Sophos Cryptographic Module
Caveat: No assurance of the minimum strength of generated SSPs (e.g., keys).
Certificate
| Certificate number | 4925 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-07-10 |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | Sophos Ltd. |
Module description
The Sophos Cryptographic Module is a general-purpose cryptographic library incorporated into the Sophos Firewall systems to provide FIPS 140-3 validated cryptography for the protection of sensitive information.
Security level exceptions
- Physical security: N/A
- Non-invasive security: N/A
- Life-cycle assurance: Level 3
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-12-18 | Initial | DEKRA Cybersecurity Certification Laboratory |
| 2025-09-19 | Update | Acumen Security |
| 2026-05-08 | Update | Acumen Security |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-12-18