kbrain

Microsoft Windows Server 2008 Cryptographic Primitives Library (bcrypt.dll)

Microsoft Corporation - FIPS 140 #1008

historicalLevel 1

BCRYPT.DLL provides cryptographic services, through its documented interfaces, to Windows Vista components and applications running on Windows Vista. The cryptographic module, BCRYPT.DLL, encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible via the Microsoft CNG (Cryptography, Next Generation) API. It can be dynamically linked into applications by software developers to permit the use of general-purpose FIPS 140-2 compliant cryptography.

Key facts

Scheme
FIPS 140
Certificate
1008
Standard
FIPS 140-2
Security level
Level 1
Status
historical
Vendor
Microsoft Corporation
Module type
Software
Embodiment
Multi-Chip Stand Alone
Lab
SAIC-VA
First validated
August 15, 2008
Versions
6.0.6001.22202, 6.0.6002.18005 and 6.0.6002.22872
Caveat
When operated in FIPS mode with Code Integrity (ci.dll) validated to FIPS 140-2 under Cert. #1006 operating in FIPS mode

Algorithms

  • AES
  • DSA
  • ECDSA
  • HMAC
  • RNG
  • RSA
  • SHS
  • Triple-DES

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Certificates it builds on

  • 1006
  • 357
  • 756
  • 82

Certificate ids found in this certificate's documents (automated extraction).

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain