CVE Got Your FIPS Module?
Q: I need to apply a fix to my FIPS 140-2 module to address a CVE. What process do I follow to maintain my FIPS 140-2 certificate? The Implementation Guidance for …
OpenSSL FIPS Module w/new Tested Configurations
KeyPair Consulting achieved FIPS 140-2 Cert. #3220 (which is a rebrand of the OpenSSL FIPS Object Module 2.0 SE Cert. #2398) with the addition of these new Tested Configurations: Android …
FIPS 140-2 Certificates for Q3 2018
We’ve done the work consolidating the data into graphs to show the FIPS 140-2 program performance for the three quarters of 2018 (Q1, Q2, Q3). Also included in the report …
NIST Fees for FIPS 140-2 Validations
Fees are collected for NIST CMVP report review of new and modified module submissions. For additional details on the Implementation Guidance (IG) G.8 scenarios listed below, see Maintaining a FIPS 140-2 …
FIPS 140-2 Certificates for Q2 2018
Update: The most recent report may be found here: FIPS Cert Stats 3Q2018 We’ve done the work consolidating the data into graphs to show the FIPS 140-2 program performance for the …
OpenSSL FIPS Object Module 2.0 on CD
Looking for the OpenSSL FIPS Object Module (FOM) 2.0 distribution on CD? (For FIPS 140-2 Certificates #1747, #2398, and #2473) KeyPair Consulting will send you a CD for FREE. Send …
You Have Your FIPS Certificate. Now What?
Many years ago, I purchased my first new vehicle, a Dodge Ram Club Cab named “Big Red.” That truck allowed me to pack in students from my youth group, help …
How to Include Additional Operating Environments in Your Security Policy
Let’s assume that you have met the porting requirements for listing additional operating environments in your FIPS 140-2 Security Policy. (As a reminder, those requirements are detailed in the FIPS 140-2 …
Maintaining a FIPS 140-2 Certificate
I often receive questions about maintaining a FIPS 140-2 certificate after changes are made to the module. Here is some information from the trenches for those not familiar with the …
Accelerate Your FIPS 140-2 Validation
Rarely updated and often overlooked, the FIPS document Frequently Asked Questions for the Cryptographic Module Validation Program deserves a spot in your FIPS library. Any technology vendor starting a FIPS 140-2 project needs …