FIPS Validation: Difference between revisions

FIPS Validation (view source)

Revision as of 17:50, 14 May 2009

2,348 bytes removed , 14 May 2009

m

→‎Updates

Glen

219

edits

@@ Line 9: / Line 9: @@
 ==Updates==
-'''August 27, 2007: Our Level 2 cert has been issued! [http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#814 NSS Level 2 Cert]'''
+Spring/Summer 2009 FIPS 140 validation will be based on Softoken 3.12.x
+=== Platforms for 2009 ===
-'''August 8, 2007: Our Level 1 cert has been issued! [http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#815 NSS Level 1 Cert]'''
-August 2, 2007: we advanced to Finalization state according to  [http://csrc.nist.gov/cryptval/140-1/preval.htm FIPS 140-2 Pre-validation List]. This means the certs should be issued soon.
-March 23, 2007: we advanced to Coordination state according to [http://csrc.nist.gov/cryptval/140-1/preval.htm FIPS 140-2 Pre-validation List]. This means we are in the final stages, answering questions from NIST. One more state to go...
-January 18, 2007: we advanced to the In Review state on the [http://csrc.nist.gov/cryptval/140-1/preval.htm FIPS 140-2 Pre-validation List]. This means the two-month wait for a NIST reviewer to be assigned to our case is over.
-November 16, 2006: Aspect Labs submitted the test report to NIST for validation. We advanced to the Review Pending state on the [http://csrc.nist.gov/cryptval/140-1/preval.htm FIPS 140-2 Pre-validation List].
-June 30, 2006: we have received the remaining four algorithm certificates: RNG ([http://csrc.nist.gov/cryptval/rng/rngval.html#208 certificate #208]), DSA ([http://csrc.nist.gov/cryptval/dss/dsaval.htm#172 certificate #172]), RSA ([http://csrc.nist.gov/cryptval/dss/rsaval.html#152 certificate #152]), and ECDSA ([http://csrc.nist.gov/cryptval/dss/ecdsaval.html#30 certificate #30]).
-June 23, 2006: we are now on the [http://csrc.nist.gov/cryptval/140-1/preval.htm FIPS 140-2 Pre-validation List].
-June 15, 2006: we addressed the deficiencies in Chapter 1-4 of the documentation.
-April 13, 2006 status: we are having RNG, DSA, and RSA validated now. We are updating our [http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp815.pdf Security Policy] and writing our responses to the vendor requirements in the FIPS 140-2 Derived Test Requirements (DTR).
-January 20, 2006 status: we have received four algorithm certificates: AES ([http://www.csrc.nist.gov/cryptval/aes/aesval.html#352 certificate #352]), Triple DES ([http://csrc.nist.gov/cryptval/des/tripledesval.html#410 certificate #410]), SHS ([http://csrc.nist.gov/cryptval/shs/shaval.htm#426 certificate #426]), and HMAC ([http://csrc.nist.gov/cryptval/mac/hmacval.html#152 certificate #152]).
-=== Platforms ===
 * Level 1
 ** Windows XP Service Pack 2