Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Cryptographic Module Validation Program

Certificate #2294

Details

Module Name
RSA BSAFEĀ® Crypto-C Micro Edition
Standard
FIPS 140-2
Status
Active
Sunset Date
1/17/2022
Validation Dates
12/12/2014
12/21/2015
1/19/2016
1/22/2016
2/12/2016
1/18/2017
8/11/2017
1/29/2018
7/19/2019
Overall Level
1
Caveat
When operated in FIPS mode. When entropy is externally loaded, no assurance of the minimum strength of generated keys
Security Level Exceptions
  • Cryptographic Module Specification: Level 3
  • Physical Security: N/A
  • Design Assurance: Level 3
Module Type
Software
Embodiment
Multi-chip standalone
Description
The Crypto-C Micro Edition (ME) Module is RSA, The Security Division of EMC's cryptographic library designed for securing mobile devices like wireless phones and personal digital assistants. It contains assembly-level optimizations on key wireless processors. Its functionality includes a wide range of data encryption and signing algorithms, including Triple-DES, the Advanced Encryption Standard (AES) algorithm, the RSA Public Key Cryptosystem, the DSA government signature algorithm, MD5 and SHA1 message digest routines, and more.
Tested Configuration(s)
  • AIX 6.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E2B [1][3]
  • AIX 6.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E2B [1][3]
  • AIX 7.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E1C [1][3]
  • AIX 7.1 on Virtual I/O Server 2.2.2.1 running on a IBM Power 710 8231 - E1C [1][3]
  • Android 2.3.6 running on a Samsung Galaxy S2 [1]
  • Android 4.0.3 running on a Motorola RAZR I [1]
  • Android 4.1 running on a Motorola RAZR I [3]
  • Android 4.1.2 running on a Google Nexus 7
  • Android 4.4 running on a Google Nexus 7 Tablet [3]
  • Android 5.1 running on a Google Nexus 5 [3]
  • Android 5.1 running on a Google Nexus 9 Tablet [3]
  • CentOS 6.6 running on a Dell R730xd [3]
  • CentOS 7.2 running on a Dell Latitude E6420 with PAA [3]
  • CentOS 7.2 running on a Dell Latitude E6420 without PAA [3]
  • Fedora Core 17 running on a Beagle dev board [1]
  • Fedora Core 20 running on a Wandboard Quad [3]
  • Fedora Core 22 running on an AMD Seattle A0 Overdrive Development System [3]
  • FreeBSD 10.2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • FreeBSD 10.2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • FreeBSD 8.3 on ESXi 5.0 running on a Dell M610 with PAA [1]
  • FreeBSD 8.3 on ESXi 5.0 running on a Dell M610 without PAA [1]
  • HPUX 11.31 running on a HP 9000/800/RP3410 [1][3]
  • HPUX 11.31 running on a HP 9000/800/RP3410 [1][3]
  • HPUX 11.31 running on a HP RX2620 [1][3]
  • HPUX 11.31 running on a HP RX2620 [1][3]
  • iOS 7.1 running on an Apple iPad 3 [1]
  • iOS 7.1 running on an Apple iPad 4 [1]
  • Linaro Linux 3.10.68 running on a Fujitsu MB86S72 [2]
  • Mac OS X 10.8 running on an Apple Mac Pro 5.1 with PAA [1]
  • Mac OS X 10.8 running on an Apple MacBook6,1 without PAA [1]
  • Mac OSX 10.10 on vCenter SUSE 11 running on a Mac Pro 6.10 with PAA [3]
  • Mac OSX 10.10 on vCenter SUSE 11 running on a Mac Pro 6.10 without PAA [3]
  • Oracle Linux 5.6 (x86-64) running on a Dell XPS 8700 with an Intel Core i7 with PAA [4]
  • Oracle Linux 5.6 (x86-64) running on a Dell XPS 8700 with an Intel Core i7 without PAA [4]
  • Oracle Linux 6.10 for Oracle Key Vault 18.1 (x86-64) running on a Dell OptiPlex 7040M with an Intel Core i5 with PAA [4]
  • Oracle Linux 6.10 for Oracle Key Vault 18.1 (x86-64) running on a Dell OptiPlex 7040M with an Intel Core i5 without PAA [4]
  • Oracle Linux 6.9 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 with PAA [4]
  • Oracle Linux 6.9 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 without PAA [4]
  • Oracle Linux 7.3 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 with PAA [4]
  • Oracle Linux 7.3 (x86-64) running on a Dell OptiPlex 5060 SFF with an Intel Core i7 without PAA [4]
  • Oracle Linux 7.6 (x86-64) running on a Dell Latitude 5590 with an Intel Core i7 with PAA [4]
  • Oracle Linux 7.6 (x86-64) running on a Dell Latitude 5590 with an Intel Core i7 without PAA [4] (single-user mode)
  • Red Hat Enterprise Linux 5.11 on PowerVM 2.2 running on an IBM 8231-E2B [3]
  • Red Hat Enterprise Linux 5.11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Red Hat Enterprise Linux 5.11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Red Hat Enterprise Linux 5.11 on z/VM 6.2 running on a IBM s390x [3]
  • Red Hat Enterprise Linux 5.11 running on a HP Integrity RX2620 [3]
  • Red Hat Enterprise Linux 5.3 running on a IBM Power 710 8231 - E2B [1]
  • Red Hat Enterprise Linux 5.3 running on a IBM Power 710 8231 - E2B [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 5.5 on ESX 4.0 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 5.5 running on a Server HP RX 2620 [1]
  • Red Hat Enterprise Linux 5.8 on z/VM 6.2 running on a IBM s390x [1]
  • Red Hat Enterprise Linux 5.8 on z/VM 6.2 running on a IBM s390x [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 6.1 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • Red Hat Enterprise Linux 6.7 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Red Hat Enterprise Linux 6.7 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Red Hat Enterprise Linux 7.1 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Red Hat Enterprise Linux 7.1 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Solaris 10 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • Solaris 10 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • Solaris 10 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Solaris 10 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Solaris 10 running on a Oracle SPARC T4-2 [1][3]
  • Solaris 10 running on a Oracle Sun Fire X2100 with PAA [1]
  • Solaris 10 running on a Oracle Sun Fire X2100 without PAA [1]
  • Solaris 11 running on a Oracle SPARC Enterprise T5120 [1][3]
  • Solaris 11 running on a Oracle SPARC T4-2 [1][3]
  • Solaris 11 running on a Oracle SPARC T4-2 with PAA [1][3]
  • Solaris 11 running on a Oracle SPARC T4-2 without PAA [1][3]
  • SUSE Linux Enterprise Server 11 on ESX 4.0 running on a Dell M610 with PAA [1]
  • SUSE Linux Enterprise Server 11 on ESX 4.0 running on a Dell M610 without PAA [1]
  • SUSE Linux Enterprise Server 11 on ESXi 4.1 running on a Dell M610 with PAA [1]
  • SUSE Linux Enterprise Server 11 on ESXi 4.1 running on a Dell M610 without PAA [1]
  • SUSE Linux Enterprise Server 11 on PowerVM 2.2 running on an IBM 8231-E2B [3]
  • SUSE Linux Enterprise Server 11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • SUSE Linux Enterprise Server 11 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • SUSE Linux Enterprise Server 11 running on a IBM Power 710 8231 - E2B [1]
  • SUSE Linux Enterprise Server 11 running on a IBM Power 710 8231 - E2B [1]
  • SUSE Linux Enterprise Server 12 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • SUSE Linux Enterprise Server 12 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Timesys Linux 4.2.8 running on a ARMv7 Cortex A53 [5]
  • Ubuntu 12.04 LTS running on a Beagle dev board [1][3]
  • VxWorks 6.4 running on a MVME6100 [1][3]
  • VxWorks 6.7 running on a MVME6100 [1][3]
  • VxWorks 6.8 running on a MX31 Lite Kit [1][3]
  • Windows 10 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows 10 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows 7 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows 7 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 with PAA [1]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 with PAA [1]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 without PAA [1]
  • Windows 7 Enterprise SP1 running on a Compaq Pro 6305 without PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay with PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay with PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay without PAA [1]
  • Windows 7 Enterprise SP1 running on an Intel Mahobay without PAA [1]
  • Windows 8 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows 8 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows 8.1 Enterprise running on an Intel Mahobay with PAA [1]
  • Windows 8.1 Enterprise running on an Intel Mahobay without PAA [1]
  • Windows Server 2003 Enterprise R2 on ESX 5.1 running on a Dell M610 with PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2003 Enterprise R2 running on a HP Integrity RX2620 [1]
  • Windows Server 2003 Enterprise R2 running on a HP Integrity RX2620 [1]
  • Windows Server 2003 Enterprise R2 running on an Apple Mac Pro 1.1 with PAA [1]
  • Windows Server 2003 Enterprise R2 running on an Apple Mac Pro 1.1 with PAA [1]
  • Windows Server 2003 Enterprise R2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows Server 2008 Enterprise on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows Server 2008 Enterprise R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows Server 2008 Enterprise R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
  • Windows Server 2008 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2008 Enterprise R2 running on a Dell Dimension E521 without PAA [1]
  • Windows Server 2008 Enterprise R2 running on a HP Integrity RX2620 [1]
  • Windows Server 2008 Enterprise R2 running on a HP Integrity RX2620 [1][3]
  • Windows Server 2008 Enterprise R2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise R2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay with PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay without PAA [1]
  • Windows Server 2008 Enterprise SP2 running on an Intel Mahobay without PAA [1]
  • Windows Server 2012 R2 Standard running on a Compaq Pro 6305 with PAA [1]
  • Windows Server 2012 R2 Standard running on a Compaq Pro 6305 without PAA [1]
  • Windows Server 2012 Standard R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server with PAA [3]
  • Windows Server 2012 Standard R2 on vCenter SUSE 11 running on a Cisco UCS C220 M3 Rack Server without PAA [3]
FIPS Algorithms
AES Certs. #2859 [1], #3596 [3], #3767 [2], #4665 [5] and #C810 [4]
CVL Certs. #296 [1], #297 [1], #298 [1], #299 [1], #300 [1], #618 [3], #619 [3], #620 [3], #621 [3], #622 [3], #714 [2], #715 [2], #716 [2], #717 [2], #740 [2], #1311 [5], #1314 [5], #1315 [5], #1316 [5], #1317 [5] and #C810 [4]
DRBG Certs. #507 [1], #931 [3], #1037 [2], #1577 [5] and #C810 [4]
DSA Certs. #858 [1], #999 [3], #1047 [2], #1236 [5] and #C810 [4]
ECDSA Certs. #507 [1], #733 [3], #810 [2], #1149 [5] and #C810 [4]
HMAC Certs. #1799 [1], #2293 [3], #2467 [2], #3089 [5] and #C810 [4]
KTS AES Certs. #3596 [3], #4665 [5] and #C810 [4]; key establishment methodology provides between 128 and 256 bits of encryption strength
PBKDF vendor affirmed
RSA Certs. #1499 [1], #1850 [3], #1938 [2], #2545 [5] and #C810 [4]
SHS Certs. #2402 [1], #2958 [3], #3137 [2], #3822 [5] and #C810 [4]
Triple-DES Certs. #1706 [1], #2003 [3], #2095 [2], #2482 [5] and #C810 [4]
Other Algorithms
Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 256 bits of encryption strength); HMAC-MD5; MD5; NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)
Software Versions
4.1 [1], 4.1.0.1 [2], 4.1.2 [3], 4.1.2.2 [4] and 4.1.3.2 [5]

Vendor

RSA
174 Middlesex Turnpike
Bedford, MA 01730
USA

FIPS Program
fips-program@rsa.com
Phone: +1 781-515-5025
Francois Lamoureux
francois.lamoureux@rsa.com
Phone: +1 781-515-5025

Lab

Leidos
NVLAP Code: 200427-0