Communication Cryptographic Library (CCL)
Communication Cryptographic Library (CCL), from E.F. Johnson Co., holds FIPS 140-2 certificate #512 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: When operated in FIPS mode
Certificate
| Certificate number | 512 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | E.F. Johnson Co. · website |
| Software versions | 2.0 |
Module description
Quoted from the NIST CMVP entry for this certificate.
The E.F. Johnson Co. Communication Cryptographic Library (CCL) is a Microsoft Windows 2000/2003/XP and Pocket PC 2003 Dynamic Link Library that performs security related functions. The CCL is packaged as a Software Development Kit which makes available an Application Programming Interface (API) for all the security functions of the CCL. The security functions available via the APIs are: AES 128 bit, AES 192 bit, AES 256 bit, DES, DSA 1024 bit Signature Generation and Verification, HMAC, PRNG, and SHA-1. The CCL is used in the E.F. Johnson Subscriber Management Assistant key loader.
Approved algorithms (5)
Other algorithms
DES (Cert. #248); SecureNet DES 1 bit CFB with differential encoding and decoding; DES 8 bit CFB; DES 8 bit OFB; DES 1 bit CFB
Tested configurations
- Pocket PC 2003 (in single-user mode)
- Windows XP Professional SP1
Validation history
| Date | Type | Lab |
|---|---|---|
| 2004-03-15 | Initial | UL Verification Services, Inc. |
| 2005-05-05 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2004-03-15, 2005-05-05