808bits

PGP Software Developer's Kit (SDK) Cryptographic Module

FIPS 140-2 certificate #765 · PGP Corporation · data as of 2026-10-21

PGP Software Developer's Kit (SDK) Cryptographic Module, from PGP Corporation, holds FIPS 140-2 certificate #765 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number765
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorPGP Corporation · website
Software versions3.7.1 and 3.8.1

Module description

Quoted from the NIST CMVP entry for this certificate.

The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.

Security level exceptions

  • Design Assurance: Level 3

Approved algorithms (7)

AlgorithmCAVP certificates
AES453
DSA183
HMAC216
RNG238
RSA172
SHS516
Triple-DES471

Other algorithms

AES (EME mode; non-compliant); DSA (FIPS 186-3 with SHA-256; non-compliant); CAST-5; IDEA; Two-Fish; ARC4-128; MD5; RIPEMD60; HMAC-MD5; Blow-Fish; ElGamal (key wrapping; key establishment methodology provides between 112 and 256 bits of encryption strength); RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength); Shamir Threshold Secret Sharing

Tested configurations

  • Mac OS X 10.4.8
  • Windows XP Professional SP2 (single user mode)

Validation history

DateTypeLab
2007-05-04InitialUL Verification Services, Inc.
2007-05-08Update
2007-10-22Update
2008-03-07Update
2008-07-28Update
2008-08-21Update
2008-12-03Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2007-05-04, 2007-05-08, 2007-10-22, 2008-03-07, 2008-07-28, 2008-08-21, 2008-12-03

Source documents