808bits

Entrust Authority™ Security Toolkit for C++

FIPS 140-2 certificate #368 · Entrust, Inc. · data as of 2026-10-21

Entrust Authority™ Security Toolkit for C++, from Entrust, Inc., holds FIPS 140-2 certificate #368 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number368
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorEntrust, Inc. · website
Software versions6.2

Module description

Quoted from the NIST CMVP entry for this certificate.

The Kernel is a C++ class library of cryptographic functions bound together by a common object-oriented Application Programming Interface (API). Depending on the configuration and the runtime environment of the Kernel, the algorithms may be implemented in software, hardware, or a combination of both. The industry standard Cryptoki API, as described in PCKS #11, is used as the internal interface to hardware-based cryptographic tokens. Decisions are made at runtime whether to perform operations via cryptoki or in software, based on a table that records the crypto capabilities of particlular hardware devices. This table is built up at runtime by querying the actual token through Cryptoki.

Security level exceptions

  • EMI/EMC: Level 3

Approved algorithms (6)

AlgorithmCAVP certificates
AES59
DSA/SHA-1
HMAC-SHA-1vendor affirmed
RSAvendor affirmed
Triple-DES6
Triple-DES MACvendor affirmed

Other algorithms

DES (Cert #56); DES MAC (Cert #56, vendor affirmed); CAST; CAST3; CAST5; IDEA; RC2; RC4; HMAC-MD5; HMAC-RIPEMD-160; CAST MAC; CAST3 MAC; CAST5 MAC; IDEA MAC; RC2 MAC; RC4 MAC; AES MAC; MD2; MD5; RIPEMD-160; SHA-256; DDiffie-Hellman (key agreement); SPEKE; ECDSA (non-compliant)

Tested configurations

  • and Windows NT 4.0, SP 6a (single user mode)
  • Windows 2000, SP3
  • Windows XP, SP1a

Validation history

DateTypeLab
2003-12-16InitialDOMUS
2014-05-28Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2003-12-16, 2014-05-28

Source documents