Tag Info

FIPS 140-2 only certifies cryptographic modules, not entire systems. So, to tell if your system is 140-2 compliant, it must be using a 140-2 certified module. NIST publishes a list of all FIPS 140-2 certified cryptographic modules. It is important to remember, though, that 140-2 certification does not certify that the module is used in a secure manner. From ...

This page gives details of a successful extraction of a 3DES key from an IBM 4758 (FIPS 140-1 Level 4): http://www.cl.cam.ac.uk/~rnc1/descrack/. In summary, it required 20 mins of access to the device, 2 days of (offline) cracking time, and about $1000 in equipment. Not sure if this quite answers the question you were asking in that it relies on ...

FIPS 140-2 Security Level 2 does not require any form of security measure to prevent extraction of secrets. It simply requires tamper evidence, that is, it should be possible to notice that such attack took place by looking (for instance) at some seal on the device or at a log file. To answer your question, extracting a secret may therefore take 0 seconds ...

You cannot tell anything related to FIPS 140 by looking at a key or by looking at a file. FIPS 140 doesn't say anything about the choice of encryption algorithm, other than requiring that all every encryption algorithm must be “approved security function” (as defined in the glossary) and there must be at least 1. FIPS 140 is all about the module, i.e. the ...

The current list of FIPS-approved cryptographical methods is here. For encryption, we're limited to AES, 3DES (known as TDEA in FIPS-speak), and EES (Skipjack). As for signing algorithms, we have RSA, DSA and ECDSA. Note that the list of FIPS-approved algorithms does change at times; not extremely frequently, but more often than they come out with a new ...

Take a look at FIPS 140-2 Annex A. It lists the following: Symmetric Key AES, Triple-DES, Escrowed Encryption Standard Asymmetric Key DSA, RSA, ECDSA Hash Standards SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256 Random number generators See annex c Message authentication CCM, GCM, GMAC, CMAC, HMAC