808bits

Entrust Authority™ Security Kernel

FIPS 140-2 certificate #3981 · Entrust Corporation · data as of 2026-10-21

Entrust Authority™ Security Kernel, from Entrust Corporation, holds FIPS 140-2 certificate #3981 at overall level 2. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to dependency on certificate #2937. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode with module [Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) in Windows Server 2016 Standard] validated to FIPS 140-2 under Cert. #2936 operating in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy

Certificate

Certificate number3981
StandardFIPS 140-2
Statushistorical
Overall level2
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorEntrust Corporation · website
Software versions1.0 and 1.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The Security Kernel is a C++ implementation of cryptographic functions accessible by an object-oriented API. Depending on configuration, the algorithms may be implemented in software, hardware, or both.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (12)

AlgorithmCAVP certificates
AESC614
CKGvendor affirmed
CVLC605, C607
DRBGC601
DSAC602
ECDSAC603
HMACC604
KASvendor affirmed
KTS
RSAC605
SHSC600
Triple-DESC606

Allowed algorithms

EC Diffie-Hellman (CVL Cert. #C607, key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); NDRNG; RSA (CVL Cert. #C605, key wrapping; key establishment methodology provides between 112 and 202 bits of encryption strength)

Tested configurations

  • Microsoft Windows Server 2016 Standard Edition running on a HP Compaq Pro 6305 with an AMD A4 (single-user mode)

Validation history

DateTypeLab
2021-07-15InitialUL Verification Services, Inc.

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2021-07-15

Source documents