808bits

RSA BSAFE® Crypto-J JSAFE and JCE Software Module 6.2.5

FIPS 140-2 certificate #3820 · Dell Inc. BSAFE Team · data as of 2026-10-09

RSA BSAFE® Crypto-J JSAFE and JCE Software Module 6.2.5, from Dell Inc. BSAFE Team, holds FIPS 140-2 certificate #3820 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. SP 800-56Arev3 transition - replaced by certificate #4646. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. No assurance of the minimum strength of generated keys.

Certificate

Certificate number3820
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorDell Inc. BSAFE Team · website
Software versions6.2.5

Module description

Quoted from the NIST CMVP entry for this certificate.

RSA BSAFE Crypto-J security software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. It supports a wide range of industry standard encryption algorithms offering Java developers the flexibility to choose the option most appropriate to meet their requirements.

Security level exceptions

  • Roles, Services, and Authentication: Level 2
  • Physical Security: N/A
  • Design Assurance: Level 3

Approved algorithms (15)

AlgorithmCAVP certificates
AESC662
CKGvendor affirmed
CVLC662, C1762
DRBGC662
DSAC662
ECDSAC662
HMACC662
KBKDFC662
KDAvendor affirmed
KTS
PBKDFvendor affirmed
RSAC662
SHA-3C662
SHSC662
Triple-DESC662

Allowed algorithms

Diffie-Hellman (CVL Certs. #C662 and #C1762, key agreement; key establishment methodology provides 112 or 128 bits of encryption strength); EC Diffie-Hellman (CVL Certs. #C662 and #C1762, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); MD5; RSA (CVL Cert. #C662, key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)

Tested configurations

  • Google(TM) ART(TM) 8.0 on Google(TM) Android 8.0 ARM(R) v8 (64 bit) running on Samsung S9(TM) with a Qualcomm(R) Snapdragon(TM) 845 processor
  • OpenJDK 8.0 on CentOS 7.6 (64-bit) running on Dell PowerEdge(TM) R710 with an Intel Xeon(R) E5 processor (single-user mode)
  • Oracle(R) JRE 8.0 on Microsoft(R) Windows(R) Server 2016 (64-bit) running on Dell(TM) PowerEdge(TM) T130 with an Intel(R) Xeon(TM) E3 processor

Validation history

DateTypeLab
2021-02-17InitialGossamer Security Solutions
2021-02-24UpdateGossamer Security Solutions

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-02-17, 2021-02-24

Source documents