2021 FIPS 140-2 Cert. Stats
The CMVP posted 331 FIPS 140-2 certificates in 2021, the most in program history. For the individual CST Labs, Acumen Security produced a record number of FIPS 140-2 certificates. atsec and UL are 2nd …
Tested Configurations for OpenSSL 3.0
The OpenSSL Project’s FIPS 140-2 validation report for the OpenSSL FIPS Provider was submitted to the CMVP on September 17, 2021. The OpenSSL FIPS Provider cryptographic module is part of …
2020 FIPS 140-2 Cert. Stats
In 2020, Acumen Security produced the most FIPS 140-2 certificates. UL and atsec are 2nd and 3rd respectively. The number of FIPS 140-2 certificates issued each year continues to decline …
2019 FIPS Cert. Stats
In 2019, the CMVP issued 236 FIPS 140-2 certificates. Acumen Security produced the most number of certificates (52) for their customers. Security Level 1 certificates accounted for 58% of the …
FIPS 186-2 Transition
If your FIPS 140-2 module includes any FIPS 186-2 algorithms (other than signature verification), then you may be one of the 100+ modules bumped to the CMVP’s historical list (aka …
KeyPair FIPS Cert. #3503 updated
The KeyPair FIPS Object Module for OpenSSL (FIPS 140-2 Cert. #3503) now includes CentOS 6, CentOS 7, and Ubuntu 18.04 as Tested Configurations. This FIPS module provides FIPS 186-4 RSA …
FIPS 140-3 timeline
FIPS 140-3 is now published on the Federal Register. The important dates of interest with additional details follow: FIPS 140-3 is effective September 22, 2019. This is likely the earliest …
CMVP queue post shutdown
After the US government shutdown at the end of 2018 / beginning of 2019, the CMVP queue of FIPS 140-2 reports is in better shape than it was after the …
FIPS 140-2 Cert. Report for 2018
We’ve done the work consolidating the data into graphs to show the FIPS 140-2 program performance for 2018. Also included in the report are five-year trending graphs. FIPS Cert Stats …
CVE Got Your FIPS Module?
Q: I need to apply a fix to my FIPS 140-2 module to address a CVE. What process do I follow to maintain my FIPS 140-2 certificate? The Implementation Guidance for …