Quantum Security Gateway Cryptographic Library
Caveat: When operated in FIPS mode and installed, initialized and configured as specified in the Security Policy Section 3 Secure Operation
Certificate
| Certificate number | 4264 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Check Point Software Technologies Ltd. · website |
| Firmware versions | 1.1 |
Module description
The Check Point Cryptographic Library is a firmware module that provides cryptographic services to Check Point products. The module provides a number of NIST validated cryptographic algorithms for services such as IPSec and TLS. The module provides applications with a library interface that enables them to access the various cryptographic algorithm functions supplied by the module.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 3418, A4283 |
| CVL | 514, A4283 |
| DRBG | 823, A4283 |
| ECDSA | 685, A4283 |
| HMAC | 2176, A4283 |
| KAS | vendor affirmed |
| KAS-SSC | vendor affirmed |
| RSA | 1750, A4283 |
| SHS | 2824, A4283 |
Allowed algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1530 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1535 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1550 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1555 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1570 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1570R with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1575 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1575R with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1590 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1595 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1600 with a Marvell OCTEON TX2 CN9250 (Marvel TX2)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1800 with a Marvell OCTEON TX2 CN9250 (Marvel TX2)
- Check Point GAiA Operating System version R81.20 with Check Point 9100 with a 13th Generation Intel Core i3-13100E (Raptor Lake)
- Check Point GAiA Operating System version R81.20 with Check Point 9300 with a 13th Generation Intel Core i5-13400E (Raptor Cove)
- Check Point GAiA Operating System version R81.20 with Check Point 9400 with a 13th Generation Intel Core i5-13500E (Raptor Cove)
- Check Point GAiA Operating System version R82 with Check Point 9100 with a 13th Generation Intel Core i3-13100E (Raptor Lake)
- Check Point GAiA Operating System version R82 with Check Point 9300 with a 13th Generation Intel Core i5-13400E (Raptor Cove)
- Check Point GAiA Operating System version R82 with Check Point 9400 with a 13th Generation Intel Core i5-13500E (Raptor Cove)
- Check Point GAiA OS version R80.30 on VMware ESXi 6.0.0 running on a HPE DL360 gen 10 with a 2nd Generation Intel Xeon Silver
- Check Point GAiA OS version R80.30 with Check Point 16200 Plus with a 2nd Generation Intel Xeon Silver
- Check Point GAiA OS version R80.30SP with Check Point 28000 with a 2nd Generation Intel Xeon Gold
- Check Point GAiA OS version R81.10 with Check Point 3600 with an Intel Atom C Series
- Check Point GAiA OS version R81.10 with Check Point 7000 with a 2nd Generation Intel Xeon Silver (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-07-15 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2022-08-26 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2023-05-30 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2023-09-25 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-07-29 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-08-27 | Update | Gossamer Security Solutions |
| 2026-02-24 | Update | Gossamer Security Solutions |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2022-07-15, 2022-08-26, 2023-05-30, 2023-09-25, 2025-07-29, 2025-08-27, 2026-02-24