ISC Cryptographic Development Kit (CDK)

Information Security Corporation - FIPS 140 #4998

activeLevel 1

The CDK is a software module. The physical embodiment of the computer hardware on which it runs is a "multi-chip standalone module" in FIPS 140-3 terminology. The "physical perimeter" is defined to be the entire computer on which the CDK software runs. As a software module, the "cryptographic boundary" contains the software modules that comprise the CDK shared link library.

Key facts

Scheme: FIPS 140
Certificate: 4998
Standard: FIPS 140-3
Security level: Level 1
Status: active
Vendor: Information Security Corporation
Module type: Software
Embodiment: Multi-Chip Stand Alone
Lab: Leidos Accredited Testing & Evaluation (AT&E) Lab
First validated: April 7, 2025
Sunset date: April 6, 2030
Versions: 8.1.2.3
Caveat: When operated in approved mode

Algorithms

AES-CBC
AES-CCM
AES-CFB128
AES-CFB8
AES-CMAC
AES-CTR
AES-ECB
AES-GCM
AES-KW
AES-KWP
AES-OFB
AES-XTS Testing Revision 2.0
Conditioning Component AES-CBC-MAC SP800-90B
cSHAKE-128
cSHAKE-256
Deterministic ECDSA SigGen (FIPS186-5)
DSA SigVer (FIPS186-4)
ECDSA KeyGen (FIPS186-4)
ECDSA KeyVer (FIPS186-4)
ECDSA SigGen (FIPS186-4)
ECDSA SigVer (FIPS186-4)
HMAC DRBG
HMAC-SHA-1
HMAC-SHA2-224
HMAC-SHA2-256
HMAC-SHA2-384
HMAC-SHA2-512
HMAC-SHA2-512/224
HMAC-SHA2-512/256
HMAC-SHA3-224
HMAC-SHA3-256
HMAC-SHA3-384
HMAC-SHA3-512
KAS-ECC-SSC Sp800-56Ar3
KAS-IFC-SSC
KDA HKDF SP800-56Cr2
KDA OneStep SP800-56Cr2
KDF ANS 9.63
KDF IKEv1
KDF IKEv2
KDF SNMP
KDF SSHA5798
KDF TLS
KDF TPM
KMAC-128
KMAC-256
KTS-IFC
ParallelHash-128
ParallelHash-256
PBKDF
RSA KeyGen (FIPS186-4)
RSA SigGen (FIPS186-4)
RSA Signature Primitive
RSA SigVer (FIPS186-4)
SHA-1
SHA2-224
SHA2-256
SHA2-384
SHA2-512
SHA2-512/224
SHA2-512/256
SHA3-224
SHA3-256
SHA3-384
SHA3-512
SHAKE-128
SHAKE-256
TDES-CBC
TDES-CFB64
TDES-CFB8
TDES-CTR
TDES-ECB
TDES-OFB
TLS v1.2 KDF RFC7627
TLS v1.3 KDF
TupleHash-128
TupleHash-256

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain