OpenSSL 3.0 FIPS timeline
Below is KeyPair’s best effort to track the timeline for the OpenSSL 3.0 FIPS 140-2 module. Links are provided for additional details. On November 7, 2019, OpenSSL posted this update …
News
RIP FIPS 186-2
UPDATE: The CMVP will publish an updated IG G.18 in November 2019 extending the Effective Date to “Two Months After ACVP Transition Date.” Instead of the current transition happening on …
1Q-3Q 2019 FIPS Cert. Stats
During the first three quarters of 2019, the CMVP issued 187 FIPS 140-2 certificates. UL Verification Services produced the most number of certificates (36) for their customers. Security Level 1 …
Steve Weymann speaking at ICMC19
At the International Cryptographic Module Conference in Vancouver, Canada, Steve of KeyPair Consulting delivers the following talk on May 15, 2019: A PROTOCOL PROTOCOL (G13B) Representation of protocols such as …
FIPS 140-3 timeline
FIPS 140-3 is now published on the Federal Register. The important dates of interest with additional details follow: FIPS 140-3 is effective September 22, 2019. This is likely the earliest …
CMVP queue post shutdown
After the US government shutdown at the end of 2018 / beginning of 2019, the CMVP queue of FIPS 140-2 reports is in better shape than it was after the …
FIPS 140-2 Cert. Report for 2018
We’ve done the work consolidating the data into graphs to show the FIPS 140-2 program performance for 2018. Also included in the report are five-year trending graphs. FIPS Cert Stats …
CVE Got Your FIPS Module?
Q: I need to apply a fix to my FIPS 140-2 module to address a CVE. What process do I follow to maintain my FIPS 140-2 certificate? The Implementation Guidance for …
OpenSSL FIPS Module w/new Tested Configurations
KeyPair Consulting achieved FIPS 140-2 Cert. #3220 (which is a rebrand of the OpenSSL FIPS Object Module 2.0 SE Cert. #2398) with the addition of these new Tested Configurations: Android …
NIST Fees for FIPS 140-2 Validations
Fees are collected for NIST CMVP report review of new and modified module submissions. For additional details on the Implementation Guidance (IG) G.8 scenarios listed below, see Maintaining a FIPS 140-2 …