Windows XP Enhanced DSS and Diffie-Hellman Cryptographic Provider (DSSENH)
Microsoft Corporation - FIPS 140 #990
The Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, designed for FIPS 140-2 compliance, is a software-based, cryptographic module. DSSENH encapsulates several different cryptographic algorithms (including SHA-1, DES, TDES, DSA) in a cryptographic module accessible via the Microsoft CryptoAPI.
Key facts
- Scheme
- FIPS 140
- Certificate
- 990
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- July 24, 2008
- Versions
- 5.1.2600.5507
- Caveat
- When operated in FIPS mode
Algorithms
- DSA
- RNG
- SHS
- Triple-DES
- Triple-DES MAC
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2008-4250CRITICAL 9.8KEVEPSS 98.8%
- CVE-2013-3918HIGH 8.8KEVEPSS 73.7%
- CVE-2011-3402HIGH 8.8KEVEPSS 78.1%
- CVE-2008-0015HIGH 8.8KEVEPSS 76.6%
- CVE-2013-5065HIGH 7.8KEVEPSS 34.7%
- CVE-2013-3660HIGH 7.8KEVEPSS 39.3%
- CVE-2012-0151HIGH 7.8KEVEPSS 87.7%
- CVE-2011-2005HIGH 7.8KEVEPSS 31.8%
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2010-2568HIGH 7.8KEVEPSS 91.3%
- CVE-2010-0232HIGH 7.8KEVEPSS 28.7%
- CVE-2009-1123HIGH 7.8KEVEPSS 4.9%
- CVE-2013-3195HIGH 10.0EPSS 38.5%
- CVE-2013-3175HIGH 10.0EPSS 28.0%
- CVE-2012-4786HIGH 10.0EPSS 24.2%
- CVE-2012-1853HIGH 10.0EPSS 29.0%
- CVE-2012-1852HIGH 10.0EPSS 29.0%
- CVE-2012-1851HIGH 10.0EPSS 65.6%
- CVE-2011-1868HIGH 10.0EPSS 14.4%
- CVE-2011-1268HIGH 10.0EPSS 10.8%
- CVE-2011-0661HIGH 10.0EPSS 44.6%
- CVE-2010-2550HIGH 10.0EPSS 75.7%
- CVE-2010-0269HIGH 10.0EPSS 28.4%
- CVE-2010-0231HIGH 10.0EPSS 41.3%
- CVE-2009-3677HIGH 10.0EPSS 21.8%
- CVE-2009-1930HIGH 10.0EPSS 41.4%
- CVE-2009-0568HIGH 10.0EPSS 32.4%
- CVE-2009-0119HIGH 10.0EPSS 36.7%
- CVE-2009-0086HIGH 10.0EPSS 14.1%
- CVE-2008-4834HIGH 10.0EPSS 45.8%
- CVE-2008-4038HIGH 10.0EPSS 39.2%
- CVE-2007-1946HIGH 10.0EPSS 26.1%
- CVE-2006-2373HIGH 10.0EPSS 29.2%
- CVE-2005-1208HIGH 10.0EPSS 47.3%
- CVE-2004-0897HIGH 10.0EPSS 42.8%
- CVE-2004-0840HIGH 10.0EPSS 30.3%
- CVE-2004-0575HIGH 10.0EPSS 60.3%
- CVE-2004-0209HIGH 10.0EPSS 57.4%
- CVE-2011-0657CRITICAL 9.8EPSS 62.5%
- CVE-2009-2494CRITICAL 9.8EPSS 42.3%
- CVE-2008-4835CRITICAL 9.8EPSS 44.9%
- CVE-2008-3465CRITICAL 9.8EPSS 13.7%
- CVE-2002-0391CRITICAL 9.8EPSS 58.1%
- CVE-2000-1218CRITICAL 9.8EPSS 6.2%
- CVE-2008-1454HIGH 9.4EPSS 34.1%
- CVE-2014-0301HIGH 9.3EPSS 14.0%
- CVE-2013-5056HIGH 9.3EPSS 20.4%
- CVE-2013-3940HIGH 9.3EPSS 34.5%
- CVE-2013-3863HIGH 9.3EPSS 21.5%
- CVE-2013-3181HIGH 9.3EPSS 20.4%
and 476 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain