Quantum Security Gateway Cryptographic Library
Quantum Security Gateway Cryptographic Library, from Check Point Software Technologies Ltd., holds FIPS 140-2 certificate #4264 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its algorithm certificates, its validation history, and the list moves this tracker has observed, which NIST does not date.
Caveat: When operated in FIPS mode and installed, initialized and configured as specified in the Security Policy Section 3 Secure Operation
Certificate
| Certificate number | 4264 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Check Point Software Technologies Ltd. · website |
| Firmware versions | 1.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Check Point Cryptographic Library is a firmware module that provides cryptographic services to Check Point products. The module provides a number of NIST validated cryptographic algorithms for services such as IPSec and TLS. The module provides applications with a library interface that enables them to access the various cryptographic algorithm functions supplied by the module.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms (9)
| Algorithm | CAVP certificates |
|---|---|
| AES | 3418, A4283 |
| CVL | 514, A4283 |
| DRBG | 823, A4283 |
| ECDSA | 685, A4283 |
| HMAC | 2176, A4283 |
| KAS | vendor affirmed |
| KAS-SSC | vendor affirmed |
| RSA | 1750, A4283 |
| SHS | 2824, A4283 |
Allowed algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides 112 or 128 bits of encryption strength)
Tested configurations
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1530 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1535 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1550 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1555 with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1570 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1570R with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1575 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1575R with a Marvell ARMADA 7040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1590 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1595 with a Marvell ARMADA 8040 (ARM Cortex-A72)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1600 with a Marvell OCTEON TX2 CN9250 (Marvel TX2)
- Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1800 with a Marvell OCTEON TX2 CN9250 (Marvel TX2)
- Check Point GAiA Operating System version R81.20 with Check Point 9100 with a 13th Generation Intel Core i3-13100E (Raptor Lake)
- Check Point GAiA Operating System version R81.20 with Check Point 9300 with a 13th Generation Intel Core i5-13400E (Raptor Cove)
- Check Point GAiA Operating System version R81.20 with Check Point 9400 with a 13th Generation Intel Core i5-13500E (Raptor Cove)
- Check Point GAiA Operating System version R82 with Check Point 9100 with a 13th Generation Intel Core i3-13100E (Raptor Lake)
- Check Point GAiA Operating System version R82 with Check Point 9300 with a 13th Generation Intel Core i5-13400E (Raptor Cove)
- Check Point GAiA Operating System version R82 with Check Point 9400 with a 13th Generation Intel Core i5-13500E (Raptor Cove)
- Check Point GAiA OS version R80.30 on VMware ESXi 6.0.0 running on a HPE DL360 gen 10 with a 2nd Generation Intel Xeon Silver
- Check Point GAiA OS version R80.30 with Check Point 16200 Plus with a 2nd Generation Intel Xeon Silver
- Check Point GAiA OS version R80.30SP with Check Point 28000 with a 2nd Generation Intel Xeon Gold
- Check Point GAiA OS version R81.10 with Check Point 3600 with an Intel Atom C Series
- Check Point GAiA OS version R81.10 with Check Point 7000 with a 2nd Generation Intel Xeon Silver (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2022-07-15 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2022-08-26 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2023-05-30 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2023-09-25 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-07-29 | Update | Leidos Accredited Testing & Evaluation (AT&E) Lab |
| 2025-08-27 | Update | Gossamer Security Solutions |
| 2026-02-24 | Update | Gossamer Security Solutions |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical at the time of the earliest snapshot
- 2026-09-22: observed moving from active to historical
- Validation dates on record: 2022-07-15, 2022-08-26, 2023-05-30, 2023-09-25, 2025-07-29, 2025-08-27, 2026-02-24