Security Builder FIPS Java Module
Certicom Corp. - FIPS 140 #3391
The Security Builder FIPS Java Module is a standards-based cryptographic toolkit written in Java. It supports optimized Elliptic Curve Cryptography and provides application developers with sophisticated tools to flexibly integrate encryption, digital signatures and other security mechanisms into Java-based applications. The Security Builder FIPS Java Module is intended for use by developers who want government level security and can also be used in conjunction with other Certicom developer toolkits including Security Builder PKI and Security Builder SSL.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3391
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Status reason
- SP 800-56Arev3 transition
- Vendor
- Certicom Corp.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- EWA - Canada
- First validated
- March 6, 2019
- Versions
- 2.9[1], 2.9.2[2]
- Caveat
- When operated in FIPS mode. The module generates cryptographic keys whose strengths are modified by available entropy
- Level exceptions
- Physical Security: N/A
Algorithms
- AES
- DRBG
- DSA
- ECDSA
- HMAC
- KAS
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CAVP algorithm certificates (54)
- AES 3988
- AES 4299
- AES 4300
- AES 5539
- AES 5608
- AES 5609
- DRBG 1180
- DRBG 1359
- DRBG 1360
- DRBG 2194
- DRBG 2250
- DRBG 2251
- DSA 1084
- DSA 1142
- DSA 1143
- DSA 1421
- DSA 1443
- DSA 1444
- ECDSA 1009
- ECDSA 1010
- ECDSA 1490
- ECDSA 1518
- ECDSA 1519
- ECDSA 884
- HMAC 2603
- HMAC 2835
- HMAC 2836
- HMAC 3690
- HMAC 3741
- HMAC 3742
- KAS 190
- KAS 193
- KAS 194
- KAS 83
- KAS 98
- KAS 99
- RSA 2046
- RSA 2320
- RSA 2321
- RSA 2972
- RSA 3016
- RSA 3017
- SHS 3292
- SHS 3537
- SHS 3538
- SHS 4445
- SHS 4505
- SHS 4506
- Triple-DES 2188
- Triple-DES 2320
- Triple-DES 2321
- Triple-DES 2788
- Triple-DES 2822
- Triple-DES 2823
Each approved algorithm in a FIPS 140-3 module needs its own NIST CAVP certificate. Older numeric certificates link to their NIST page; ACVP certificates (A1234) can be looked up in the CAVP validation search.
Tested environments
- Android 6.0.1 with processor Qualcomm 8992 Snapdragon running on BlackBerry PRIV[1][2]
- Android 8.1.2 with Processor ARMv8 running on Venturi K502 tablet[2]
- Android OS API Level 17 with processor NXP ARM Cortex-A9 running on Ricoh MP C3004[1]
- CentOS 7.0 with Java JRE 1.8.0 running on a Dell PowerEdge 2950 with an Intel Xeon 5300[1]
- Red Hat Enterprise Linux 7 with IBM Java JRE 1.8 running on a Dell PowerEdge R430 with an Intel Xeon E5-2620 v3[2]
- SUSE Linux Enterprise 11 on VMware ESX 4.1.5 with Oracle JRE 1.8 running on a Dell PowerEdge R430 with an Intel Xeon E5-2620 v3[2]
- Ubuntu Linux 16.04 on VMware ESX 4.1.5 with Oracle JRE 1.8 running on a Dell PowerEdge R430 with an Intel Xeon E5-2620 v3[2] (single-user mode)
- Windows Server 2016 on VMware ESX 6.5 with Oracle JRE 1.8 running on a Dell PowerEdge R430 with an Intel Xeon E5-2620 v3[2]
Operational environments the module was tested on, as listed by NIST CMVP.
CVEs that may affect this product
sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP, the Common Criteria Portal and ENISA (EUCC) - dataset of September 21, 2026 - synced October 17, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain