Microsoft Windows Cryptographic Primitives Library (bcrypt.dll)
Microsoft Corporation - FIPS 140 #892
BCRYPT.DLL provides cryptographic services, through its documented interfaces, to Windows Vista components and applications running on Windows Vista. The cryptographic module, BCRYPT.DLL, encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible via the Microsoft CNG (Cryptography, Next Generation) API. It can be dynamically linked into applications by software developers to permit the use of general-purpose FIPS 140-2 compliant cryptography.
Key facts
- Scheme
- FIPS 140
- Certificate
- 892
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- January 10, 2008
- Versions
- 6.0.6000.16386
- Caveat
- When operated in FIPS mode with Code Integrity (ci.dll) validated to FIPS 140-2 under Cert. #890 operating in FIPS mode
Algorithms
- AES
- DSA
- ECDSA
- HMAC
- RNG
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2015-1635CRITICAL 9.8KEVEPSS 100.0%
- CVE-2015-2426HIGH 8.8KEVEPSS 86.6%
- CVE-2015-2360HIGH 8.8KEVEPSS 14.8%
- CVE-2014-6332HIGH 8.8KEVEPSS 94.9%
- CVE-2014-6324HIGH 8.8KEVEPSS 87.3%
- CVE-2014-4148HIGH 8.8KEVEPSS 59.9%
- CVE-2014-1812HIGH 8.8KEVEPSS 64.9%
- CVE-2013-3918HIGH 8.8KEVEPSS 73.7%
- CVE-2015-2546HIGH 8.2KEVEPSS 10.1%
- CVE-2015-2387HIGH 7.8KEVEPSS 34.9%
- CVE-2015-0016HIGH 7.8KEVEPSS 75.8%
- CVE-2014-6352HIGH 7.8KEVEPSS 77.5%
- CVE-2014-4114HIGH 7.8KEVEPSS 81.6%
- CVE-2014-4113HIGH 7.8KEVEPSS 86.9%
- CVE-2013-3660HIGH 7.8KEVEPSS 39.3%
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2010-2568HIGH 7.8KEVEPSS 91.3%
- CVE-2015-1769MEDIUM 6.6KEVEPSS 4.1%
- CVE-2015-2373HIGH 10.0EPSS 38.1%
- CVE-2015-0014HIGH 10.0EPSS 96.9%
- CVE-2014-6321HIGH 10.0EPSS 96.0%
- CVE-2011-1268HIGH 10.0EPSS 10.8%
- CVE-2011-0661HIGH 10.0EPSS 44.6%
- CVE-2010-2550HIGH 10.0EPSS 75.7%
- CVE-2010-0477HIGH 10.0EPSS 50.2%
- CVE-2010-0476HIGH 10.0EPSS 34.3%
- CVE-2010-0270HIGH 10.0EPSS 48.2%
- CVE-2010-0269HIGH 10.0EPSS 28.4%
- CVE-2010-0231HIGH 10.0EPSS 41.3%
- CVE-2011-2013CRITICAL 9.8EPSS 32.3%
- CVE-2011-0657CRITICAL 9.8EPSS 62.5%
- CVE-2015-6131HIGH 9.3EPSS 30.5%
- CVE-2015-6108HIGH 9.3EPSS 26.0%
- CVE-2015-6107HIGH 9.3EPSS 18.2%
- CVE-2015-6104HIGH 9.3EPSS 35.3%
- CVE-2015-6103HIGH 9.3EPSS 35.3%
- CVE-2015-2530HIGH 9.3EPSS 16.3%
- CVE-2015-2519HIGH 9.3EPSS 14.3%
- CVE-2015-2515HIGH 9.3EPSS 28.7%
- CVE-2015-2514HIGH 9.3EPSS 15.2%
- CVE-2015-2513HIGH 9.3EPSS 19.2%
- CVE-2015-2509HIGH 9.3EPSS 71.0%
- CVE-2015-2506HIGH 9.3EPSS 15.9%
- CVE-2015-2464HIGH 9.3EPSS 35.6%
- CVE-2015-2463HIGH 9.3EPSS 34.5%
- CVE-2015-2462HIGH 9.3EPSS 35.6%
- CVE-2015-2461HIGH 9.3EPSS 36.4%
- CVE-2015-2459HIGH 9.3EPSS 32.4%
- CVE-2015-2458HIGH 9.3EPSS 32.4%
- CVE-2015-2456HIGH 9.3EPSS 35.6%
and 356 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 890
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain