808bits

Microsoft Windows CE and Windows Mobile Enhanded Cryptographic Provider 6.00.1937 and Microsoft Windows Embedded Compact Enhanced Cryptographic Provider 7.00.1687

FIPS 140-2 certificate #825 · Microsoft Corporation · data as of 2026-09-08

Microsoft Windows CE and Windows Mobile Enhanded Cryptographic Provider 6.00.1937 and Microsoft Windows Embedded Compact Enhanced Cryptographic Provider 7.00.1687, from Microsoft Corporation, holds FIPS 140-2 certificate #825 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Historical. RNG SP800-131A Revision 1 Transition. Federal agencies may reference historical validations for existing systems only, not for new procurement.
Caveat: When operated in FIPS mode

Certificate

Certificate number825
StandardFIPS 140-2
Statushistorical
Overall level1
Module typeSoftware
EmbodimentMulti-chip standalone
VendorMicrosoft Corporation · website
Software versions6.00.1937 [1] and 7.00.1687 [2]

Module description

Quoted from the NIST CMVP entry for this certificate.

Microsoft Windows Embedded Compact Enhanced Cryptographic Provider 7.00.1687 and the Microsoft Windows CE and Windows Mobile Enhanced Cryptographic Provider 6.00.1937 (RSAENH) are general-purpose, software-based, cryptographic modules for Windows Embedded Compact. Like cryptographic providers that ship with Microsoft Windows Embedded Compact, RSAENH encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible via the Microsoft CryptoAPI. It can be dynamically linked into applications by software developers to permit the use of general-purpose cryptography. RSAENH meets the Level 1 FIPS 140-2 Validation requirements.

Approved algorithms (6)

AlgorithmCAVP certificates
AES516, 2024
HMAC267, 1227
RNG292, 1060
RSA230, 1052
SHS589, 1774
Triple-DES526, 1308

Other algorithms

MD5; HMAC-MD5; RC2; RC4; DES

Tested configurations

  • Microsoft Windows CE 6.0 [1], Microsoft Windows CE 6.0 R2 [1] and Microsoft Windows Embedded Compact 7 [2] (single user mode)

Validation history

DateTypeLab
2007-08-27InitialSAIC-VA
2007-11-26Update
2008-02-21Update
2012-01-16Update

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

  • 2026-08-21: first observed by this tracker, status historical
  • Validation dates on record: 2007-08-27, 2007-11-26, 2008-02-21, 2012-01-16

Source documents