Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

    Projects Cryptographic Module Validation Program Validated Modules Search

Cryptographic Module Validation Program CMVP

Certificate #5295

Details

Module Name
Firepower Threat Defense Virtual Cryptographic Module
Standard
FIPS 140-3
Status
Active
Sunset Date
6/16/2029
Overall Level
1
Caveat
When installed, initialized and configured as specified in Section Life-Cycle Assurance of the Security Policy. No assurance of the minimum strength of generated SSPs (e.g., keys). No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs.
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
Cisco Firepower Threat Defense (FTD) solution offers the combination of the industry's most deployed stateful firewall with a comprehensive range of next-generation network security services, intrusion prevention system (IPS), content security and secure unified communications. All running in a virtual environment.
Approved Algorithms
AES-CBC
A2952
AES-CBC
A3376
AES-GCM
A2952
AES-GCM
A3376
Counter DRBG
A2952
Counter DRBG
A3376
ECDSA KeyGen (FIPS186-4)
A2952
ECDSA KeyGen (FIPS186-4)
A3376
ECDSA SigGen (FIPS186-4)
A2952
ECDSA SigGen (FIPS186-4)
A3376
ECDSA SigVer (FIPS186-4)
A2952
ECDSA SigVer (FIPS186-4)
A3376
HMAC-SHA-1
A2952
HMAC-SHA-1
A3376
HMAC-SHA2-256
A2952
HMAC-SHA2-256
A3376
HMAC-SHA2-384
A2952
HMAC-SHA2-384
A3376
HMAC-SHA2-512
A2952
HMAC-SHA2-512
A3376
KAS-ECC-SSC Sp800-56Ar3
A2952
KAS-ECC-SSC Sp800-56Ar3
A3376
KAS-FFC-SSC Sp800-56Ar3
A2952
KAS-FFC-SSC Sp800-56Ar3
A3376
KDF IKEv2
A2952
KDF IKEv2
A3376
KDF SSH
A2952
KDF SSH
A3376
RSA KeyGen (FIPS186-4)
A2952
RSA KeyGen (FIPS186-4)
A3376
RSA SigGen (FIPS186-4)
A2952
RSA SigGen (FIPS186-4)
A3376
RSA SigVer (FIPS186-4)
A2952
RSA SigVer (FIPS186-4)
A3376
Safe Primes Key Generation
A2952
Safe Primes Key Generation
A3376
SHA-1
A2952
SHA-1
A3376
SHA2-256
A2952
SHA2-256
A3376
SHA2-384
A2952
SHA2-384
A3376
SHA2-512
A2952
SHA2-512
A3376
TLS v1.2 KDF RFC7627
A2952
TLS v1.2 KDF RFC7627
A3376

Vendor

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134
USA

Global Certification Team
[email protected]
Phone: 800-553-6387

Related Files

Security Policy
Consolidated Certificate

Validation History

Date Type Lab
6/1/2026 Initial Gossamer Security Solutions