Cryptographic Primitives Library
Cryptographic Primitives Library, from Microsoft Corporation, holds FIPS 140-2 certificate #4825 at overall level 1. The validation is active, with a sunset date of 2026-09-21. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode with modules Kernel Mode Cryptographic Primitives Library validated to FIPS 140-2 under Cert. #4766 operating in FIPS mode and Code Integrity validated to FIPS 140-2 under Cert. #4511 operating in FIPS mode or Secure Kernel Code Integrity validated to FIPS 140-2 under Cert. #4512 operating in FIPS mode
Certificate
| Certificate number | 4825 |
|---|---|
| Standard | FIPS 140-2 |
| Status | active |
| Sunset date | 2026-09-21 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Microsoft Corporation · website |
| Software versions | 10.0.19042, 10.0.19043, 10.0.20348 and 10.0.22000 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The Cryptographic Primitives Library (bcryptprimitives.dll and ncryptsslp.dll) provides cryptographic services to Windows components and applications. It includes cryptographic algorithms in an easy-to-use cryptographic module via the Cryptography Next Generation (CNG) API. It can be dynamically linked into applications for the use of general-purpose FIPS 140-2 validated cryptography.
Security level exceptions
- Physical Security: N/A
- Design Assurance: Level 2
Approved algorithms (16)
| Algorithm | CAVP certificates |
|---|---|
| AES | A2001, A2004, A2019, A2023, A2025, A2031, A2066, A2069 |
| CKG | vendor affirmed |
| CVL | A2004, A2019, A2025, A2066 |
| DRBG | A2004, A2019, A2025, A2066 |
| DSA | A2004, A2019, A2025, A2066 |
| ECDSA | A2004, A2019, A2025, A2066 |
| ENT | |
| HMAC | A2004, A2019, A2025, A2066 |
| KAS | A2004, A2019, A2025, A2066 |
| KAS-SSC | A2004, A2019, A2025, A2066 |
| KBKDF | A2001, A2023, A2031, A2069 |
| KTS | |
| PBKDF | A2004, A2019, A2025, A2066 |
| RSA | A2004, A2019, A2025, A2066 |
| SHS | A2004, A2019, A2025, A2066 |
| Triple-DES | A2004, A2019, A2025, A2066 |
Tested configurations
- Azure Host OS 2021 (64-bit) running on a Dell PowerEdge R840 with an Intel Xeon Platinum 8260 with PAA
- Azure Stack HCI version 21H2 (64-bit) running on an HPE ProLiant DL380 with an Intel Xeon Platinum 8276L with PAA
- Windows 10 version 20H2 Enterprise (64-bit) running on a Dell Latitude 7420 with an Intel i7-1185G7 with PAA
- Windows 10 version 20H2 Enterprise (64-bit) running on a Dell Latitude 9520 with an Intel i7-1185G7 with PAA
- Windows 10 version 20H2 Pro (64-bit) running on a Dell Latitude 3520 with an Intel i3-1115G4 with PAA
- Windows 10 version 20H2 Pro (64-bit) running on a Microsoft Surface Laptop 4 with an Intel i5-1145G7 with PAA
- Windows 10 version 20H2 Pro (64-bit) running on an HP EliteBook x360 830 G8 with an Intel i7-1165G7 with PAA
- Windows 10 version 21H1 Pro (64-bit) running on a HP EliteBook x360 830 G8 with an Intel i7-1165G7 with PAA
- Windows 10 version 21H1 Pro (64-bit) running on a Microsoft Surface Laptop 4 with an Intel i5-1145G7 with PAA
- Windows 11 (64-bit) running on a Microsoft Surface Laptop 4 with an Intel i5-1145G7 with PAA
- Windows Server 2022 Core (64-bit) on Microsoft Windows Server 2019 Hyper-V running on a Dell PowerEdge R630 with an Intel Xeon E5-2660 with PAA
- Windows Server 2022 Core Datacenter (64-bit) on Microsoft Windows Server 2019 Hyper-V running on a Dell PowerEdge R630 with an Intel Xeon E5-2660 with PAA
- Windows Server 2022 Core Datacenter (64-bit) running on an HPE ProLiant E910 with an Intel Xeon Gold 6248 without PAA
- Windows Server 20H2 Core (64-bit) on Microsoft Windows Server 2019 Hyper-V running on a Dell PowerEdge R630 with an Intel Xeon E5-2660 with PAA
- Windows Server 20H2 Core Datacenter (64-bit) on Microsoft Windows Server 2019 Hyper-V running on a Dell PowerEdge R630 with an Intel Xeon E5-2660 with PAA
- Windows Server Azure Edition (64-bit) running on a Dell PowerEdge R840 with an Intel Xeon Platinum 8260 with PAA (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-10-07 | Initial | Leidos Accredited Testing & Evaluation (AT&E) Lab |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-10-07