808bits

PGP Software Developer's Kit (SDK) Cryptographic Module

FIPS 140-2 certificate #765 · PGP Corporation · data as of 2026-08-28
Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number765
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPGP Corporation · website
Software versions3.7.1 and 3.8.1

Module description

The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.

Security level exceptions

  • Design Assurance: Level 3

Approved algorithms

AlgorithmCAVP certificate
AES453
DSA183
HMAC216
RNG238
RSA172
SHS516
Triple-DES471

Other algorithms

AES (EME mode; non-compliant); DSA (FIPS 186-3 with SHA-256; non-compliant); CAST-5; IDEA; Two-Fish; ARC4-128; MD5; RIPEMD60; HMAC-MD5; Blow-Fish; ElGamal (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength); Shamir Threshold Secret Sharing

Tested configurations

  • Mac OS X 10.4.8
  • Windows XP Professional SP2 (single user mode)

Validation history

DateTypeLab
2007-05-04InitialUL Verification Services, Inc.
2007-05-08Update
2007-10-22Update
2008-03-07Update
2008-07-28Update
2008-08-21Update
2008-12-03Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2007-05-04, 2007-05-08, 2007-10-22, 2008-03-07, 2008-07-28, 2008-08-21, 2008-12-03

Source documents