Keyed-Hash Message Authentication Code (HMAC)

Validation List

-Ben Studer
TEL: 408-482-5491
FAX: 650-625-9761

-Eric Dudley
TEL: 650-623-7039

"Cavium security algorithms are implemented via hardware acceleration blocks that are party of the Co-Processor 2 in the MIPs Release 2 architecture. Cavium also offers APIs to allow software interaction and updates that utilize these hardware blocks. Cavium can disable security cores to comply with related export laws and regulations."

-Kathy Kriese
TEL: 650-931-9781

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#855

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

-Sasi Murthy
TEL: 408.220.2108
FAX: 408.220.2250

-Sandy Hawke
TEL: 408.220.2136
FAX: 408.220.2012

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS>BS ) SHSCert#854

"Cryptographic algorithm implementations for the Blue Coat WAN Application Delivery solutions which "stop the bad and accelerate the good", optimizing application performance and security for any user, anywhere, across the WAN for distributed enterprises. "

-Mehdi Bonyadi
TEL: 858-625-5163

"Cryptographic acceleration card"

-Neil Weicher
TEL: 203-321-1278x91

"The Netlib Encryptionizer for SQL Server 8.601.1 provides encryption of data stored in MS SQL Server databases and backups. It can be deployed without programming and without adding any administrative overhead."

-Mehdi Bonyadi
TEL: 858-625-5163

"Cryptographic Acceleration Card"

-Tim Bergeron
TEL: 978-952-5647

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#849

"The LX-4000T Series Console Servers provide secure remote service serial port access to devices in an organization's networks and infrastructures. This nearly eliminates the need for physical presence at a site to correct problems or manage its everyday operation."

-Tim Bergeron
TEL: 978-952-5647

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#848

"The LX-4000T Series Console Servers provide secure remote service serial port access to devices in an organization's networks and infrastructures. This nearly eliminates the need for physical presence at a site to correct problems or manage its everyday operation."

-Jane Blanchard
TEL: 408-447-2168
FAX: 408-447-5525

HMAC-SHA256 ( Key Size Ranges Tested: KS>BS ) SHS Cert#847

"The HP Secure Key Manager automates encryption key generation and management. It is a hardened security appliance delivering identity-based access, administration and logging. Additionally, the Secure Key Manager provides reliable lifetime key archival with automatic multi-site key replication and failover capabilities."

-Bill McIntosh
TEL: 813-288-7388

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#845

"Fortress Secure Bridge is an all-in-one network access family with the most stringent security available today built in."

-Prateek Jain
TEL: 65-6244-5670
FAX: 65-6244-5678

"Accellion Login API uses HMAC module to validate the login token provided to the API. The HMAC module is taken from Crypt HMAC by Matthew Fonda & Derick Rethans from PEAR - PHP (http://pear.php.net/package/Crypt_HMAC)."

-Björn Rupp
TEL: +49 700 2797 8835

-Frank Rieger
TEL: +49 700 2797 8835

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#841

"The CryptoPhone Cryptographic Library provides cryptographic services for the CryptoPhone Security Kernel, which is a portable multi-platform cryptographic module that provides strong encryption, authentication, key exchange, message integrity verification, and secure memory abstraction services to GSMK CryptoPhone encryption products."

09/16/08: Update vendor POC information;

-Fidel Camero
TEL: +1 (978) 287-6303
FAX: +1 (978) 371-1280

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#840

"The CipherTalk Cryptographic Library provides cryptographic functionality for the CipherTalk® 8000 Cryptographic Module, which is an Operating System Agnostic cipher engine that offers services that include encryption and key exchange algorithms, authentication algorithms, and integrity and verification algorithms."

-Zahid Ilkal
TEL: (732) 870-4812
FAX: (732) 870-4545

-Andrei Erofeev
TEL: (732) 870-4950
FAX: (732) 870-4545

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#838

"CommVault Crypto Library (CVCL) is a cryptographic software module used in various CommVault products. The module provides key generation, symmetric and asymmetric encryption, hash, HMAC and signature generation/verification services."

-Yossi Fixman
TEL: +972-3-7657-331
FAX: +972-3-6494-975

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#839

"Apollo OS V4.03 on SLE66CX680PE is a multi-purpose smart card utilizing an ISO 7816 file system. Apollo OS V4.03 is implemented as firmware in ROM of an Infineon SLE66CX680PE smart card controller IC."

-Tom Dickens
TEL: 408-392-4324
FAX: 408-392-0319

-Reid Carlisle
TEL: 727-551-0046
FAX: 408-392-0319

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS ) SHSCert#834

"The SPYCOS® Series 2 is the latest addition to the SPYRUS family of cryptographic module ICs enabling both smart card and USB cryptographic tokens. It provides security critical capabilities in user authentication, message privacy and integrity, authentication, and secure storage in an IC form factor."

08/15/08: Correction was made to OES';

-Douglas Clark
TEL: 203-924-3206
FAX: 203-924-3406

"The Pitney Bowes iButton Postal Security Device (PSD) complies with FIPS 140-2 standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."

-Cor van de Water
TEL: 408-383-7626
FAX: 408-383-7680

-Gordon Poole
TEL: 408-306-5622

"Proxim Tsunami MP.11 245054-R and 245054-S wireless products offer fixed and mobile WiMAX capabilities to distribute wireless broadband access supporting video, voice, and data applications. In FIPS mode, the modules support proprietary WORP protocol for wireless transmission and TLS, SSH, and SNMP for management."

-Diane Hunter
TEL: 919-954-7300
FAX: 919-954-7500

-Harry Taji
TEL: +962 65824941
FAX: +962 65844950

"A cryptographic algorithm library developed for TL905 module that includes implementations of: AES block cipher that works in ECB and OFB modes, ANSI X9.31 RNG based on AES and HMAC-SHA-1 hashed MAC function."

-Jeff Stone
TEL: 508-249-1189

-Nirav Mehta
TEL: 508-249-2964

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#824

"RSA BSAFE® Crypto Kernel provides core cryptographic functionality optimized for very small code size and speed to meet the needs of the most constrained environments. It is the cryptographic foundation for RSA BSAFE security products designed for C/C++ developers."

-Harsha Nagaraja
TEL: 408-754-3010

"Cryptographic Firmware Library provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. Firmware library provides implementations for TDES, AES, SHA1, HMAC, RSA, and RNG(ANSI X9.31)"

-Kayvan Alikhani

"SPAR (Secure Personal Authentication Reader) is a multi-factor authentication device that provides RFID, Biometric and Magnetic-card interfaces. Using the SPAR at the edge of VOIP networks when coupled with devices such as IP phone terminals dramatically increases the security, validation and personalization process for business applications."

-Kayvan Alikhani

"SPAR (Secure Personal Authentication Reader) is a multi-factor authentication device that provides RFID, Biometric and Magnetic-card interfaces. Using the SPAR at the edge of VOIP networks when coupled with devices such as IP phone terminals dramatically increases the security, validation and personalization process for business applications."

-Kayvan Alikhani

"SPAR (Secure Personal Authentication Reader) is a multi-factor authentication device that provides RFID, Biometric and Magnetic-card interfaces. Using the SPAR at the edge of VOIP networks when coupled with devices such as IP phone terminals dramatically increases the security, validation and personalization process for business applications."

-Brian O’Rourke
TEL: (952) 912-3444
FAX: (952) 912-4952

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#819

"The latest entry in Digi's advanced console management line, the Digi Passport provides secure remote access to the console ports of computer systems and network equipment. In addition to conventional serial console connections, the Digi Passport connects to the service processors of the leading server vendors."

-Brian Wood
TEL: 443-468-1238
FAX: 314-590-0995

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS   KS>BS ) SHSCert#818

"Provides cryptogaphic operations by performing reliable, high speed security services for Mobile Armor Data Protection for Full Disk Encryption of laptops, PCs and smartphones, and the encryption of files, folders and removable media on those devices."

For OES - Intel Xscale w/ Palm OS 5.4, HMAC is only tested for HMAC w/ SHA-1, HMAC w/ SHA-224, and HMAC w/ SHA-256;

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#816

"The Microsoft Enhanced Cryptographic Provider, designed for FIPS 140-2 compliance, is a software-based, cryptographic module. RSAENH encapsulates several different cryptographic algorithms (including SHS, TDES, AES, RSA, SHS-based HMAC) in a cryptographic module accessible via the Microsoft CryptoAPI."

-Mehdi Bonyadi
TEL: 858-625-5163

"Cryptographic Acceleration Card"

-Andy Witek
TEL: 530-271-3176
FAX: 530-274-9442

"An FPGA implementation of the HMAC algorithm."

-Kathy Kriese
TEL: 650-931-9781

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#807

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

-Phil Scott
TEL: 408-961-2509
FAX: 408-844-8638

-Frank Teruel
TEL: 408-961-6132
FAX: 408-844-8638

"The Media Server Encryption Option (MSEO) Cryptographic Library provides cryptographic services to the Netbackup MSEO driver."

-Diana Agemura
TEL: 206-217-7495
FAX: 206-272-1487

-Scott Rankin
TEL: 206-217-7973
FAX: 206-272-1487

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#805

-Noah Salzman
TEL: 510-740-0308
FAX: 510-652-6742

-Peter Loer
TEL: 510-740-5158
FAX: 510-652-6742

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#804

"The BigFix Cryptogrpahic Module is the software library used to support authentication, validation, and encryption routines for the BigFix 7 Platform."

07/18/08: Add new OES;

-Kevin Driver
TEL: 512-838-1128
FAX: 512-838-8868

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#803

"The IBM Java JCE (Java Cryptographic Extension) FIPS provider (IBMJCEFIPS) for Multi-platforms is a scalable, multipurpose cryptographic module that supports many FIPS approved cryptographic operations. This gives Java applications access to the FIPS algorithms via the standard JCE framework that is part of all JVM's at the 1.4.0 level and higher."

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-507-4230

-Rob Williams
TEL: 905-501-3887
FAX: 905-507-4230

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#802

"Security Builder GSE-J is a standards-based cryptographic toolkit written in Java. It supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into Java-based applications."

-Michael Scruggs
TEL: 650 623 7005
FAX: 650 625 9751

"Each identical processor core on the NITROX PX die implements several security and math algorithms, including ModEx (and RSA), ECC, 3DES, AES256, KASUMI, SHA1, SHA2, and MD5 (hash and HMAC). Performance ranges: 500Mbps to 2.5Gbps of encryption bandwidth; 4k to 17k RSA's; 6k to 25k DH operations per second. Accelerate IPSec, SSL, XML, and WLAN."

-Juan Asenjo
TEL: 954-888-6200
FAX: 954-888-6211

"The Datacryptor 2000 and the Datacryptor Advanced Performance Cryptographic Modules secure communications using signed Diffie-Hellman key exchange and Triple-DES or AES encryption over point to point link (including E1/T1, E3/T3), Frame Relay, and IP (up to 100 Mbps) networks."

-Ben Davis
TEL: 760-476-4202
FAX: 760-929-3941

"The ViaSat Enhanced Bandwidth Efficient Modem (EBEM-500) series Satcom Modem provides the latest in efficient modulation and coding for point-to-point Satcom connections. The EBEM-500 series offers embedded encryption integrating the security functions into the modem to provide an integrated secure Satcom modem product."

-Mehdi Bonyadi
TEL: 858-625-5163

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#799

"Cryptographic Acceleration Card"

07/09/08: Correction - Prerequisite SHA number;

-Dawson Yip

"The Cisco® 3201 Wireless Mobile Interface Card (WMIC) for the Cisco 3200 Series Rugged ISR provides integrated 802.11b/g wireless WAN or LAN capabilities."

-Mehdi Bonyadi
TEL: 858-625-5163

"Cryptographic acceleration card"

-Dr. Bassam Khulusi
TEL: (913) 310-0888
FAX: (913) 859-9797

-Oggy Vasic
TEL: (913) 310-0888
FAX: (913) 859-9797

"Tricryption Cryptographic Module is a software library providing cryptographic services for ERUCES’ Tricryption family of high volume encryption & key management products including key servers, file, database, executables encryption, and special services (anonymization, de-identification, & privacy protection)."

07/17/08: Update implementation information;

-Mike Soto
TEL: 408-902-8125
FAX: 408-853-3122

"The Cisco 1800, 2800 and 3800 Series of integrated Services Routers intelligently embed data and security into a single, resilient system for fast, scalable delivery of mission-critical business applications from small offices to demanding enterprise environments."

-Jeff MacMillan
TEL: 250-474-2242
FAX: 250-721-1222

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#793

"Charge It's j-series cryptographic library consists of numerous crypto modules used within its line of VIA and Opteron hardware-based multi-purpose encryption appliances."

-Marty Lamb
TEL: 610-873-6788

"The Rajant BreadCrumb ME2 is a rugged wireless data transmitter-receiver that transparently forms a mesh"

-Hasbi Kabacaoglu
TEL: +49 3303 525 656
FAX: +49 3303 525 07 565

"The firmware implementation of the FP Crypto Library, which runs on an embedded hardware module, with a Samsung S3C44B0X processor. The cryptographic algorithm implementation is used in context of security critical services."

-Chris Romeo
TEL: 919-392-0512

"The market-leading Cisco PIX and ASA security appliances deliver robust user and application policy enforcement and secure connectivity services in cost-effective, easy-to-deploy solutions. Cisco PIX and ASA security appliances provide comprehensive security, performance, and reliability for network environments of all sizes."

-Robert Smith
TEL: 617-949-4067
FAX: 617-547-1031

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#788

"The Odyssey Security Component / Portable (OSC/P) is a general purpose cryptographic library. This portable (C) version can be compiled for use on a large variety of platforms."

07/03/08: Update OES;

-Robert Smith
TEL: 617-949-4067
FAX: 617-547-1031

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#787

"The Odyssey Security Component (OSC) is a general purpose cryptographic library."

07/03/08: Update OES;
07/29/08: Add new tested OES;

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

"FIPS.sys is a general-purpose, software-based, cryptographic module residing at the Kernel level of the Windows Operating System. It runs as a kernel mode export driver (a kernel-mode DLL) and encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible by other kernel mode services."

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#783

"The Microsoft Enhanced Cryptographic Provider, designed for FIPS 140-2 compliance, is a software-based, cryptographic module. RSAENH encapsulates several different cryptographic algorithms (including SHS, DES, TDES, AES, RSA, HMAC) in a cryptographic module accessible via the Microsoft CryptoAPI."

-William McIntosh
TEL: (813) 288-7388

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#782

"The FTI Driver is apart of the Fortress Secure Client designed to deliver security on wireless devices such as bar scanners, handhelds, and laptops using various operating systems. A plug-and-play solution, the Client encrypts and decrypts communication across the WLAN and protects the device against attacks without user intervention."

-Mark Litvack
TEL: 408-434-5751
FAX: 408-434-5777

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#781

"RMI's XLS series devices include the XLS408 and XLS404 processors. The XLS processors combine the power of innovative multi-processing and multi-threaded architecture with the simplicity of a leading edge, general purpose MIPS64-based machine enabling wire speed across multiple platforms."

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

HMAC-SHA384 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#780

"The BlackBerry Cryptographic API is the firmware module that provides advanced cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

-Dr. Bassam Khulusi
TEL: (913) 310-0888
FAX: (913) 859-9797

-Oggy Vasic
TEL: (913) 310-0888
FAX: (913) 859-9797

HMAC-SHA384 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#779

"Tricryption Client Kernel Level Cryptographic Module is a kernel-level software library providing cryptographic services for ERUCES’ transparent file system encryption driver. This includes protection for directories/ folders/drives, files of a specific type, and even executables on laptops, desktops and servers."

07/17/08: Update implementation information;

-Security Certifications Team
TEL: 519-888-7465 x72921
FAX: 519-886-9852

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#777

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds and Smartphones."

-William Colvin
TEL: 905-876-3147
FAX: 905-876-3479

-Gil Fisher
TEL: 720-214-2800 x12
FAX: 720-214-2805

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#776

"THE ECLIPZ ESCON TAPE ENCRYPTOR IS DESIGNED TO BE INSERTED IN AN ESCON FIBER OPTIC CHANNEL BETWEEN AN IBM MAINFRAME COMPUTER AND A TAPE DRIVE TO ENCRYPT DATA BEING SENT TO THE TAPE DRIVE."

-Gary McCulley
TEL: 480-753-2291
FAX: 480-753-2380

"The BCM5861 is a fully-featured security processor optimized to provide high-performance cryptographic acceleration, as well as IPSec and SSL/TLS protocol processing."

-Sean Gibbons
TEL: 859-232-2000
FAX: 859-232-3120

"A secure rendering plug-in that provides AES encryption of print data from the host through a print server with the AES encrypted data continuing on to a Lexmark decryption-enabled device. The rendering plug-in uses the Lexmark device's public key such that only the target device will be able to decrypt the data."

-Pali Surdhar
TEL: +44 07809391037

-Bernard Parsons
TEL: +44 07809391027

HMAC-SHA256 ( Key Size Ranges Tested: KS=BS ) SHS Cert#772

"This is the 32 bit subcomponent implementation for the BeCrypt Cryptographic Module."

04/29/08: Add new OES;

-Pali Surdhar
TEL: +44 07809391037

-Bernard Parsons
TEL: +44 07809391027

HMAC-SHA256 ( Key Size Ranges Tested: KS=BS ) SHS Cert#771

"This is the 16 bit subcomponent implementation for the BeCrypt Cryptographic Module."

05/30/08: Update the OS;

-Mark Litvack
TEL: 408-434-5751
FAX: 408-434-5777

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#769

"RMI's series devices include the XLR732, XLR716, XLR532, XLR516, XLR508, and XLR308 processors. They are the ultimate in performance, combining the power of innovative multi-core and multi-threaded architecture with the simplicity of a leading edge, general purpose MIPS64-based machine."

