Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4277

Details

Module Name
CBL-Mariner 1.0 Kernel Crypto API
Standard
FIPS 140-2
Status
Active
Sunset Date
9/21/2026
Overall Level
1
Caveat
When operated in FIPS mode
Security Level Exceptions
  • Physical Security: N/A
  • Mitigation of Other Attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
The Microsoft CBL-Mariner Kernel Crypto API Cryptographic Module is a general-purpose, software-based cryptographic module. The module provides general purpose cryptographic services that leverage FIPS 140-2-approved cryptographic algorithms. The module runs as part of the operating system kernel, provides cryptographic services to kernel applications through a C language Application Program Interface (API), and provides cryptographic services to user applications through an AF_ALG socket interface. The module is implemented as a set of shared libraries and binary files.
Tested Configuration(s)
  • CBL-Mariner 1.0 on Azure Host Hypervisor running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL with PAA
  • CBL-Mariner 1.0 on Azure Host Hypervisor running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL without PAA
  • CBL-Mariner 1.0 running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL with PAA
  • CBL-Mariner 1.0 running on an Azure Compute C2030 Server with an Intel Xeon Platinum 8272CL without PAA
Approved Algorithms
AES Cert. #A1755
CVL Cert. #A1755
DRBG Cert. #A1755
ENT NP
HMAC Cert. #A1755
KAS-SSC Cert. #A1755
KTS AES Cert. #A1755 and HMAC Cert. #A1755; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS AES Cert. #A1755; key establishment methodology provides between 128 and 256 bits of encryption strength
KTS Triple-DES Cert. #A1755 and HMAC Cert. #A1755; key establishment methodology provides 112 bits of encryption strength
RSA Cert. #A1755
SHA-3 Cert. #A1755
SHS Cert. #A1755
Triple-DES Cert. #A1755
Allowed Algorithms
N/A
Software Versions
1.0

Vendor

Microsoft Corporation
One Microsoft Way
Redmond, WA 98052-6399
USA

Mike Grimm
FIPS@microsoft.com
Phone: 800-Microsoft

Validation History

Date Type Lab
8/15/2022 Initial LEIDOS CSTL