Security Builder® FIPS Module
Security Builder® FIPS Module, from Certicom Corp., holds FIPS 140-2 certificate #3715 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode. This validation entry is a non-security-relevant modification to Cert. #1729
Certificate
| Certificate number | 3715 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Certicom Corp. · website |
| Software versions | 6.0 [1], 6.0.2 [2] and 6.0.3 [3] |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Security Builder® FIPS Module is a standards-based cryptographic toolkit that supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into both mobile and server-based applications. The Security Builder FIPS Module is part of the Certicom Security Architecture, a comprehensive cross-platform security solution which supports multiple cryptographic software and hardware providers with a single common API.
Security level exceptions
- Physical Security: N/A
Approved algorithms (10)
| Algorithm | CAVP certificates |
|---|---|
| AES | 1789, 3029, 3946 |
| CVL | 7, 367, 789 |
| DRBG | 127, 579, 1151 |
| DSA | 563, 891, 1076 |
| ECDSA | 242, 553, 866 |
| HMAC | 1054, 1914, 2571 |
| KAS | 25, 50, 79 |
| RSA | 894, 1574, 2017 |
| SHS | 1571, 2530, 3256 |
| Triple-DES | 1159, 1773, 2164 |
Allowed algorithms
RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)
Tested configurations
- Android 4.0.4 running on an Intel based PC with an Intel Atom Z2460 Processor [2]
- Android 4.4.2 running on an ARM based PC with an ARMv7 Processor [2]
- Android 5.0.1 running on an ARM based PC with an ARMv8 Processor [2]
- CentOS Linux 7.1 64-bit running on an Intel based PC with an Intel Core 2 Duo T9400 Processor without AES-NI [2]
- iOS 6.1.4 running on an Apple iPhone with an ARMv7 Processor [2]
- iOS 6.1.4 running on an Apple iPhone with an ARMv7S Processor [2]
- iOS 8.0 running on an Apple iPhone with an on ARMv8 Processor [2]
- Mac OSX 10.10.4 running on an Apple GPC with an Intel Core i7-3615QM Processor [2]
- Mac OSX 10.11.4 running on an Apple GPC with an Intel Core i7-3615QM Processor [3]
- QNX 6.5 running on an Intel based PC with an Intel Pentium III Processor [1]
- QNX 6.6 running on an ARM based PC with an ARM Cortex A9 MPCore Processor [1]
- RedHat Linux 5.6 running on an Intel based PC with a 32-bit Intel Core i7 Processor [1]
- RedHat Linux 5.6 running on an Intel based PC with a 32-bit Intel Core i7 Processor with AES-NI [1]
- RedHat Linux 5.6 running on an Intel based PC with an Intel Core i5-2300 Processor [1]
- RedHat Linux 5.6 running on an Intel based PC with an Intel Core i5-2300 Processor with AES-NI [1]
- Windows 7 Enterprise 32-bit running on an Intel based PC with an Intel Core Duo Processor without AES-NI [2]
- Windows 7 Enterprise 64-bit running on an Intel based PC with an Intel Core i7-2720QM Processor with AES-NI [2]
- Windows Phone 8.0 running on an ARM based PC with an ARMv7 Processor [2] (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2020-09-28 | Initial | Lightship Security, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2020-09-28