FIPS 140-1 certificate 76: Base DSS Cryptographic Provider, Base Cryptographic Provider,...

Base DSS Cryptographic Provider, Base Cryptographic Provider, DSS/Diffie-Hellman Enchanced Cryptographic Provider, and Enhanced Cryptographic Provider, from Microsoft Corporation, holds FIPS 140-1 certificate #76 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	76
Standard	FIPS 140-1
Status	historical
Overall level	1
Module type	Software
Embodiment	Multi-chip standalone
Vendor	Microsoft Corporation · website
Software versions	5.0.2150.1

Module description

Quoted from the NIST CMVP entry for this certificate.

These are general-purpose software-based cryptomodules. They provide services that enable application developers to utilize several different cryptographic algorithms and functions via the Microsoft CryptoAPI without knowing the underlying implementation.

Security level exceptions

EMI/EMC: Level 3
Operating System Security: Tested as meeting Level 1 with Microsoft Windows2000 (operated in single-user mode).

Approved algorithms (3)

Algorithm	CAVP certificates
DSA/SHA-1
RSA	vendor affirmed
Triple-DES	vendor affirmed

Other algorithms

DES (Certs. #65, 66, 67 and 68); RC2; RC4; MD2; MD4; MD5; Diffie-Hellman (key agreement)

Validation history

Date	Type	Lab
1999-11-09	Initial	CYGNACOM SOLUTIONS INC
2007-10-15	Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 1999-11-09, 2007-10-15

Base DSS Cryptographic Provider, Base Cryptographic Provider, DSS/Diffie-Hellman Enchanced Cryptographic Provider, and Enhanced Cryptographic Provider