Questions tagged [fips]

The term "fips" commonly refers to the Federal Information Processing Standards Publication 140 (FIPS 140), a document published by the National Institute of Standards and Technology (NIST), a U.S. government agency. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

The term FIPS is sometimes used to refer to a specific publication, Security Requirements for Cryptographic Modules FIPS 140. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

However, FIPS 140-2 is one of many publications that describes information technology standards for use by U.S. Government Agencies.

Further information can be found at the FIPS Home Page

432 questions
36
votes
4 answers

This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms when building an app with visual studio

I am trying to compile my program in visual studio and I am getting a FIPS Cryptographic algorithms error. I have checked the registry key and it is set to false. Any suggestions?
Robert Frey
  • 371
  • 1
  • 3
  • 5
27
votes
3 answers

Which JCE providers are FIPS 140-2 compliant?

What Java Cryptography Extension (JCE) providers are FIPS 140-2 compliant? More specifically, does the Sun/Oracle provider qualify?
Rob H
  • 14,502
  • 8
  • 42
  • 45
22
votes
3 answers

When will C# AES algorithm be FIPS compliant?

Right now the only way I can get the RijndaelManaged algorithm to work on a computer with the Local Security Setting for FIPS turned on, is to disable it. It is a government computer, so I'm not sure how that will fly. I've seen posts on the msdn…
SwDevMan81
  • 48,814
  • 22
  • 151
  • 184
19
votes
2 answers

How to enable FIPS on windows 7

Have to test a c# application from client that is to work on a machine that has FIPS enbaled
qazwsx
  • 199
  • 1
  • 1
  • 3
14
votes
6 answers

How to check FIPS 140-2 support in OpenSSL?

We have a client which is asking about OpenSSL FIPS (Federal Information Processing Standard) 140-2 compliant support validated cryptography use. How do I check whether OpenSSL has FIPS complains is providing FIPS validated cryptography or not? OS:…
Satish
  • 16,544
  • 29
  • 93
  • 149
10
votes
4 answers

enforceFIPSPolicy flag in web.config doesn't seem to working for web application

I'm trying to set up a web application to work in an environment where the FIPSAlgorithmPolicy is set to 1 in the Windows registry (specifically, HKLM/SYSTEM/CurrentControlSet/Control/Lsa). When this flag is enabled, any call to the class…
Ben McCormack
  • 32,086
  • 48
  • 148
  • 223
10
votes
1 answer

FIPS Compliance for my Android project

I am working on a security related project and have to make sure it is under FIPS compliance. According to my understanding, FIPS compliance is compliance at hardware as well as software level. Currently there are 2 Samsung Android devices which are…
Alok Kulkarni
  • 2,153
  • 19
  • 31
9
votes
2 answers

Problem with FIPS Validated Cryptographic Algorithms

I am running Visual Studio 2008 Version 9.0.30729.1 SP with .NET 3.5 SP 1 under Windows XP Pro Version 2002 SP 3 with an Intel Core 2 Duo E8400 3 GHz processor. I am developing a C# WPF application that uses the Microsoft Patterns & Practices…
Dave
  • 1,519
  • 2
  • 18
  • 39
8
votes
1 answer

java.security.NoSuchAlgorithmException: PKCS11 KeyStore not available, Trying to Enable FIPS mode using SUNPKCS11 in java 11

I'm trying to enable FIPS mode using SUNPKCS11 with NSS in Java 11. I got this exception java.security.NoSuchAlgorithmException: PKCS11 KeyStore not available. When I tried to enable FIPS in Java 8 it works fine but doing the same in Java 11 throws…
N V
  • 81
  • 1
  • 6
8
votes
3 answers

Enable FIPS on PostgreSQL database

Can someone please specify the steps to enable FIPS on Postgres Database? I have googled but was not able to find anything concrete.
meeta lalwani
  • 125
  • 3
  • 8
7
votes
2 answers

FIPS Certification for Android & iPhone

Does anyone know the name of the cryptography libraries come with iPhone & Android SDKs ? I don't mean the name of the classes, functions etc. but the name of the provider and/or the library itself. Are they FIPS certified? Thanks
volution
  • 533
  • 3
  • 15
7
votes
0 answers

SHA256( from RSA Key Helper) hangs under BouncyCastle FIPS library

We moved to BC FIPS version 1.0.1 and since then RSA Key Helper hangs for extended periods of time (stack below). We had a similar issue in Linux that was solved by increasing entropy (urandom/haveged/etc.) Is there a similar workaround that can be…
didiz
  • 1,069
  • 13
  • 26
7
votes
3 answers

TripleDESCryptoServiceProvider FIPS 140-2 Compliance

I am using the System.Security.Cryptography's TripleDESCryptoServiceProvider in the following manner: TripleDESCryptoServiceProvider CreateCipher() { TripleDESCryptoServiceProvider cipher = new…
Simpleton
  • 1,201
  • 3
  • 13
  • 16
7
votes
8 answers

ASP.NET 2.0 RijndaelManaged encryption algorithm vs. FIPS

I'm running into an issue with an ASP.NET 2.0 application. Our network folks just upped our security, and now I get the floowing error whenever I try to access the app: "This implementation is not part of the Windows Platform FIPS validated…
R Rush
  • 71
  • 1
  • 2
7
votes
1 answer

How to check that an Asp.NET application is FIPS-ready

I am using .net 3.5 and I'm trying to make my app FIPS compliant.I don't use any of the non FIPS algorithms but I still get this error when I run it on the production server. This implementation is not the part of the Windows platform FIPS…
Arash Masir
  • 205
  • 3
  • 9
1
2 3
28 29