Questions tagged [fips]

The term "fips" commonly refers to the Federal Information Processing Standards Publication 140 (FIPS 140), a document published by the National Institute of Standards and Technology (NIST), a U.S. government agency. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

The term FIPS is sometimes used to refer to a specific publication, Security Requirements for Cryptographic Modules FIPS 140. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

However, FIPS 140-2 is one of many publications that describes information technology standards for use by U.S. Government Agencies.

Further information can be found at the FIPS Home Page

432 questions
1
vote
0 answers

Linking with libcurl library on xcode with latest and greatest openssl dependency

We have a C++ project that compiles on MAC (OSX 10.9) and we need to make it FIPS compliant. This means that the process should call the function fips_mode_set in the beginning of the run and use a new FIPS compliant openssl library (we use version…
1
vote
0 answers

fips compliant authenticated encryption for ios/swift

I'm looking for fips compliant authenticated encryption. If I understand correctly, there's no support for authenticated encryption out of the box in ios. In that case I suppose I can do AES-CBC + SHA256. I know the latter is supported. Is the…
Zohar Etzioni
  • 691
  • 5
  • 14
1
vote
1 answer

What is compliance with FIPS 140-2 in CRYPTOPP?

How can I meet such compliance? In the method GenerateRandom of InvertibleRSAFunction, I am getting an exception when the method SignaturePairwiseConsistencyTest_FIPS_140_Only(signer, verifier) is called. Am I choosing the seed wrong? Or the…
Juan Dent
  • 439
  • 2
  • 6
  • 14
1
vote
0 answers

How to make .NET output FIPS compliant pdb debug file?

I get the following error when I try to build my solution: Unable to write to output file ABC.pdb: This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms. Points to note: My company works with secure data…
1
vote
0 answers

How to tell programmatically if IBM java (version 8) is running in FIPS mode

IBM Java 8 on AIX and Linux has changed the com.ibm.crypto.fips.provider.SelfTest class access from public to package. I have code that was using this class to tell if JVM is running in FIPS mode. How do we do this now that the class is no longer…
user3375401
  • 481
  • 1
  • 9
  • 19
1
vote
1 answer

FIPS_mode_set function affects encryption

To the best of my knowledge OpenSSL's function FIPS_mode_set should not affect encryption. All it does is terminating the program if a weak cipher is used. I have a piece of code that uses EVP_aes_128 encryption: EVP_CIPHER_CTX ctx;// =…
1
vote
2 answers

Struggling to update to latest openssl version

I've downloaded openssl-fips-2.0.14.tar.gz from the official website on my Ubuntu 16.04 virtual machine and executed the following commands: tar -xvf openssl-fips-2.0.14.tar.gz cd openssl-fips-2.0.14 ./config make make install Afterwards I type…
Krouche
  • 25
  • 1
  • 1
  • 4
1
vote
0 answers

fips_premain undefined symbols for architecture

I have updated my iOS scripts to build for all archs now using the latest fips-2.0.14 and openssl-1.1.0e. Before I was using 1.0.2h I believe and fips-2.0.12 and didn't have armv7s support added. I needed to add it so I upgrade and adjusted my…
Bot
  • 11,868
  • 11
  • 75
  • 131
1
vote
0 answers

Does FIPS OpenSSL work with Boost ASIO?

I've built the fips mode OpenSSL using OpenSSL version 1.0.2d and the fips canister with version 2.0.13. The whole thing compiles and links successfully to create a Windows 32-bit version of the libeay32 and ssleay32 lib and dll files. I've created…
Ken
  • 427
  • 4
  • 20
1
vote
1 answer

ORA-01005: null password given; logon denied when using Bouncy Castle as security provider

The setup is simple: bc-fips-1.0.0.jar and bcpkix-fips-1.0.0.jar for the security provider oracle jdbc driver version 12.1.0.2 server: Oracle Database 12c Standard Edition 12.1.0.2.0 The application: Security.addProvider(new…
Andrei Matei
  • 1,049
  • 2
  • 10
  • 23
1
vote
0 answers

Building OpenSSL with FIPS module for RHEL7

I'm having some issues getting OpenSSL built with the FIPS module on RHEL7. I've tried using the built-in RHEL repo OpenSSL, version 1.0.2j from the OpenSSL website, and 1.1.0b from the website (which I now realize states it lack FIPS support). I've…
Matthew Heimlich
  • 343
  • 2
  • 13
1
vote
1 answer

How to dynamically use FIPS and non-FIPS openssl library based on flags?

I am using FIPS along with OpenSSL libraries. When I don't want FIPS, system performance degrades due to FIPS self test. Due to performance issues, I want to have following solution :- LibA -> OpenSSL + FIPS LibB -> OpenSLL only When I enable…
0x07FC
  • 523
  • 1
  • 6
  • 33
1
vote
2 answers

Android javax.net.ssl and FIPS compliance openSSL

AFAIK Android javax.net.ssl classes uses openSSL/BoringSSL library at C/Low level for any SSL/TLS. Intention: Load FIPS compliance openSSL libaray in my application and make javax.net.ssl(okhttp) classes use the that library? Simlilar to WolfSSL…
NitZRobotKoder
  • 1,046
  • 8
  • 44
  • 74
1
vote
1 answer

Unable to run node.js application in FIPS mode on Bluemix

Unable to run the node.js application created in Bluemix environment even after setting the variable FIPS_MODE to true on CF CLI.
Javediq
  • 184
  • 9
1
vote
1 answer

CryptoPP::selfTestFailure when using FIPS validated library and AES

I have a server. I want to add to it AES encryption. I've tried using the Crypto++, after a lot of searching it compiled but it always throw exceptions that come from "CryptoPP::selfTestFailure". I've read somewhere that it has something with this…
etamar211
  • 53
  • 7