Questions tagged [fips]

The term "fips" commonly refers to the Federal Information Processing Standards Publication 140 (FIPS 140), a document published by the National Institute of Standards and Technology (NIST), a U.S. government agency. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

The term FIPS is sometimes used to refer to a specific publication, Security Requirements for Cryptographic Modules FIPS 140. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

However, FIPS 140-2 is one of many publications that describes information technology standards for use by U.S. Government Agencies.

Further information can be found at the FIPS Home Page

432 questions
2
votes
2 answers

FIPS Capable OpenSSL and openssl/fips.h: No such file or directory

I am doing build for FIPS Object Module and FIPS compatible OpenSSL using openssl-fips-ecp-2.0.9 and openssl-1.0.1j respectively. Out of which FIPS one compiled successfully. But as per User Guide adding fips option with ./config is giving…
2
votes
1 answer

Building OpenSSL FIPS for arm64

I've found references for building non-FIPS openssl for arm64 but I need to build the FIPS version. Projects like https://github.com/GotoHack/iOS-openSSL-FIPS build armv7 versions but I can't seem to extend them to arm64. Has anyone successfully…
scoleman2272
  • 358
  • 6
  • 18
2
votes
1 answer

Disable FIPS with command line

How can i disable the FIPS with the command line? Is there a way? Or can you tell me with which tool i have to configurate it? would really be thankfull for a little help. I want to include it in a C# project. here a view of the configuration i…
Kjenos
  • 529
  • 2
  • 5
  • 19
2
votes
1 answer

IOS Simulator getting FIPS signature mismatch when compiling FIPS/Openssl Solution on OS-x

I'm trying to get a OpenSSL/FIPS build forking on the IOS simulator. Every combination I've tried gives wither compile/link errors, or when it does build I get a FIPS signature mismatch (and I've tried many, many permutations of scripts and…
scoleman2272
  • 358
  • 6
  • 18
2
votes
1 answer

Is Child Action Output Cache incompatible with FIPS?

I am trying to make my ASP.NET MVC 4 application FIPS compatible. Fortunately with .NET 4.5 ASP.NET already is using FIPS approved implementation of AES for viewstate and cookie encryption so there is no problem with that one. However I ran into a…
Sebastian K
  • 6,235
  • 1
  • 43
  • 67
2
votes
1 answer

OpenSSL FIPS 140-2 Compliance with Tomcat 5 or any version

I have my Struts application running in tomcat version 5.0. I want to add OpenSSL FIPS 140-2 support to this application. I know there are settings into the server.xml which allows OpenSSL https connection. But unable to find oit anything specific…
Rahul Borkar
  • 2,742
  • 3
  • 24
  • 38
2
votes
2 answers

Looking to store encrypted files on PKCS#11 Compliant Hardware Token

My C# .NET4 program has been storing data in encrypted files on the regular Windows file system and one of our customers has requested that we integrate the program with a PKCS#11 token (henceforth known as the 'token'). After a bit of researching,…
Brett Wertz
  • 412
  • 4
  • 19
2
votes
3 answers

FIPS_mode_set() code not found in openssl package

I am new to openssl, and I downloaded openssl-fips-2.0.1 codes from openssl, however, I was not able to trace to the definition of FIPS_mode_set() as stated in the documentation and security policy. I did find, however, fips_set_mode() in fips.c,…
Ursa Major
  • 851
  • 7
  • 25
  • 47
2
votes
1 answer

Does PHP use a FIPS-140 compliant RNG to generate session IDs?

A requirement for the deployment of a PHP application I am working on is that is uses FIPS-140 validated cryptographic modules. The customer has specifically flagged up that "PHP utilizes a cryptographically weak random number generator to produce…
TheTelf
  • 21
  • 2
2
votes
1 answer

How can I create a static library that links against another library and can be used by a third program that links both the libraries?

Sorry for the confusing wording. Basically I want to create a static library (libone.a) that needs to link another static library (libtwo.a). libone.a and libtwo.a are both linked in statically into another program (let's call it program) by doing…
2
votes
2 answers

MVC App Works in Visual Studio, but not IIS7

Working on a an ASP.NET MVC Project, and I'm having some difficulties deploying to a shared dev server. Locally, when debugging using the local Visual Studio 2008 server, everything works peachy. However, once deployed, I receive the following…
user186878
2
votes
1 answer

Looking for Java wrapper for curl library

I am looking for Java wrapper for curl. I understand Java has excellent apis for http and https connections (i.e. standard as well as Apache http client). I have a scenario where my https connections need to go through FIPS certified crypto engine.…
videoguy
  • 1,732
  • 2
  • 24
  • 49
2
votes
1 answer

mono for android error CopyGeneratedJavaResourceClasses

I am installing mono for android on my pc I installed Xamarin Installer for Mono for Android when the installer finished I opened MonoDevelop and created new android project and get this error > C:\Program Files >…
Alaa Masalmah
  • 21
  • 1
  • 2
2
votes
1 answer

ASP.net This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms

Hey all i am getting this error when trying to compare a password in my database using my ASP.net page. This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. The code looks like this: Public Shared Function…
StealthRT
  • 10,108
  • 40
  • 183
  • 342
2
votes
1 answer

openssl-fips-2.0 in core failure for Android

I have successfully built openssl-fips-2.0 + openssl-1.0.1c for Android using ndk-r8. I am doing cross-compile on Mac OSX. However, I cannot pass FIPS_mode_set(1). I get the following error: "FIPS routines:FIPS_check_incore_fingerprint:fingerprint…
bubba
  • 263
  • 1
  • 5
  • 13