DSS/Diffie-Hellman Enhanced Cryptographic Provider
DSS/Diffie-Hellman Enhanced Cryptographic Provider, from Microsoft Corporation, holds FIPS 140-1 certificate #60 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: For services provided by the listed FIPS-Approved algorithms and using Triple DES
Certificate
| Certificate number | 60 |
|---|---|
| Standard | FIPS 140-1 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | Microsoft Corporation · website |
| Software versions | 5.0.1998.1 |
Module description
Quoted from the NIST CMVP entry for this certificate.
Microsoft's DSSENH is a general-purpose software-based cryptographic module. It provides services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation.
Security level exceptions
- EMI/EMC: Level 3
- Operating System Security: Tested as meeting Level 1 with Microsoft WindowsNT 4.0 with Service Pack 4 (operated in single-user mode).
Approved algorithms (1)
| Algorithm | CAVP certificates |
|---|---|
| DSA/SHA-1 |
Other algorithms
DES (Cert. #45); Triple-DES (allowed for US Government use); RC2; RC4; MD5; Diffie-Hellman (key agreement)
Validation history
| Date | Type | Lab |
|---|---|---|
| 1999-08-05 | Initial | CYGNACOM SOLUTIONS INC |
| 2007-10-15 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 1999-08-05, 2007-10-15