808bits

PGP Software Developer’s Kit (PGP SDK)

FIPS 140-2 certificate #394 · PGP Corporation · data as of 2026-08-28
Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number394
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPGP Corporation · website
Software versions3.0.3

Module description

The PGP SDK includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers the same core crypto that is at the heart of PGP products.

Security level exceptions

  • Cryptographic Module Specification: Level 3
  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
AES93
DSA96
HMAC-SHA-1vendor affirmed
RSAvendor affirmed
SHA-1183
Triple-DES207

Other algorithms

CAST-5; IDEA; Twofish; SHA-256; SHA-384; SHA-512; MD5; HMAC-MD5; RIPEMD-60; ElGamal; Shamir Treshold Secret Sharing

Tested configurations

  • Windows XP SP1

Validation history

DateTypeLab
2004-03-18InitialUL Verification Services, Inc.
2007-05-08Update
2008-03-07Update
2008-07-28Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2004-03-18, 2007-05-08, 2008-03-07, 2008-07-28

Source documents