Windows Vista Code Integrity (ci.dll)
Microsoft Corporation - FIPS 140 #980
This is a dynamically linked library that runs as ntoskrnl.exe. It verifies the integrity of executable files, including kernel mode drivers, critical system components and user mode crypto modules, before these files are loaded from disk into memory by the memory manager.
Key facts
- Scheme
- FIPS 140
- Certificate
- 980
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- July 21, 2008
- Versions
- 6.0.6001.18000, 6.0.6001.18023, 6.0.6001.22120 and 6.0.6002.18005
- Caveat
- When operated in FIPS mode with Winload OS Loader (winload.exe) validated to FIPS 140-2 under Cert. #979 operating in FIPS mode
Algorithms
- RSA
- SHS
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2008-4250CRITICAL 9.8KEVEPSS 98.8%
- CVE-2016-7256HIGH 8.8KEVEPSS 64.6%
- CVE-2015-2426HIGH 8.8KEVEPSS 86.6%
- CVE-2015-2360HIGH 8.8KEVEPSS 14.8%
- CVE-2014-6332HIGH 8.8KEVEPSS 94.9%
- CVE-2014-4148HIGH 8.8KEVEPSS 59.9%
- CVE-2014-1812HIGH 8.8KEVEPSS 64.9%
- CVE-2013-3918HIGH 8.8KEVEPSS 73.7%
- CVE-2011-3402HIGH 8.8KEVEPSS 78.1%
- CVE-2015-2546HIGH 8.2KEVEPSS 10.1%
- CVE-2017-0199HIGH 7.8KEVEPSS 99.5%
- CVE-2017-0101HIGH 7.8KEVEPSS 57.5%
- CVE-2017-0005HIGH 7.8KEVEPSS 11.0%
- CVE-2017-0001HIGH 7.8KEVEPSS 3.1%
- CVE-2016-7255HIGH 7.8KEVEPSS 81.0%
- CVE-2016-3393HIGH 7.8KEVEPSS 68.5%
- CVE-2016-3309HIGH 7.8KEVEPSS 20.5%
- CVE-2016-0185HIGH 7.8KEVEPSS 69.8%
- CVE-2016-0167HIGH 7.8KEVEPSS 5.7%
- CVE-2016-0165HIGH 7.8KEVEPSS 13.7%
- CVE-2016-0099HIGH 7.8KEVEPSS 37.0%
- CVE-2016-0040HIGH 7.8KEVEPSS 24.5%
- CVE-2015-2387HIGH 7.8KEVEPSS 34.9%
- CVE-2015-1701HIGH 7.8KEVEPSS 55.9%
- CVE-2015-0016HIGH 7.8KEVEPSS 75.8%
- CVE-2014-6352HIGH 7.8KEVEPSS 77.5%
- CVE-2014-4114HIGH 7.8KEVEPSS 81.6%
- CVE-2014-4113HIGH 7.8KEVEPSS 86.9%
- CVE-2014-4077HIGH 7.8KEVEPSS 54.6%
- CVE-2013-3906HIGH 7.8KEVEPSS 84.9%
- CVE-2013-3660HIGH 7.8KEVEPSS 39.3%
- CVE-2012-0151HIGH 7.8KEVEPSS 87.7%
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2010-2568HIGH 7.8KEVEPSS 91.3%
- CVE-2009-1123HIGH 7.8KEVEPSS 4.9%
- CVE-2017-0147HIGH 7.5KEVEPSS 99.7%
- CVE-2015-1769MEDIUM 6.6KEVEPSS 4.1%
- CVE-2016-3298MEDIUM 6.5KEVEPSS 33.3%
- CVE-2015-0014HIGH 10.0EPSS 96.9%
- CVE-2014-6321HIGH 10.0EPSS 96.0%
- CVE-2013-3195HIGH 10.0EPSS 38.5%
- CVE-2013-3175HIGH 10.0EPSS 28.0%
- CVE-2012-4786HIGH 10.0EPSS 24.2%
- CVE-2012-1851HIGH 10.0EPSS 65.6%
- CVE-2011-1268HIGH 10.0EPSS 10.8%
- CVE-2011-0661HIGH 10.0EPSS 44.6%
- CVE-2010-2550HIGH 10.0EPSS 75.7%
- CVE-2010-0476HIGH 10.0EPSS 34.3%
- CVE-2010-0269HIGH 10.0EPSS 28.4%
- CVE-2010-0241HIGH 10.0EPSS 49.1%
and 751 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 979
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain