Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #1049

Details

Module Name
PGP Software Developer's Kit (SDK) Cryptographic Module
Standard
FIPS 140-2
Status
Historical
 Historical Reason
RNG SP800-131A Revision 1 Transition
Overall Level
1
Caveat
When operated in FIPS mode
Module Type
Software
Embodiment
Multi-chip standalone
Description
The PGP SDK Cryptographic Module is a FIPS 140-2 validated software only cryptographic module. The module implements the cryptographic functions for PGP products including: PGP Whole Disk Encryption, PGP NetShare, PGP Command Line, PGP Universal, and PGP Desktop. It includes a wide range of field-tested and standards-based encryption, digital signature, and encoding algorithms as well as a variety of secure network protocol implementations. The PGP SDK offers developers this same cryptographic library that is at the heart of PGP products.
Tested Configuration(s)
  • Mac OS X 10.5 (single-user mode)
  • Windows XP Professional SP2
Approved Algorithms
AES Cert. #453
DSA Cert. #183
HMAC Cert. #216
RNG Cert. #238
RSA Cert. #172
SHS Cert. #516
Triple-DES Cert. #471
Other Algorithms
AES (EME2 mode; non-compliant); DSA (FIPS 186-3 with SHA-256; non-compliant); CAST-5; IDEA; Two-Fish; Blow-Fish; ARC4-128; MD5; HMAC-MD5; RIPEMD60; ElGamal; RSA (key wrapping; key establishment methodology provides between 112 and 128 bits of encryption strength); Shamir Threshold Secret Sharing
Software Versions
3.10.3 and 3.11.0

Vendor

PGP Corporation
200 Jefferson Dr.
Menlo Park, CA 94025
USA

Vinnie Moscaritolo
fips140@pgp.com
Phone: 650-319-9000
Fax: 650-319-9001

Validation History

Date Type Lab
10/27/2008 Initial ÆGISOLVE
12/3/2008 Update