808bits

PGP Software Developer's Kit (SDK) Cryptographic Module

FIPS 140-2 certificate #630 · PGP Corporation · data as of 2026-08-28
Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number630
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPGP Corporation · website
Software versions3.5.3

Module description

The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.

Security level exceptions

  • Cryptographic Module Specification:Level 3
  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
AES308
DSA144
HMAC114
RNG131
RSA97
SHS381
Triple-DES379

Other algorithms

CAST-5; IDEA; Two-Fish; MD5; RIPEMD60; HMAC-MD5; Blow-Fish; ElGamal Encrypt/Decrypt (key wrapping; key establishment methodology provides between 112 to 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 to 128 bits of encryption strength); Shamir Threshold Secret Sharing

Tested configurations

  • MAC OSX 10.4.2
  • Windows XP SP2 (single-user mode)

Validation history

DateTypeLab
2006-03-03InitialUL Verification Services, Inc.
2007-05-08Update
2008-03-07Update
2008-07-28Update
2008-08-21Update
2008-12-03Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2006-03-03, 2007-05-08, 2008-03-07, 2008-07-28, 2008-08-21, 2008-12-03

Source documents