DRBG Validation List

Last Update: 11/19/2009

Overview

The page provides technical information about implementations that have been validated as conforming to the Deterministic Random Bit Generator (DRBG) Algorithm, as specified in Special Publication 800-90, Recommendation for Random Number Generation Using Deterministic Random Bit Generators

The list below describes implementations which have been validated as correctly implementing the DRBG algorithm, using the tests found in The DRBG Validation Suite (DRBGVS) This testing is performed by NVLAP accredited Cryptographic And Security Testing (CST) Laboratories.

The implementations below consist of software, firmware, hardware, and any combination thereof. The National Institute of Standards and Technology (NIST) has made every attempt to provide complete and accurate information about the implementations described in this document. However, due to the possibility of changes made within individual companies, NIST cannot guarantee that this document reflects the current status of each product. It is the responsibility of the vendor to notify NIST of any necessary changes to its entry in the following list.



This list is ordered in reverse numerical order, by validation number. Thus, the more recent validations are located closer to the top of the list. The column after the Validation Date column contains information indicating what modes and features for these modes has been successfully tested.

Validation
No.
Vendor Implementation Operational Environment Val.
Date
Description/Notes
27 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

Windows Server 2008 R2 CNG algorithms

Version 1.0
Intel Itanium 2 w/ Windows Server 2008 R2 (IA64); Intel Core 2 Duo w/ Windows Server 2008 R2 (x64) 9/30/2009 Dual_EC_DRBG
( ECDSA Val#142 ) ( SHS Val#1081 )
[ P-256: SHA-256

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

26 Motorola
Unit A1
Linhay Business Park
Ashburton, Devon TQ13 7UP
UK

-Richard Carter
TEL: 01364 655504
FAX: 01364 654525

PTP500-DRNG

Version PTP500-DRNG-00-01 (Firmware)
TI C6412 DSP 9/30/2009 CTR_DRBG
[ Use_df: AES-128 ( AES Val#1179 ) ]

"The Motorola family of PTP Wireless Ethernet Bridges offers a solution to the challenge of establishing a reliable, secure, point-to-point network connection. Whether operating in a Non-Line-of-Sight (NLoS), adverse or marginally adverse environment."

10/07/09: Update Processor;

25 Motorola
Unit A1
Linhay Business Park
Ashburton, Devon TQ13 7UP
UK

-Richard Carter
TEL: 01364 655504
FAX: 01364 654525

PTP300-DRNG

Version PTP300-DRNG-00-01 (Firmware)
TI C6412 DSP 9/30/2009 CTR_DRBG
[ Use_df: AES-128 ( AES Val#1179 ) ]

"The Motorola family of PTP Wireless Ethernet Bridges offers a solution to the challenge of establishing a reliable, secure, point-to-point network connection. Whether operating in a Non-Line-of-Sight (NLoS), adverse or marginally adverse environment."

01/07/09: Update Processor;

24 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

Windows 7 CNG algorithms

Version 1.0
Intel Core 2 Duo w/ Windows 7 Ultimate (x86); Intel Core 2 Duo w/ Windows 7 Ultimate (x64) 9/30/2009 Dual_EC_DRBG
( SHS Val#1081 )
[ P-256: SHA-256

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

23 Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

Windows 7 and Server 2008 R2 RNG Library

Version 1.0
Intel Core 2 Duo w/ Windows 7 Ultimate (x64); Intel Core 2 Duo w/ Windows 7 Ultimate (x86); Intel Core 2 Duo w/ Windows Server 2008 R2 (x64); Intel Itanium2 w/ Windows Server 2008 R2 (IA64) 9/21/2009 [ (No_df): AES-256 ( AES Val#1168 ) ]

"Provides random number generation algorithms for use by Microsoft cryptographic libraries."

09/29/09: Add new tested OES';

22 FalconStor Software, Inc.
2 Huntington Quadrangle
Melville, NY 11747
USA

-Yeggy Javadi
TEL: 631-773-6745
FAX: 631-777-6882

-Wai Lam
TEL: 631-962-1116
FAX: 631-501-7633

FalconStor Cryptographic Module

Version 3.12.4
Intel Pentium D w/ Oracle Enterprise Linux 5.3 (64-bit) 9/15/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-256 ( SHS Val#1085 ) ]

"Cryptographic Library for Authentication and Encryption Implementations for All FalconStor Software Products."

21 Motorola
Unit A1, Linhay Business Park
Ashburton, UK N/A
UK

-Richard Carter
TEL: 01364 655504
FAX: 01364 654525

PTP600-DRNG

Version PTP600-DRNG-00-01 (Firmware)
TI C6414 DSP 8/17/2009 CTR_DRBG
[ Use_df: AES-128 ( AES Val#1144 ) ]

"The Motorola family of PTP Wireless Ethernet Bridges offers a solution to the challenge of establishing a reliable, secure, point-to-point network connection. Whether operating in a Non-Line-of-Sight (NLoS), adverse or marginally adverse environment."

20 Pitney Bowes, Inc.
35 Waterview Drive
Shelton, CT 06484-8000
USA

-Robert Sisson
TEL: 203-924-3061
FAX: 203-924-3518

appPRNG

Version 01.00.0003 (Firmware)
Sigma ASIC 8/17/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-256 ( SHS Val#650 ) ]

"The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) is designed in compliance with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."

19 Silex Technology
157 West 7065 South
Salt Lake City, UT 84047
USA

-ksugawara@silexamerica.com
TEL: 801-748-1199
FAX: 714-258-0730

SX-500 HASH-DRNG

Version sx500_crvpto_Vl (Firmware)
Part # CN210
eCos on Cavium CN210 processor 8/10/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-1 ( SHS Val#1059 ) ]

"Deterministic random number generator for creation of authentication nonces and other random values."

18 Red Hat, Inc. and Sun Microsystems, Inc.
4150 Network Circle
Santa Clara, CA 95054
USA

-Glen Beasley
TEL: 800-555-9SUN

-Robert Relyea
TEL: 650-254-4236

Network Security Services (NSS) Cryptographic Module (Basic ECC)

Version 3.12.4
Intel Core 2 Duo w/ Mac OS X 10.5 (32-bit); Intel Core 2 Duo w/ Mac OS X 10.5 (64-bit); AMD Opteron w/ Windows XP Professional SP3 (32-bit) 7/10/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-256 ( SHS Val#1050 ) ]

"Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/."

17 Red Hat, Inc. and Sun Microsystems, Inc.
4150 Network Circle
Santa Clara, CA 95054
USA

-Glen Beasley
TEL: 800-555-9SUN

-Robert Relyea
TEL: 650-254-4236

Network Security Services (NSS) Cryptographic Module (Extend ECC)

Version 3.12.4
Sun UltraSPARC III Cu w/ Sun Solaris 10 5/08 (32-bit); Sun UltraSPARC III Cu w/ Sun Solaris 10 5/08 (64-bit); AMD Opteron w/ Sun Solaris 10 5/08 (32-bit); AMD Opteron w/ Sun Solaris 10 5/08 (64-bit) 7/10/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-256 ( SHS Val#1049 ) ]

"Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/."

16 Red Hat, Inc. and Sun Microsystems, Inc.
4150 Network Circle
Santa Clara, CA 95054
USA

-Glen Beasley
TEL: 800-555-9SUN

-Robert Relyea
TEL: 650-254-4236

Network Security Services (NSS) Cryptographic Module

Version 3.12.4
AMD Opteron w/ Red Hat Enterprise Linux v5 (32-bit); Intel Xeon w/ Red Hat Enterprise Linux v5 (64-bit) 7/10/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-256 ( SHS Val#1048 ) ]

"Network Security Services (NSS) is a set of open source C libraries designed to support cross-platform development of security-enabled applications. NSS implements major Internet security standards. NSS is available free of charge under a variety of open source compatible licenses. See http://www.mozilla.org/projects/security/pki/nss/."

10/07/09: Update OES;

15 RSA Security, Inc.
177 Bovet Road, Suite 200
San Mateo, CA 94402
USA

-Kathy Kriese
TEL: 650-931-9781

RSA BSAFEŽ Crypto-J Software Module

Version 4.1
Intel Pentium D w/ Windows XP Professional SP2, Sun JRE 5.0; Intel Pentium D w/ Windows XP Professional SP2, Sun JRE 6.0 6/26/2009 Hash_Based DRBG
[ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#1032 ) ]

Dual_EC_DRBG
( ECDSA Val#130 ) ( SHS Val#1032 )
[ P-256: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ]
[ P-384: SHA-224 , SHA-256 , SHA-384 , SHA-512 ]
[ P-521: SHA-256 , SHA-384 , SHA-512 ]

"RSA BSAFE Crypto-J security software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. It supports a wide range of industry standard encryption algorithms offering Java developers the flexibility to choose the option most appropriate to meet their requirements"

14 SPYRUS, Inc.
1860 Hartog Drive
San Jose, CA 95131-2203
USA

-Tom Dickens
TEL: 408-392-4324
FAX: 408-392-0319

Hydra PC Locksmith Board 3 Level 2 (ARM)

Part # 880074001F, v03.00.04
N/A 6/17/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-512 ( SHS Val#1027 ) ]

"The Hydra PC Data Traveler is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files. The Hydra PC Locksmith is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files."

07/07/09: Update implementation description;

13 Pitney Bowes, Inc.
35 Waterview Drive
Shelton, CT 06484-8000
USA

-Robert Sisson
TEL: 203-924-3061
FAX: 203-924-3518

Sigma ASIC - DRBG/RNG

Version 01.00.0002 (Firmware)
ARM7-TDMI 5/7/2009 [ Hash_DRBG: SHA-256 ( SHS Val#650 ) ]

"The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) is designed in compliance with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."

Prediction resistance not supported;

12 DeltaCrypt Technologies Inc.
261A, chemin des Epinettes
Piedmont, Quebec J0R 1K0
Canada

-Ann Marie Colizza
TEL: 450-744-0137
FAX: 450-227-9043

-Olivier Fournier
TEL: 450-227-6622
FAX: 450-227-9043

DeltaCrypt Cryptographic Library

Version 1.0.0.0
Intel Celeron w/ Microsoft Windows Server 2003; Intel Pentium 4 w/ Microsoft Windows 2000; Intel Pentium 4 w/ Microsoft Windows Vista; Intel Pentium 4 w/ Microsoft Windows XP 4/30/2009 AES-128 , AES-192 , AES-256 ( AES Val#1065 ) ]

"DeltaCrypt Cryptographic Library implements the cryptographic functionalities for DeltaCrypt Encryption applications. DeltaCrypt provides sensitive data protections for computers, laptops, USB mass storage devices as well as CDs/DVDs."

11 Sun Microsystems, Inc.
500 Eldorado Blvd., Bldg 5
Broomfield, CO 80021
USA

-Alexander Stewart
TEL: 303-272-7572
FAX: 303-272-3023

T9840D DRBG nist_ctr_drbg

Version 1.0 (Firmware)
ARM ARM7TDMI 4/30/2009 CTR_DRBG
[ Use_df: AES-256 ( AES Val#1061 ) ]

"This algorithm is used by the Sun StorageTek T9840D Tape Drive."

04/24/09: Update implementation information;

10 SPYRUS, Inc.
1860 Hartog Drive
San Jose, CA 95131-2203
USA

-Tom Dickens
TEL: 408-392-9131
FAX: 408-392-0319

Hydra PC Locksmith (ARM)

Part # 88007021F, v03.00.04
N/A 3/12/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-512 ( SHS Val#972 ) ]

"The Hydra PC Locksmith is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files."

9 Redline Communications, Inc.
302 Town Centre Blvd
Markham, Ontario L3R OE8
Canada

-Leigh Chang
TEL: 905-479-8344 x2507

-Lee Lipes
TEL: 905-479-8344 x2480

Redline Broadband Wireless Infrastructure Radio Cryptographic Library

Version 1.0 (Firmware)
Intel IXP420 w WindRiver VxWorks 6.5 2/19/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-1 , SHA-256 ( SHS Val#962 ) ]

"This is a firmware library that provides the cryptographic functions used on Redline's industry leading reliable, secure and high performance broadband wireless products."

03/12/09: Update implementation information;

8 Harris Corporation (RF Communications Division)
1680 University Avenue
Rochester, New York 14610
USA

-Elias Theodorou
TEL: 585-720-8790
FAX: 585-241-8459

Harris Broadband Ethernet Radio Cryptographic Library

Version 1.0 (Firmware)
Intel IXP420 w/ WindRiver VxWorks 6.5 2/19/2009 Hash_Based DRBG
[ Hash_DRBG: SHA-1 , SHA-256 ( SHS Val#961 ) ]

"This is a firmware library that provides the cryptographic functions used on Harris' industry leading reliable, secure and high performance broadband Ethernet radio products."

03/12/09: Update implementation information;

7 Midland Radio Corporation
5900 Parretta Drive
Kansas City, Missouri 64120
United States

-Dave Berneking
TEL: 816-462-0421

Midland Radio Base Station Implementation

Version 1.0 (Firmware)
TI TMS320VC5509A DSP 2/5/2009 Hash_Based DRBG
[ HMAC_DRBG: SHA-256 ( SHS Val#945 ) ]

"Implemented on a TI TMS320VC5509A DSP in firmware under the control of a Hitachi H8 Host Processor. No Operating System is used. The Algorithms are used on Midland BTIII Base Stations provide encrypted and clear voice, data and Short Message Service communications in accordance with the Project 25 standard."

6 Sun Microsystems, Inc.
500 Eldorado Blvd., Bldg 5
Broomfield, CO 80021
USA

-Alexander Stewart
TEL: 303-272-7572
FAX: 303-272-3023

SP 800-90 Firmware-based CTR RBG

Version 1.0 (Firmware)
ARM926EJ 11/26/2008 CTR_DRBG
[ Use_df: AES-256 ( AES Val#942 ) ]

"The Sun T10000A and T10000B tape drives produce cryptographically secure random numbers by using an internal source with high entropy, coupled with an SP 800-90 CTR DRBG based on AES-256."

5 Midland Radio Corporation
5900 Parretta Drive
Kansas City, Missouri 64120
United States

-David Kingsolver
TEL: 816-462-0421

Midland Radio Cryptographic Module

Version 1.0 (Firmware)
Texas Instruments C54 DSP Processor 11/26/2008 Hash_Based DRBG
[ HMAC_DRBG: SHA-256 ( SHS Val#916 ) ]

"Implemented on a TI C54 DSP in firmware under the control of a Renesas M16C62 Host Processor. No Operating System is used. The algorithms are used on Midland Mobile, Trunk, Portable and Desk mount radio products to provide encrypted voice, data and short message services compatible with the P25 Standard."

4 RSA, The Security Division of EMC
177 Bovet Road, Suite 200
San Mateo, CA 94402
USA

-Kathy Kriese
TEL: 650-931-9781

RSA BSAFE Crypto-C Micro Edition (ME)

Version 3.0.0.1
Intel Celeron w/ Microsoft Windows XP Professional SP2; AMD Athlon X2 w/ Microsoft Windows Vista Ultimate; Intel Celeron w/ Red Hat Enterprise Linux AS 4.0 w/ LSB 3.0.3 9/11/2008 [ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#855 ) ]

Dual_EC_DRBG
( ECDSA Val#98 ) ( SHS Val#855 )
[ P-256: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ]
[ P-384: SHA-224 , SHA-256 , SHA-384 , SHA-512 ]
[ P-521: SHA-256 , SHA-384 , SHA-512 ]

"RSA BSAFEŽ Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

3 SPYRUS, Inc.
1860 Hartog Drive
San Jose, CA 95131-2203
USA

-Tom Dickens
TEL: 408-392-5124
FAX: 408-392-0319

Hydra PC Series II Oki

Version P/N 730070001, v01.02.12 (Firmware)
ARM 9 TDMI 32-bit Processor 9/11/2008 Hash_Based DRBG
[ Hash_DRBG: SHA-512 ( SHS Val#852 ) ]

"The Hydra Privacy Card (Hydra PC) Series II, Personal Encryption Device and Enterprise Edition, is a multifunctional USB security device combining security token and portable secure storage drive features with the strongest hardware-based encryption technology commercially available for protection of user data files."

2 RSA Security, Inc.
177 Bovet Road, Suite 200
San Mateo, CA 94402
USA

-Kathy Kriese
TEL: 650-931-9781

RSA BSAFE Crypto-C Micro Edition (ME)

Version 3.0
IBM Power3 w/ AIX 5L 5.3 (32-bit); IBM Power3 w/ AIX 5L 5.3 (64-bit); PA-RISC 2.0 w/ HP-UX 11i v1 (32-bit); PA-RISC 2.0W w/HP-UX 11i v2 (64-bit); Intel Itanium2 w/ HP-UX 11i v3 (32-bit); Intel Itanium2 w/ HP-UX 11i v3 (64-bit); Intel Celeron w/ Red Hat Enterprise Linux AS 4.0 (32-bit w/ LSB 3.0.3); Intel AMD Athlon X2 w/ Red Hat Enterprise Linux AS 5.0 (64-bit w/ LSB 3.0.3); SPARC V8 w/ Solaris 10 (32-bit); SPARC V8+ w/ Solaris 10 (32-bit); SPARC V9 w/ Solaris 10 (64-bit); AMD Opteron w/ Solaris 10 (64-bit); PowerPC 603 w/ VxWorks 5.5; PowerPC 604 w/ VxWorks 5.5; PowerPC 604 w/ VxWorks 6.0; Intel PXA250 w/ Windows Mobile 2003; Intel PXA270 w/ Windows Mobile 5; Intel PXA270 w/ Windows Mobile 6.0; AMD Athlon X2 w/ Windows Server 2003 SP2 (64-bit w/ MT Static Wrap); Intel Itanium2 w/ Windows Server 2003 SP2 (64-bit w/ MT Static Wrap); Intel Itanium2 w/ Windows Server 2003 SP2 (w/ MD Dynamic Wrap); Intel Pentium M w/ Windows XP Professional SP2 (w/ MT Static Wrap); AMD Athlon X2 w/ Windows Vista Ultimate (32-bit w/ MD Dynamic Wrap); Intel Pentium D w/ Windows Vista Ultimate (64-bit w/ MD Dynamic Wrap) 7/3/2008 Hash_Based DRBG
[ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#807 ) ]

Dual_EC_DRBG
( ECDSA Val#92 ) ( SHS Val#807 )
[ P-256: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ]
[ P-384: SHA-224 , SHA-256 , SHA-384 , SHA-512 ]
[ P-521: SHA-256 , SHA-384 , SHA-512 ]

"RSA BSAFEŽ Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

1 Certicom Corp.
5520 Explorer Drive, 4th Floor
Mississauga, Ontario L4W 5L1
Canada

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-507-4230

-Rob Williams
TEL: 905-501-3887
FAX: 905-507-4230

Security Builder GSE-J Crypto Core

Version 2.2
Intel Core 2 Duo w/ Windows 2008 Server 64-bit w/ JRE 1.6.0; Intel Pentium III w/ Linux Redhat AS5 32 Bit w/ JRE 1.6.0; Intel Pentium D w/ Redhat Linux AS5 64 bit w/ JRE 1.6.0; Sun UltraSPARC III w/ Solaris 10 32 Bit w/ JRE 1.6.0; Sun UltraSPARC III w/ Solaris 10 64 bit w/ JRE 1.6.0; Intel Pentium D w/ Windows Vista 32 bit w/ JRE 1.6.0; Intel Core 2 Duo w/ Windows Vista 64 bit w/JRE 1.6.0; Intel Celeron w/ NetBSD v2.0.3; PMC-Sierra RM7035C-533L w/ NetBSD v2.03 6/13/2008 Hash_Based DRBG
[ Hash_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#802 ) ]
[ HMAC_DRBG: SHA-1 , SHA-224 , SHA-256 , SHA-384 , SHA-512 ( SHS Val#802 ) ]

CTR_DRBG
[ Use_df: AES-128 , AES-192 , AES-256 ( AES Val#804 ) ]

"Security Builder GSE-J is a standards-based cryptographic toolkit written in Java. It supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into Java-based applications."

11/19/09: Add new tested OES';


Need Assistance?

Computer Security Division
National Institute of Standards and Technology