Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP

Certificate #5493

Details

Module Name
FortiClient Crypto Module v1.0
Standard
FIPS 140-3
Status
Active
Sunset Date
8/16/2031
Overall Level
1
Caveat
No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs
Security Level Exceptions
  • Physical security: N/A
  • Non-invasive security: N/A
  • Mitigation of other attacks: N/A
Module Type
Software
Embodiment
MultiChipStand
Description
The FortiClient Crypto Module v1.0 is a software cryptographic module that provides cryptographic services for FortiClient, Fortinet's endpoint security application.
Approved Algorithms
AES-CBC
AES-ECB
AES-GCM
Counter DRBG
ECDSA KeyGen (FIPS186-5)
ECDSA KeyVer (FIPS186-5)
ECDSA SigGen (FIPS186-5)
ECDSA SigVer (FIPS186-5)
HMAC-SHA-1
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA3-256
HMAC-SHA3-384
HMAC-SHA3-512
KAS-ECC-SSC Sp800-56Ar3
KAS-FFC-SSC Sp800-56Ar3
PBKDF
RSA KeyGen (FIPS186-5)
RSA SigGen (FIPS186-5)
RSA SigVer (FIPS186-5)
Safe Primes Key Generation
SHA-1
SHA2-256
SHA2-384
SHA2-512
SHA3-256
SHA3-256
SHA3-384
SHA3-512

Vendor

Fortinet Inc.
899 Kifer Road
Synnyvale, CA 94086
USA

Marc Boire
[email protected]
Phone: 613-225-9381

Validation History

Date Type Lab
8/17/2026 Initial Teron Labs