Base Cryptographic Provider, Enhanced Cryptographic Provider, Base DSS Cryptographic Provider, and DSS/Diffie-Hellman Enchanced Cryptographic Provider
Caveat: For services provided by the listed FIPS-Approved algorithms and using Triple DES
Certificate
| Certificate number | 68 |
|---|---|
| Standard | FIPS 140-1 |
| Status | historical |
| Overall level | 1 |
| Module type | Software |
| Embodiment | Multi-chip standalone |
| Vendor | Microsoft Corporation · website |
| Software versions | 5.0.1877.6 and 5.0.1877.7 |
Module description
These are general-purpose software-based cryptomodules. They provide services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation.
Security level exceptions
- EMI/EMC: Level 3
- Operating System Security: Tested as meeting Level 1 with Microsoft WindowsNT 4.0 with Service Pack 6 (operated in single-user mode).
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| DSA/SHA- 1 | |
| RSA | vendor affirmed |
| SHA-1 | 20 |
Other algorithms
DES (Certs. #61, 62, 63 and 64); Triple-DES (allowed for US and Canadian Government use); RC2; RC4; MD2; MD4; MD5; Diffie-Hellman (key agreement)
Validation history
| Date | Type | Lab |
|---|---|---|
| 1999-09-13 | Initial | CYGNACOM SOLUTIONS INC |
| 2007-10-15 | Update |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 1999-09-13, 2007-10-15