808bits

Proofpoint Cryptographic Module

FIPS 140-2 certificate #5059 · Proofpoint Inc. · data as of 2026-10-21

Proofpoint Cryptographic Module, from Proofpoint Inc., holds FIPS 140-2 certificate #5059 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. Moved to historical list due to sunsetting. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode. The module makes no assurance of the minimum strength of random strings and generated keys. This validation entry is a non-security-relevant modification to Cert. #2038

Certificate

Certificate number5059
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-Chip Stand Alone
VendorProofpoint Inc. · website
Software versions2.1.2

Module description

Quoted from the NIST CMVP entry for this certificate.

The module is a cryptographic component to be used by the various Proofpoint security products. The module is designed to meet Level 1 requirements of FIPS 140-2 standard. The module is a cryptographic library that provides a variety of cryptographic services including SSH, HTTPS, etc.

Security level exceptions

  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A

Approved algorithms (9)

AlgorithmCAVP certificates
AESA4873
CKGvendor affirmed
DRBGA4873
DSAA4873
ECDSAA4873
HMACA4873
RSAA4873
SHSA4873
Triple-DESA4873

Tested configurations

  • CentOS 7 running on a Dell PowerEdge R830 with an Intel Xeon E5-4667v4 with PAA
  • CentOS 7 running on a Dell PowerEdge R830 with an Intel Xeon E5-4667v4 without PAA
  • macOS 13 (Ventura) running on a Mac Mini M2 with an Apple M2
  • Windows Server 2022 running on a Dell PowerEdge R830 with an Intel Xeon E5-4667v4 with PAA
  • Windows Server 2022 running on a Dell PowerEdge R830 with an Intel Xeon E5-4667v4 without PAA (single-user mode)

Validation history

DateTypeLab
2025-09-16InitialLeidos Accredited Testing & Evaluation (AT&E) Lab

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2025-09-16

Source documents