Collaborate Disseminate
Our product is a product that uses Apache HTTPD, Tomcat and MonodDB.
We use OpenSSL for HTTPS connection and Bouncy Castle library for the encryption of data in the database.
What does it mean to be FIPS 140-2 compliant ?
Is it enough to u… Continue reading What does it mean to be FIPS 140-2 compliant?
I have successfully built OpenSSL-FIPS according to specifications and am wondering if I configure the OpenSSL path in HAProxy (or any other reverse proxy for that matter) to use the OpenSSL-FIPS install, wouldn’t the reverse proxy also be… Continue reading HAProxy FIPS Compliance
I’m specifically concerned with EdDSA being made FIPS compliant, which I realize might take longer with the concerns raised with ECDSA, but I’m curious what the process actually is.
Is it all internal to NIST with just the Public Comment P… Continue reading What is the NIST/FIPS publication process? How long does it usually take for drafts to become final?
I’m specifically concerned with EdDSA being made FIPS compliant, which I realize might take longer with the concerns raised with ECDSA, but I’m curious what the process actually is.
Is it all internal to NIST with just the Public Comment P… Continue reading What is the NIST/FIPS publication process? How long does it usually take for drafts to become final?
Someone has a service that uses a FIPS non-compatible hash in a protocol signature. When FIPS 140-2 compatibility is enabled on the hosts the service crashes (due to the hash signature being not allowed by the security configuration of th… Continue reading Is running software in Docker an allowable way to bypass FIPS 140-2 issues?
Could anyone help me understand security certificates for software? Let’s suppose we’re talking about a complex application that has a desktop version and a cloud version as well. The final goal is to adjust its code to some recognized sta… Continue reading Security certificates for software [closed]
Is it possible to generate a PKCS12 keystore that will be FIPS compliant? In regular mode, I’m using “1.2.840.113549.1.12.1.3” – pbeWithSHAAnd3-KeyTripleDES-CBC(3) algorithm to encrypt private keys, while leaving the certific… Continue reading Can a PKCS12 keystore be FIPS compliant?
Appreciate any help on the following.
Built OpenSSL Fips Module and then ‘static binaries’ of FIPS capable OSSL which ‘statically link to the windows run-time’.
Thus, my application binary (FipsApp.exe) does not depend on O… Continue reading Fingerprint mismatch only for 32-bit DLL linked statically to FIPS Capable OpenSSL
I searched for Yubico on this NIST validated modules but found only a module from the Yubico 4 series.
(https://csrc.nist.gov/Projects/Cryptographic-Module-Validation-Program/Validated-Modules/Search)
Between Yubikey FIPS vs Yubikey HSM2,… Continue reading Is Yubikey HSM2 FIPS Compliant?
I am trying to get an sshkey so I can configure remote ssh between a Windows system and Redhat 7 system.
When I run the ssh-keygen which is in fips mode I can not get the puttygen to accept the imported key pairs.
puttygen…. Continue reading SSH-KEYGEN with FIPS system