Microsoft Windows 7 Kernel Mode Cryptographic Primitives Library (cng.sys)
Microsoft Corporation - FIPS 140 #1328
CNG.SYS runs as a kernel mode export driver, and provides cryptographic services, through their documented interfaces, to Windows 7 kernel components. It supports several cryptographic algorithms accessible via a FIPS function table request irp (I/O request packet).
Key facts
- Scheme
- FIPS 140
- Certificate
- 1328
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- August 12, 2010
- Versions
- 6.1.7600.16385, 6.1.7600.16915, 6.1.7600.21092, 6.1.7601.17514, 6.1.7601.17919, 6.1.7601.17725, 6.1.7601.21861 and 6.1.7601.22076
- Caveat
- When operated in FIPS mode with Windows 7 Winload OS Loader (winload.exe) validated to FIPS 140-2 under Cert. #1326 operating in FIPS mode
Algorithms
- AES
- AES GCM
- AES GMAC
- DRBG
- ECDSA
- HMAC
- RNG
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2019-0708CRITICAL 9.8KEVEPSS 100.0%
- CVE-2017-8543CRITICAL 9.8KEVEPSS 74.2%
- CVE-2015-1635CRITICAL 9.8KEVEPSS 100.0%
- CVE-2021-40444HIGH 8.8KEVEPSS 97.8%
- CVE-2020-1020HIGH 8.8KEVEPSS 65.0%
- CVE-2019-0903HIGH 8.8KEVEPSS 21.7%
- CVE-2018-0824HIGH 8.8KEVEPSS 73.2%
- CVE-2017-8464HIGH 8.8KEVEPSS 90.0%
- CVE-2016-7256HIGH 8.8KEVEPSS 64.6%
- CVE-2015-2426HIGH 8.8KEVEPSS 86.6%
- CVE-2015-2360HIGH 8.8KEVEPSS 14.8%
- CVE-2014-6332HIGH 8.8KEVEPSS 94.9%
- CVE-2014-6324HIGH 8.8KEVEPSS 87.3%
- CVE-2014-4148HIGH 8.8KEVEPSS 59.9%
- CVE-2014-1812HIGH 8.8KEVEPSS 64.9%
- CVE-2013-3918HIGH 8.8KEVEPSS 73.7%
- CVE-2011-3402HIGH 8.8KEVEPSS 78.1%
- CVE-2015-2546HIGH 8.2KEVEPSS 10.1%
- CVE-2022-26925HIGH 8.1KEVEPSS 10.5%
- CVE-2022-41073HIGH 7.8KEVEPSS 2.4%
- CVE-2022-41033HIGH 7.8KEVEPSS 1.9%
- CVE-2022-37969HIGH 7.8KEVEPSS 28.3%
- CVE-2022-34713HIGH 7.8KEVEPSS 67.8%
- CVE-2022-30190HIGH 7.8KEVEPSS 99.2%
- CVE-2022-24521HIGH 7.8KEVEPSS 7.1%
- CVE-2022-22718HIGH 7.8KEVEPSS 18.5%
- CVE-2022-22047HIGH 7.8KEVEPSS 18.8%
- CVE-2022-21999HIGH 7.8KEVEPSS 41.0%
- CVE-2021-43226HIGH 7.8KEVEPSS 3.3%
- CVE-2021-40449HIGH 7.8KEVEPSS 74.1%
- CVE-2021-36955HIGH 7.8KEVEPSS 4.1%
- CVE-2021-34484HIGH 7.8KEVEPSS 21.8%
- CVE-2021-31979HIGH 7.8KEVEPSS 4.5%
- CVE-2021-31956HIGH 7.8KEVEPSS 22.3%
- CVE-2021-1675HIGH 7.8KEVEPSS 85.3%
- CVE-2020-17087HIGH 7.8KEVEPSS 5.4%
- CVE-2020-1464HIGH 7.8KEVEPSS 38.9%
- CVE-2020-1027HIGH 7.8KEVEPSS 4.5%
- CVE-2020-0938HIGH 7.8KEVEPSS 69.0%
- CVE-2020-0787HIGH 7.8KEVEPSS 42.5%
- CVE-2020-0683HIGH 7.8KEVEPSS 7.6%
- CVE-2019-1458HIGH 7.8KEVEPSS 74.4%
- CVE-2019-1405HIGH 7.8KEVEPSS 30.2%
- CVE-2019-1388HIGH 7.8KEVEPSS 8.6%
- CVE-2019-1315HIGH 7.8KEVEPSS 3.5%
- CVE-2019-1215HIGH 7.8KEVEPSS 19.3%
- CVE-2019-1214HIGH 7.8KEVEPSS 1.4%
- CVE-2019-1132HIGH 7.8KEVEPSS 9.9%
- CVE-2019-0863HIGH 7.8KEVEPSS 5.2%
- CVE-2019-0859HIGH 7.8KEVEPSS 4.2%
and 950 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 1326
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain