 Detachable PC with LTE with an Intel Core i7 with PAA
  • Windows 10 Home Creators Update (x86) running on a Dell Inspiron 660s with an Intel Core i3 without PAA
  • Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 650 with a Qualcomm Snapdragon 212 (A7)
  • Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 950 with a Qualcomm Snapdragon 808 (A57, A53)
  • Windows 10 Mobile Creators Update (ARMv7) running on a Microsoft Lumia 950 XL with a Qualcomm Snapdragon 810 (A57, A53)
  • Windows 10 Mobile Creators Update (ARMv7) running on an HP Elite x3 with a Qualcomm Snapdragon 820 (Kryo)
  • Windows 10 Pro Creators Update (x64) on Hyper-V on Windows Server 2016 running on a Surface Pro 4 with an Intel Core i5 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Dell Latitude 5285 with an Intel Core i5 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Dell PowerEdge R630 Server with an Intel Xeon with PAA
  • Windows 10 Pro Creators Update (x64) running on a Dell Precision Tower 5810MT with an Intel Xeon with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface 3 with LTE with an Intel Atom x7 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Laptop with an Intel Core i5 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Pro 3 with an Intel Core i7 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Microsoft Surface Pro with an Intel Core m3 with PAA
  • Windows 10 Pro Creators Update (x64) running on a Panasonic Toughbook with an Intel Core i5 with PAA (single-user mode)
  • Windows 10 Pro Creators Update (x64) running on an HP Compaq Pro 6305 with an AMD A4 with PAA
  • Windows 10 Pro Creators Update (x64) running on an HP Slimline Desktop with an Intel Pentium with PAA
  • Windows 10 S Creators Update (x64) running on a Microsoft Surface Laptop with an Intel Core i5 with PAA

Validation history

DateTypeLab
2019-10-03InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2019-10-03

Source documents