F-Secure® Cryptographic Library
F-Secure® Cryptographic Library, from F-Secure Corporation, holds FIPS 140-2 certificate #493 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 493 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | F-Secure Corporation · website |
| Software versions | 2.2.5, 2.2.7, 2.2.8 and 2.2.12 (Windows) and 1.1.8, 1.1.9, 1.1.10, 1.1.12 and 1.1.15 (Solaris/Linux/AIX/HP-UX) |
Module description
Quoted from the NIST CMVP entry for this certificate.
The F-Secure® Cryptographic Library™ is a family of software modules for a number of Windows and Unix platforms. The modules provide an assortment of cryptographic services accessible for clients through a C/C++ Application Programming Interface. The modules are designed and implemented to meet the Level 1 requirements of FIPS publication 140-2 when running on a GPC under various popular versions of Windows and Unix operating systems.
Approved algorithms (7)
| Algorithm | CAVP certificates |
|---|---|
| AES | 145, 148 |
| DSA | 107, 109 |
| HMAC-SHA-1 and HMAC-SHA-256 | vendor affirmed |
| RNG | 2, 4 |
| RSA | 190, 192 |
| SHS | 234, 237 |
| Triple-DES | 255, 257 |
Other algorithms
DES (Certs. #257 and #259); DES (CTR); Blowfish; CAST-128; MD5; HMAC-MD5; Diffie-Hellman (key agreement); RC2; RIPEMD-160 (v1.1.10 and 1.1.12 only); RSA (specified in RFC 2409)
Tested configurations
- Windows 98, Windows XP Professional, Windows ME, Windows 2000, HP-UX B.11.11, AIX 5, Trusted Solaris 8 7/03 and Linux RHEL 3 (all in single user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-12-22 | Initial | SAIC-VA |
| 2005-02-03 | Update | |
| 2005-12-22 | Update | |
| 2006-07-10 | Update | |
| 2006-12-19 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-12-22, 2005-02-03, 2005-12-22, 2006-07-10, 2006-12-19