Questions tagged [fips]

The term "fips" commonly refers to the Federal Information Processing Standards Publication 140 (FIPS 140), a document published by the National Institute of Standards and Technology (NIST), a U.S. government agency. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

The term FIPS is sometimes used to refer to a specific publication, Security Requirements for Cryptographic Modules FIPS 140. Cryptographic software and hardware that complies with the standard must use only cryptographic algorithms specified in FIPS 140-2, the latest published revision.

However, FIPS 140-2 is one of many publications that describes information technology standards for use by U.S. Government Agencies.

Further information can be found at the FIPS Home Page

432 questions
0
votes
0 answers

Data alignment crash (EXC-ARM-DA-ALIGN) when running iOS FIPS demo

I believe I have successfully compiled the lib for OpenSSL Fips module for iOS. But when I try to run the demo app provided by OpenSSL (fips-pi). I ran into the exception EXC-ARM-DA-ALIGN with method FIPS_mode_set(1 /*on*/); I understand that…
Summer
  • 488
  • 4
  • 14
0
votes
1 answer

How to make the following code FIPS compliant?

I have a legacy application which is not FIPS compliant. When a user saves his password for the first time the encrypted password is saved in the database and the below algorithm is used to determine the encrypted password on login (which is then…
JD.
  • 15,171
  • 21
  • 86
  • 159
0
votes
1 answer

JBoss WildFly FIPS 140-2 compliance on CentOS

I have an existing application that is being migrated to JBoss WildFly 8.1.0 and will be deployed in CentOS. One of the requirements we have is to have the applications be FIPS 140-2 compliant. I understand that we have to go through independent…
VAS1PAL3
  • 11
  • 2
0
votes
0 answers

What type of digital signature should I use for FIPS compliance

I am working with openssl to produce a FIPS compliant digital signature. What type of digital signature I can use? I used this command: openssl genrsa -aes128 -passout pass:mypassphrase -out privkey.pem 2048 to generate a pem file but when I tried…
Rex Bloom
  • 364
  • 4
  • 14
0
votes
1 answer

ADAL fails when FIPS is required

Our team is seeing an issue using ADAL 2.12 in our servers which have FIPS enabled\required. Here is the exception thrown: System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. --->…
Doug
  • 1
0
votes
1 answer

AES C# Encryption Decryption FIPS

I'm trying to do the following test to return results that should return a specific cipher. They provide the Key, IV and Plaintext string as seen below. But I am getting "Specified initialization vector (IV) does not match the block size for this…
moto_geek
  • 510
  • 5
  • 14
0
votes
3 answers

call to ssl.wrap_socket fails with the error Invalid SSL protocol variant specified

I have built python with fips capable openssl, all things seem to be working fine but call to wrap_socketfails with the error "Invalid SSL protocol variant specified" when fips mode is enabled. This call succeeds when not in fips mode Debugging…
Tiger
  • 37
  • 5
0
votes
0 answers

Why when enabled FIPS mode RSA_generate_key_ex generate smaller keys(half to be precise)

I'm using openssl-1.0.1i with FIPS openssl-fips-2.0.7 (Which I download and compile dynamic dll's). My program is very simple and I tring to understand why the result of the function RSA_generate_key_ex is changed when I enabled or disabled FIPS…
0
votes
1 answer

How do I put Internet Explorer 11 into FIPS 140-2 mode

In our application,we are enabled FIPS With Java1.7 with NSS3.12 Version. configuration in java.security file: security.provider.1=sun.security.pkcs11.SunPKCS11…
0
votes
1 answer

How do I script a complex link in visual studio (FIPS / Static Link Lib / VS.2008)

Question What's the right way to build a complex fips link into the Visual Studio vcproj projects while continuing to allow developers to arrange libraries via the properties GUI? Situation I'm using VS 2008 and have a bunch of projects that use…
Peter Kahn
  • 12,364
  • 20
  • 77
  • 135
0
votes
1 answer

how to build openssl in windows xp for wince 6.0

Need help in building OpenSSL library for the wince 6.0 for x86. Steps I tried downloaded openssl-1.0.1e.tar.gz from http://www.openssl.org/source/ unzipped the openssl package. from the command promt under directory "openssl-1.0.1e" tried running…
0
votes
1 answer

Compile OpenSSL FIPS for Android armv6

I have seen several answers for how to compile OpenSSL for Android, and the FIPS module for Android armv7 (which I followed), but I have yet to figure out how to make the FIPS module for armv6 on Android. Currently if I follow the directions here:…
T.Leavy
  • 504
  • 5
  • 16
0
votes
1 answer

scp fails with "FIPS_mode_set:fingerprint does not match" error

I have the following machine: Linux ssim-21416 2.6.18-348.3.1.el5 #1 SMP Mon Mar 11 19:39:25 EDT 2013 x86_64 x86_64 x86_64 GNU/Linux and CentOS release 5.9 (Final) now when i try to do scp or ssh it fails with the following…
user1891622
  • 311
  • 1
  • 4
  • 10
0
votes
1 answer

FIPS approved random number generator in VB script and Java script

My project is about sending a random number from client side to server side. Since my random number should be approved by FIPS 196, I wonder if there is a way that I can generate this random number both in VBscript and Javascript. Thank you
A23149577
  • 2,045
  • 2
  • 40
  • 74
0
votes
1 answer

FIPS 140-2 Level 1 Certification

I have a custom Android device. I need to protect the data-at-rest with FIPS certified (140-2 Level 1) cryptographic module. I have several questions If such cryptographic module exist in open source? While saving data in sql-lite my custom…
bostonjava
  • 119
  • 1
  • 5
1 2 3
28
29