Philips FIPS Object Module for OpenSSL: FIPS 140-2 cert #3999

Philips FIPS Object Module for OpenSSL, from Koninklijke Philips N.V., holds FIPS 140-2 certificate #3999 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	3999
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-Chip Stand Alone
Vendor	Koninklijke Philips N.V.
Software versions	1.0

Module description

Quoted from the NIST CMVP entry for this certificate.

The Philips FIPS Object Module for OpenSSL is a general-purpose cryptographic module integrated in Philips' products to provide FIPS 140-2 validated cryptography for the protection of sensitive information.

Security level exceptions

Roles, Services, and Authentication: Level 2
Physical Security: N/A
Design Assurance: Level 3
Mitigation of Other Attacks: N/A

Approved algorithms (11)

Algorithm	CAVP certificates
AES	A952
CKG	vendor affirmed
CVL	A952
DRBG	A952
DSA	A952
ECDSA	A952
HMAC	A952
KAS-SSC	vendor affirmed
RSA	A952
SHS	A952
Triple-DES	A952

Allowed algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

Philips OS Linux 4.19 running on NXP SABRE Smart Devices Board with NXP i.MX 6 with PAA
Philips OS Linux 4.19 running on NXP SABRE Smart Devices Board with NXP i.MX 6 without PAA
Philips OS Linux 5.4 running on Microchip SAMA5D3 Xplained with Microchip SAMA5D3 (single user mode)

Validation history

Date	Type	Lab
2021-08-03	Initial	Acumen Security

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2021-08-03

Philips FIPS Object Module for OpenSSL