The page provides technical information about implementations that have been validated as conforming to the Deterministic Random Bit Generator (DRBG) Algorithm, as specified in Special Publication 800-90, Recommendation for Random Number Generation Using Deterministic Random Bit Generators
The list below describes implementations which have been validated as correctly implementing the DRBG algorithm, using the tests found in The DRBG Validation Suite (DRBGVS) This testing is performed by NVLAP accredited Cryptographic And Security Testing (CST) Laboratories.
The implementations below consist of software, firmware, hardware, and any combination thereof. The National Institute of Standards and Technology (NIST) has made every attempt to provide complete and accurate information about the implementations described in this document. However, due to the possibility of changes made within individual companies, NIST cannot guarantee that this document reflects the current status of each product. It is the responsibility of the vendor to notify NIST of any necessary changes to its entry in the following list.
This list is ordered in reverse numerical order, by validation number. Thus, the more recent validations are located closer to the top of the list. The column after the Validation Date column contains information indicating what modes and features for these modes has been successfully tested.
| Validation No. |
Vendor | Implementation | Operational Environment | Val. Date |
Description/Notes |
|---|---|---|---|---|---|
| 27 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
-Kelvin Yu
|
Version 1.0 |
Intel Itanium 2 w/ Windows Server 2008 R2 (IA64); Intel Core 2 Duo w/ Windows Server 2008 R2 (x64) | 9/30/2009 |
Dual_EC_DRBG ( ECDSA Val#142 ) ( SHS Val#1081 ) [ P-256: SHA-256 "The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography." |
| 26 | Motorola Unit A1 Linhay Business Park Ashburton, Devon TQ13 7UP UK -Richard Carter
|
Version PTP500-DRNG-00-01 (Firmware) |
TI C6412 DSP | 9/30/2009 |
CTR_DRBG [ Use_df: AES-128 ( AES Val#1179 ) ] "The Motorola family of PTP Wireless Ethernet Bridges offers a solution to the challenge of establishing a reliable, secure, point-to-point network connection. Whether operating in a Non-Line-of-Sight (NLoS), adverse or marginally adverse environment." 10/07/09: Update Processor; |
| 25 | Motorola Unit A1 Linhay Business Park Ashburton, Devon TQ13 7UP UK -Richard Carter
|
Version PTP300-DRNG-00-01 (Firmware) |
TI C6412 DSP | 9/30/2009 |
CTR_DRBG [ Use_df: AES-128 ( AES Val#1179 ) ] "The Motorola family of PTP Wireless Ethernet Bridges offers a solution to the challenge of establishing a reliable, secure, point-to-point network connection. Whether operating in a Non-Line-of-Sight (NLoS), adverse or marginally adverse environment." 01/07/09: Update Processor; |
| 24 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
-Kelvin Yu
|
Version 1.0 |
Intel Core 2 Duo w/ Windows 7 Ultimate (x86); Intel Core 2 Duo w/ Windows 7 Ultimate (x64) | 9/30/2009 |
Dual_EC_DRBG ( SHS Val#1081 ) [ P-256: SHA-256 "The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography." |
| 23 | Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA -Dave Friant
-Kelvin Yu
|
Version 1.0 |
Intel Core 2 Duo w/ Windows 7 Ultimate (x64); Intel Core 2 Duo w/ Windows 7 Ultimate (x86); Intel Core 2 Duo w/ Windows Server 2008 R2 (x64); Intel Itanium2 w/ Windows Server 2008 R2 (IA64) | 9/21/2009 |
[
(No_df):
AES-256
(
AES Val#1168
)
]
"Provides random number generation algorithms for use by Microsoft cryptographic libraries." 09/29/09: Add new tested OES'; |
| 22 | FalconStor Software, Inc. 2 Huntington Quadrangle Melville, NY 11747 USA -Yeggy Javadi
-Wai Lam
|
Version 3.12.4 |
Intel Pentium D w/ Oracle Enterprise Linux 5.3 (64-bit) | 9/15/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-256 ( SHS Val#1085 ) ] "Cryptographic Library for Authentication and Encryption Implementations for All FalconStor Software Products." |
| 21 | Motorola Unit A1, Linhay Business Park Ashburton, UK N/A UK -Richard Carter
|
Version PTP600-DRNG-00-01 (Firmware) |
TI C6414 DSP | 8/17/2009 |
CTR_DRBG [ Use_df: AES-128 ( AES Val#1144 ) ] "The Motorola family of PTP Wireless Ethernet Bridges offers a solution to the challenge of establishing a reliable, secure, point-to-point network connection. Whether operating in a Non-Line-of-Sight (NLoS), adverse or marginally adverse environment." |
| 20 | Pitney Bowes, Inc. 35 Waterview Drive Shelton, CT 06484-8000 USA -Robert Sisson
|
Version 01.00.0003 (Firmware) |
Sigma ASIC | 8/17/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-256 ( SHS Val#650 ) ] "The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) is designed in compliance with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products." |
| 19 | Silex Technology 157 West 7065 South Salt Lake City, UT 84047 USA -ksugawara@silexamerica.com
|
Version sx500_crvpto_Vl (Firmware) Part # CN210 |
eCos on Cavium CN210 processor | 8/10/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-1 ( SHS Val#1059 ) ] "Deterministic random number generator for creation of authentication nonces and other random values." |
| 18 | Red Hat, Inc. and Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 USA -Glen Beasley
-Robert Relyea
|
Version 3.12.4 |
Intel Core 2 Duo w/ Mac OS X 10.5 (32-bit); Intel Core 2 Duo w/ Mac OS X 10.5 (64-bit); AMD Opteron w/ Windows XP Professional SP3 (32-bit) | 7/10/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-256 ( SHS Val#1050 ) ] "Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/." |
| 17 | Red Hat, Inc. and Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 USA -Glen Beasley
-Robert Relyea
|
Version 3.12.4 |
Sun UltraSPARC III Cu w/ Sun Solaris 10 5/08 (32-bit); Sun UltraSPARC III Cu w/ Sun Solaris 10 5/08 (64-bit); AMD Opteron w/ Sun Solaris 10 5/08 (32-bit); AMD Opteron w/ Sun Solaris 10 5/08 (64-bit) | 7/10/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-256 ( SHS Val#1049 ) ] "Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/." |
| 16 | Red Hat, Inc. and Sun Microsystems, Inc. 4150 Network Circle Santa Clara, CA 95054 USA -Glen Beasley
-Robert Relyea
|
Version 3.12.4 |
AMD Opteron w/ Red Hat Enterprise Linux v5 (32-bit); Intel Xeon w/ Red Hat Enterprise Linux v5 (64-bit) | 7/10/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-256 ( SHS Val#1048 ) ] "Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/." 10/07/09: Update OES; |
| 15 | RSA Security, Inc. 177 Bovet Road, Suite 200 San Mateo, CA 94402 USA -Kathy Kriese
|
Version 4.1 |
Intel Pentium D w/ Windows XP Professional SP2, Sun JRE 5.0; Intel Pentium D w/ Windows XP Professional SP2, Sun JRE 6.0 | 6/26/2009 |
Hash_Based DRBG [ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#1032 ) ]
Dual_EC_DRBG
"RSA BSAFE Crypto-J security software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. It supports a wide range of industry standard encryption algorithms offering Java developers the flexibility to choose the option most appropriate to meet their requirements" |
| 14 | SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Tom Dickens
|
Part # 880074001F, v03.00.04 |
N/A | 6/17/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-512 ( SHS Val#1027 ) ] "The Hydra PC Data Traveler is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files. The Hydra PC Locksmith is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." 07/07/09: Update implementation description; |
| 13 | Pitney Bowes, Inc. 35 Waterview Drive Shelton, CT 06484-8000 USA -Robert Sisson
|
Version 01.00.0002 (Firmware) |
ARM7-TDMI | 5/7/2009 |
[
Hash_DRBG:
SHA-256
(
SHS Val#650
)
]
"The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) is designed in compliance with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products." Prediction resistance not supported; |
| 12 | DeltaCrypt Technologies Inc. 261A, chemin des Epinettes Piedmont, Quebec J0R 1K0 Canada -Ann Marie Colizza
-Olivier Fournier
|
Version 1.0.0.0 |
Intel Celeron w/ Microsoft Windows Server 2003; Intel Pentium 4 w/ Microsoft Windows 2000; Intel Pentium 4 w/ Microsoft Windows Vista; Intel Pentium 4 w/ Microsoft Windows XP | 4/30/2009 |
AES-128
,
AES-192
,
AES-256
(
AES Val#1065
)
] "DeltaCrypt Cryptographic Library implements the cryptographic functionalities for DeltaCrypt Encryption applications. DeltaCrypt provides sensitive data protections for computers, laptops, USB mass storage devices as well as CDs/DVDs." |
| 11 | Sun Microsystems, Inc. 500 Eldorado Blvd., Bldg 5 Broomfield, CO 80021 USA -Alexander Stewart
|
Version 1.0 (Firmware) |
ARM ARM7TDMI | 4/30/2009 |
CTR_DRBG [ Use_df: AES-256 ( AES Val#1061 ) ] "This algorithm is used by the Sun StorageTek T9840D Tape Drive." 04/24/09: Update implementation information; |
| 10 | SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Tom Dickens
|
Part # 88007021F, v03.00.04 |
N/A | 3/12/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-512 ( SHS Val#972 ) ] "The Hydra PC Locksmith is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." |
| 9 | Redline Communications, Inc. 302 Town Centre Blvd Markham, Ontario L3R OE8 Canada -Leigh Chang
-Lee Lipes
|
Version 1.0 (Firmware) |
Intel IXP420 w WindRiver VxWorks 6.5 | 2/19/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-1 , SHA-256 ( SHS Val#962 ) ] "This is a firmware library that provides the cryptographic functions used on Redline's industry leading reliable, secure and high performance broadband wireless products." 03/12/09: Update implementation information; |
| 8 | Harris Corporation (RF Communications Division) 1680 University Avenue Rochester, New York 14610 USA -Elias Theodorou
|
Version 1.0 (Firmware) |
Intel IXP420 w/ WindRiver VxWorks 6.5 | 2/19/2009 |
Hash_Based DRBG [ Hash_DRBG: SHA-1 , SHA-256 ( SHS Val#961 ) ] "This is a firmware library that provides the cryptographic functions used on Harris' industry leading reliable, secure and high performance broadband Ethernet radio products." 03/12/09: Update implementation information; |
| 7 | Midland Radio Corporation 5900 Parretta Drive Kansas City, Missouri 64120 United States -Dave Berneking
|
Version 1.0 (Firmware) |
TI TMS320VC5509A DSP | 2/5/2009 |
Hash_Based DRBG [ HMAC_DRBG: SHA-256 ( SHS Val#945 ) ]
"Implemented on a TI TMS320VC5509A DSP in firmware under the control of a Hitachi H8 Host Processor. No Operating System is used. The Algorithms are used on Midland BTIII Base Stations provide encrypted and clear voice, data and Short Message Service communications in accordance with the Project 25 standard." |
| 6 | Sun Microsystems, Inc. 500 Eldorado Blvd., Bldg 5 Broomfield, CO 80021 USA -Alexander Stewart
|
Version 1.0 (Firmware) |
ARM926EJ | 11/26/2008 |
CTR_DRBG [ Use_df: AES-256 ( AES Val#942 ) ] "The Sun T10000A and T10000B tape drives produce cryptographically secure random numbers by using an internal source with high entropy, coupled with an SP 800-90 CTR DRBG based on AES-256." |
| 5 | Midland Radio Corporation 5900 Parretta Drive Kansas City, Missouri 64120 United States -David Kingsolver
|
Version 1.0 (Firmware) |
Texas Instruments C54 DSP Processor | 11/26/2008 |
Hash_Based DRBG [ HMAC_DRBG: SHA-256 ( SHS Val#916 ) ]
"Implemented on a TI C54 DSP in firmware under the control of a Renesas M16C62 Host Processor. No Operating System is used. The algorithms are used on Midland Mobile, Trunk, Portable and Desk mount radio products to provide encrypted voice, data and short message services compatible with the P25 Standard." |
| 4 | RSA, The Security Division of EMC 177 Bovet Road, Suite 200 San Mateo, CA 94402 USA -Kathy Kriese
|
Version 3.0.0.1 |
Intel Celeron w/ Microsoft Windows XP Professional SP2; AMD Athlon X2 w/ Microsoft Windows Vista Ultimate; Intel Celeron w/ Red Hat Enterprise Linux AS 4.0 w/ LSB 3.0.3 | 9/11/2008 |
[
HMAC_DRBG:
SHA-1
,
SHA-224
,
SHA-256
,
SHA-384
,
SHA-512
(
SHS Val#855
)
]
Dual_EC_DRBG
"RSA BSAFEŽ Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements." |
| 3 | SPYRUS, Inc. 1860 Hartog Drive San Jose, CA 95131-2203 USA -Tom Dickens
|
Version P/N 730070001, v01.02.12 (Firmware) |
ARM 9 TDMI 32-bit Processor | 9/11/2008 |
Hash_Based DRBG [ Hash_DRBG: SHA-512 ( SHS Val#852 ) ] "The Hydra Privacy Card (Hydra PC) Series II, Personal Encryption Device and Enterprise Edition, is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files." |
| 2 | RSA Security, Inc. 177 Bovet Road, Suite 200 San Mateo, CA 94402 USA -Kathy Kriese
|
Version 3.0 |
IBM Power3 w/ AIX 5L 5.3 (32-bit); IBM Power3 w/ AIX 5L 5.3 (64-bit); PA-RISC 2.0 w/ HP-UX 11i v1 (32-bit); PA-RISC 2.0W w/HP-UX 11i v2 (64-bit); Intel Itanium2 w/ HP-UX 11i v3 (32-bit); Intel Itanium2 w/ HP-UX 11i v3 (64-bit); Intel Celeron w/ Red Hat Enterprise Linux AS 4.0 (32-bit w/ LSB 3.0.3); Intel AMD Athlon X2 w/ Red Hat Enterprise Linux AS 5.0 (64-bit w/ LSB 3.0.3); SPARC V8 w/ Solaris 10 (32-bit); SPARC V8+ w/ Solaris 10 (32-bit); SPARC V9 w/ Solaris 10 (64-bit); AMD Opteron w/ Solaris 10 (64-bit); PowerPC 603 w/ VxWorks 5.5; PowerPC 604 w/ VxWorks 5.5; PowerPC 604 w/ VxWorks 6.0; Intel PXA250 w/ Windows Mobile 2003; Intel PXA270 w/ Windows Mobile 5; Intel PXA270 w/ Windows Mobile 6.0; AMD Athlon X2 w/ Windows Server 2003 SP2 (64-bit w/ MT Static Wrap); Intel Itanium2 w/ Windows Server 2003 SP2 (64-bit w/ MT Static Wrap); Intel Itanium2 w/ Windows Server 2003 SP2 (w/ MD Dynamic Wrap); Intel Pentium M w/ Windows XP Professional SP2 (w/ MT Static Wrap); AMD Athlon X2 w/ Windows Vista Ultimate (32-bit w/ MD Dynamic Wrap); Intel Pentium D w/ Windows Vista Ultimate (64-bit w/ MD Dynamic Wrap) | 7/3/2008 |
Hash_Based DRBG [ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#807 ) ]
Dual_EC_DRBG
"RSA BSAFEŽ Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements." |
| 1 | Certicom Corp. 5520 Explorer Drive, 4th Floor Mississauga, Ontario L4W 5L1 Canada -Atsushi Yamada
-Rob Williams
|
Version 2.2 |
Intel Core 2 Duo w/ Windows 2008 Server 64-bit w/ JRE 1.6.0; Intel Pentium III w/ Linux Redhat AS5 32 Bit w/ JRE 1.6.0; Intel Pentium D w/ Redhat Linux AS5 64 bit w/ JRE 1.6.0; Sun UltraSPARC III w/ Solaris 10 32 Bit w/ JRE 1.6.0; Sun UltraSPARC III w/ Solaris 10 64 bit w/ JRE 1.6.0; Intel Pentium D w/ Windows Vista 32 bit w/ JRE 1.6.0; Intel Core 2 Duo w/ Windows Vista 64 bit w/JRE 1.6.0; Intel Celeron w/ NetBSD v2.0.3; PMC-Sierra RM7035C-533L w/ NetBSD v2.03 | 6/13/2008 |
Hash_Based DRBG [ Hash_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#802 ) ] [ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#802 ) ]
CTR_DRBG "Security Builder GSE-J is a standards-based cryptographic toolkit written in Java. It supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into Java-based applications." 11/19/09: Add new tested OES'; |
Computer Security Division
National Institute of Standards and Technology