Questions tagged [fips]

The term "fips" commonly refers to the Federal Information Processing Standards Publication 140 (FIPS 140), a document published by the National Institute of Standards and Technology (NIST), a U.S. government agency. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

The term FIPS is sometimes used to refer to a specific publication, Security Requirements for Cryptographic Modules FIPS 140. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

However, FIPS 140-2 is one of many publications that describes information technology standards for use by U.S. Government Agencies.

Further information can be found at the FIPS Home Page

350 questions
31
votes
4 answers

This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms when building an app with visual studio

I am trying to compile my program in visual studio and I am getting a FIPS Cryptographic algorithms error. I have checked the registry key and it is set to false. Any suggestions?
Robert Frey
  • 321
  • 1
  • 3
  • 5
23
votes
3 answers

Which JCE providers are FIPS 140-2 compliant?

What Java Cryptography Extension (JCE) providers are FIPS 140-2 compliant? More specifically, does the Sun/Oracle provider qualify?
Rob H
  • 12,976
  • 8
  • 38
  • 44
19
votes
3 answers

When will C# AES algorithm be FIPS compliant?

Right now the only way I can get the RijndaelManaged algorithm to work on a computer with the Local Security Setting for FIPS turned on, is to disable it. It is a government computer, so I'm not sure how that will fly. I've seen posts on the msdn…
SwDevMan81
  • 45,922
  • 20
  • 140
  • 177
19
votes
2 answers

How to enable FIPS on windows 7

Have to test a c# application from client that is to work on a machine that has FIPS enbaled
qazwsx
  • 199
  • 1
  • 1
  • 3
11
votes
6 answers

How to check FIPS 140-2 support in OpenSSL?

We have a client which is asking about OpenSSL FIPS (Federal Information Processing Standard) 140-2 compliant support validated cryptography use. How do I check whether OpenSSL has FIPS complains is providing FIPS validated cryptography or not? OS:…
Satish
  • 13,709
  • 26
  • 80
  • 130
10
votes
4 answers

enforceFIPSPolicy flag in web.config doesn't seem to working for web application

I'm trying to set up a web application to work in an environment where the FIPSAlgorithmPolicy is set to 1 in the Windows registry (specifically, HKLM/SYSTEM/CurrentControlSet/Control/Lsa). When this flag is enabled, any call to the class…
Ben McCormack
  • 29,788
  • 45
  • 138
  • 211
10
votes
1 answer

FIPS Compliance for my Android project

I am working on a security related project and have to make sure it is under FIPS compliance. According to my understanding, FIPS compliance is compliance at hardware as well as software level. Currently there are 2 Samsung Android devices which are…
Alok Kulkarni
  • 2,133
  • 19
  • 31
9
votes
2 answers

Problem with FIPS Validated Cryptographic Algorithms

I am running Visual Studio 2008 Version 9.0.30729.1 SP with .NET 3.5 SP 1 under Windows XP Pro Version 2002 SP 3 with an Intel Core 2 Duo E8400 3 GHz processor. I am developing a C# WPF application that uses the Microsoft Patterns & Practices…
Dave
  • 1,211
  • 1
  • 14
  • 34
7
votes
2 answers

FIPS Certification for Android & iPhone

Does anyone know the name of the cryptography libraries come with iPhone & Android SDKs ? I don't mean the name of the classes, functions etc. but the name of the provider and/or the library itself. Are they FIPS certified? Thanks
volution
  • 533
  • 3
  • 15
7
votes
0 answers

SHA256( from RSA Key Helper) hangs under BouncyCastle FIPS library

We moved to BC FIPS version 1.0.1 and since then RSA Key Helper hangs for extended periods of time (stack below). We had a similar issue in Linux that was solved by increasing entropy (urandom/haveged/etc.) Is there a similar workaround that can be…
didiz
  • 969
  • 11
  • 23
7
votes
3 answers

TripleDESCryptoServiceProvider FIPS 140-2 Compliance

I am using the System.Security.Cryptography's TripleDESCryptoServiceProvider in the following manner: TripleDESCryptoServiceProvider CreateCipher() { TripleDESCryptoServiceProvider cipher = new…
Simpleton
  • 1,161
  • 3
  • 12
  • 16
7
votes
8 answers

ASP.NET 2.0 RijndaelManaged encryption algorithm vs. FIPS

I'm running into an issue with an ASP.NET 2.0 application. Our network folks just upped our security, and now I get the floowing error whenever I try to access the app: "This implementation is not part of the Windows Platform FIPS validated…
R Rush
  • 71
  • 1
  • 2
7
votes
1 answer

TLS handshake fails between a Java 1.8 client and a Java 1.7 TLS 1.1 server running in FIPS mode, even after disabling TLS 1.2 in the client side

The SSL / TLS handshake between a "Java 1.7 TLS 1.1 server" and a "Java 1.8 client" fails in my environment with the following exception on the server side: java.security.NoSuchAlgorithmException: no such algorithm: SunTls12MasterSecret for…
Sanjay Bhat
  • 171
  • 1
  • 1
  • 8
6
votes
1 answer

java.security.NoSuchAlgorithmException: PKCS11 KeyStore not available, Trying to Enable FIPS mode using SUNPKCS11 in java 11

I'm trying to enable FIPS mode using SUNPKCS11 with NSS in Java 11. I got this exception java.security.NoSuchAlgorithmException: PKCS11 KeyStore not available. When I tried to enable FIPS in Java 8 it works fine but doing the same in Java 11 throws…
N V
  • 61
  • 5
6
votes
3 answers

How do you use FIPS validated cryptographic algorithms with Visual Studio 2010 and Windows 7?

I've enabled FIPS compliance mode in Windows 7, but now my code fails to compile with the following error: Source file 'whatever.cs' could not be opened ('This implementation is not part of the Windows Platform FIPS validated cryptographic…
ScArcher2
  • 78,317
  • 42
  • 111
  • 158
1
2 3
23 24