Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #4989

Details

Module Name
Commvault Crypto Library
Standard
FIPS 140-3
Status
Active
Sunset Date
3/17/2027
Overall Level
1
Caveat
Interim Validation. When operated in approved mode. No assurance of the minimum strength of generated SSPs (e.g., keys)
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
Commvault Crypto Library (CVCL) is a cryptographic software module used in various products by Commvault Systems, Inc. The module provides a collection of Approved and Non-Approved cryptographic services for key generation, symmetric and asymmetric encryption, hash, HMAC and signature generation/verification.
Tested Configuration(s)
  • Microsoft Windows Server 2019 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 with AES-NI, Microsoft Windows Server 2019 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 without AES-NI, Red Hat Enterprise Linux 8.4 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 with AES-NI, Red Hat Enterprise Linux 8.4 on Fujitsu RX2530 M5 with Intel Xeon R Silver 4208 without AES-NI
Approved Algorithms
AES-CBC-CS2
AES-ECB
Counter DRBG
HMAC-SHA-1
HMAC-SHA2-256
HMAC-SHA2-512
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA SigVer (FIPS186-2)
RSA SigVer (FIPS186-4)
SHA-1
SHA2-256
SHA2-512
Software Versions
3.0

Vendor

Commvault Systems, Inc.
1 Commvault Way
Tinton Falls, NJ 07724
USA

David Cunningham
[email protected]
Phone: 732-216-5215
Indu Peddibhotla
[email protected]

Related Files

Validation History

Date Type Lab
3/18/2025 Initial ACUMEN SECURITY, LLC