DES Validation Lists

-Walter Von Dehsen
TEL: 845-435-7521
FAX: 845-435-9270

ECB(e/d) ; CBC(e/d)

"The IBM zSeries CP Assist feature provides processor-integrated hardware acceleration for DES, TDES and SHA-1 services."

-Sebasti? Mu?z
TEL: +34 91 449 03 30
FAX: N/A

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The Cryptosec2048 is a high-end PCI card that provides cryptographic services and secure storage of cryptographic keys. The module is built to perform general cryptographic processing (RSA, DES, SHA-1, MD5,...) and features a tamper-protective case to physically protect sensitive information contained within the card."

-Kenneth Jensen - Dir of Prod Mgmt
TEL: (408) 227-4500
FAX: N/A

CBC(e/d)

"Aruba Wireless Networks?WLAN switching platform is a purpose-built WLAN voice and data switching solution designed to specifically address the needs and reduce the cost of large scale Wi-Fi network deployments for Government agencies and large enterprise. The Aruba Wireless Networks WLAN switching platform is a highly scalable and redundant solution that provides centralized intelligence to secure and manage the corporate RF environment, enforce identity based user security policies, enable service creation and provide secure mobility management to thousands of simultaneously connected users."

-Wayne Donnelly
TEL: +27 (0) 11 5481000
FAX: +27 (0) 11 4673424

ECB(e/d) ; CBC(e/d)

"The Incognito TSM410 is a multi-chip embedded Tamper Responsive Security Module. Fitted on a PCI carrier card, the device offers high-performance, high-security services targeted at EFT switches and mCommerce applications."

-Joseph Wallace
TEL: 480-753-2279
FAX: 480-753-2380

CBC(e/d)

"The BCM5841 is a second generation multi-gigabit cryptographic coprocessor for VPN IPSec applications."

-Alexey Kirichenko
TEL: +358 9 2520 5548

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The F-Secure?Cryptographic Library?for Linux is a 140-2 Level 1 compliant software module, which provides an assortment of cryptographic services including symmetric and asymmetric encryption, hash and HMAC computation, digital signing, key exchange, and pseudorandom number generation."

-Ben Laurie
TEL: 44 (20) 8735 0686

-John Weathersby
TEL: 662-236-1794

ECB(e/d) ; CBC(e/d) ; CFB8(e/d) ; CFB64(e/d) ; OFB(e/d)

"The OpenSSL FIPS Cryptographic Module is a validated source code component of the standard OpenSSL distribution that can be downloaded from the http://openssl.org/ website."

-Alexey Kirichenko
TEL: +358 9 2520 5548

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The F-Secure?Cryptographic Library for Windows is a 140-2 Level 2 compliant software module, implemented as a 32-bit Windows compatible DLL. The Module provides an assortment of cryptographic services to client processes that attach instances of the module DLL."

-Doug Copeland
TEL: (905) 624-7720
FAX: (905) 624-7742

CBC(e/d)

"The Bioscrypt Cryptographic Library is used by Bioscrypt to provide developers with FIPS certified DES and Triple-DES solutions."

-Doug Copeland
TEL: (905) 624-7720
FAX: (905) 624-7742

CBC(e/d)

"The Bioscrypt Cryptographic Library is used by Bioscrypt to provide developers with FIPS certified DES and Triple-DES solutions."

-Brian Manahan
TEL: 949-851-1085
FAX: 949-851-8588

ECB(e/d) ; CBC(e/d)

"FIPS 140-1, Level 3 NIST/CEFMS Approved Electronic Signature System"

-John Oblak
TEL: 507-835-6276

ECB(e/d) ; CBC(e/d) ; CFB1(e/d) ; OFB(e/d)

"This is the E.F. Johnson implementation of the DES algorithm. The modes of operation for this implementation are OFB, ECB, CBC and DES 1 bit CFB with differential encoding and decoding. This algorithm is used in the E.F. Johnson mobile and portable radios which contain the FIPS 140-2 validated Subscriber Encyption Module (SEM)."

-Kathy Kriese
TEL: 650-295-7692
FAX: 650-295-7700

-David Finkelstein
TEL: 650-295-7535
FAX: 650-295-7700

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"There are two variants of the Crypto-J module, one which implements an RSA Security-specific API [jsafeFIPS] and the other which implements the Java Cryptographic Extensions (JCE) API [jsafeJCEFIPS]."

-Paal Tveit
TEL: 408-745-9600
FAX: 408-745-9300

CBC(e/d)

"The TZ 170 is an internet security appliance with WAN interface, a flexible Optional interface, and a LAN interface incorporating a 5-port Fast-Ethernet switch. The TZ 170 provides stateful packet inspection firewall services, accelerated IPSec VPN, and bandwidth management, and can be upgraded to offer ISP failover and traffic."

-Richard T. Fohl
TEL: (716) 691 - 2715
FAX: (716) 691 - 2714

ECB(e/d) ; CBC(e/d)

"Lucent SW Cryptographic Implementation is used in Lucent Bricks. The VPN Firewall Brick is a high-speed packet-processing appliance, oriented towards providing security functions. The Bricks are carrier-grade integrated firewall and virtual private network (VPN) gateway appliance specifically designed for web/application data center security, large-scale managed security services, and remote access VPN services. Called the Brick because of its rugged, reliable design, this is an ideal platform for service providers seeking wide scalability, ready manageability, and industry-leading performance."

-Won J Jun
TEL: (703) 480-2145
FAX: (703) 480-2067

-Hassan Tavassoli
TEL: 703-480-2165

ECB(e/d) ; CBC(e/d)

"Giesecke & Devrient (G&D) Smart Card Chip Operating System Sm@rtCaf?Expert FIPS 64K is a Java Card 2.2 and Open Platform v2.0.1' compliant smart card module. It supports, at a minimum, Triple-DES, AES, DSA, and RSA algorithms with on-card key generation. The Sm@rtCaf?Expert FIPS 64K is suitable for government and corporate identification, payment and banking, health care, and Web applications"

-John Oblak
TEL: 507-835-6276

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"This algorithm is used in the E.F. Johnson PC Keyloader - Key Encryption Programmer application."

-Robert Kusters
TEL: (650) 625-2940

CBC(e/d)

"The Nokia IP350 and IP380 are full-featured enterprise systems designed for small to medium enterprises, with Service Provider flexibility and rapid serviceability option in a single rack space. When combined with Check Point VPN-1/FW-1, these platforms provide reliable, easy to manage distributed security and access."

-Christophe Goyet
TEL: 310-884-7953
FAX: 310-884-7904

ECB(e/d) ; CBC(e/d)

"The Oberthur Card Systems CosmopolIC 72K RSA Java Card Platform is a single chip cryptographic micro-processor smart card specifically designed for identity and government market needs, with a large memory (72KB), a highly secure architecture and several services and default applications in ROM for ISO 7816 File System, Biometry and Authentication."

-Paal Tveit
TEL: 408-745-9600
FAX: 408-745-9300

CBC(e/d)

"The PRO 4060 and PRO 3060 are internet security appliances offering stateful packet inspection firewall services, accelerated IPSec VPN, bandwidth management, and dual-WAN port support with ISP failover and load-balancing capabilities, all via six configurable 10/100 Ethernet interfaces."

-Rick Hall
TEL: 512-250-2129 x135

CBC(e/d)

""The UltraLock?Cryptographic Module performs all the cryptography required for SSL/TLS applications. This module is a common element of the LNN2010 and LNN2025 UltraLock Security Processors, the industry's first single-chip solutions for completely off-loading SSL/TLS processing from host systems. The innovative in-line architecture combines TCP/IP termination and high-speed cryptography to transparently process SSL/TLS traffic at wire speed without impacting host system performance. Industry-standard GMII Ethernet connectivity allows UltraLock processors to drop easily into common networking and security platforms without special software development or complex hardware redesign, greatly reducing time to market.""

-Tom Gilbert
TEL: 703-631-0700
FAX: 703-631-9588

ECB(e/d) ; CBC(e/d)

"The BG4000 and BG3140 are network security appliances for the construction of secure Virtual Private Networks between Internet sites, and between Internet sites and individual remote users."

-Elie Massabki
TEL: 949-579-3411
FAX: 949-579-7314

ECB(e/d) ; CBC(e/d)

"M826xx is Communications Convergence Processor for Voice over IP (VoIP) and Voice over ATM (VoATM) applications."

-Daryl Popowitch

OFB(e/d)

"Implementation Description"

-Damon Hopley
TEL: 978-684-1083

CBC(e/d)

"Hardware cryptographic algorithm implementations for the XSR product line."

-Damon Hopley
TEL: 978-684-1083

CBC(e/d)

"Software cryptographic algorithm implementations for the XSR product line."

-Damon Hopley
TEL: 978-684-1083

CBC(e/d)

"Software cryptographic algorithm implementations for the XSR product line."

-Tamas Visegrady
TEL: 845-435-8512
FAX: 845-435-1858

CBC(e/d)

"The IBM UltraCypher 2 Cryptographic Engine is a flexible, high performance subsystem that provides fast, ultra-secure, hardware-based cryptographic functionality."

-Glenn Haley
TEL: (408) 399-3545

ECB(e/d) ; CBC(e/d)

"The Hifn 7955 and 7956 are advanced security processors designed for high-speed T3/OC3, ROBO/SME networking applications like VPN Broadband Routers, wireless access points, VPN Edge Routers/Gateways, Firewall/VPN Appliances and other Network and Customer Premise Equipment (CPE)."

-Prasad Shroff
TEL: (408) 399-3586

ECB(e/d) ; CBC(e/d)

"Hifn Intelligent Packet Processing chips are full-duplex T3 to full-duplex OC-12, Integrated public key, 3DES, Advanced Encryption Standard (AES), and compression - the latest chips from Hifn have it all in a single high-performance package."

-Victoria Van Spyk
TEL: 408-326-1581

ECB(e/d) ; CBC(e/d)

"3Com's IPSec Offload Integrated Circuit is hardware based crypto device that performs IPSec (DES, TDES, SHA-1, MD5 and HMAC) computations on 3Com's series of Secure Network Interface Cards and Embedded Firewall products."

-Joel Rieger
TEL: 443-442-8199

CBC(e/d)

"The SafeXcel 1141/1741 ASICs are part of the SafeNet IPsec co-processor chip family. The devices consist of an IPsec Packet Engine that performs DES, TDES, AES, SHA-1, MD5, header/trailer and insertion/deletion operations, a Public Key Accelerator that performs RSA, DSA, and DH operations using long vector math up to 2048 bits, and a Random Number Generator that provides up to 2 Mbps of random data."

-Alex Soohoo
TEL: 408-330-1714
FAX: 408-330-1748

ECB(e/d) ; CBC(e/d)

"The Interprise Access RC32365 is an integrated communications processor that addresses the secure SOHO wired/wireless gateway and VPN/firewall appliance markets by incorporating a high-performance CPU, an on-chip security engine and key peripheral interfaces."

-Alexey Kirichenko
TEL: +358 9 2520 5548

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The F-Secure Cryptographic Library for Windows is a 140-2 Level 2 compliant software module, implemented as a 32-bit Windows compatible DLL. The module provies an assortment of cryptographic services to client processes that attach instances of the module DLL."

-Mike Lai

ECB(e/d) ; CBC(e/d)

"Kernel level .sys module exporting cryptographic functionality."

-Mike Lai

ECB(e/d) ; CBC(e/d)

"The Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider is a FIPS 140-2 compliant, software-based, cryptographic module.RSAENH encapsulates several different cryptographic algorithms (including SHA-1, DES, 3DES, DSA, SHA-1-based HMAC) in a cryptographic module accessible via the Microsoft CryptoAPI."

