808bits

PGP Software Developer's Kit (SDK) Cryptographic Module

FIPS 140-2 certificate #630 · PGP Corporation · data as of 2026-10-21

PGP Software Developer's Kit (SDK) Cryptographic Module, from PGP Corporation, holds FIPS 140-2 certificate #630 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number630
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPGP Corporation · website
Software versions3.5.3

Module description

Quoted from the NIST CMVP entry for this certificate.

The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.

Security level exceptions

  • Cryptographic Module Specification:Level 3
  • Design Assurance: Level 3

Approved algorithms (7)

AlgorithmCAVP certificates
AES308
DSA144
HMAC114
RNG131
RSA97
SHS381
Triple-DES379

Other algorithms

CAST-5; IDEA; Two-Fish; MD5; RIPEMD60; HMAC-MD5; Blow-Fish; ElGamal Encrypt/Decrypt (key wrapping; key establishment methodology provides between 112 to 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 to 128 bits of encryption strength); Shamir Threshold Secret Sharing

Tested configurations

  • MAC OSX 10.4.2
  • Windows XP SP2 (single-user mode)

Validation history

DateTypeLab
2006-03-03InitialUL Verification Services, Inc.
2007-05-08Update
2008-03-07Update
2008-07-28Update
2008-08-21Update
2008-12-03Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2006-03-03, 2007-05-08, 2008-03-07, 2008-07-28, 2008-08-21, 2008-12-03

Source documents