U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #1328


Module Name
Microsoft Windows 7 Kernel Mode Cryptographic Primitives Library (cng.sys)
FIPS 140-2
 Historical Reason
RNG SP800-131A Revision 1 Transition
Overall Level
When operated in FIPS mode with Windows 7 Winload OS Loader (winload.exe) validated to FIPS 140-2 under Cert. #1326 operating in FIPS mode
Module Type
Multi-chip standalone
CNG.SYS runs as a kernel mode export driver, and provides cryptographic services, through their documented interfaces, to Windows 7 kernel components. It supports several cryptographic algorithms accessible via a FIPS function table request irp (I/O request packet).
Tested Configuration(s)
  • Microsoft Windows 7 Ultimate Edition (x64 version)
  • Microsoft Windows 7 Ultimate Edition (x86 Version)
  • Microsoft Windows 7 Ultimate Edition SP1 (x64 version) (single-user mode)
  • Microsoft Windows 7 Ultimate Edition SP1 (x86 version)
FIPS Algorithms
AES Certs. #1168 and #1178
AES GCM Cert. #1168, vendor-affirmed
AES GMAC Cert. #1168, vendor-affirmed
DRBG Certs. #23 and #24
ECDSA Cert. #141
HMAC Cert. #677
KAS SP 800-56A, vendor affirmed, key agreement; key establishment methodology provides 80 to 256 bits of encryption strength
RNG Cert. #649
RSA Certs. #559 and #560
SHS Cert. #1081
Triple-DES Cert. #846
Other Algorithms
AES (Cert. #1168, key wrapping; key establishment methodology provides between 128 and 256 bits of encryption strength); DES; Diffie-Hellman (key agreement; key establishment methodology provides between 112 and 150 bits of encryption strength; non-compliant less than 112 bits of encryption strength); MD2; MD4; MD5; HMAC MD5; RC2; RC4
Software Versions
6.1.7600.16385, 6.1.7600.16915, 6.1.7600.21092, 6.1.7601.17514, 6.1.7601.17919, 6.1.7601.17725, 6.1.7601.21861 and 6.1.7601.22076


Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399

Tim Myers
Phone: 800-MICROSOFT

Validation History

Date Type Lab
8/12/2010 Initial SAIC-VA
6/1/2011 Update SAIC-VA
2/9/2012 Update SAIC-VA
1/24/2013 Update