Microsoft Windows Server 2008 Cryptographic Primitives Library (bcrypt.dll)
RNG SP800-131A Revision 1 Transition
When operated in FIPS mode with Code Integrity (ci.dll) validated to FIPS 140-2 under Cert. #1006 operating in FIPS mode
BCRYPT.DLL provides cryptographic services, through its documented interfaces, to Windows Vista components and applications running on Windows Vista.
The cryptographic module, BCRYPT.DLL, encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible via the Microsoft CNG (Cryptography, Next Generation) API. It can be dynamically linked into applications by software developers to permit the use of general-purpose FIPS 140-2 compliant cryptography.
- Microsoft Windows Server 2008 (IA64 version) (single-user mode)
- Microsoft Windows Server 2008 (x64 version)
- Microsoft Windows Server 2008 (x86 Version)
||Certs. #739 and #757
||Cert. #435 and SP800-90, vendor affirmed
||Certs. #353 and #358
AES (GCM and GMAC; non-compliant); DES; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); EC Diffie-Hellman (key agreement; key establishment methodology provides between 128 and 256 bits of encryption strength); MD2; MD4; MD5; RC2; RC4; RNG (SP 800-90 Dual-EC; non-compliant); RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant provides less than 112 bits of encryption strength)
6.0.6001.22202, 6.0.6002.18005 and 6.0.6002.22872