808bits

VirtruCrypto - FIPS JavaScript Module

FIPS 140-2 certificate #4440 · Virtru Corporation · data as of 2026-08-28
Active. Sunset date 2026-09-21, 23 days away. This is the FIPS 140-2 sunset: after it, agencies may keep the module only in existing systems.
Caveat: The module generates cryptographic keys whose strengths are modified by available entropy. No assurance of minimum strength or security of keys

Certificate

Certificate number4440
StandardFIPS 140-2
Statusactive
Sunset date2026-09-21
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorVirtru Corporation
Software versions1.2.0

Module description

The VirtruCrypto module is a multi-chip standalone cryptographic module

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms

AlgorithmCAVP certificate
AESA2602
CKGvendor affirmed
DRBGA2602
ENT
HMACA2602
RSAA2602
SHSA2602

Allowed algorithms

RSA (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength)

Tested configurations

  • Windows 10 running on HP Z8 with Intel ® Xeon® Silver 4108 CPU without PAA (single-user mode)

Validation history

DateTypeLab
2023-02-21InitialEWA - Canada

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status active
  • Validation dates on record: 2023-02-21

Source documents