FIPS 140 status of BSAFE cryptographic modules

BSAFE Cryptographic Modules FIPS 140 Status

Dell submits the BSAFE software cryptographic modules for FIPS 140 validation. Older modules have been submitted and validated against FIPS 140-2, while newer modules are being submitted for FIPS 140-3.

The tables below present the status of BSAFE FIPS 140 cryptographic modules, whether they have received their FIPS certificate, or have been submitted for validation, and the FIPS validation level(s) they have been submitted for.

Links to the Cryptographic Module Validation Program (CMVP) certificates and Security Policy, and Cryptographic Algorithm Validation Program (CAVP) certificates, are also provided.

BSAFE Crypto Module for C

Version	CMVP Certificate / Security Policy	CAVP Certificate	FIPS Level details	Last validation	Sunset date	Validity status
3.1	Implementation Under Test		FIPS 140-3 Level 1			In progress
3.0.1	4967 Security Policy	A2308	FIPS 140-3 Level 1	February 19, 2025	February 18, 2027	Valid
2.0	4942 Security Policy	A1204	FIPS 140-3 Level 1	January 16, 2025	January 15, 2027	Valid
1.1	4172 Security Policy	C1846	FIPS 140-2 Level 1	September 1, 2023	September 21, 2026	Valid
1.0	3409 Security Policy	C3	FIPS 140-2 Level 1	March 20, 2019	March 19, 2024	Historical

Table 1: FIPS 140 status of BSAFE Crypto Module for C

BSAFE Entropy Source

Name	Version	ESV Certificate / Public Use Document	CAVP Certificate	Used in
Dell BSAFE™ Crypto Module Entropy Source	3.0.1	E277 Public Use Document	A2308	BSAFE Crypto Module 3.0.1
Dell BSAFE Entropy Source	1.0	E230 Public Use Document	A6127	BSAFE Crypto Module 3.1

Table 1: Entropy Source Validation status of BSAFE Entropy Source

BSAFE Crypto-J

BSAFE Crypto-J is composed of multiple internal modules, one of them is the Java Cryptographic Module (JCM).

Only the JCM is submitted for FIPS 140 validation, which explains why Crypto-J 6.2.6, as an example, includes BSAFE® Crypto-J JSAFE and JCE Software Module version 6.2.5

The table below refers to the FIPS 140 module version having been validated.

Version	CMVP Certificate / Security Policy	CAVP Certificate	FIPS Level details	Last validation	Sunset date	Validity status
7.1	Review Pending	A6943	FIPS 140-3 Level 1			In progress
7.0	4892 Security Policy	A2314	FIPS 140-3 Level 1	November 19, 2024	November 18, 2026	Valid
6.3	4697 Security Policy	A3218 A7092	FIPS 140-2 Level 1	April 30, 2024	February 16, 2026	Valid
	4696 Security Policy	A3218	FIPS 140-2 Level 2	April 30, 2024	February 16, 2026	Valid
6.2.5	4645 Security Policy	C662	FIPS 140-2 Level 1	October 25, 2023	February 16, 2026	Valid
	4646 Security Policy	C662	FIPS 140-2 Level 2	October 25, 2023	February 16, 2026	Valid
	3819 Security Policy	C662 C1762	FIPS 140-2 Level 1	February 17, 2021		Historical
	3820 Security Policy	C662 C1762	FIPS 140-2 Level 2	February 17, 2021		Historical
6.2.4	3172 Security Policy		FIPS 140-2 Level 1	April 16, 2018	April 15, 2023	Historical
	3184 Security Policy		FIPS 140-2 Level 2	May 22, 2018	May 21, 2023	Historical
6.2 6.2.1.1 6.2.1.2	3505 Security Policy		FIPS 140-2 Level 2	August 8, 2019		Historical
	3611 Security Policy		FIPS 140-2 Level 1	January 28, 2020		Historical
6.2 6.2.1.1	2468 Security Policy		FIPS 140-2 Level 2	February 9, 2017		Historical
	2469 Security Policy		FIPS 140-2 Level 1	February 9, 2017		Historical
6.1 6.1.1.0.1	2057 Security Policy		FIPS 140-2 Level 2	May 10, 2016		Historical
	2058 Security Policy		FIPS 140-2 Level 1	May 10, 2016		Historical
6.0	1786 Security Policy		FIPS 140-2 Level 2	May 3, 2016		Historical
	1785 Security Policy		FIPS 140-2 Level 1	May 3, 2016		Historical

Table 2: FIPS 140 status of BSAFE Crypto-J JSAFE and JCE Software Module, and BSAFE Crypto Module for Java
 

BSAFE Crypto-C Micro Edition

BSAFE Crypto-C Micro Edition SDK version matches the BSAFE Crypto-C Micro Edition FIPS Module version.
The table below also documents the version of BSAFE Crypto-C Micro Edition FIPS Module used by different BSAFE Micro Edition Suite versions.

Version	Used in	CMVP Certificate / Security Policy	CAVP Certificate	FIPS Level details	Last validation	Sunset date	Validity status
4.1.5	Micro Edition Suite 4.6.x and 5.x	4305 Security Policy	C2130 A7066	FIPS 140-2 Level 1	April 12, 2023	September 21, 2026	Valid
		4306 Security Policy	C2130	FIPS 140-2 Level 2	April 12, 2023	September 21, 2026	Valid
4.1.4	Micro Edition Suite 4.4 and 4.5.x	4470 Security Policy	C584	FIPS 140-2 Level 1	April 11, 2023	November 15, 2025	Valid
		3743 Security Policy	C584	FIPS 140-2 Level 1	November 16, 2020		Historical
		4197 Security Policy	C584	FIPS 140-2 Level 2	April 18, 2022	September 21, 2026	Valid
4.1 4.1.0.1 4.1.2 4.1.2.2 4.1.3.2	Micro Edition Suite 4.1.x, 4.2.x and 4.3.x	2300 Security Policy	4.1.2.2: C810	FIPS 140-2 Level 1	January 29, 2018		Historical
		2294 Security Policy	4.1.2.2: C810	FIPS 140-2 Level 2	January 29, 2018		Historical
4.0.1 4.0.2.5	Micro Edition Suite 4.0.x	2097 Security Policy		FIPS 140-2 Level 1	January 5, 2017		Historical
		2056 Security Policy		FIPS 140-2 Level 2	January 5, 2017		Historical
4.0.1	Micro Edition Suite 4.0.x	2217 Security Policy		FIPS 140-2 Level 1	February 3, 2016		Historical
		2047 Security Policy		FIPS 140-2 Level 2	February 3, 2016		Historical
3.0.x	Micro Edition Suite 3.x	1092 Security Policy		FIPS 140-2 Level 1	February 12, 2016		Historical
3.0	Micro Edition Suite 3.x	1058 Security Policy		FIPS 140-2 Level 1	February 12, 2016		Historical

Table 3: FIPS 140 status of BSAFE Crypto-C Micro Edition FIPS Module