Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Cryptographic Algorithm Validation Program

Cryptographic Algorithm Validation Program CAVP

Implementation Name
xPal Secure Messenger Encryption Implementation
Description
Software implementation of approved cryptographic algorithms including AES (GCM and CBC modes), SHA-2, HMAC-SHA-2, and ECC-based key agreement (KAS-ECC-SSC), implemented consistently across Windows, macOS, iOS, and Android, and submitted for ACVP validation, as the foundation of the FIPS 140-3 cryptographic module.
Version
1.0
Type
SOFTWARE
Vendor
xPal.com Corporation
6475 Camden Ave, Suite 200
San Jose 95120
USA
Contacts
Tony Tariq
[email protected]
+1 (408) 540-9867

A7969

   First Validated: 1/27/2026
Operating Environments Algorithm Capabilities
macOS Tahoe 26.2 on Apple M2 Expand

    iOS 18.6.2 on iPhone 14 (Apple A15 Bionic) Expand

      Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280) Expand

        Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2 Expand

          		AES-CBC
          • Direction: Decrypt, Encrypt
          • Key Length: 256
          macOS Tahoe 26.2 on Apple M2 Expand

            iOS 18.6.2 on iPhone 14 (Apple A15 Bionic) Expand

              Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280) Expand

                Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2 Expand

                  		AES-GCM
                  • Direction: Decrypt, Encrypt
                  • IV Generation: Internal
                  • IV Generation Mode: 8.2.2
                  • Key Length: 256
                  • Tag Length: 128
                  • IV Length: 128
                  • Payload Length: 0-65536 Increment 8
                  • AAD Length: 0
                  macOS Tahoe 26.2 on Apple M2 Expand

                    iOS 18.6.2 on iPhone 14 (Apple A15 Bionic) Expand

                      Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280) Expand

                        Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2 Expand

                          		SHA2-256
                          • Message Length: 0-65536 Increment 8
                          macOS Tahoe 26.2 on Apple M2 Expand

                            iOS 18.6.2 on iPhone 14 (Apple A15 Bionic) Expand

                              Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280) Expand

                                Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2 Expand

                                  		HMAC-SHA2-256
                                  • MAC: 256
                                  • Key Length: 256
                                  macOS Tahoe 26.2 on Apple M2 Expand

                                    iOS 18.6.2 on iPhone 14 (Apple A15 Bionic) Expand

                                      Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280) Expand

                                        Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2 Expand

                                          		KAS-ECC-SSC Sp800-56Ar3
                                          • Domain Parameter Generation Methods: P-256
                                          • Scheme:
                                            • ephemeralUnified:
                                              • KAS Role: initiator, responder

                                          Created October 05, 2016, Updated April 03, 2025