Microsoft Windows Server 2008 R2 Kernel Mode Cryptographic Primitives Library (cng.sys)
Microsoft Corporation - FIPS 140 #1335
CNG.SYS runs as a kernel mode export driver, and provides cryptographic services, through their documented interfaces, to Windows Server 2008 R2 kernel components. It supports several cryptographic algorithms accessible via a FIPS function table request irp (I/O request packet).
Key facts
- Scheme
- FIPS 140
- Certificate
- 1335
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- August 12, 2010
- Versions
- 6.1.7600.16385, 6.1.7600.16915, 6.1.7600.21092, 6.1.7601.17514, 6.1.7601.17919, 6.1.7601.17725, 6.1.7601.21861 and 6.1.7601.22076
- Caveat
- When operated in FIPS mode with Windows Server 2008 R2 Winload OS Loader (winload.exe) validated to FIPS 140-2 under Cert. #1333 operating in FIPS mode
Algorithms
- AES
- AES GCM
- AES GMAC
- DRBG
- ECDSA
- HMAC
- RNG
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2009-3103HIGH 10.0EPSS 92.3%
- CVE-2009-2532HIGH 10.0EPSS 62.2%
- CVE-2009-1216HIGH 10.0EPSS 24.5%
- CVE-2009-0568HIGH 10.0EPSS 32.4%
- CVE-2009-0086HIGH 10.0EPSS 14.1%
- CVE-2008-4038HIGH 10.0EPSS 39.2%
- CVE-2010-3227HIGH 9.3EPSS 20.8%
- CVE-2009-0081HIGH 9.3EPSS 32.1%
- CVE-2008-3013HIGH 9.3EPSS 52.1%
- CVE-2009-0230HIGH 9.0EPSS 34.9%
- CVE-2009-2493HIGH 8.8EPSS 37.8%
- CVE-2009-0231HIGH 8.8EPSS 37.5%
- CVE-2008-4269HIGH 8.5EPSS 20.5%
- CVE-2008-4268HIGH 8.5EPSS 20.7%
- CVE-2008-4036HIGH 8.4EPSS 1.5%
- CVE-2018-8641HIGH 7.8EPSS 1.1%
- CVE-2010-4669HIGH 7.8EPSS 29.1%
- CVE-2009-2526HIGH 7.8EPSS 81.9%
- CVE-2009-0082HIGH 7.8EPSS 1.4%
- CVE-2011-1229HIGH 7.2EPSS 1.5%
- CVE-2009-0083HIGH 7.2EPSS 1.5%
- CVE-2009-0078HIGH 7.2EPSS 2.7%
- CVE-2008-2252HIGH 7.2EPSS 1.9%
- CVE-2008-2251HIGH 7.2EPSS 1.5%
- CVE-2008-2250HIGH 7.2EPSS 1.6%
- CVE-2008-1084HIGH 7.2EPSS 6.8%
- CVE-2009-0085HIGH 7.1EPSS 15.2%
- CVE-2009-0080MEDIUM 6.9EPSS 2.4%
- CVE-2012-1194MEDIUM 6.4EPSS 9.7%
- CVE-2009-0234MEDIUM 6.4EPSS 34.4%
- CVE-2007-6753MEDIUM 6.2EPSS 1.8%
- CVE-2009-0233MEDIUM 5.8EPSS 27.1%
- CVE-2018-0975MEDIUM 5.5EPSS 2.9%
- CVE-2018-0974MEDIUM 5.5EPSS 3.4%
- CVE-2018-0973MEDIUM 5.5EPSS 3.4%
- CVE-2018-0972MEDIUM 5.5EPSS 3.4%
- CVE-2018-0971MEDIUM 5.5EPSS 3.4%
- CVE-2018-0970MEDIUM 5.5EPSS 3.4%
- CVE-2018-0969MEDIUM 5.5EPSS 3.4%
- CVE-2018-0968MEDIUM 5.5EPSS 3.5%
- CVE-2018-0960MEDIUM 5.5EPSS 1.8%
- CVE-2018-0887MEDIUM 5.5EPSS 1.8%
- CVE-2009-0094MEDIUM 5.5EPSS 23.5%
- CVE-2008-1441MEDIUM 5.4EPSS 19.7%
- CVE-2010-0025MEDIUM 5.0EPSS 21.5%
- CVE-2010-0024MEDIUM 5.0EPSS 10.7%
- CVE-2017-11852MEDIUM 4.7EPSS 2.2%
- CVE-2017-11831MEDIUM 4.7EPSS 3.3%
- CVE-2017-0175MEDIUM 4.7EPSS 7.0%
and 6 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 1333
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain