FIPS 140-2 certificate 368: Entrust Authority™ Security Toolkit for C++

Certificate

Certificate number	368
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-chip standalone
Vendor	Entrust, Inc. · website
Software versions	6.2

Module description

The Kernel is a C++ class library of cryptographic functions bound together by a common object-oriented Application Programming Interface (API). Depending on the configuration and the runtime environment of the Kernel, the algorithms may be implemented in software, hardware, or a combination of both. The industry standard Cryptoki API, as described in PCKS #11, is used as the internal interface to hardware-based cryptographic tokens. Decisions are made at runtime whether to perform operations via cryptoki or in software, based on a table that records the crypto capabilities of particlular hardware devices. This table is built up at runtime by querying the actual token through Cryptoki.

Security level exceptions

EMI/EMC: Level 3

Approved algorithms

Algorithm	CAVP certificate
AES	59
DSA/SHA-1
HMAC-SHA-1	vendor affirmed
RSA	vendor affirmed
Triple-DES	6
Triple-DES MAC	vendor affirmed

Other algorithms

DES (Cert #56); DES MAC (Cert #56, vendor affirmed); CAST; CAST3; CAST5; IDEA; RC2; RC4; HMAC-MD5; HMAC-RIPEMD-160; CAST MAC; CAST3 MAC; CAST5 MAC; IDEA MAC; RC2 MAC; RC4 MAC; AES MAC; MD2; MD5; RIPEMD-160; SHA-256; DDiffie-Hellman (key agreement); SPEKE; ECDSA (non-compliant)

Tested configurations

and Windows NT 4.0, SP 6a (single user mode)
Windows 2000, SP3
Windows XP, SP1a

Validation history

Date	Type	Lab
2003-12-16	Initial	DOMUS
2014-05-28	Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2003-12-16, 2014-05-28

Entrust Authority™ Security Toolkit for C++