Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any reference to check the list of encryption & signing algorithms which are compliant to FIPS 140-2. After an exhaustive search I could find only "AES".

Any suggestions would be much appreciated.

share|improve this question
Siva, FYI - SHA1 for certificate use has been deprecated by the industry. Any new certificates generated should use a stronger hashing algorithm. – Sakthi Kumaran Suriya Nov 16 '15 at 5:57
@SakthiKumaranSuriya for FIPS compliance, SHA-1 has been deprecated as of 2010 for most uses – Richie Frame Nov 16 '15 at 10:09
up vote 6 down vote accepted

Take a look at FIPS 140-2 Annex A. It lists the following:

  • Symmetric Key
    • AES, Triple-DES, Escrowed Encryption Standard
  • Asymmetric Key
  • Hash Standards
    • SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256
  • Random number generators
  • Message authentication
share|improve this answer
What about DES? – mistika Aug 6 '15 at 15:16
The FIPS 140-2 states that approved security function is either specified in the list of approved functions (which annex A is), or specified in a Federal Information Processing Standard(FIPS). The DES is specified in FIPS. However FIPS 140-2 Implementation Guide states that DES is not approved since May 19, 2007. And looking at the List of FIPS-140 validated modules I can see that DES is listed only in other algorithms section. However, Microsoft .Net Framework doesn't thrown an exception if you try to use DES when FIPS policy is forced (as it does with other non-approved algorithms). – mistika Aug 6 '15 at 15:23
@mistika Original/single DES (formally DEA) was specified by FIPS 46, through several revisions, but 46-3 was withdrawn in 2005, see . "Triple-DES" or "3DES" (formally TDEA) only, not single-DES, was reissued as a special publication (SP800-67) -- and that SP is referenced by current 140-2 IG and 140-2 annex A. – dave_thompson_085 Nov 16 '15 at 22:14

The current list of FIPS-approved cryptographical methods is here.

For encryption, we're limited to AES, 3DES (known as TDEA in FIPS-speak), and EES (Skipjack).

As for signing algorithms, we have RSA, DSA and ECDSA.

Note that the list of FIPS-approved algorithms does change at times; not extremely frequently, but more often than they come out with a new version of FIPS 140.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.