Module Name
Kernel Mode Cryptographic Primitives Library
Caveat
When operated in approved mode. When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode with module Windows OS Loader validated to FIPS 140-3 under Cert. #5405 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. No assurance of FIPS 140-3 requirements met for the components of the RBG construct that are external to the module boundary (e.g., DRBG, ESV) except for SP 800-90C compliance and security strength of the provided random bits
Security Level Exceptions
- Non-invasive security: N/A
Module Type
Software-hybrid
Embodiment
MultiChipStand
Description
The Kernel Mode Cryptographic Primitives Library is a kernel-mode cryptographic module that provides cryptographic services through the Microsoft CNG (Cryptography, Next Generation) API to Windows kernel components. The module also provides cryptographic provider registration and configuration services to both user and kernel mode components.
Approved Algorithms
AES-XTS Testing Revision 2.0
AES-XTS Testing Revision 2.0
Safe Primes Key Generation
Safe Primes Key Generation