-Mark Litvack
TEL: 408-434-5751
FAX: 408-434-5777

HMAC-SHA256 ( Key Size Ranges Tested: KS=BS ) SHS Cert#768

"RMI's XLR series devices include the XLR732, XLR716, XLR532, XLR516, XLR508, and XLR308 processors. They are the ultimate in performance, combining the power of innovative multi-core adn multi-threaded architecture with the simplicity of a leading edge, general purpose MIPS64-based machine."

-Tony Ureche
TEL: 1-800-MICROSOFT

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#753

"Algorithm implementation providing AES CCM and HMAC support on top of the Windows Vista and Server 2008 Symmetric Algorithms Implementation. This provides these services to applications including the Windows Boot Manager and BitLocker(TM)"

-Seth Ross
TEL: 415-683-2240
FAX: 415-683-2400

"The Encryption Plus® Cryptographic Library ("EPCL") provides cryptographic services to the GuardianEdge, Encryption Anywhere, and Encryption Plus families of data protection products."

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

-Dave Friant
TEL: 425-704-7984
FAX: 425-936-7329

-Kelvin Yu
TEL: 425-703-4612
FAX: 425-936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

-Clemens Heinrich
TEL: +49 3303 525 619
FAX: +49 3303 525 07 619

-Hasbi Kabacaoglu
TEL: +49 3303 525 656
FAX: +49 3303 525 07 656

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#765

"The firmware implementation of the FP DW Library, which runs on an embedded hardware module, with a Samsung S3C44B0X processor. The cryptographic algorithm implementation is used in context of security critical services."

-Marcus Streets
TEL: 011-44-1223-723600
FAX: 011-44-1223-723601

-Mark Wooding
TEL: 011-44-1223-723600
FAX: 011-44-1223-723601

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#764

"The nCipher algorithm library provides cryptographic functionality for nCipher's nShield Hardware Security Modules."

-Michael Scruggs
TEL: 650-623-7005
FAX: 650-625-9751

"NITROX Lite is a series of single and multi-core hardware macro-processors, implemented with a common processor core architecture. Each identical processor core implements several security and math algorithms, including ModEx, RSA, 3DES, AES256, SHA1, MD5, and HMAC. Nitrox Lite series part numbers include CN1010, CN1005, CN1001, CN505, and CN501."

-Dave Friant

-Kelvin Yu

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

-Dave Friant

-Kelvin Yu

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#753

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

-Security Certifications Team
TEL: 519-888-7465 x2921
FAX: 519-886-9852

HMAC-SHA384 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#763

"The BlackBerry Cryptographic API is the firmware module that provides advanced cryptographic functionality to BlackBerry Wireless Handhelds."

-Paul Fowler
TEL: 732-949-8503

-Andrew Ferreira
TEL: 732-949-9529

"The Hifn 7955 accelerator card is used in Alcatel-Lucent VPN Firewall Bricks."

-Douglas Clark
TEL: 203-923-3206
FAX: 203-924-3406

"The Pitney Bowes iButton Postal Security Device (PSD) complies with FIPS 140-2 standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."

-Yair Elharrar
TEL: +972-3-9764055
FAX: +972-3-9764055

"Voice-over-IP media gateway"

-Yair Elharrar
TEL: +972-3-9764055
FAX: +972-3-9764223

"Voice-over-IP media gateway"

-Security Certifications Team
TEL: 519-888-7465 x2921
FAX: 519-886-9852

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#752

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds."

-Security Certifications Team
TEL: 519-888-7465 x2921
FAX: 519-886-9852

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#751

"The BlackBerry Cryptographic Kernel is the firmware module that provides the core cryptographic functionality to BlackBerry Wireless Handhelds."

-Peter Eng
TEL: 425-605-7400
FAX: 425-605-7405

"The VIA3 VkCrypt Cryptographic Module is a software cryptographic module that implements symmetric and public key encryption, digital signatures, and hashing. VIA3 is a secure online collaboration solution integrating real-time audio and video, instant messaging, application sharing, and access to workspaces."

-Alexander Stewart
TEL: 303-661-2775
FAX: 303-661-5743

"The Encrypting Tape Drive uses HMAC SHA-1 to support TLS1.0 communication with the KMS."

-Vidya Renganarayanan
TEL: 408-333-5812

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#749

"HMAC SHA1 and SHA256 implementation in Brocade firmware."

-Nick Balafas
TEL: (919) 678-4540
FAX: (919) 678-4501

-Mike Servedio
TEL: (919) 678-4511
FAX: (919) 678-4501

"The AMCC PowerPC 440EPx and 440GRx are high performance embedded System on Chips (SoC's) offering a wide range of I/O interfaces such as USB 2.0, Gigabit Ethernet, NAND Flash and on-chip security acceleration hardware. They are ideally suited to a wide range of applications, including imaging, industrial control and networking."

-Nick Balafas
TEL: (919) 678-4540
FAX: (919) 678-4501

-Mike Servedio
TEL: (919) 678-4511
FAX: (919) 678-4501

"The AMCC PowerPC 440EPx and 440GRx are high performance embedded System on Chips (SoC's) offering a wide range of I/O interfaces such as USB 2.0, Gigabit Ethernet, NAND Flash and on-chip security acceleration hardware. They are ideally suited to a wide range of applications, including imaging, industrial control and networking."

-Sriram Dayanandan
TEL: 408-757-1849

-Francis daCosta
TEL: 408-373-7700

"Multi-Radio Wireless Mesh Networking Node. Nodes connect to each other forming a “MESH” network. Data from Client devices connected to the mesh node is routed according to the destination address. Client devices need to authenticate before they can join the network. All data from client is encrypted using AES-CCM using temporal keys generated using WPA2/802.11i standard."

-Zeljko Bajic
TEL: 408-528-2684
FAX: 408-528-2400

-Gopalakrishnan Kamatchi
TEL: 408-528-2427
FAX: 408-528-2400

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#745

"RFS7000/ WS5100 wireless switches from Motorola provide enhanced support for enterprise mobility and multimedia applications, as well as security and manageability. Switches are based on Motorola’s Wi-NG (Wireless Next Generation) architecture providing support: for a large number of 802.11 a/b/g Access Ports/Points for L2/L3 adoption and mobility; campus wide roaming across subnets, powerful failover capabilities; integrated security features including IPSec VPN gateway and secure guest access."

-Zeljko Bajic
TEL: 408-528-2684
FAX: 408-528-2400

-Gopalakrishnan Kamatchi
TEL: 408-528-2427
FAX: 408-528-2400

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS>BS ) SHS Cert#744

"RFS7000/ WS5100 wireless switches from Motorola provide enhanced support for enterprise mobility and multimedia applications, as well as security and manageability. Switches are based on Motorola’s Wi-NG (Wireless Next Generation) architecture providing support: for a large number of 802.11 a/b/g Access Ports/Points for L2/L3 adoption and mobility; campus wide roaming across subnets, powerful failover capabilities; integrated security features including IPSec VPN gateway and secure guest access."

-Horst Marcinsky
TEL: +61 3 9868 4555
FAX: +61 3 9821 4899

-Colin Campbell
TEL: +61 3 9868 4555
FAX: +61 3 9821 4899

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#743

"Senetas Security's CypherNET™ Crypto library provides FIPS 140-2 approved cryptographic algorithms for the CypherNET family of products. Based on OpenSSL, the CypherNET Crypto library provides an Application Programming Interface (API) to support security relevant services within the CypherNET 1000 and 3000 Series products."

04/04/08: Add tested HMAC w/ SHA256;

-Zeljko Bajic
TEL: 408-528-2684
FAX: 408-528-2400

-Gopalakrishnan Kamatchi
TEL: 408-528-2427
FAX: 408-528-2400

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS>BS ) SHS Cert#742

"Designed for large scale, high bandwidth deployments, the RFS7000 Wireless Switch from Motorola provides robust, highly scalable support for seamless enterprise mobility. Motorola’s Wi-NG architecture, optimized for enterprise mobility and multimedia applications, simplifies network deployment and management, provides superior performance, security and scalability, and supports emerging RF technologies. Built on this platform, the RFS7000 enables campus wide roaming across subnets, and offers powerful failover capabilities, exceptional quality of service (QoS) and increased voice capacity. Integrated security features include IPSec VPN gateway and secure guest access. The RFS7000 supports 256 802.11 a/b/g Access Ports/Points for L2/L3 adoption and mobility, i.e. 8000 users per switch, and 96000 users, when configured in a cluster. Above listed crypto library is used by RFS7000 for implementation of the security features."

-Dave Norton
TEL: 978-288-7079

-Dragan Grebovich
TEL: 978-288-8069
FAX: 978-670-8153

"The Nortel VPN Client provides stable, secure network access via Nortel VPN routers and VPN gateways. The client can be preconfigured and customized by IT administrators for quick install and connect, or easily configured by end users via the connection wizard."

