Module Name
Microsoft Windows 7 Cryptographic Primitives Library (bcryptprimitives.dll)
Historical Reason
RNG SP800-131A Revision 1 Transition
Caveat
When operated in FIPS mode with Windows 7 Code Integrity (ci.dll) validated to FIPS 140-2 under Cert. #1327 operating in FIPSmode
Embodiment
Multi-chip standalone
Description
The cryptographic module, bcryptprimitives.dll, encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible via the Microsoft CNG (Cryptography, Next Generation) API. It can be dynamically linked into applications by software developers to permit the use of general-purpose FIPS 140-2 compliant cryptography.
Tested Configuration(s)
- Microsoft Windows 7 Ultimate Edition (x64 version)
- Microsoft Windows 7 Ultimate Edition (x86 Version)
- Microsoft Windows 7 Ultimate Edition SP1 (x64 version) (single-user mode)
- Microsoft Windows 7 Ultimate Edition SP1 (x86 version)
Approved Algorithms
| AES |
Certs. #1168 and #1178 |
| AES GCM |
Cert. #1168, vendor-affirmed |
| AES GMAC |
Cert. #1168, vendor-affirmed |
| DRBG |
Certs. #23 and #24 |
| DSA |
Cert. #386 |
| ECDSA |
Cert. #141 |
| HMAC |
Cert. #677 |
| KAS |
SP 800-56A, vendor affirmed, key agreement; key establishment methodology provides 80 to 256 bits of encryption strength |
| RNG |
Cert. #649 |
| RSA |
Certs. #559 and #560 |
| SHS |
Cert. #1081 |
| Triple-DES |
Cert. #846 |
Other Algorithms
AES (Cert. #1168, key wrapping; key establishment methodology provides between 128 and 256 bits of encryption strength); DES; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); MD2; MD4; MD5; HMAC MD5; RC2; RC4
Software Versions
6.1.7600.16385 or 6.1.7601.17514
