FIPS 140-2 Certificates for Q1 2018
We’ve done the work consolidating the data into graphs to show the FIPS 140-2 program performance for the first quarter of 2018. Also included in the report are five-year trending …
News
NIST Fees for FIPS 140-2 Validations
Fees are collected for NIST CMVP report review of new and modified module submissions. For additional details on the Implementation Guidance (IG) G.8 scenarios listed below, see Maintaining a FIPS 140-2 …
You Have Your FIPS Certificate. Now What?
Many years ago, I purchased my first new vehicle, a Dodge Ram Club Cab named “Big Red.” That truck allowed me to pack in students from my youth group, help …
KeyPair Speaking at ICMC18
At the sixth annual International Cryptographic Module Conference in Ottawa, Ontario, Canada (May 8-11), Mark and Steve of KeyPair Consulting are contributing the following talks: “FIPS 140-2 Inside” – You’re (Probably) Doing …
What’s in a Logo?
When you start your own company, everything is exciting… especially the process of creating your identity. Here are some fun facts about the logo we selected for KeyPair Consulting: Since …
“FIPS 140-2 Inside” Paper
UPDATE: Mark Minnoch is presenting “‘FIPS 140-2 Inside’ – You’re probably doing it wrong” at the International Cryptographic Module Conference (ICMC18) in Ottawa. (Wednesday, May 9, 2018 at 11:45am) Sure, …
How to Include Additional Operating Environments in Your Security Policy
Let’s assume that you have met the porting requirements for listing additional operating environments in your FIPS 140-2 Security Policy. (As a reminder, those requirements are detailed in the FIPS 140-2 …
Maintaining a FIPS 140-2 Certificate
I often receive questions about maintaining a FIPS 140-2 certificate after changes are made to the module. Here is some information from the trenches for those not familiar with the …
Accelerate Your FIPS 140-2 Validation
Rarely updated and often overlooked, the FIPS document Frequently Asked Questions for the Cryptographic Module Validation Program deserves a spot in your FIPS library. Any technology vendor starting a FIPS 140-2 project needs …
FIPS 140-2 for Newbies
Here is a collection of links to information about FIPS 140-2: A software engineer’s guide to encryption: How not to fail (written by Luther Martin of HPE) provides a good overview of …