Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Cryptographic Algorithm Validation Program

Cryptographic Algorithm Validation Program CAVP

Implementation Name
xPal Secure Messenger Encryption Implementation
Description
Software implementation of approved cryptographic algorithms including AES (GCM and CBC modes), SHA-2, HMAC-SHA-2, and ECC-based key agreement (KAS-ECC-SSC), implemented consistently across Windows, macOS, iOS, and Android, and submitted for ACVP validation, as the foundation of the FIPS 140-3 cryptographic module.
Version
1.0
Type
SOFTWARE
Vendor
xPal.com Corporation
6475 Camden Ave, Suite 200
San Jose 95120
USA
Contacts
Tony Tariq
[email protected]
+1 (408) 540-9867

A7969

   First Validated: 1/27/2026
Operating Environment Algorithm Capabilities
Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280)
  • OS: Android 16
  • CPU: Samsung Galaxy A33 5G (Samsung Exynos 1280)
AES-CBC
  • Direction: Decrypt, Encrypt
  • Key Length: 256
iOS 18.6.2 on iPhone 14 (Apple A15 Bionic)
  • OS: iOS 18.6.2
  • CPU: iPhone 14 (Apple A15 Bionic)
AES-CBC
  • Direction: Decrypt, Encrypt
  • Key Length: 256
macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • OS: macOS Tahoe 26.2
AES-CBC
  • Direction: Decrypt, Encrypt
  • Key Length: 256
Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • Host OS: macOS Tahoe 26.2
  • Virtual Machine: Parallels Desktop
  • Guest OS: Windows 11
AES-CBC
  • Direction: Decrypt, Encrypt
  • Key Length: 256
Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280)
  • OS: Android 16
  • CPU: Samsung Galaxy A33 5G (Samsung Exynos 1280)
AES-GCM
  • Direction: Decrypt, Encrypt
  • IV Generation: Internal
  • IV Generation Mode: 8.2.2
  • Key Length: 256
  • Tag Length: 128
  • IV Length: 128
  • Payload Length: 0-65536 Increment 8
  • AAD Length: 0
iOS 18.6.2 on iPhone 14 (Apple A15 Bionic)
  • OS: iOS 18.6.2
  • CPU: iPhone 14 (Apple A15 Bionic)
AES-GCM
  • Direction: Decrypt, Encrypt
  • IV Generation: Internal
  • IV Generation Mode: 8.2.2
  • Key Length: 256
  • Tag Length: 128
  • IV Length: 128
  • Payload Length: 0-65536 Increment 8
  • AAD Length: 0
macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • OS: macOS Tahoe 26.2
AES-GCM
  • Direction: Decrypt, Encrypt
  • IV Generation: Internal
  • IV Generation Mode: 8.2.2
  • Key Length: 256
  • Tag Length: 128
  • IV Length: 128
  • Payload Length: 0-65536 Increment 8
  • AAD Length: 0
Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • Host OS: macOS Tahoe 26.2
  • Virtual Machine: Parallels Desktop
  • Guest OS: Windows 11
AES-GCM
  • Direction: Decrypt, Encrypt
  • IV Generation: Internal
  • IV Generation Mode: 8.2.2
  • Key Length: 256
  • Tag Length: 128
  • IV Length: 128
  • Payload Length: 0-65536 Increment 8
  • AAD Length: 0
Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280)
  • OS: Android 16
  • CPU: Samsung Galaxy A33 5G (Samsung Exynos 1280)
HMAC-SHA2-256
  • MAC: 256
  • Key Length: 256
iOS 18.6.2 on iPhone 14 (Apple A15 Bionic)
  • OS: iOS 18.6.2
  • CPU: iPhone 14 (Apple A15 Bionic)
HMAC-SHA2-256
  • MAC: 256
  • Key Length: 256
macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • OS: macOS Tahoe 26.2
HMAC-SHA2-256
  • MAC: 256
  • Key Length: 256
Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • Host OS: macOS Tahoe 26.2
  • Virtual Machine: Parallels Desktop
  • Guest OS: Windows 11
HMAC-SHA2-256
  • MAC: 256
  • Key Length: 256
Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280)
  • OS: Android 16
  • CPU: Samsung Galaxy A33 5G (Samsung Exynos 1280)
KAS-ECC-SSC Sp800-56Ar3
  • Domain Parameter Generation Methods: P-256
  • Scheme:
    • ephemeralUnified:
      • KAS Role: initiator, responder
iOS 18.6.2 on iPhone 14 (Apple A15 Bionic)
  • OS: iOS 18.6.2
  • CPU: iPhone 14 (Apple A15 Bionic)
KAS-ECC-SSC Sp800-56Ar3
  • Domain Parameter Generation Methods: P-256
  • Scheme:
    • ephemeralUnified:
      • KAS Role: initiator, responder
macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • OS: macOS Tahoe 26.2
KAS-ECC-SSC Sp800-56Ar3
  • Domain Parameter Generation Methods: P-256
  • Scheme:
    • ephemeralUnified:
      • KAS Role: initiator, responder
Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • Host OS: macOS Tahoe 26.2
  • Virtual Machine: Parallels Desktop
  • Guest OS: Windows 11
KAS-ECC-SSC Sp800-56Ar3
  • Domain Parameter Generation Methods: P-256
  • Scheme:
    • ephemeralUnified:
      • KAS Role: initiator, responder
Android 16 on Samsung Galaxy A33 5G (Samsung Exynos 1280)
  • OS: Android 16
  • CPU: Samsung Galaxy A33 5G (Samsung Exynos 1280)
SHA2-256
  • Message Length: 0-65536 Increment 8
iOS 18.6.2 on iPhone 14 (Apple A15 Bionic)
  • OS: iOS 18.6.2
  • CPU: iPhone 14 (Apple A15 Bionic)
SHA2-256
  • Message Length: 0-65536 Increment 8
macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • OS: macOS Tahoe 26.2
SHA2-256
  • Message Length: 0-65536 Increment 8
Windows 11 on Parallels Desktop on macOS Tahoe 26.2 on Apple M2
  • CPU: Apple M2
  • Host OS: macOS Tahoe 26.2
  • Virtual Machine: Parallels Desktop
  • Guest OS: Windows 11
SHA2-256
  • Message Length: 0-65536 Increment 8

Created October 05, 2016, Updated April 13, 2026