06/13/08: Update version number;

-Dave Norton
TEL: 978-288-7079

-Dragan Grebovich
TEL: 978-288-8069
FAX: 978-670-8153

"Nortel VPN Routers provide routing, VPN, firewall, bandwidth management, encryption, authentication, and data integrity for secure connectivity across managed networks and the Internet. They connect remote users, branch offices, suppliers, and customers with cost and performance advantages of public networks and security/control of private networks"

-Dave Norton
TEL: 978-288-7079

-Dragan Grebovich
TEL: 978-288-8069
FAX: 978-670-8153

"It is OpenSSL 9.8d based, modified to meet FIPS 140-2 requirements. Nortel VPN Routers provide routing, VPN, firewall, bandwidth management, encryption, authentication, and data integrity for secure connectivity across managed IP networks and the Internet."

-Tony Ureche
TEL: 1-800-MICROSOFT

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#737

"BitLocker(TM) is a security feature in Windows Vista® that provides full volume encryption to address lost or stolen computer scenarios."

-Jeff Ward
TEL: 781 993 4679

"Check Point's VPN-1 module running on Nokia's IPSO security hardened operating system "

-Jeffrey Ward
TEL: 781 993 4679

"Nokia security hardened operating system"

-Usha Sanagala
TEL: 408-962-6248

"The SonicWALL E-Class Network Security Appliance (NSA) E7500 is engineered to meet the needs of the expanding enterprise network by providing a high performance, scalable, multifunction threat prevention appliance."

-Usha Sanagala
TEL: 408-962-6248

"The SonicWALL E-Class Network Security Appliance (NSA) E6500 is engineered to meet the needs of the expanding enterprise network by providing a high performance, scalable, multifunction threat prevention appliance."

-Usha Sanagala
TEL: 408-962-6248

"SonicWALL's E-Class Network Security Appliance (NSA) Series are multi-core Unified Threat Management appliances that combine a powerful deep packet inspection firewall with layers of protection technology and a suite of high-availability features making it the ideal choice for campus networks, data centers and more."

-Usha Sanagala
TEL: 408-962-6248

"The SonicWALL NSA 3500 is a next generation United Threat Management firewall, utilizing a breakthrough multi-core hardware design with 4 cores and 6 GE interfaces to deliver real-time internal and external network protection without compromising network performance for corporate, branch office and distributed environments."

-Usha Sanagala
TEL: 408-962-6248

"SonicWALL's TZ Series is a network security platform that combines a deep packet inspection firewall, anti-virus, anti-spyware, intrusion prevention, content filtering, 56k modem backup, and 802.11 b/g WLAN, which allow small and branch offices to implement protection against the wide spectrum of emerging network threats."

-Harsha Nagaraja
TEL: 408-754-3010

"Cryptographic Firmware Library provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. Firmware library provides implementations for TDES, AES, SHA1, HMAC, RSA, and RNG(ANSI X9.31)"

-Brian Mansfield
TEL: 408.853.5469
FAX: 408.853.3529

"This is the HMAC algorithm implementation for the Cisco Secure Services Client FIPS Module in accordance with FIPS PUB 198. The Cisco Secure Services Client FIPS module is a self contained crypto module that supports IEEE 802.11i security (WPA2) along with secure EAP types such as EAP-TLS, EAP-FAST, and PEAP while operating in FIPS 140-2 mode."

-Bill McIntosh
TEL: 813-288-7388

HMAC-SHA384 ( Key Size Ranges Tested: KS=BS ) SHS Cert#726

"The Fortress Suite of Algorthms (AES, SHS, HMAC and RNG) will execute on a Secure Wireless Access Bridge (SWAB) to provides security to the corporate network by protecting communications between wireless devices and the rest of the network."

-Len. L. Mizrah
TEL: 650-587-5263
FAX: 650-587-5259

"The Authernative Cryptographic Module is a software cryptographic module that is implemented as a software library. This software library provides cryptographic services for all Authernative products. The module provides FIPS-Approved cryptographic services for encryption, decryption, key generation, secure hashing, and random number generation."

-Ryan B Saldanha
TEL: 949.838.1047
FAX: 949.838.1047

-Hatem El-Sebaaly
TEL: 949.838.1032
FAX: 949.838.1032

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#724

"Implementation of a JCE provider conforming to version 1.2 of the JCE spec."

-John Weathersby
TEL: 601-427-0152
FAX: 601-427-0156

-Steve Marquess
TEL: 301-524-9915

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#723

"The OpenSSL FIPS Cryptographic Module is a validated source code component of the standard OpenSSL distribution that can be downloaded from the http://openssl.org/ website. It has been tested with both assembler optimization and without assembler optimization."

01/27/02: Add new OES';
04/29/08: Update OES';

-Bill McIntosh
TEL: 813-2887388

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#722

"The Fortress SWAB provides authenticated, encrypted communication on a Fortress-secured network."

-Bill McIntosh
TEL: 813-288-7388

HMAC-SHA384 ( Key Size Ranges Tested: KS<BS ) SHS Cert#715

"Provides Fortress ES520 cryptographic services through the Xilinx Spartan FPGA."

-Jason Tucker
TEL: 206-284-9387
FAX: 206-770-6461

-Pete Erickson
TEL: 206-284-9387
FAX: 206-770-6461

"OpenSSL-based algorithm implementations used by the CoCo Crypto cryptographic library."

-Rick Roane
TEL: 858-597-9097
FAX: 858-552-9660

"MPM-1000 SATCOM IP Modem"

-Arnaud Pate-Cazal
TEL: 949-637-3339
FAX: 949-347-1224

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#718

"The STM HardCache is a secure SOC used for Access Control and Data Storage Encryption. It integrates a dedicated RISC processor coupled with a HW accelerated Cryptographic Engine that implements AES 128/192/256 (ECB/CBC/CRT modes), SHA-1/256, HMAC-SHA-1/256, RSA PKCS#1 ver2.1 and ANSI x9.31 DRNG."

-Bill McIntosh
TEL: 813-288-7388

HMAC-SHA512 ( Key Size Ranges Tested: KS=BS ) SHSCert#717

"The Fortress SWAB provides authenticated, encrypted communication on a Fortress-secured network."

-Rick Orsini
TEL: 949-858-7525
FAX: 949-858-7092

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#716

"A software cryptographic module supporting encryption, authentication, and data redundancy techniques running on either Linux or Windows user or kernel modes."

-Bill McIntosh
TEL: 813 288-7388

HMAC-SHA256 ( Key Size Ranges Tested: ) SHS Cert#714

"The Fortress SWAB ES520 provides authenticated, encrypted communication on a Fortress-secured network."

-Marcus Streets
TEL: +44 1223 723600
FAX: +44 1223 723601

-Mark Wooding
TEL: +44 1223 723600
FAX: +44 1223 723601

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#713

"The nCipher algorithm library provides cryptographic functionality for nCipher's nShield Hardware Security Modules."

-John Weathersby
TEL: 601-427-0152
FAX: 601-427-0156

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#712

"The OpenSSL FIPS Runtime Module is a cryptographic library designed for use with the OpenSSL toolkit on multiple platforms."

-John Weathersby
TEL: 601-427-0152
FAX: 601-427-0156

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#711

"The OpenSSL FIPS Runtime Module is a cryptographic library designed for use with the OpenSSL toolkit on multiple platforms"

-Alan Kaye
TEL: 613-225-9381 x7416
FAX: 613-225-2951

-Jon Seanor
TEL: 604-4301063 x6951
FAX: 613-430-1286

"FortiClient fortips.sys Cryptolibrary v3.0 - The fortips.sys library provides the following services for the FortiClient product: HMAC, SHA1, AES CBC, AES ECB, 3DES. Fortips.sys is a kernel mode device driver that appears as a "Fortinet Virtual Adapter" in the network interfaces list."

01/08/08: Update implementation name and OEs;

-Alan Kaye
TEL: 613-225-9381 x7416
FAX: 613-225-2951

-Jon Seanor
TEL: 604-4301063 x6951
FAX: 613-430-1286

"FortiClient Cryptolib.dll Cryptolibrary v3.0 - The Cryptolib library provides the following services for the FortiClient product: RNG, HMAC, SHA1, AES CBC, AES ECB, 3DES. Cryptolib.dll is a user mode application that serves as a wrapper for two other dlls: libeay32.dll and ssleay32.dll."

01/08/08: Update implementation name and OEs;

-Paul Fowler
TEL: 908-582-1734

"Alcatel-Lucent VPN Firewall Brick is a high-speed packet-processing appliance oriented towards providing security functions. The Bricks are carrier-grade integrated firewall and VPN gateway appliance specifically designed for web/application data center security, large-scale managed security services, and remote access VPN services."

-William Colvin
TEL: 905-876-3147
FAX: 905-876-3479

-Gil Fisher
TEL: 720-214-2800 x12
FAX: 720-214-2805

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#707

"The Eclipz ESCON tape encryptor is designed to be inserted in an ESCON fiber optic channel between an IBM mainframe computer and a a tape drive to encrypt data being sent to the tape drive."

-Kathy Kriese
TEL: 650-295-7692

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#706

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

-Paul Fowler
TEL: 908-582-1734

"Alcatel-Lucent VPN Firewall Brick is a high-speed packet-processing appliance oriented towards providing security functions. The Bricks are carrier-grade integrated firewall and VPN gateway appliance specifically designed for web/application data center security, large-scale managed security services, and remote access VPN services."

-Paul Fowler
TEL: 732-949-8503

"Hifn 7954 AES, HMAC, SHA-1, and Triple-DES implementations. The Hifn 7954 accelerator card is used in Alcatel-Lucent VPN Firewall Bricks."

-Helen Francis
TEL: +61-7-3227-4444
FAX: +61-7-3227-4400

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#703

"RSA BSAFE Crypto-J security software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. It supports a wide range of industry standard encryption algorithms offering Java developers the flexibility to choose the option most appropriate to meet their requirements."

-Helen Francis
TEL: +61-7-3227-4444
FAX: +61-7-3227-4400

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#702

"RSA BSAFE Crypto-J security software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. It supports a wide range of industry standard encryption algorithms offering Java developers the flexibility to choose the option most appropriate to meet their requirements."

-John Weathersby
TEL: 601-427-0152
FAX: 601-427-0156

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#701

"The OpenSSL FIPS Cryptographic Module is a validated source code component of the standard OpenSSL distribution that can be downloaded from the http://openssl.org/ website."

-Pali Surdhar
TEL: +44 1189 880 277
FAX: +44 1189 880 377

HMAC-SHA256 ( Key Size Ranges Tested: KS=BS ) SHS Cert#700

"Becrypt realmode pre-boot implementation of FIPS certified algorithms for use within Becrypt's Product Set for Enterprise Data Security Solutions"

-Ken Basore
TEL: 626-229-9191
FAX: 626-229-9199

"EnCase® Enterprise provides complete network visibility, immediate response and comprehensive, forensic-level analysis of servers and workstations anywhere on a network. The solution can securely investigate/analyze many machines simultaneously over the LAN/WAN at the disk and memory level."

-Lee Cheng
TEL: 415-617-0055
FAX: 415-617-0056

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#697

"Mocana Cryptographic Module is used in conjuction with Mocana's scalable, high performance embedded security solutions. These include: Mocana EAP supplicant/authenticator, Mocana SSL/TLS Client & Server and Mocana IPsec/IKE."

-Y. J. Kim
TEL: 650-623-7076
FAX: 650-625-9751

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#647

"OCTEON CN36XX/38XX - SCP, NSP family of multi-core MIPS64 processors targets intelligent networking, control plane, storage and wireless applications. This processor family with security includes part numbers CN3630SCP, CN3630NSP, CN3830SCP, CN3830NSP, CN3840SCP, CN3840NSP, CN3850SCP, CN3850NSP, CN3860SCP, CN3860NSP."

-Y.J. Kim
TEL: 650-623-7076
FAX: 650-625-9751

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#646

"OCTEON CN31XX - SCP, NSP family of single and multi-core MIPS64 processors targets intelligent networking, control plane, storage and wireless applications. This processor family with security includes part numbers CN3020SCP, CN3110SCP, CN3110NSP, CN3120SCP and CN3120NSP."

-Y.J. Kim
TEL: 650-623-7076
FAX: 650-625-9751

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#645

"OCTEON CN30XX - SCP family of single core MIPS64 processors targets intelligent networking, control plane, storage and wireless applications. This processor family includes part numbers CN3005SCP and CN3010SCP. CPU integrates security HW acceleration including AES-GCM, SHA-2 (up to SHA-512)."

-Basavaraj Bendigeri
TEL: +91-80-4103-3159

-Chandan Mishra

"These are the cryptographic algorithm implementations for the Supervisor 2 modules which are used with Cisco MDS 9500 Series switches."

12/05/07: Update version number;

-Basavaraj Bendigeri
TEL: +91-80-4103-3159

-Chandan Mishra

"These are the cryptographic algorithm implementations for the Supervisor 1 modules which are used with Cisco MDS 9500 Series switches and Cisco MDS 9216i switch."

12/05/07: Update version number;

-Chris Burchett
TEL: 972-458-5407
FAX: 972-458-5454

"Credant Cryptographic Kernel is a FIPS 140-2 compliant, software based cryptography library that implements Triple-DES, AES, SHA-1, HMAC, and ANSI X9.31 RNG algorithms for the Credant Mobile Guardian product. Credant Mobile Guardian enables enterprise-wide control of security for mobile and wireless users of laptops, tablet PC's, PDA's, and SP's."

-Ashot Andreasyan
TEL: 408-991-7533
FAX: 408-991-7599

"The MPC184VMB chip is used in S2500 routers for encrypting and authenticating data path traffic."

-Crypto Competence Center Copenhagen
TEL: +45 4523 4441
FAX: +45 4523 6802

"The IBM CryptoLite for Java (CLiJ) v4 is a Java Cryptographic Extension (JCE) compliant cross-platform software library which provides APIs for the cryptographic functions specified in NSA Suite B."

-Chris Burchett
TEL: 972-458-5407
FAX: 972-458-5454

"Credant Cryptographic Kernel is a FIPS 140-2 compliant software based cryptographic library that implements 3DES, AES, SHA-1, HMAC, and ANSI X9.31 RNG algorithms for the Credant Mobile Guardian product. Credant Mobile Guardian enables enterprise-wide control of security for mobile and wireless users of laptops, tablet PC's, PDA's and smart phones."

-Mark Otto
TEL: 408-447-3422
FAX: 408-447-5525

"The HP Secure Key Manager automates encryption key generation and management. It is a hardened security appliance delivering identity-based access, administration and logging. Additionally, the Secure Key Manager provides reliable lifetime key archival with automatic multi-site key replication and failover capabilities."

12/18/07: Update implementation description;

-Harsha Nagaraja
TEL: 408-754-3010

"Cryptographic Firmware Library provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. Firmware library provides implementations for TDES, AES, SHA1, HMAC, RSA, and RNG(ANSI X9.31)"

-Harsha Nagaraja
TEL: 408-754-3010

"Cryptographic hardware implementation provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. The Hardware provides implementations for TDES, AES, SHA1, HMAC, RSA, RNG(ANSI X9.31), and AES-CCM."

-Harsha Nagaraja
TEL: 408-754-3010

"Cryptographic hardware implementation provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. The Hardware provides implementations for TDES, AES, SHA1, HMAC, RSA, RNG(ANSI X9.31), and AES-CCM."

-Harsha Nagaraja
TEL: 408-754-3010

"Cryptographic hardware implementation provides cryptographic algorithm implementations for purpose built Aruba's Mobility controller. The Hardware provides implementations for TDES, AES, SHA1, HMAC, RSA, RNG(ANSI X9.31), and AES-CCM."

-Kathy Kriese
TEL: 650-295-7692

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#679

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

-Rotem Sela
TEL: +972-4-9078811
FAX: +972-4-9078777

"TrustedFlash(TM) v1.0 - microSD is SanDisk's proprietary TrustedFlash v1.0 advanced security technology. It implements FIPS-Approved algorithms including AES, Triple-DES, RSA, SHA, HMAC, and ANSI X9.31 RNG. They provide authentication, data encryption/decryption, and signature generation/verification functions for TrustedFlash(TM) v1.0 - microSD."

11/16/07: Corrections were made to implementation name and type;

-Ted Fornoles
TEL: 925-474-2602
FAX: 925-251-0642

"Trapeze Networks delivers Smart Mobile WLAN network solutions, enabling govt. agencies and enterprises to deploy and manage scalable, secure, mobile applications. It supports the IEEE 802.11i security specification and wireless IDS, application-aware switching, location tracking, voice and seamless indoor/outdoor mobility."

01/16/08:Change in Version, OE, and Impl Type

-Ted Fornoles
TEL: 925-474-2602
FAX: 925-251-0642

"Trapeze Networks delivers Smart Mobile WLAN network solutions, enabling govt. agencies and enterprises to deploy and manage scalable, secure, mobile applications. It supports the IEEE 802.11i security specification and wireless IDS, application-aware switching, location tracking, voice and seamless indoor/outdoor mobility."

01/16/08:Change in Version, OE, and Impl Type

-Ryon Coleman
TEL: 301-944-1277
FAX: 301-670-6989

-Chris Guo
TEL: 301-944-1294
FAX: 301-670-6989

"The Cryptographic Kernel Library (CKL) is a software module that implements a set of cryptographic algorithms for use by a software application. The 3eTI CKL is a binary dynamic link library that is compiled from source code written in C, C++ with possible assembly language optimization. This binary library resides in Windows kernel space."

-Dennis Maddox
TEL: (434) 455-9591
FAX: (434) 455-6851

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#673

"The M/A-COM Wireless Systems Cryptographic Library is a software-based cryptographic module that provides encryption, authentication, and other security support services to various M/A-Com product applications. It specifically satisfies FIPS 140-2 Level 1 requirements."

-Werner Hoepf
TEL: + 64-3-358-6613

"Firmware Implementation of HMAC SHA-1 used in the Tait Electronics Ltd digital product range"

-Chung Dai
TEL: 408-382-6574
FAX: 408-382-6599

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#670

"CipherMax generic crypto library implementation for all storage security systems including CM140T, CM180D, and CM250/500."

-Ryon Coleman
TEL: 301-944-1277
FAX: 301-670-6989

"The 3eTI Wireless Access Point Cryptographic Firmware Library provides cryptographic algorithm implementations for 3eTI's range of wireless access points. It provides implementations for AES including CCM, TDES, SHA, HMAC, and an approved PRNG."

-Tim Fox
TEL: +44 (0) 1844 201800

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#668

"Thales e-Security implements this algorithm for applications running on its Secure Generic Sub-System (SGSS) providing secure cryptographic resources to products in the Thales e-Security portfolio, including the WebSentry™ family, HSM 8000 family, P3™CM family, 3D Security Module, and the SafeSign® Crypto Module."

09/17/07: Update implementation description;

-Ashot Andreasyan
TEL: (408) 991-7533
FAX: (408) 991-7599

"The crypto component of OpenSSL0.9.8 libarary is used for providing crypto operations on the MPC7457 platform-S6000 router. It is used for encrypting critical security parameters and protocol messages, calculating message digest, authenticating a user, and generating cryptographic keys and key encryption keys."

-Ashot Andreasyan
TEL: (408) 991-7533
FAX: (408) 991-7599

"The crypto component of OpenSSL0.9.8 library is used for providing crypto operations on the MPC862 platform-S2500 router. It is used for encrypting critical security parameters and protocol messages, calculating message digest, authenticating a user, and generating cryptographic keys and key encryption keys."

-Ben Davis
TEL: 760-476-4202
FAX: 760-929-3941

"The ViaSat Enhanced Bandwidth Efficient Modem (EBEM-500) series Satcom Modem provides the latest in efficient modulation and coding for point-to-point Satcom connections. The EBEM-500 series offers embedded encryption integrating the security functions into the modem to provide an integrated secure Satcom modem product."

-Mike Hambidge
TEL: 210-308-8267
FAX: 210-690-8824

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#666

"The GlobalSCAPE® Cryptographic Module provides cryptographic services for the GlobalSCAPE family of software products such as Secure FTP Server and EFT Server. The services include symmetric/asymmetric encryption/decryption, digital signatures, message digest, message authentication, random number generation, and SSL/TLS support."

11/21/07: Update implementation version;

-Vivek Gupta
TEL: 301-548-1292

"The Hughes Crypto Kernel (HCK) for Hughes HN and HX systems enables end-to-end bidirectional encryption between a remote site and the enterprise data center, while still allowing the use of satellite acceleration and other HN and HX features. The HCK uses AES for encryption and IKE to auto-generate and refresh session keys."

-Crypto Competence Center Copenhagen
TEL: +45 4523 4441
FAX: +45 4523 6802

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#663

"IBM CryptoLite for C (CLiC) is a C software package providing advanced cryptographic services in a configurable footprint. CLiC supports NSA Suite B encryption and ordinary public key encryption, digital signatures, symmetric ciphers, hash functions, message authentication codes, and other cryptographic services with a simple programming interface."

-Alan Kaye
TEL: 613-225-9381 x416
FAX: 613-225-2951

-Yannick Dubuc
TEL: 604-430-1063 x907
FAX: 613-430-1286

"The firmware implementation of the Fortinet FIPS Cryptographic Library v3.1 runs on an Intel x86 compatible processor using the FortiOS."

-Alan Kaye
TEL: 613-225-9381 x416
FAX: 613-225-2951

-Yannick Dubuc
TEL: 604-430-1063 x907
FAX: 613-430-1286

"The firmware implementation of the Fortinet SSL Cryptographic Library v3.1 runs on an Intel x86 compatible processor using the FortiOS."

-Alan Kaye
TEL: 613-225-9381 x416
FAX: 613-225-2951

-Yannick Dubuc
TEL: 604-430-1063 x907
FAX: 613-430-1286

"The hardware implementation of the FortiASIC Hardware Accelerated Cryptographic Library as implemented in the FortiASIC version CP-6"

-Shaun Lee
TEL: +44 (0)118-924-3860
FAX: +44 (0)118-924-3171

"The Oracle Cryptographic Libraries for SSL 10g is a generic module used by the Oracle Corporation to provide cryptography, authentication, PCS and certificate mangagement in a variety of its application suites."

-Bill McIntosh
TEL: 813-288-7388

HMAC-SHA256 ( Key Size Ranges Tested: KS=BS ) SHS Cert#656

"The Fortress Secure Client is a software module designed to deliver security on wireless devices such as bar scanners, handhelds, and laptops using various operating systems. A plug-and-play solution, the Client encrypts and decrypts communication across the WLAN and protects the device against attacks without user intervention."

-Shryl Tidmore
TEL: (469) 524-2681
FAX: (972) 953-2691

-Terrence Shaw
TEL: (469) 524-2413
FAX: (972) 953-2816

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#655

"Sterling Crypto-C is a software module implemented as two dynamic libraries. Sterling Crypto-C provides security capabilities, such as encryption, authentication, and signature generation and verification for Sterling Commerce’s managed file transfer solutions."

11/20/07: Update implementation version;

-Douglas Clark
TEL: 203-924-3206
FAX: 203-924-3406

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#650

"The Pitney Bowes Cygnus X-3 Postal Security Device (PSD) complies with FIPS 140-2 and IPMAR standards to support the USPS IBIP and international digital indicia standards globally. The PSD employs strong cryptographic and physical security techniques for the protection of customer funds in Pitney Bowes Postage Metering products."

-Douglas Song
TEL: 650-372-1313

"The Common Core Library provides an interface to the client developers for crypto programming and supports TriCipher's Client software during normal crypto operations."

-Marcus Streets
TEL: +44 1223 723600
FAX: +44 1223 723601

-Mark Wooding
TEL: +44 1223 723600
FAX: +44 1223 723601

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#648

"The nCipher algorithm library provides cryptographic functionality for nCipher's nShield Hardware Security Modules."

-Brian Manfield
TEL: (408) 853-5469
FAX: (408) 853-3529

"The Cisco LWAPP Aironet 1131, 1242 access points deliver the versatility, high capacity, security, and enterprise-class features required for small, medium and large Government deployments. In FIPS 140-2 mode of operation, the Cisco APs support the IEEE 802.11i and IEEE 802.1x standards and Advanced Encryption Standard (AES) for WPA2 encryption."

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-5074230

-Randy Tsang
TEL: 905-507-4220
FAX: 905-507-4230

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#641

"Security Builder GSE-C provides application developers with cryptographic tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom's PKI, IPSec, SSL and DRM modules."

01/15/08: Update implementation version;

-Eric Murray
TEL: 650-261-2400
FAX: 650-261-2401

"The Ingrian Networks DataSecure appliance is a dedicated hardware product that is designed specifically for security and cryptographic processing."

-Victor Elkonin
TEL: 301-216-3805
FAX: 301-519-8001

"Snapsoft is a voice and data security solution for GSM and CDMA based Smartphones. Available as a software download for Commercial Off-the-Shelf Smartphones, Snapsoft is completely unobtrusive, eliminating the need for a hardware dongle or dedicated handset. Snapsoft also provides a solution for data at rest and data in motion."

-Patrick Parker
TEL: 805-497-0955
FAX: 866-462-3980

"The Xirrus Wireless LAN Array represents the next generation in enterprise wireless LAN architecture - combining the functionality of a WLAN switch and Integrated Access Points (IAPs) in a single device. The WLAN Array delivers Gigabit-class Wi-Fi bandwidth to an extended coverage area simplifying the wireless LAN setup, deployment and management."

-Brian Mansfield
TEL: (408) 853-5469

"Cisco Secure ACS FIPS Module is a software library that supports WPA2 security and is contained within a defined cryptographic boundary. It provides FIPS 140-2 validated support for EAP-TLS, EAP-FAST, PEAP and AES key wrap for 802.11i PMK transfer."

-Rick Orsini
TEL: 949-858-7525 x 80
FAX: 949-858-7092

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#631

"A software cryptographic module supporting encrypting, authentication, and data redundancy techniques."

1/16/08: Update OE because of spelling error;

-Chris Romeo
TEL: 919-392-0512
FAX: 919-640-1019

"The market-leading Cisco ASA Security Appliance Series deliver robust user and application policy enforcement, and secure connectivity services in cost-effective, easy-to-deploy solutions. Cisco ASA 5500 Series Adaptive Security Appliances provide comprehensive security, performance, and reliability for network environments of all sizes."

-Nathalie Tortellier
TEL: +33 1 45 36 30 72
FAX: +33 1 45 36 30 10

"New Generation Neopost Postal Secure Device."

-Diane Hunter
TEL: 919-954-7300
FAX: 919-954-7500

-Harry Taji
TEL: +962 65824941
FAX: +962 65844950

"A cryptographic algorithm library developed for TL905 module that includes implementations of: AES block cipher that works in ECB and OFB modes, ANSI X9.31 RNG based on AES and HMAC-SHA-1 hashed MAC function."

-Dave Friant
TEL: (425) 704-7984
FAX: (425) 936-7329

-Kelvin Yu
TEL: (425) 703-4612
FAX: (425) 936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#618

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

-Dave Friant
TEL: (425) 704-7984
FAX: (425) 936-7329

-(425) 936-7329
TEL: (425) 703-4612
FAX: (425) 936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#618

"The Microsoft Windows Cryptographic Primitives Library is a general purpose, software-based, cryptographic module which can be dynamically linked into applications by developers to permit the use of FIPS 140-2 Level 1 compliant cryptography."

-Security Certifications Team
TEL: (519) 888-7465
FAX: (519) 888-7465

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#626

"BlackBerry is the leading wireless enterprise solution that allows users to stay connected with secure, wireless access to email, corporate data, phone, web and organizer features. BlackBerry is a totally integrated package that includes hardware, software and service, providing a complete end-to-end solution."

-James Blaisdell
TEL: 415-617-0055
FAX: 415-617-0056

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#625

"The Mocana Device Security Framework includes: Certificate Management, EAP supplicant and pass-thru/standalone authenticator, RADIUS, SSL/TLS Server and Client, SSH Server and Client and IPSec/IKE/IKEv2/MOBIKE/VPN. Free evaluation available at www.mocana.com/evaluate.html"

-Brian Mansfield
TEL: (408) 853-5469
FAX: (408) 853-3529

"The Cisco 4400 Series Wireless LAN Controllers provide centralized control and scalability for medium to large-scale Government and Enterprise wireless LAN networks and support the IEEE 802.11i wireless security standard in conjunction with meeting the Wi-Fi Alliances interoperability specification WPA2 to enable a Secure Wireless Architecture."

-Mark Hanson
TEL: (651) 628-1633
FAX: (651) 628-2701

-Steve Marquess
TEL: 301-524-9915

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#617

"The Cryptographic Library for SecureOS® is a library for software providing cryptographic services for applications on versions of Sidewinder G2® Security Applicance™ and Sidewinder G2 Enterprise Manager™."

06/04/07: Add new OES;

-Terry Fletcher
TEL: 613-221-5009
FAX: 613-723-5079

-Laurie Smith
TEL: 613-221-5026
FAX: 613-723-5079

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#616

"The Luna Cryptographic Firmware Library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module's firmware and associated co-processor."

-Bill McIntosh
TEL: 813 288-7388 x117
FAX: 813 288-7389

-Joe Gandiosi
TEL: 813 288-7388 x163
FAX: 813 2880-7389

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#615

"The Fortress Suite of Algorthms (AES, 3DES, SHA, HMAC and RNG) will execute on a gateway to provides security to the corporate network by protecting communications between wireless devices and the rest of the network."

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-5074230

-Randy Tsang
TEL: 905-507-4220
FAX: 905-507-4220

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#614

"Security Builder GSE-C provides application developers with cryptographic tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom's PKI, IPSec, SSL and DRM modules."

-Tolga Acar
TEL: (425) 706-0538
FAX: (425) 936-7329

-Dave Friant
TEL: (425) 704-7984
FAX: (425) 936-7329

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#613

"The Microsoft Enhanced Cryptographic Provider, designed for FIPS 140-2 compliance, is a software-based cryptographic module. RSAENH encapsulates several different cryptographic algorithms in a cryptographic module accessible via the Microsoft CryptoAPI."

-Atsushi Yamada
TEL: 905-501-3884
FAX: 905-5074230

-Randy Tsang
TEL: 905-507-4220
FAX: 905-507-4230

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHS Cert#612

"Security Builder GSE-C provides application developers with cryptographic tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom's PKI, IPSec, SSL and DRM modules."

01/15/08: Update implementation version;

-Tolga Acar
TEL: (425) 706-0538
FAX: (425) 936-7329

-Dave Friant
TEL: (425) 704-7984
FAX: (425) 936-7329

"Microsoft Corporation's Windows Server 2003 Kernel Mode Module (FIPS.SYS) is a general-purpose, software-based cryptographic module residing at the Kernel Mode level of the Windows OS. It runs as a kernel mode export driver and encapsulates several different cryptographic algorithms in a module accessible by other kernel mode drivers."

-Bill Mcintosh
TEL: 813-288-7388

HMAC-SHA256 ( Key Size Ranges Tested: KS>BS ) SHS Cert#609

"The Fortress Secure Client Bridge provides authenticated, encrypted communication between a Fortress-secured network and any device that cannot, by itself, run the Fortress Secure Client Software."

-Stefan Kotes
TEL: 650-216-2082
FAX: 650-216-2565

"The Tumbleweed Security Kernel is a software module implemented as two dynamic libraries that provide all security functionalities for several products of Tumbleweed Communications Corp., including Validation Authority, SecureTransport, and MailGate."

-Gang Qing
TEL: +86-10-62218877 x231
FAX: +86-10-62264566

-Lina Ma
TEL: +86-10-62218877 x910
FAX: +86-10-62264566

"The CDCS2000 SM Cryptography Implementation is part of SM in CDCS2000. The Cryptography Implementation provides an Application Programming Interface (API) to support all secruity-relevent services of SM in CDCS2000. The implementation is based on the OpenSSL FIPS module(version 1.1.1)."

-Chris Romeo
TEL: 919-392-0512
FAX: 919-392-0512

"The market-leading Cisco PIX and ASA security appliances deliver robust user and application policy enforcement and secure connectivity services in cost-effective, easy-to-deploy solutions. Cisco PIX and ASA security appliances provide comprehensive security, performance, and reliability for network environments of all sizes."

06/28/07: Update version number, existing OES' and add new OES';

-Bill Mcintosh
TEL: 813-288-7388

HMAC-SHA256 ( Key Size Ranges Tested: KS>BS ) SHS Cert#605

"The Fortress Secure Client Bridge provides authenticated, encrypted communication between a Fortress-secured network and any device that cannot, by itself, run the Fortress Secure Client Software."

-Eric Masyk
TEL: 650-798-5820
FAX: 650-475-5001

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#604

"The ACE Encryption Engine allows virtual machines to be encapsulated into files which can be saved, copied, and provisioned. VMware Software Cryptographic Implementation is the kernel implementation that enables the VMware ACE application to perform its cryptographic functions such as hashing, encryption, digital signing, etc."

-Eric Masyk
TEL: 650-798-5820
FAX: 650-475-5001

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#603

"The ACE Encryption Engine allows virtual machines to be encapsulated into files which can be saved, copied, and provisioned. VMware Software Cryptographic Implementation is the kernel implementation that enables the VMware ACE application to perform its cryptographic functions such as hashing, encryption, digital signing, etc."

-Rose Quijano-Nguyen
TEL: 408-473-1313
FAX: 408-473-1307

-Landon Curt Noll
TEL: 408-473-1342
FAX: 408-473-1307

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#602

"CryptoStor KeyVault uses C++ classes built on OpenSSL for routine cryptographic operations. Supported algorithms are AES (128-bit,192-bit, and 256-bit), Triple DES (118-bit and 168-bit), RSA,and SHA512. This enables the CryptoStor KeyVault product to use an open source solution for crytography that is FIPS 140-2 certified."

-Tim Stahlke
TEL: 408-936-7261

"The Juniper Networks Secure Services Gateway 500 Series (SSG) represents a new class of purpose-built security appliance that delivers a perfect mix of performance, security and LAN/WAN connectivity for regional and branch office deployments."

-Tim Stahlke
TEL: 408-936-7261

"The Juniper Networks Secure Services Gateway 5 (SSG 5) and Secure Services Gateway 20 (SSG 20) are purpose-built security appliances that deliver a perfect blend of performance, security and LAN\WAN connectivity for small branch office and small business deployments."

-Tim Stahlke
TEL: 408-936-7621

"The Juniper Networks NetScreen NS5GT is an Internet security device that integrates firewall, virtual private networking (VPN), and traffic shaping functions."

-Stefan Kotes
TEL: 650-216-2082
FAX: 650-216-2565

"The Tumbleweed Security Kernel is a software module implemented as two dynamic libraries that provide all security functionalities for several products of Tumbleweed Communications Corp., including Validation Authority, SecureTransport, and MailGate."

-Michele Borovac
TEL: 650-413-6700
FAX: 650-413-6790

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#596

"Decru's Storage Encryption Processor (SEP) is the primary cryptographic and key management engine for the Decru LKM (Lifetime Key Management) appliance."

10/22/07: Update vendor POC information;

-Michele Borovac
TEL: 650-413-6700
FAX: 650-413-6790

"Decru's Storage Encryption Processor (SEP) is the primary cryptographic and key management engine for the Decru LKM (Lifetime Key Management) appliance."

10/22/07: Update vendor POC information;

-Yeou-Fuh Kuan
TEL: +886-3-424-4333
FAX: +886-3-424-4333

-Char-Shin Miou
TEL: +886-3-424-4381
FAX: +886-3-424-4129

"The HICOS PKI Smart Card Library is a set of cryptographic functions that perform ncryption/Decryption, Key Generation, and Signature operations for the HICOS PKI Smart Card"

-Jean-Philippe Viollet
TEL: 818-562-1101
FAX: 818-562-1109

-Camille Rizko
TEL: 818-562-1101
FAX: 818-562-1109

"An implementation of the HMAC algorithm for use in Doremi DCP-2000 Digital Cinema Server media block."

