FIPS 140-2 Implementation Guidance updated (again)

The CMVP has been busy updating the FIPS 140-2 Implementation Guidance.  If you delayed reviewing the April update, then delay no further.  The May update deserves your attention.

See the May 2, 2012 document and changes here:  http://csrc.nist.gov/groups/STM/cmvp/announcements.html

Note:  You may need to clear your browser's cache to open the latest IG document.

InfoGard featured in local newspaper

InfoGard Laboratories was featured in San Luis Obispo's local newspaper.  The Tribune published the article on Saturday, March 24.  A short version of the article may be read here:

http://www.sanluisobispo.com/2012/03/23/2002514/infogard-laboratories.html

FIPS 180-4 published

NIST published FIPS 180-4 Secure Hash Standard (SHS).

The updates from FIPS 180-3 are listed in Appendix C of the new FIPS 180-4 publication.  In short, the changes are:

1. FIPS 180-4 relaxes the padding restriction described in FIPS 180-3
2. SHA-512/224 and SHA-512/256 were added to the standard

FIPS 140-2 Consolidated Validation Certificates

Q:  How long does it take for a recently validated cryptographic module to appear on a FIPS 140-2 Consolidated Validation Certificate?

A:  At the end of each month, the CMVP generates a list of cryptographic modules that were issued new FIPS 140-2 certificates.  The Consolidated Validation Certificate is signed by a NIST representative in the United States and then routed to Canada for signature by a CSEC representative.  The signature and posting process takes about two weeks. 

For example, modules that received a certificate number in the month of January will appear on the FIPS 140-2 Consolidated Validation Certificate that gets posted mid-February.

InfoGard exhibiting at RSA Conference in San Francisco

InfoGard Laboratories will be exhibiting at the 2012 RSA Conference in San Francisco, CA February 27 through March 1.  Please visit us at Booth 316 (enter the Expo Hall, make a left).

FIPS 140-2 Annex D updated

On December 20, 2011, Annex D was updated with the following change:

Key Establishment Techniques
Added: Recommendation for Key Derivation through Extraction-then-Expansion,
Special Publication 800-56C

FIPS certificate totals for 2011 down 19%

The number of FIPS 140-2 certificates issued in 2011 was down 19% compared to 2010.  A total of 185 certificates were issued in 2011 (229 were issued in 2010).  Here are the totals by Lab for 2011: