Collaborate Disseminate
I’m working on a system that needs to use cryptographic functions that must be FIPS 140-2, Level 1 validated. The challenging part is that some of this system needs to run in the browser. For maintainability reasons and ease … Continue reading FIPS 140-2, Level 1 validation vs. compilation
I’m testing a SafeNet 5100 token FIPS 140-2 level 3. It comes with programs to access and manage it, but only for desktop machines.
I would like to create applications that use level 3 tokens. Is there any level 3 token that provides acce… Continue reading Token FIPS 140-2 level 3 with support for Android, iPhone and Web
This is a really basic question, but I’m a newbie in security. What I’m wondering is: How do I share a password for an encrypted document in a FIPS 140-2 compliant manner? That is, say I have a PDF, DocumentA, encrypted wit… Continue reading How do I share a password in a FIPS-compliant manner?
Please bear in mind that I have no cyber-security background at all, but have been tasked by my company with making certain applications on our platform FIPS-compliant.
From what I’ve discussed with my co-workers, our platform requires a … Continue reading What is the general approach to create FIPS compliant SSH?
I want to know different between FIPS 196(public key for authentication) and ssl for Authentication. If we told FIPS 196, which is the core of most authentication protocols in use (e.g. SSL)is it ok?
And we us know if use SSL… Continue reading different between fips 196 and SSL for Authentication
I want to know the difference between FIPS 196 (public key for authentication) and SSL for authentication. If we claim FIPS 196, which is the core of most authentication protocols in use (e.g. SSL) is it ok?
And if we use SS… Continue reading Difference between FIPS 196 and SSL for authentication?
I want to compare information security management standards of different countries (USA, Australia, UK and my home country), and I want to suggest better standard for my home country (my home country is following a standard b… Continue reading How can I compare information security management standards between my country and other countries and, suggest better standards for my home country?
Aidan Finn tells you about a service in Azure called Key Vault, which you can think of as secret storage/handling-as-a-service.
The post How Can I Store Secrets in Azure? appeared first on Petri.
I am involved in the creation of a device that will be used in secured facilities. The product team has, for whatever reason, decided to use Windows (so please, no OS flame wars). As I look at applying security to this OS b… Continue reading Demonstrable benefits to implementing FIPS mode?
I have a CentOS 7.4 box running kernel 3.10 that has the fips=1 parameter defined in the kernel grub statement. If I attempt to add an IPSEC SA with the following command it fails:
ip xfrm state add src 0.0.0.0 dst 192.1… Continue reading Is ESP without AH considered noncompliant with FIPS 140-2?