-Ian Robertson
TEL: 519-888-7465
FAX: 519-883-4924

ECB(e/d) ; CBC(e/d) ; CFB8(e/d) ; CFB64(e/d) ; OFB(e/d)

"BlackBerry?is the leading wireless enterprise solution that allows users to stay connected with secure, wireless access to email, corporate data, phone, web and organizer features. BlackBerry?is a totally integrated package that includes hardware, software and service, providing a complete end-to-end solution. The BlackBerry?Cryptographic API provides advanced cryptographic functionality for the BlackBerry?"

-Mike Neumann
TEL: 512-257-3848
FAX: 512-257-3881

ECB(e/d) ; CBC(e/d)

"The Cyberflex Access 64K V2 smart card can be employed in solutions which provide secure PKI (public key infrastructure) and digital signature technology. Cyberflex Access 64K V2 serves as a highly portable, secure token for enhancing the security network access and ensuring secure electronic communications."

-Mike Lai

ECB(e/d) ; CBC(e/d)

"The Microsoft Enhanced Cryptographic Provider is a FIPS 140-2 compliant, software-based, cryptographic module.RSAENH encapsulates several different cryptographic algorithms (including SHA-1, DES, 3DES, AES, RSA, SHA-1-based HMAC) in a cryptographic module accessible via the Microsoft CryptoAPI."

-Javier Lorenzo
TEL: (858) 625-6020

-Irfan Khan
TEL: 510.936.4840

CBC(e/d)

"Cryptographic Acceleration Card"

-Tom Benjamin
TEL: 512.436.1223
FAX: 512.436.8009

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The IBM?Java?JCE (Java Cryptographic Extension) FIPS provider (IBMJCEFIPS) for Multi-platforms is a scalable, multi-purpose cryptographic module that supports only FIPS approved cryptographic operations via the Java2 Application Programming Interfaces (APIs)."

-Mike Puglia
TEL: (781) 328-0888
FAX: (781) 328-0899

ECB(e/d) ; CBC(e/d) ; CFB8(e/d) ; CFB64(e/d) ; OFB(e/d)

"The Bluesocket WG-2100 Wireless Gateway provides a single scalable solution to the security, quality of service (QoS), and management issues facing institutions, enterprises, and service providers who deploy 802.11 and Bluetooth-based wireless networks."

-Douglas Clark
TEL: 203.924.3500
FAX: 203.924.3406

ECB(e/d)

"The Pitney Bowes iButton Postal Security Device (PSD) has been designed in compliance with the United States Postal Service (USPS), Information-Based Indicia Program (IBIP). It employs strong encryption, decryption, and digital signature techniques for the protection of customer funds and the production of postage meter indicia in a variety of Pitney Bowes Metering products. The PSD has been designed to support international postal markets and their evolving requirements for digital indicia."

-John Oblak
TEL: 507-835-6276

ECB(e/d) ; CBC(e/d) ; CFB1(e/d) ; OFB(e/d)

"The Subscriber Encryption Module (SEM) is a cryptographic module which supports the AES, DES, DSA, and SHA-1 algorithms. The SEM is used in subscriber equipment such as the E.F. Johnson radios to provide secure, encrypted voice and data communication."

-Michael Osborne
TEL: (41) (1) 724 8458
FAX: (41) (1) 724 8953

ECB(e/d) ; CBC(e/d)

"IBM CryptoLite is a C software package providing advanced Cryptographic services in a very small footprint. CryptoLite supports public key encryption, digital signatures, symmetric ciphers, hash functions, message authentication codes, and other cryptographic algorithms through a simple programming interface. There are no runtime dependencies and the code has been optimized for high performance."

-Matt Rollender, Director of Marketing
TEL: 508.270.0500

CBC(e/d)

"Nauticus Networks N2040 and N2120 are purpose built application switches that enable cost effective, reliable, deployment of intergrated network and security services, delivering gigabit scaled Layer 5-7 application switching, Layer 4 load balancing, and SSL acceleration to the most demanding enterprise and service provider environments."

-Mr. Stefan Backstrom
TEL: (434) 455-6600
FAX: (434) 455-6851

OFB(e/d)

"The Orion C57 is used with the EDACS ProVoice Orion Mobile with FIPS 140-2 security level 1 validation. Digital voice, conventional and trunked; system and scan front mounting."

-Prasad Shroff
TEL: (408) 399-3586

ECB(e/d) ; CBC(e/d)

"Hifn Intelligent Packet Processing chips are full-duplex T3 to full-duplex OC-12, Integrated public key, 3DES, Advanced Encryption Standard (AES), and compression - these latest chips from Hifn have it all in a single high-performance package."

-Mike Allen

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The ICC is a C language implementation of cryptographic functions which uses the cryptograhic library provided by the OpenSSL project. This enables IBM products to use an open source solution for cryptography and a FIPS 140-2 certificate cryptographic provider."

-Lakshmi Kethana
TEL: (650) 506-9315

CBC(e/d)

"The Cryptographic Library for SSL is a generic module used in a variety of Oracle application suites. It provides support for cryptography, authentication, PKCS and certificate management for applications like the Oracle database (Server & Client), Oracle Applications Server, Oracle Internet Directory, Web Cache and Apache."

-Dan Watkins
TEL: 408-433-7105
FAX: 408-433-7447

ECB(d only)

"The des module is part of LSI Logic's extensive line of Coreware modules for ASIC development."

-Dan Watkins
TEL: 408-433-7105
FAX: 408-433-7447

ECB(e/d)

"The DES and TDES modules are part of LSI Logic's extensive line of Coreware modules for ASIC development."

-Ray Potter
TEL: 919-392-6789

CBC(e/d)

"The Cisco VPN Client enables you to establish secure, end-to-end encrypted tunnels. The client can be pre-configured for mass deployments and initial logins require very little user intervention. VPN access policies and configurations are downloaded from the central gateway and pushed to the client when a connection is established, allowing simple deployment and management, as well as high scalability."

-Tor Erik Pedersen
TEL: +47 67 125 125

ECB(e/d)

"a software cryptographic service library, used by all TANDBERG Videoconferencing systems. This software library provides encryption of video, voice and data in point-to-point and multipoint calls, over circuit-switched (ISDN, H.320) and packet-based (IP, H.323) networks according to the ITU H.233 and H.235 standards."

-Ray Potter
TEL: 919-392-6789

CBC(e/d)

"The Cisco VPN 3000 Concentrator Series is a best-of-breed, remote-access VPN solution for enterprise-class deployment. The validation includes hardware models 3005, 3015, 3030, 3060, 3080 and the 3002 hardware client."

-St?hane Laroche
TEL: (450) 680-1661 x123
FAX: (450) 680-1910

ECB(e/d) ; CBC(e/d)

"Colubris CN105x Secure Wireless LAN Router enables strong security for wireless enterprise networking, using embedded IPSec VPN and firewall functionalities. Lipfips is the User mode implementation in the CN1050 and CN1054 Wireless LAN Routers."

-Michael Osborne
TEL: (41) ( 1 ) 724 8458
FAX: (41) (1) 724 8953

ECB(e/d) ; CBC(e/d)

"IBM CryptoLite is a 100% Java software package providing advanced cryptographic services in a very small footprint. CryptoLite supports public key encryption, digital signatures, symmetric ciphers, hash functions, message authentication codes, and other cryptographic algorithms through a simple programming interface. There are no runtime dependencies and the code has been optimized for high performance. It runs on JDK 1.1 or higher."

-Markus Levlin
TEL: +358 20 500 7518
FAX: +358 20 500 7390

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The SSH Cryptographic Library is a standards-based shared library providing FIPS 140-2 certified cryptographic services for SSH Communications Security's security products. The library provides a rich API and a comprehensive set of state-of-the-art algorithms including AES, 3DES, SHA-1, HMAC, RSA and DSA."

-Prasad Shroff
TEL: (408) 399-3586

ECB(e/d) ; CBC(e/d)

"Hifn Intelligent Packet Processing chips are full-duplex T3 to full-duplex OC-12, Integrated public key, 3DES, Advanced Encryption Standard (AES), and compression - these latest chips from Hifn have it all in a single high-performance package."

-Quek Gim Chye
TEL: (65)6776-9210

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"The d'Cryptor QE is a multi-chip embedded security module designed for high security assurance applications. It comprises a secure high-performance cryptographic core, generous memory in the form of a Flash ROM and NVRAM, and implements physical security through an opaque, hard epoxy potting and a tamper detection and response mesh. The QE firmware builds in a wide range of cryptographic support and accepts a user-programmable external application. Cryptographic services are provided through a library and an API. All keys and cryptographic processing are isolated within this library and accessible only through the API."

-Prasad Shroff
TEL: (408) 399-3586

ECB(e/d) ; CBC(e/d)

"Hifn Intelligent Packet Processing chips are full-duplex T3 to full-duplex OC-12, Integrated public key, 3DES, Advanced Encryption Standard (AES), and compression - these latest chips from Hifn have it all in a single high-performance package."

-Paal Tveit
TEL: 408-745-9600
FAX: 408-745-9300

CBC(e/d)

"The SCA2/SSL-RX is an SSL proxy device designed for SSL acceleration and offloading. The SCA2/SSL-RX provides the ability to both terminate and initiate SSL connections, converting cipher-text to clear-text, or clear-text to cipher-text."

-Ray Potter
TEL: 919-392-6789

CBC(e/d)

"Cisco IOSR Software, the industry-leading and most widely deployed network system software, delivers intelligent network services on a flexible networking infrastructure that enables the rapid deployment of Internet applications."

-Joe Wallace
TEL: 480-753-2279

CBC(e/d)

"The BCM5840 delivers multi-gigabit performance for IPSec VPN applications."

-Won J. Jun
TEL: (703) 480-2145
FAX: (703) 480-2067

CBC(e/d)

"Giesecke & Devrient (G&D) Smart Card Chip Operating System Standard Version with Public Key Extension 2.4 (STARCOS SPK 2.4) is a scaleable multi-application operating system for smart cards and provides functionalities that are necessary for public key infrastructure."

-Leedor Agam
TEL: (972) 3 636 5124
FAX: (972) 3 537 5796

ECB(e/d) ; CBC(e/d)

"The eToken PRO is a fully portable USB device the size of an average house key which offers a cost-effective method for authenticating users when accessing a network and for securing electronic business applications. The eToken PRO offers security needs such as secure network logon, secure VPN's, secure email, and strong PKI support."

-Leedor Agam
TEL: (972) 3 636 5124
FAX: (972) 3 537 5796

ECB(e/d) ; CBC(e/d)

"The eToken PRO is a fully portable USB device the size of a house key which offers a cost-effective method for authenticating users when accessing a network and for securing electronic business applications. The eToken PRO offers security needs such as secure network logon, secure VPN's, secure email, and PKI support."

-Michael Osborne
TEL: (41) ( 1 ) 724 8458
FAX: (41) ( 1 ) 724 8953

ECB(e/d) ; CBC(e/d)

"The JCOP21id is IBM's multi-application smart card, designed to the Java Card v2.1.1 and Global Platform v2.0.1 specifications. The smart card features IBM's PKCS#15 applet which provides standardized high-level security services including, 2048 bit key generation, DES, 3DES, SHA, RSA and AES."

-Wei Dai
TEL: (978)720-2173
FAX: (978)720-2001

ECB(e/d) ; CBC(e/d) ; CFB8(e/d) ; CFB64(e/d) ; OFB(e/d)

"The Crypto++ Library is a free, open source C++ class library providing public key encryption, digital signatures, symmetric ciphers, hash functions, message authentication codes, and other cryptographic algorithms. The pre-compiled Win32 static library is FIPS 140-2 Level 1 validated. The library is also available in source code form."

-Darren Calman
TEL: (212) 514-6515
FAX: (212) 514-6528

ECB(e/d) ; CBC(e/d)

"Phaos Crypto provides a state-of-the-art set of core cryptography algorithms in Java. It includes a comprehensive cryptographic library supporting the most current algorithms like AES, RSA-OAEP, SHA-256/384/512, X.9-42 as well as legacy algorithms that are still used in corporate systems like 3DES, DES, MD2 etc.. Phaos Crypto allows developers to integrate cryptography into any Java application or applet. For high security deployments, Phaos Crypto provides transparent migration to cryptographic hardware without requiring any changes to existing applications."

-Klaus Majewski
TEL: (678) 259-3411

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d)

"StoneGate is a firewall and VPN solution. It features clustering, load balancing between multiple ISPs, encrypted VPN client connectivity and advanced central administration tools."

-Hazem Hassan
TEL: (952) 890-6850

ECB(e/d) ; CBC(e/d)

"The Model 330J is Datakey's multi-application smart card, designed to the JavaCard v2.1.1 and Global Platform v2.0.1 specifications. The smart card features Datakey's JCCOS applet. JCCOS is an advanced cryptographic applet that, when loaded onto a multi-application JavaCard provides high-level security services."

-Bruno Blanchard
TEL: +33 1 46007456

ECB(e/d) ; CBC(e/d)

"Cyberflex Access e-Gate 32K smart card serves as a highly portable, secure token for enhancing the security of network access and ensuring secure electronic communications, supporting on-card DES aND RSA algorithms with on-card key generation."

-Keith Medlin
TEL: +1-919-543-2014
FAX: +1-919-486-0675

ECB(e/d) ; CBC(e/d)

"The IBM Everyplace Wireless Gateway is a distributed, scalable, multipurpose communications platform that supports optimized, secure data access over a wide range of international wireless and wire line network technologies. The cryptographic module implements a variety of encryption services for the product."

-Pierre Boucher
TEL: 613-270-2599
FAX: 613-270-2504

ECB(e/d) ; CBC(e/d) ; CFB8(e/d) ; CFB64(e/d) ; OFB(e/d)

"The Security Toolkit for Java takes advantage of the features of a Public Key Infrastructure (PKI) from a Java environment. The Toolkit provides the means to incorporate security features, such as encryption and digital signatures, into applications."

-Alfred Adler
TEL: 770-521-5128
FAX: 770-521-8066

ECB(e/d) ; CBC(e/d)

"The Encryption DLL Module is incorporated into the Motorola Messaging Server, an enterprise system for managing data between a corporate e-mail or database system and a wireless device, and the Motorola MyMail Desktop Plus, a personal application to manage e-mail between the desktop and a wireless device."

-Christopher Yasko
TEL: (770)521-5150
FAX: (770)521-8067

ECB(e/d) ; CBC(e/d)

"The Encryption Services Module is incorporated into the operating software of the Accompli 009 -- the first wireless communications device to incorporate tri-band GSM and GPRS protocols, phone functionality, Internet access, e-mail, Triple-DES encryption, WAP browser and short message service (SMS) with a full QWERTY keyboard and 256-color screen."

-Jeng-Yang Hwang (Eric Hwang)
TEL: 886-6-6009636 ext 200

ECB(e/d)

"ASN eShield Cryptor Encryption/Decryption Processor (TAD0704-a) is a cryptographic chip designed for system flexibility to ease secure system implementations. It is a ciphering engine supporting the Advanced Encryption Standard (AES), Data Encryption Standard (DES) and Triple-DES encryption/decryption algorithms. The chip performs AES, DES and Triple-DES at 30 MHz with 16bits I/O interface."

-Bill Kennedy
TEL: (650) 295-7600 x512

ECB(e/d); CBC(e/d); CFB( 64 bits;e/d); OFB(e/d)

"The Crypto-C ME Module is RSA Security, Inc.'s cryptographic library designed for securing mobile devices like wireless phones and personal digital assistants. It contains assembly-level optimizations on key wireless processors while offering great flexibility and choice by allowing developers to select only the algorithms needed in reduced code sizes. Its functionality includes a wide range of data encryption and signing algorithms, including TDES, the high performing RC5, the RSA Public Key Cryptosystem, the DSA government signature algorithm, MD5 and SHA1 message digest routines, and more."

-David Broman
TEL: 46(0)8-55608119
FAX: 46(0)8-55608101

CBC(e/d)

"WVPN software that enables strong encryption and roaming on Windows client, Pocket PC and DOS-devices. Focus on security, performance and convenience."

-Lee Klarich
TEL: (408)543-8209
FAX: 408-543-8200

CBC(e/d)

"The core security processor within NS-5200 security system, which delivers firewall, VPN, and traffic management optimized for the most demanding environments such as high traffic e-business sites, co-location facilities, ASP/ISP data centers and enterprise central sites."

-Joe Wallace
TEL: 480-753-2279
FAX: 480-753-2380

CBC(e/d)

"The BCM5805 delivers industry leading performance and security functions for eCommerce and VPN applications."

-Tetsuo Nakakawaji
TEL: 81-0467-41-2186

ECB(e/d); CBC(e/d)

"Encryption Accelerator Card"

-Geoff Waters
TEL: (512)933-6419

ECB(e/d); CBC(e/d)

"The Cerberus PPC190 is a security co-processor, designed to accelerate encryption and authentication algorithms commonly used in networking and communications. The PPC190 connects to the host system via a PCI bus. See Technical Summary for additional details."

-Mike Harvey (Product Manager)
TEL: (905) 507-4220
FAX: (905) 507-4230

-Certicom Eastern US Sales Office
TEL: (571)203-0700
FAX: (571)203-9653

ECB(e/d); CBC(e/d); CFB( 64 bits;e/d); OFB(e/d)

"A standards-based cryptography toolkit that provides application developers with the sophisticated tools and flexibility needed to integrate encryption, digital signatures, and other security mechanisms into their applications. Security Builder GSE supports optimized Elliptic Curve Cryptography and the RSA algorithm."

-Renaud Presty
TEL: 33 1 47 46 61 83
FAX: 33 1 47 46 68 40

ECB(e/d); CBC(e/d)

"The Cyberflex Access 64K smart card can be employed in solutions which provide secure PKI (public key infrastructure) and digital signature technology. Cyberflex Access 64K serves as a highly portable, secure token for enhancing the security of network access and ensuring secure electronic communications. Cyberflex Access 64K supports on-card Triple DES and 1024-bit RSA algorithms with on-card key generation. It is compliant to Java Card v2.1.1 and Open Platform v2.0.1. The Cyberflex Access 64K smart card is part of a range of SchlumbergerSema highly secure, Java-based smart cards for physical and logical access, e-transactions and other applications."

-Barry K. Ward
TEL: 1-845-435-4881
FAX: 1-845-435-5540

ECB(e/d); CBC(e/d)

"The IBM 4758 PCI Cryptographic Coprocessor provides a secured environment in which application programs can perform and carry out cryptographic functions."

-Mr. David Kaplan
TEL: 972 3 902 97 30
FAX: 972 3 902 97 31

5/30/02 - Date certificate originally validated for ECB only; 12/16/02 - Date CBC validated - no reissuing of certificate - letter #51 received 5/31/02

ECB(e/d) ; CBC(e only)

"Secure PIN Entry Device (PED) for EFT POS Terminals. **NOTE: "XXX" in P/N indicates plastic case colour.**"

-Glenn Young
TEL: 408-399-3500

ECB(e/d); CBC(e/d)

"The 8065 chip is used in network security products. Security algorithms include DES, TDES, AES, and SHA-1, which conform to NIST requirements."

-Gabriel Waters
TEL: 880-453-1267

CBC(e/d)

"Novell International Cryptographic Infrastructure for Solaris"

-Lee Klarich
TEL: 408-543-8209
FAX: 408-543-8200

CBC(e/d)

"NetScreen 204/208 are purpose-built internet security appliances that deliver firewall, VPN, and traffic shaping optimized for the most demanding environments such as high traffic e-business sites, co-location facilities, ASP/ISP data centers and enterprise central sites."

-Marcus Streets
TEL: +1(781)994-4000

ECB(e/d); CBC(e/d)

"The nCipher algorithm library provides cryptographic functionality for nCipher's nForce 800/1600 secure e-commerce accelerators and nShield Hardware Security Modules."

-Raymond Tan
TEL: 408-437-9900 X5113
FAX: 408-437-1101

ECB(e/d); CBC(e/d); CFB( 64 bits;e/d)

"MSP2000 is Multi-Service Processor targeted at security appliances and business-class Ethernet-to-Ethernet routers where high-performance, secure communications is a key requirement."

-Michael J. Markowitz, VP R&D
TEL: (847)405-0500

ECB(e/d) ; CBC(e/d) ; CFB8(e/d) ; CFB64(e/d) ; OFB(e/d)

"A software development toolkit providing a comprehensive set of cryptographic primitives for use in any application. Includes RSA, DSA/Diffie-Hellman and elliptic curve algorithms, as well as a wide range of symmetric ciphers and hash functions."

-Glenn Young
TEL: (408)399-3500

ECB(e/d); CBC(e/d)

"The 8165 chip is used in network security products. Security algorithms include DES, TDES, AES, and SHA-1, which conform to NIST requirements."

-Joe Wallace
TEL: (480)753-2279
FAX: (480)753-2380

CBC(e/d)

"The BCM5821 delivers industry leading performance and security functions for eCommerce and VPN applications Systems with PCI"

-Kathy Kriese
TEL: (650)295-7692

ECB(e/d); CBC(e/d); CFB( 8,64 bits;e/d); OFB(e/d)

"The Crypto-J Module is a Java-language software dvelopment kit that allows software and hardware developers to incorporate encryption technologies directly into their products."

-Glenn Constable
TEL: (919)462-1900x212
FAX: (919)462-1933

ECB(e/d)

"The ATM Encryptor is a stand alone hardware product which sets between the customer's premise and the public network. It encrypts ATM traffic departing the customer's premise and decrypts ATM traffic received at the customer's premise. The ATM Encryptor contains 3 basic sections. The first is the Media Interface section. The second is the Encryption/Decryption section. And the third is the Control or "Host" section. For purposes of FIPS, this submission covers the Encryption ASIC [Alcatraz] used in the Encryption/Decryption section."

-Steve Reustle
TEL: (732)332-6281

CBC(e/d)

"The Brick 1000 is a carrier-grade integrated firewall and virtual private network (VPN) gateway appliance specifically designed for web/application data center security, large-scale managed security services, and remote access VPN services. Called the Brick because of its rugged, reliable design, this is an ideal platform for service providers seeking wide scalability, ready manageability, and industry-leading performance."

-Alexey Kirichenko
TEL: +358 9 2520 5548

ECB(e/d) ; CBC(e/d) ; CFB64(e/d) ; OFB(e/d) CTR

"The F-Secure Pocket PC Cryptographic Library is a 140-2 Level 1 compliant software module, implemented as a 32-bit Windows?CE compatible DLL for Pocket PC and Pocket PC 2002 platforms. The Module provides an assortment of cryptographic services to client processes that attach instances of the Module DLL."

-Roberta Eggert
TEL: (732)332-6189

CBC(e/d)

"The Access Point Operating System delivers IP services with multi-access routing, Quality of Service (QoS) with Class-Based Queuing (CBQ), secure Virtual Private Networks (VPN), firewall security, and policy management. And the service provider has the advantages of easy deployment to multi-size customer premises locations, and the implementation of flexible management facilities that can be both customer and/or service provider managed."

-Christopher Yasko
TEL: (770)521-5150
FAX: (770)521-8067

ECB(e/d) ; CBC(e/d)

"The Encryption Services Module is incorporated into the operating software of the Accompli 009 -- the first wireless communications device to incorporate tri-band GSM and GPRS protocols, phone functionality, Internet access, e-mail, Triple-DES encryption, WAP browser and short message service (SMS) with a full QWERTY keyboard and 256-color screen."

-Alfred Adler
TEL: 770-521-5128
FAX: 770-521-8066

ECB(e/d) ; CBC(e/d)

"The Encryption DLL Module is incorporated into the Motorola Messaging Server, an enterprise system for managing data between a corporate e-mail or database system and a wireless device, and the Motorola MyMail Desktop Plus, a personal application to manage e-mail between the desktop and a wireless device."

-Soheila Amiri
TEL: (954)958-3900 X3309

CBC(e/d)

"The cyberguard Firewall/VPN is a packet-filtering and application proxy gateway, which allows or blocks the routing of specific network services between networks based on a set of administrator-defined rules. Packet-filtering rules provide administrative control over hosts, services allowed through the firewall, and direction of communication. The VPN feature of CyberGuard Firewall ensures that this communication takes place over secure virtual private networks by using cryptographic algorithms to protect the data while en-route."

-Mike Harvey (Product Manager)
TEL: (905)507-4220
FAX: (905)507-4230

-Certicom Eastern US Sales Office
TEL: (571)203-0700
FAX: (571)203-9653

ECB(e/d); CBC(e/d); CFB( 64 bits;e/d); OFB(e/d)

"Security Builder GSE is a standards-based cryptography toolkit that provides application developers with the sophisticated tools and flexibility needed to integrate encryption, digital signatures, and other security mechanisms into their applications. Security Builder provides the cryptographic core for a variety of Certicom products, including movianCrypt(c), movianVPN(c), SSL Plus(c), Trustpoint(c), PKI products, toolkits, certificates, and WTLS Plus(c). Security Builder is also licensed to third party companies."

-Paul Des Rivieres
TEL: 301-515-5200 x5417

ECB(e/d) ; CBC(e/d) ; CFB64(e/d)

"V-ONE Corporations SmartGate is leading client/server Virtual Private Network (VPN) software that provides enterprise-level security to network-based users for private information and private TCP/IP application services. SmartGate provides encryption, strong user authentication, authorization, management, accounting, key distribution, and proxy capabilities. It consists of server (SmartGate) and client (SmartPass) software."

-Bruno Blanchard
TEL: +33 1 46007456
FAX: +33 1 46 00 6826

ECB(e/d)

"The Cryptoflex e-Gate card is a credit-card sized computer with a crypto-processor dedicated to security and implements security industry functions based on public key cryptography directly onto the card. Incorporates, apart from the conventional ISO 7816-3 interface, also the USB interface normally resident in the smartcard reader."

-Alexey Kirichenko
TEL: +358 9 2520 5548

ECB(e/d); CBC(e/d); CFB( 64 bits;e/d); OFB(e/d)

"The F-Secure Kernel Mode Cryptographic Driver is a 140-2 Level 1 compliant software module, implemented as a 32-bit Windows NT/2000/XP compatible export driver. When loaded into computing system memory, it resides at the Kernel Mode level of the Windows OS and provides an assortment of cryptographic services that are accessible by other kernel mode drivers through an Application Program Interface (API)."

-Mike Lai

ECB(e/d); CBC(e/d)

"The Microsoft Enhanced Cryptographic Provider (RSAENH) is a FIPS 140-1 Level 1 compliant, general-purpose, software-based, cryptographic module. It encapsulates several different cryptographic algorithms (SHA-1, DES, 3DES, AES, RSA, SHA-1-based HMAC) in an easy-to-use cryptographic module accessible via the Microsoft CryptoAPI. Can be dynamically linked into applications to permit the use of general-purpose FIPS 140-1 Level 1 compliant cryptography."

-Luc Astier, Product Line Manager
TEL: +33 (0) 4 42 36 50 00
FAX: n/a

ECB(e/d); CBC(e/d)

"The "GemXpresso Pro E64 PK - FIPS with ActivCard Applet Suite" is based on a Gemplus Open OS Smart Card (Java Card 2.1.1, OP 2.0.1, 64K of EEPROM), and on platform-independent cryptographic applets developed by ActivCard (ID, PKI, and GC applets). The card and applets provide authentication and digital signature cryptographic services to end-users."

-Satpal S Sahni
TEL: 703-281-5015

ECB(e/d); CBC(e/d); CFB( 8,64 bits;e/d); OFB(e/d)

"T2CSS is a multiple cryptoprocessor PCI board and cryptographic server. Provides high assurance security services; secure session/virtual token management; scalabel server performance(multiple boards); Government and commercial algorithms; FORTEZZA CI, PKCS #11, other APIs; and Windows NT/2000, Solaris and Linux support."

-Hasan Alkhatib, Ph.D
TEL: 1-(866)-QUIK-VPN
FAX: (408)369-6904

CBC(e/d)

"A VPN software suite for intuitively configuring and deploying centrally managed secure networks."

-Shaul Shohat
TEL: +972-3-765-7001
FAX: +972-3-645-5559

OFB(e/d)

"Integrated into Ceragon Networks' FibeAir family, this unique wireless encryption solution allows encrypted 155Mbps+ wireless connectivity in licensed frequency bands. This solution enables the highest information security, without degrading the wireless link performance and all its features."

-Randy Morton
TEL: (480)441-4472
FAX: (480)441-358

ECB(e/d); CBC(e/d); CFB( 1 bit;e/d); OFB(e/d)

"(SW Version ASIC developed from: API R02,01,Alg R01.01) The Armor cryptographic processor is used in security modules embedded in Motorola's Astro family of radio system products. It provides secure voice and data capabilities as well as APCO Over-The-Air-Rekeying and advanced key management."

-Timothy J. Barton
TEL: (210)402-9669
FAX: n/a

CFB( 64 bits;e/d)

"PBX-independent, easy-to-use management platform that supports telecommunications security, telephony, and management applications for real-time visibility, security, and control of telecommunications resources across the enterprise. Composed of ETM Management Server and TeleView Console, both written in Java and typically used in a distributed architecture across an enterprise LAN or WAN. Utilizes a common library of DES and TDES encryption routines to secure their network communications."

-Timothy J. Barton
TEL: (210)402-9669
FAX: n/a

CFB( 64 bits;e/d)

"PBX-independent, easy-to-use management platform that supports telecommunications security, telephony, and management applications for real-time visibility, security, and control of telecommunications resources across the enterprise. Primary components of the ETM Platform are the ETM Communications Appliances. Custom designed devices installed inline on the telecommunication system to monitor and control T1 CAS, analog, and ISDN PRI (both T1 and E1) telecommunications circuits. Uses a C library of DES and TDES encryption routines to secure their network communications to the ETM Management Server."

-Antoine Kelman
TEL: (310)763-6378
FAX: N/A

ECB(e/d); CBC(e/d)

"The CosmopolIC 2.1 V4 product is a highly secure and powerful multi-application Java Card platform for smart cards. The product is fully interoperable and complies with JavaCard 2.1.1 and Open Platform 2.0.1 standards. It supports both T=0 and T=1 protocols, DES, 3DES, SHA, RSA signature and key generation up to 2048 bits."

-Ray Potter
TEL: 919-392-6789

CBC(e/d)

"The Cisco VPN 3000 Concentrator Series is a best-of-breed, remote-access VPN solution for enterprise-class deployment. Includes Hardware Models 3005, 3015, 3030,3060,3080 3002 Hardware Client."

-Mr. Mikel Draghici
TEL: (732)416-1313
FAX: (730)416-1370

ECB(e/d)

"Employs hard disk encryption to guarantee that no users can access or manipulate information on an encrypted device, either from available files, erased files, or temporary files. Safeguards the operating system and the important system files (which often contain clues to passwords for Windows), shared devices, and the network."

-Dawn Cole
TEL: (941)596-8962

CBC(e/d); CFB( 8 bits;e/d)

"SafeBoot is a high performance software solution that provides sector-level encryption of a PC's hard drive in a manner that is totally transparent to the user. In addition, the centralized SafeBoot management system provides robust recovery tools, administration, and implementation."

-Chini Krishnan
TEL: (650)567-5414
FAX: (650)254-2148

ECB(e/d); CBC(e/d)

"A module that will contain DES, TDES, and SHA-1 algorithms. The module willl be included in a variety of ValiCert products. E.g., Included in ValiCert Validation Authority (VA), ValiCert Transaction Authority (TA), ValiCert Secure Transport (ST)."

-Thomas Chuang
TEL: 886-3-5910197
FAX: 886-3-5910204

ECB(e/d)

"A real-time IDE crypto gateway, X-Wall DX/SE-64 sits between PCI south bridge and the device on the IDE interface. It intercepts, interprets, translates, and relays IDE command and data to and from the disk drive, encrypting entire disc content including boot sector and OS using DES 56 bits strength. Hardware Platform: ATA-5"

-Scott Armstrong
TEL: (703)715-3028
FAX: (703)980-1552

-Mark Elliot
TEL: (310)364-5255
FAX: (916)716-1377

CBC(e/d)

"Integrates access control, authentication and encryption to guarantee the security of corporate network connections, and the authenticity of local and remote users, satellite offices and key partners. It may be deployed on a wide range of platforms for maximum flexibility and scalability."

-Greg Farmer
TEL: (434)455-6600
FAX: (434)455-6851

OFB(e/d)

"Jaguar handheld radio . System and scan versions. Aegis/ProVoice digital voice with DES encryption."

-Donald Snook
TEL: (973)772-6997

CFB( 8 bits;e/d)

"Single Port Triple DES encryption modem (hardware)"

-Peter Sim
TEL: +61 3 9886 0128

CFB( 64 bits;e/d)

"FPGA implemenation of DES and TDES in CFB mode"

-Peter Sim
TEL: +61 3 9886 0128

CBC(e/d)

"Software implementation of DES in CBC mode"

-Ray Potter
TEL: 919-392-6789

CBC(e/d)

"The ISM is a single-width service module. It provides high-performance, hardware-assisted tunneling and encryption services suitable for VPN remote access and site-to-site intranet/extranet applications while working with all services necessary for successful VPN deployments. The ISM off-loads IPSec and MPPE processing from the main processor of the Cisco 7100 series router, thus freeing resources on the processor engine."

-Ray Potter
TEL: 919-392-6789

CBC(e/d)

"The ISA is a single-width service adapter. It provides high-performance, hardware-assisted tunneling and encryption services suitable for VPN remote access and site-to-site intranet/extranet applications while working with all services necessary for successful VPN deployments. The ISA off-loads IPSec and MPPE processing from the main processor of the Cisco 7200 series router, thus freeing resources on the processor engine."

-Phil Papenfuss
TEL: (408)399-3500

ECB(e/d); CBC(e/d)

"Used in network security products. Security algorithms include DES, TDES, and SHA-1, which conform to NIST requirements."

-Carlos Fox
TEL: (613) 723-5077
FAX: (613) 723-5078

ECB(e/d); CBC(e/d)

&quo