Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5093

Details

Module Name
SAP CommonCryptoLib Crypto Kernel
Standard
FIPS 140-3
Status
Active
Sunset Date
11/13/2030
Overall Level
1
Caveat
When operated in approved mode. When installed, initialized, and configured as specified in Section 11.1 of the Security Policy. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
Module Type
Software
Embodiment
Multi-Chip Stand Alone
Description
SAP CommonCryptoLib Crypto Kernel v8.6.1 is a shared library, i.e. it consists of software only. SAP CommonCryptoLib Crypto Kernel provides an API in terms of C/C++ methods for key management and operation of cryptographic functions.
Approved Algorithms
AES-CBC
AES-CBC-CS3
AES-CFB128
AES-CFB8
AES-CTR
AES-ECB
AES-GCM
AES-OFB
Counter DRBG
DSA KeyGen (FIPS186-4)
DSA PQGGen (FIPS186-4)
DSA PQGVer (FIPS186-4)
DSA SigVer (FIPS186-4)
ECDSA KeyGen (FIPS186-5)
ECDSA KeyVer (FIPS186-4)
ECDSA KeyVer (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-4)
ECDSA SigVer (FIPS186-5)
EDDSA KeyGen
EDDSA KeyVer
EDDSA SigGen
EDDSA SigVer
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA3-224
HMAC-SHA3-256
HMAC-SHA3-384
HMAC-SHA3-512
KAS-ECC CDH-Component SP800-56Ar3
KAS-ECC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
KTS-IFC
RSA Decryption Primitive Sp800-56Br2
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA Signature Primitive
RSA SigVer (FIPS186-4)
RSA SigVer (FIPS186-5)
Safe Primes Key Generation
Safe Primes Key Verification
SHA-1
SHA2-224
SHA2-256
SHA2-384
SHA2-512
SHA3-224
SHA3-256
SHA3-384
SHA3-512
SHAKE-128
SHAKE-256

Vendor

SAP SE
Dietmar-Hopp-Allee 16
Walldorf, Baden-Wuerttemberg 69190
Germany

SAP CryptoLib FIPS Certification
[email protected]
Phone: 0049-6227-7-47474

Validation History

Date Type Lab
11/14/2025 Initial TUVIT Evaluation Body for IT Security