Windows OS Loader
Microsoft Corporation - FIPS 140 #5405
The Windows OS Loader (the "module") is the component that loads the operating system kernel (ntoskrnl.exe) and other boot stage binary image files. The module is a part of BitLocker Drive Encryption, which is a data protection feature of the Windows operating system that encrypts data on a storage volume.
Key facts
- Scheme
- FIPS 140
- Certificate
- 5405
- Standard
- FIPS 140-3
- Security level
- Level 1
- Status
- active
- Vendor
- Microsoft Corporation
- Module type
- Software-Hybrid
- Embodiment
- MultiChipStand
- Lab
- Leidos Accredited Testing & Evaluation (AT&E) Lab
- First validated
- August 31, 2026
- Sunset date
- August 30, 2031
- Caveat
- When installed, initialized and configured as specified in Section 11.1 of the Security Policy. When operated in approved mode with module Boot Manager validated to FIPS 140-3 under Cert. #5404 operating in approved mode. No assurance of minimum security of SSPs (e.g., keys, bit strings) that are externally loaded, or of SSPs established with externally loaded SSPs. No assurance of FIPS 140-3 requirements met for the components of the RBG construct that are external to the module boundary (e.g., DRBG, ESV) except for SP 800-90C compliance and security strength of the provided random bits
Algorithms
- AES-CBC
- AES-CCM
- AES-GCM
- AES-XTS Testing Revision 2.0
- Counter DRBG
- RSA SigVer (FIPS186-4)
- SHA-1
- SHA2-256
- SHA2-384
- SHA2-512
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2010-3143HIGH 9.3EPSS 20.8%
- CVE-2010-3139HIGH 9.3EPSS 23.5%
- CVE-2021-36958HIGH 7.8EPSS 30.8%
- CVE-2018-0599HIGH 7.8EPSS 5.1%
- CVE-2018-0598HIGH 7.8EPSS 10.0%
- CVE-2008-6194HIGH 7.8EPSS 11.4%
- CVE-2012-2971HIGH 7.5EPSS 4.1%
- CVE-2010-3889HIGH 7.2EPSS 1.6%
- CVE-2010-3888HIGH 7.2EPSS 3.9%
- CVE-2011-0638MEDIUM 6.9EPSS 1.4%
- CVE-2012-2972MEDIUM 5.0EPSS 3.5%
- CVE-2011-5049MEDIUM 4.3EPSS 4.3%
- CVE-2011-3389MEDIUM 4.3EPSS 73.3%
- CVE-1999-0524MEDIUM 4.0EPSS 32.2%
- CVE-2010-2157LOW 2.1EPSS 0.3%
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain