Microsoft Windows XP Kernel Mode Cryptographic Module (FIPS.SYS)
Microsoft Corporation - FIPS 140 #997
FIPS.sys is a general-purpose, software-based, cryptographic module residing at the Kernel level of the Windows Operating System. It runs as a kernel mode export driver (a kernel-mode DLL) and encapsulates several different cryptographic algorithms in an easy-to-use cryptographic module accessible by other kernel mode services.
Key facts
- Scheme
- FIPS 140
- Certificate
- 997
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Microsoft Corporation
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- SAIC-VA
- First validated
- August 15, 2008
- Versions
- 5.1.2600.5512
- Caveat
- When operated in FIPS mode
Algorithms
- HMAC
- RNG
- SHS
- Triple-DES
- Triple-DES MAC
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2015-1635CRITICAL 9.8KEVEPSS 100.0%
- CVE-2015-2426HIGH 8.8KEVEPSS 86.6%
- CVE-2015-2360HIGH 8.8KEVEPSS 14.8%
- CVE-2014-6332HIGH 8.8KEVEPSS 94.9%
- CVE-2014-6324HIGH 8.8KEVEPSS 87.3%
- CVE-2014-4148HIGH 8.8KEVEPSS 59.9%
- CVE-2014-1812HIGH 8.8KEVEPSS 64.9%
- CVE-2013-3918HIGH 8.8KEVEPSS 73.7%
- CVE-2015-2546HIGH 8.2KEVEPSS 10.1%
- CVE-2015-2387HIGH 7.8KEVEPSS 34.9%
- CVE-2015-0016HIGH 7.8KEVEPSS 75.8%
- CVE-2014-6352HIGH 7.8KEVEPSS 77.5%
- CVE-2014-4114HIGH 7.8KEVEPSS 81.6%
- CVE-2014-4113HIGH 7.8KEVEPSS 86.9%
- CVE-2013-3660HIGH 7.8KEVEPSS 39.3%
- CVE-2010-4398HIGH 7.8KEVEPSS 8.7%
- CVE-2010-2568HIGH 7.8KEVEPSS 91.3%
- CVE-2015-1769MEDIUM 6.6KEVEPSS 4.1%
- CVE-2015-2373HIGH 10.0EPSS 38.1%
- CVE-2015-0014HIGH 10.0EPSS 96.9%
- CVE-2014-6321HIGH 10.0EPSS 96.0%
- CVE-2011-1268HIGH 10.0EPSS 10.8%
- CVE-2011-0661HIGH 10.0EPSS 44.6%
- CVE-2010-2550HIGH 10.0EPSS 75.7%
- CVE-2010-0477HIGH 10.0EPSS 50.2%
- CVE-2010-0476HIGH 10.0EPSS 34.3%
- CVE-2010-0270HIGH 10.0EPSS 48.2%
- CVE-2010-0269HIGH 10.0EPSS 28.4%
- CVE-2010-0231HIGH 10.0EPSS 41.3%
- CVE-2011-2013CRITICAL 9.8EPSS 32.3%
- CVE-2011-0657CRITICAL 9.8EPSS 62.5%
- CVE-2015-6131HIGH 9.3EPSS 30.5%
- CVE-2015-6108HIGH 9.3EPSS 26.0%
- CVE-2015-6107HIGH 9.3EPSS 18.2%
- CVE-2015-6104HIGH 9.3EPSS 35.3%
- CVE-2015-6103HIGH 9.3EPSS 35.3%
- CVE-2015-2530HIGH 9.3EPSS 16.3%
- CVE-2015-2519HIGH 9.3EPSS 14.3%
- CVE-2015-2515HIGH 9.3EPSS 28.7%
- CVE-2015-2514HIGH 9.3EPSS 15.2%
- CVE-2015-2513HIGH 9.3EPSS 19.2%
- CVE-2015-2509HIGH 9.3EPSS 71.0%
- CVE-2015-2506HIGH 9.3EPSS 15.9%
- CVE-2015-2464HIGH 9.3EPSS 35.6%
- CVE-2015-2463HIGH 9.3EPSS 34.5%
- CVE-2015-2462HIGH 9.3EPSS 35.6%
- CVE-2015-2461HIGH 9.3EPSS 36.4%
- CVE-2015-2459HIGH 9.3EPSS 32.4%
- CVE-2015-2458HIGH 9.3EPSS 32.4%
- CVE-2015-2456HIGH 9.3EPSS 35.6%
and 356 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain