BlackBerry Cryptographic Kernel: FIPS 140-2 cert #939

BlackBerry Cryptographic Kernel, from Research In Motion Ltd., holds FIPS 140-2 certificate #939 at overall level 1. The validation is historical: agencies may keep the module in existing systems but not buy it new. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.

Certificate

Certificate number	939
Standard	FIPS 140-2
Status	historical
Overall level	1
Module type	Firmware
Embodiment	Multi-chip standalone
Vendor	Research In Motion Ltd. · website
Firmware versions	3.8.5.11b and 3.8.5.11c

Module description

Quoted from the NIST CMVP entry for this certificate.

BlackBerry® is the leading wireless enterprise solution that allows users to stay connected with secure, wireless access to email, corporate data, phone, web and organizer features. BlackBerry® is a totally integrated package that includes hardware, software and service, providing a complete end-to-end solution. The BlackBerry Cryptographic Kernel is the software module that provides the basic cryptographic functionality for the BlackBerry.

Security level exceptions

Design Assurance: Level 3
Tested: BlackBerry 8300 with BlackBerry OS Version 4.3

Approved algorithms (7)

Algorithm	CAVP certificates
AES	734, 735, 736, 737
ECDSA	78, 79
HMAC	400, 401
RNG	428, 429
RSA	344, 345
SHS	751, 752
Triple-DES	653, 654

Other algorithms

EC Diffie-Hellman key agreement; key establishment methodology provides 256 bits of encryption strength); ECMQV (key agreement; key establishment methodology provides 256 bits of encryption strength)

Validation history

Date	Type	Lab
2008-04-23	Initial	DOMUS

Status timeline

As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.

2026-08-21: first observed by this tracker, status historical
Validation dates on record: 2008-04-23

BlackBerry Cryptographic Kernel