-Matthew Robinson
TEL: (415) 558-0200
FAX: (415) 645-4000

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#592

"OpenSSL crypto subsystem for MicroBlaze."

-Tim Stahlke
TEL: 4089367261

"The Juniper Networks NetScreen-200 series includes two enterprise network products: the NetScreen-204 appliance with four 10/100 interfaces, and the NetScreen-208 appliance with eight 10/100 interfaces."

-Tim Stahlke
TEL: 408-936-7261

"The Juniper Networks NetScreen-500 system is a purpose-built, integrated security system that provides a flexible, high-performance solution for medium and large enterprise central sites and service providers."

-Ganapathy Raman
TEL: 425-707-3658

-Katharine Holdsworth
TEL: 425-706-7923

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#589

"Microsoft Windows CE and Windows Mobile Enhanced Cryptographic Provider (RSAENH) is a general-purpose, software-based, cryptographic module for Windows CE and Windows Mobile. It can be dynamically linked into applications by software developers to permit the use of general-purpose cryptography."

10/30/07: Add new OEs;

-Tim Stahlke
TEL: 408-936-7261

"The Juniper Networks NetScreen ISG-1000 and ISG-2000 are Internet security devices that integrate firewall, virtual private networking (VPN), and traffic shaping functions."

-Tim Stahlke
TEL: 408-936-7261

"The Juniper Networks NetScreen-5000 series is a line of purpose-built, high-performance firewall/VPN security systems designed to deliver a new level of high-performance capabilities for large enterprise, carrier, and data center networks."

-Dr. Christian Tobias
TEL: +49 6171 88 1711
FAX: +49 6171 88 1933

-Utimaco US Corporate Headquarters
TEL: 508- 543-1008
FAX: 508- 543-1009

HMAC-SHA256 ( Key Size Ranges Tested: KS<BS ) SHS Cert#584

"The SafeGuard Cryptographic Engine (SGCE) HMAC Library is a FIPS 198 compliant software implementation of HMAC-SHA-256 that is used in all Utimaco Safeware's products listed in the security policy document."

-Terry Fletcher
TEL: 613-221-5009
FAX: 613-723-5079

-Laurie Smith
TEL: 613-221-5026
FAX: 613-723-5079

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#581

"The Luna IS Cryptographic Library provides a broad suite of high-performance cryptographic operations. All cryptographic algorithms are implemented within the module's firmware and associated co-processor."

-Al Hawtin
TEL: 613-254-5456 x102
FAX: 613-254-7260

-Russ Baker
TEL: 613-254-54356 x112
FAX: 613-254-7260

HMAC-SHA512 ( Key Size Ranges Tested: KS>BS ) SHSCert#580

"Ellipsys is a C software package with cryptographic capabilities in a configurable format. It supports public key encryption, symmetric ciphers, hash functions, message authentication through a simple API. Ellipsys is efficient and portable for embedded applications implemented in software or leveraging hardware offload engines."

-Terry Fletcher
TEL: 613.221.5009
FAX: 613.723.5079

-Laurie Smith
TEL: 613.221.5026
FAX: 613.723.5079

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS>BS ) SHSCert#579

"The Luna(r) PCM/CA4 offer hardware key management and cryptographic operations to protect sensitive keys. Keys may be backed up and can be protected in software using a FIPS approved algorithm or replicated on one or more CA4 tokens."

-Klorida Miraj
TEL: 425-421-5229

-Katharine Holdsworth
TEL: 425-706-7923

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#578

"Microsoft Windows CE and Windows Mobile Enhanced Cryptographic Provider (RSAENH) is a general-purpose, software-based, cryptographic module for Windows CE and Windows Mobile. It can be dynamically linked into applications by software developers to permit the use of general-purpose cryptography."

04/02/08: Add New OE and update the vendor information;

-Rose Quijano-Nguyen
TEL: +1 408-473-1313
FAX: +1 408-473-1307

-Landon Curt Noll
TEL: +1 408-473-1342
FAX: +1 408-473-1307

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS ) SHSCert#577

"The CryptoStor Cryptographic Library v2.5 provides encryption services performed through software for NeoScale's CryptoStor family of products"

-Sheila Johnson
TEL: 805-583-2874
FAX: 805-583-0124

-Scott Uroff
TEL: scott_u@xypro.com
FAX: 805-583-0124

"The XYGATE /ESDK is a general purpose library that provides symmetric key encryption, hashing algorithms, public key encryption, digital signature algorithms, secure session protocols, and secure e-mail protocols."

-Stig Ame Olsen
TEL: +47 98290058
FAX: +47 67125234

"The TANDBERG MXP Codec Cryptography Implementation is part of the firmware for the TANDBERG MXP Codec. The Cryptography Implementation provides an Application Programming Interface (API) to support all security-relevent services of the TANDBERG MXP Codec."

03/30/07: Update the OE and description;

-Bill McIntosh
TEL: 813-288-7388

HMAC-SHA256 ( Key Size Ranges Tested: KS>BS ) SHS Cert#573

"SHA-256 and HMAC-SHA256 implementation for the Fortress Client Algorithm suite."

-Pankag Agrawal
TEL: 303-583-5490

"Embedded system board for encrypting/decrypting data in a wireless VOIP telephone environment."

-Terry Fletcher
TEL: 613.221.5009
FAX: 613.723.5079

-Laurie Smith
TEL: 613.221.5026
FAX: 613.723.5079

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS>BS ) SHSCert#570

"The Luna(r) PCM/CA4 offer hardware key management and cryptographic operations to protect sensitive keys. Keys may be backed up and can be protected in software using a FIPS approved algorithm or replicated on one or more CA4 tokens."

-Wei Dai
TEL: 425-562-9677

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#569

"The Crypto++ Library is a free, open source C++ class library providing public key encryption, digital signatures, symmetric ciphers, hash functions, message authentication codes, and other cryptographic algorithms. Both 32-bit and 64-bit variants of the dynamic link library (DLL) are FIPS 140-2 Level 1 validated."

-Jacqueline Wilson
TEL: 512-838-2702
FAX: 512-838-3509

-Martin Clausen
TEL: +45 45 23 33 38

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#568

"IBM CryptoLite for C is a C software package providing advanced cryptographic services in a configurable footprint. CryptoLite supports public key encryption, digital signatures, symmetric ciphers, hash functions, message authentication codes, and other cryptographic algorithms through a simple programming interface."

-Jeffrey Ward
TEL: 781 993 4679

"Check Point's VPN-1 module running on Nokia's IPSO security hardened operating system"

-Atsushi Yamada
TEL: (905) 501-3884
FAX: (905) 507-4230

-Randy Tsang
TEL: (905) 507-4220
FAX: (905) 507-4230

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#566

"Security Builder GSE-C provides application developers with cryptographic tools to easily integrate encryption, digital signatures and other security mechanisms into C-based apps for FIPS 140-2 and Suite B security. It can also be used with Certicom's PKI, IPSec, SSL and DRM modules."

-Patrick Offers
TEL: 613-254-5456 x101
FAX: 613-254-7260

-Neil Hamilton
TEL: 613-254-5456 x108
FAX: 613-254-7260

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS ) SHSCert#565

"Elliptic cryptographic algorithms implemented in Verilog RTL offer customers a wide range of configuration options for encryption, decryption and message authentication requirement. The HMAC/SHA core is build time configurable to optimize throughput versus gate count to meet the requirements for the target application."

-Jeffrey Ward
TEL: 781 993 4679

"Nokia security hardened operating system"

-Xavier Chaillot
TEL: 514-281-5551 x261
FAX: 514-281-9958

-Glen Matthews
TEL: 514-281-5551 x257
FAX: 514-281-9958

HMAC-SHA512 ( Key Size Ranges Tested: ) SHSCert#563

"The Cryptographic Module supports Connectivity Software such as FTP for Windows, HostExplorer, Exceed, and Connectivity Secure Shell. The cryptographic capabilities of the library are used to implement encryption and decryption services, as well as protocols such as SSL and SSH. The implementation is based on the OpenSSL code base."

-Douglas Clark
TEL: (203) 924-3206
FAX: (203) 924-3406

"The PB Cygnus X-2 PSD is in compliance with FIPS 140-2 and IPMAR security protection profile and supports the USPS IBIP and international indicia standards. The PSD employs strong encryption, decryption, and digital signature techniques for the protection of customer funds in PB Postage Metering products."

-Bruce Berlage
TEL: 240-686-3300
FAX: 240-686-3301

"The MTM-203 Cryptographic Module, designed for FIPS 140-2 compliance, offers secure, near real-time, over-the-air communications. The MTM 203 implements the following FIPS Approved Functions Three-key Triple DES"

-Kathy Kriese
TEL: 650.295.7692

HMAC-SHA512 ( Key Size Ranges Tested: KS<BS   KS=BS   KS>BS ) SHSCert#560

"RSA BSAFE® Crypto-C ME software is designed to help protect sensitive data as it is stored using strong encryption techniques to provide a persistent level of protection. The software supports a wide range of industry standard encryption algorithms offering developers the flexibility to choose the appropriate option to meet their requirements."

-Kathy Kriese
TEL: 650-295-7692