This page was not yet optimized for use on mobile devices.
Quantum Security Gateway Cryptographic Library
Certificate details
| Certificate ID | #4264 |
|---|---|
| Status | historical |
| Historical reason | Moved to historical list due to sunsetting |
| Validation dates | 15.07.2022 , 26.08.2022 , 30.05.2023 , 25.09.2023 , 29.07.2025 , 27.08.2025 , 24.02.2026 |
| Standard | FIPS 140-2 |
| Security level | 1 |
| Type | Firmware |
| Embodiment | Multi-Chip Stand Alone |
| Caveat | When operated in FIPS mode and installed, initialized and configured as specified in the Security Policy Section 3 Secure Operation |
| Exceptions |
|
| Description | The Check Point Cryptographic Library is a firmware module that provides cryptographic services to Check Point products. The module provides a number of NIST validated cryptographic algorithms for services such as IPSec and TLS. The module provides applications with a library interface that enables them to access the various cryptographic algorithm functions supplied by the module. |
| Version (Firmware) | 1.1 |
| Tested configurations |
|
| Vendor | Check Point Software Technologies Ltd. http://www.checkpoint.com |
| Lab | Leidos Accredited Testing & Evaluation (AT&E) Lab, Gossamer Security Solutions |
| Algorithms | |
| References | This certificate's webpage directly references 0 certificates, transitively this expands into 0 certificates. |
Security policy
Extracted keywords
Symmetric Algorithms
AES, DES, Triple-DES, SEED, HMAC, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512, CMACAsymmetric Algorithms
ECDSA, Diffie-HellmanHash functions
SHA-1, SHA1, SHA-256, SHA-384, SHA-512Schemes
Key Exchange, Key exchange, Key AgreementProtocols
TLS, TLSv1.2, IKE, IKEv1, IKEv2, IPsecRandomness
DRBG, RNG, RBGElliptic Curves
P-256, P-384, P-521Block cipher modes
CBC, GCMSecurity level
Level 1Automated analysis
Automated inference - use with caution
All attributes shown in this section (e.g., links between certificates, products, vendors, and known CVEs) are generated by automated heuristics and have not been reviewed by humans. These methods can produce false positives or false negatives and should not be treated as definitive without independent verification. This applies equally to the Cross-references section below. If you want to know more about how this data is computed and how reliable it is, see our documentation on automated analysis. If you believe any information here is inaccurate or harmful, please submit feedback.No automatically derived data are available in this section.
Cross-references
No references are available for this certificate.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate data changed.
-
The certificate was first processed.
{
"_type": "sec_certs.sample.fips.FIPSCertificate",
"cert_id": 4264,
"dgst": "7ddb44478c5fe21a",
"heuristics": {
"_type": "sec_certs.sample.fips.FIPSCertificate.Heuristics",
"algorithms": {
"_type": "Set",
"elements": [
"KAS#A4283",
"ECDSA#A4283",
"SHS#A4283",
"DRBG#A4283",
"HMAC#A4283",
"#1750",
"KAS#514",
"HMAC#2176",
"SHS#2824",
"RSA#1750",
"CVL#A4283",
"#3418",
"CVL#514",
"#A4283",
"#2824",
"AES#3418",
"#685",
"RSA#A4283",
"AES#A4283",
"ECDSA#685",
"#2176",
"DRBG#823",
"#514",
"#823"
]
},
"cpe_matches": null,
"direct_transitive_cves": null,
"extracted_versions": {
"_type": "Set",
"elements": [
"1.1"
]
},
"indirect_transitive_cves": null,
"module_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"module_prunned_references": {
"_type": "Set",
"elements": []
},
"policy_processed_references": {
"_type": "sec_certs.sample.certificate.References",
"directly_referenced_by": null,
"directly_referencing": null,
"indirectly_referenced_by": null,
"indirectly_referencing": null
},
"policy_prunned_references": {
"_type": "Set",
"elements": []
},
"related_cves": null,
"verified_cpe_matches": null
},
"pdf_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.PdfData",
"br1_deviations": 44,
"br1_tables": null,
"is_br1_format": false,
"keywords": {
"asymmetric_crypto": {
"ECC": {
"ECDSA": {
"ECDSA": 18
}
},
"FF": {
"DH": {
"Diffie-Hellman": 5
}
}
},
"certification_process": {},
"cipher_mode": {
"CBC": {
"CBC": 1
},
"GCM": {
"GCM": 1
}
},
"cplc_data": {},
"crypto_engine": {},
"crypto_library": {},
"crypto_protocol": {
"IKE": {
"IKE": 11,
"IKEv1": 1,
"IKEv2": 1
},
"IPsec": {
"IPsec": 5
},
"TLS": {
"TLS": {
"TLS": 17,
"TLSv1.2": 1
}
}
},
"crypto_scheme": {
"KA": {
"Key Agreement": 1
},
"KEX": {
"Key Exchange": 2,
"Key exchange": 2
}
},
"device_model": {},
"ecc_curve": {
"NIST": {
"P-256": 14,
"P-384": 8,
"P-521": 20
}
},
"eval_facility": {},
"fips_cert_id": {
"Cert": {
"#1750": 1,
"#2176": 1,
"#2824": 1,
"#3418": 1,
"#514": 2,
"#685": 1,
"#823": 1
}
},
"fips_certlike": {
"Certlike": {
"AES #3418": 1,
"AES (128": 1,
"DRBG #823": 1,
"HMAC #2176": 2,
"HMAC-SHA-1": 4,
"HMAC-SHA-256": 4,
"HMAC-SHA-384": 4,
"HMAC-SHA-512": 4,
"RSA #1750": 1,
"SHA- 512": 1,
"SHA-1": 8,
"SHA-256": 9,
"SHA-384": 7,
"SHA-512": 8,
"SHA1": 1,
"SHS #2824": 1
}
},
"fips_security_level": {
"Level": {
"Level 1": 2
}
},
"hash_function": {
"SHA": {
"SHA1": {
"SHA-1": 8,
"SHA1": 1
},
"SHA2": {
"SHA-256": 9,
"SHA-384": 7,
"SHA-512": 8
}
}
},
"ic_data_group": {},
"javacard_api_const": {},
"javacard_packages": {},
"javacard_version": {},
"os_name": {},
"pq_crypto": {},
"randomness": {
"PRNG": {
"DRBG": 19
},
"RNG": {
"RBG": 1,
"RNG": 2
}
},
"side_channel_analysis": {},
"standard_id": {
"FIPS": {
"FIPS 140-2": 16,
"FIPS 1402": 1
},
"NIST": {
"SP 800-56A": 3,
"SP 800-90A": 12
}
},
"symmetric_crypto": {
"AES_competition": {
"AES": {
"AES": 4
}
},
"DES": {
"3DES": {
"Triple-DES": 3
},
"DES": {
"DES": 2
}
},
"constructions": {
"MAC": {
"CMAC": 1,
"HMAC": 5,
"HMAC-SHA-256": 2,
"HMAC-SHA-384": 2,
"HMAC-SHA-512": 2
}
},
"miscellaneous": {
"SEED": {
"SEED": 1
}
}
},
"tee_name": {},
"tls_cipher_suite": {},
"vendor": {},
"vulnerability": {}
},
"module_algorithms": {
"_type": "Set",
"elements": [
"KAS#A4283",
"CVL#514",
"ECDSA#A4283",
"RSA#1750",
"SHS#A4283",
"DRBG#A4283",
"HMAC#A4283",
"AES#3418",
"ECDSA#685",
"DRBG#823",
"CVL#A4283",
"KAS#514",
"RSA#A4283",
"AES#A4283",
"HMAC#2176",
"SHS#2824"
]
},
"policy_algorithms": {
"_type": "Set",
"elements": [
"#A4283",
"#2824",
"#1750",
"#2176",
"#685",
"#514",
"#3418",
"#823"
]
},
"policy_metadata": {
"/CreationDate": "D:20250715150317-04\u002700\u0027",
"/Creator": "Aspose Pty Ltd.",
"/ModDate": "D:20251117143559+00\u002700\u0027",
"/Producer": "Aspose.PDF for Java 25.2",
"pdf_file_size_bytes": 760230,
"pdf_hyperlinks": {
"_type": "Set",
"elements": [
"https://protect.checkpoint.com/v2/r02/___https://protect.checkpoint.com/v2/r02/___https:/en.wikipedia.org/wiki/Hypervisor___.YzJlOmNwYWxsOmM6bzoyODlhYWFkYjE1YzkwNTNiMjY5YjBjMWU0N2UwZDA4ZTo3OjNkOGI6MjZmZjM1MDExZTU1MmEwZmU4YTYyN2NiOWU2NzYzMDhmMzk4ZDkwYmZiYWU2ODhiZTFiNDk3ZDZhY2Y3YTgzMDpwOkY6Tg%23Classification___.YzJlOmNwYWxsOmM6bzozY2Y2ZTM1ZTc0YjA4YWE2YjU4NjEwNjhmYmUyNTE0MTo3OmJlMTQ6YWI5MGNiNTkwMzc1ZDI3YWE5ZDY1NzQ3Yjk1NTQ1YjY4ZWQ5YzVkOTYzOTk3NWFiNDJjNjViMTQxZDczM2JjODpwOlQ6Tg"
]
},
"pdf_is_encrypted": false,
"pdf_number_of_pages": 32
}
},
"state": {
"_type": "sec_certs.sample.fips.InternalState",
"module": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": null,
"source_hash": null,
"txt_hash": null
},
"policy": {
"_type": "sec_certs.sample.document_state.DocumentState",
"convert_ok": true,
"download_ok": true,
"extract_ok": true,
"json_hash": "789e7bf876ce0c25daad2f81943eaa98a6dc9c4ec94b0f17a9fbd8a671ab7d5f",
"source_hash": "93c9e5c60548385cd61a53f799c03c2200921bfe455418e5905704ed65510c90",
"txt_hash": "ab9616e62ab39914da83e0ef71272a3295593fe8321718d90880d1c88caefa2d"
}
},
"web_data": {
"_type": "sec_certs.sample.fips.FIPSCertificate.WebData",
"caveat": "When operated in FIPS mode and installed, initialized and configured as specified in the Security Policy Section 3 Secure Operation",
"certificate_pdf_url": "https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/certificates/July 2022_010822_0659_signed.pdf",
"date_sunset": null,
"description": "The Check Point Cryptographic Library is a firmware module that provides cryptographic services to Check Point products. The module provides a number of NIST validated cryptographic algorithms for services such as IPSec and TLS. The module provides applications with a library interface that enables them to access the various cryptographic algorithm functions supplied by the module.",
"embodiment": "Multi-Chip Stand Alone",
"exceptions": [
"Mitigation of Other Attacks: N/A"
],
"fw_versions": "1.1",
"historical_reason": "Moved to historical list due to sunsetting",
"hw_versions": null,
"level": 1,
"mentioned_certs": {},
"module_name": "Quantum Security Gateway Cryptographic Library",
"module_type": "Firmware",
"revoked_link": null,
"revoked_reason": null,
"standard": "FIPS 140-2",
"status": "historical",
"sw_versions": null,
"tested_conf": [
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1530 with a Marvell ARMADA 7040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1535 with a Marvell ARMADA 7040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1550 with a Marvell ARMADA 7040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1555 with a Marvell ARMADA 7040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1570 with a Marvell ARMADA 8040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1570R with a Marvell ARMADA 7040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1575 with a Marvell ARMADA 8040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1575R with a Marvell ARMADA 7040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1590 with a Marvell ARMADA 8040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1595 with a Marvell ARMADA 8040 (ARM Cortex-A72)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1600 with a Marvell OCTEON TX2 CN9250 (Marvel TX2)",
"Check Point Embedded GAiA Operating System version R81.10.10 with Check Point 1800 with a Marvell OCTEON TX2 CN9250 (Marvel TX2)",
"Check Point GAiA Operating System version R81.20 with Check Point 9100 with a 13th Generation Intel Core i3-13100E (Raptor Lake)",
"Check Point GAiA Operating System version R81.20 with Check Point 9300 with a 13th Generation Intel Core i5-13400E (Raptor Cove)",
"Check Point GAiA Operating System version R81.20 with Check Point 9400 with a 13th Generation Intel Core i5-13500E (Raptor Cove)",
"Check Point GAiA Operating System version R82 with Check Point 9100 with a 13th Generation Intel Core i3-13100E (Raptor Lake)",
"Check Point GAiA Operating System version R82 with Check Point 9300 with a 13th Generation Intel Core i5-13400E (Raptor Cove)",
"Check Point GAiA Operating System version R82 with Check Point 9400 with a 13th Generation Intel Core i5-13500E (Raptor Cove)",
"Check Point GAiA OS version R80.30 on VMware ESXi 6.0.0 running on a HPE DL360 gen 10 with a 2nd Generation Intel Xeon Silver",
"Check Point GAiA OS version R80.30 with Check Point 16200 Plus with a 2nd Generation Intel Xeon Silver",
"Check Point GAiA OS version R80.30SP with Check Point 28000 with a 2nd Generation Intel Xeon Gold",
"Check Point GAiA OS version R81.10 with Check Point 3600 with an Intel Atom C Series",
"Check Point GAiA OS version R81.10 with Check Point 7000 with a 2nd Generation Intel Xeon Silver (single-user mode)"
],
"validation_history": [
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2022-07-15",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Initial"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2022-08-26",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2023-05-30",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2023-09-25",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-07-29",
"lab": "Leidos Accredited Testing \u0026 Evaluation (AT\u0026E) Lab",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2025-08-27",
"lab": "Gossamer Security Solutions",
"validation_type": "Update"
},
{
"_type": "sec_certs.sample.fips.FIPSCertificate.ValidationHistoryEntry",
"date": "2026-02-24",
"lab": "Gossamer Security Solutions",
"validation_type": "Update"
}
],
"vendor": "Check Point Software Technologies Ltd.",
"vendor_url": "http://www.checkpoint.com"
}
}