Questions tagged [fips]

The term "fips" commonly refers to the Federal Information Processing Standards Publication 140 (FIPS 140), a document published by the National Institute of Standards and Technology (NIST), a U.S. government agency. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

The term FIPS is sometimes used to refer to a specific publication, Security Requirements for Cryptographic Modules FIPS 140. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

However, FIPS 140-2 is one of many publications that describes information technology standards for use by U.S. Government Agencies.

Further information can be found at the FIPS Home Page

432 questions
1
vote
0 answers

Is there a way to link netty tcnative java code with its native c library?

I have attempted to follow the instructions found on the netty tcnative wiki: https://netty.io/wiki/forked-tomcat-native.html, to set up fips compliance for our netty server. However, i have got stuck with the following error: Error in custom…
1
vote
1 answer

Looking for work around for FIPS Compliant error

Currently the team I'm on is working on a server migration of two environments (both have a DB and Web server). We're migrating from Windows Server 2008R2 to Windows Server 2016. These are brand new instances that are being stood up. We finished…
IyaTaisho
  • 863
  • 19
  • 42
1
vote
1 answer

Generating a pem file from p12 in FIPS enabled OS

Our application includes a script which converts p12 to pem format. Operating System is RHEL 7 FIPS enabled and it's using OpenSSL 1.0.2k-fips library.Script fails with the below error during this pem conversion. Tried few algorithms other than…
Suresh
  • 11
  • 1
  • 2
1
vote
1 answer

OpenSSL Compilation fails in test

I have compiled Openssl FIPS object module 2.0.16 and I am trying to compile compatable openssl 1.0.2 with FIPS 2.0.16 Here are the options used ./config fips no-shared --with-fipsdir=/home/dinesh/openssl-fips-install make depend make The…
Dinesh Gowda
  • 1,044
  • 3
  • 13
  • 29
1
vote
0 answers

Link OpenSSL FIPS compliant (libcrypto.a) with another static library

I am using OpenSSL 1.0.2t with FIPS Object Module 2.0.16. I have taken the source code and complied both and I have libcrypto.a and libssl.a generated. In my use case I need libcrypto.a. I have a project which generates libapi.a and it will be given…
Dinesh Gowda
  • 1,044
  • 3
  • 13
  • 29
1
vote
1 answer

How to run a fully FIPS compliant Spring Boot application

I have to fulfill the following criteria: Tomcat runs in FIPS mode JDK uses FIPS ssl Provider which is expected to make the application "run in FIPS mode". Is this assumption correct? I think Tomcat is configured using an APR Lifecycle Listener,…
crusy
  • 1,424
  • 2
  • 25
  • 54
1
vote
1 answer

Is KeyCloak FIPS compliant?

We are going to use KeyCloak in one of our enterprise solutions. I would like to understand if KeyCloak is fully FIPS 140-2 compliant since we have compliance needs. There is very limited amount of information that I could find regarding this…
A_C
  • 905
  • 6
  • 18
1
vote
0 answers

Finding a FIPS compliant error in EncryptedXml Encrypt method using C#

I am using C# EncryptedXml class and calling the method Encrypt(XmlElement, x509Cert). The code looks like this: Encrypted eXml = new EncryptedXml(); EncryptedData edElement = eXml.Encrypt(elementToEncrypt, Cert); My program errors out saying "This…
1
vote
1 answer

Tableau Mapping, BEA Codes?

Tableau supports FIPS codes for US Geography. Does anyone know if it also supports BEA County Codes? I cannot seem to find an answer online.
fiddlestacks
  • 109
  • 1
  • 10
1
vote
1 answer

How to compile fips for mingw compiler?

I am trying to compile Fips module 2.0 for mingW compiler.I have installed mingW, msys and downloaded openssl-fips-2.0.16 . I entered ./config fips in msys to configure it for mingw and after that entered make command in msys and got this…
Ash
  • 41
  • 7
1
vote
1 answer

C# Bouncy Castle FipsDRBG

I'm trying to access a few things from FipsDRBG class. My code is shown below. How do I access fromEntropySource()? This function is within the internal class Base in FipsDRBG. MyEntropyProvider entropyProvider = new…
ARao
  • 261
  • 4
  • 14
1
vote
1 answer

Enable FIPS 140-2 on Win2012r2 and verify compliance using powershell

I'm trying to enable FIPS 140-2 on one of the test windows 2012r2 server and was wondering if there are any other settings that I need to modify within group policy other than the one listed below to enable FIPS 140-2 and also how can I verify the…
Karthik
  • 339
  • 1
  • 7
  • 24
1
vote
0 answers

getting java.io.IOException: Keystore was tampered with, or password was incorrect while generating certificate

I am trying to generate certificate using my java application. I am getting bellow exception.. [main]ERROR pki.CertificateManager[: 109][]: Failed to create keystore java.io.IOException: Keystore was tampered with, or password was incorrect …
ritesh kumar
  • 81
  • 1
  • 7
1
vote
0 answers

mozilla nss bltest failed

I built nss package from source and then ran bltest -F (FIPS test) on my CentOS 7. It failed. Traced the code, I found it failed in: blapi_SHVerifyFile(const char *shName, PRBool self) because it cannot…
pokeba
  • 81
  • 1
  • 5
1
vote
1 answer

PEM_write_bio_RSAPrivateKey throws keygen errors in FIPS mode

I am trying to generate a 2048 bit RSA Private Key that is encrypted with a AES256CBC cipher while in FIPS mode. I am using OpenSSL 1.0.2l here. I tried the latest 1.0.2 snapshot and that isn't making any difference. My problem is that…
Timothy John Laird
  • 1,101
  • 2
  • 13
  • 24