808bits

CGX Cryptographic Module

FIPS 140-2 certificate #393 · SafeNet, Inc. · data as of 2026-10-21

CGX Cryptographic Module, from SafeNet, Inc., holds FIPS 140-2 certificate #393 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number393
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeSoftware
EmbodimentMulti-chip standalone
VendorSafeNet, Inc. · website
Software versions3.18, 3.18.1 and 3.18.2

Module description

Quoted from the NIST CMVP entry for this certificate.

Based on SafeNet's 20 years of security expertise and the most widely deployed VPN software in the industry, the CGX Cryptographic Library provides a high-level software interface to SafeNet SafeXcel™ VPN acceleration chips, cards, and EmbeddedIP™ intellectual property. The CGX library can be used as an API to hardware accelerators or for compiling software implementations of the latest industry standard algorithms. Containing over forty cryptographic commands, the CGX library can provide a total security solution in either software or hardware.

Security level exceptions

  • EMI/EMC: Level 3
  • Design Assurance: Level 3

Approved algorithms (5)

AlgorithmCAVP certificates
AES75
DSA30
HMAC-SHA-1vendor affirmed
SHA-130
Triple-DES11

Other algorithms

DES (Cert. #72); RC5; RSA; Diffie-Hellman (key agreement); MD2; MD5; RIPEMD-128; RIPEMD-160

Tested configurations

  • Dell Optiplex GX400 running Windows 2000 Professional, Server and Advanced Server with SP3 and Q326886 Hotfix (EAL 4 augmented configuration)

Validation history

DateTypeLab
2004-03-10InitialCOACT INC CAFE LAB
2004-10-19Update
2006-09-14Update
2006-10-03Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2004-03-10, 2004-10-19, 2006-09-14, 2006-10-03

Source documents