Is there any reference to check the list of encryption & signing algorithms which are compliant to FIPS 140-2. After an exhaustive search I could find only "AES".

Any suggestions would be much appreciated.

  • $\begingroup$ Siva, FYI - SHA1 for certificate use has been deprecated by the industry. Any new certificates generated should use a stronger hashing algorithm. $\endgroup$ – Sakthi Kumaran Suriya Nov 16 '15 at 5:57
  • $\begingroup$ @SakthiKumaranSuriya for FIPS compliance, SHA-1 has been deprecated as of 2010 for most uses $\endgroup$ – Richie Frame Nov 16 '15 at 10:09

Take a look at FIPS 140-2 Annex A. It lists the following:

  • Symmetric Key
    • AES, Triple-DES, Escrowed Encryption Standard
  • Asymmetric Key
  • Hash Standards
    • SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256
  • Random number generators
  • Message authentication
  • $\begingroup$ What about DES? $\endgroup$ – mistika Aug 6 '15 at 15:16
  • 3
    $\begingroup$ The FIPS 140-2 states that approved security function is either specified in the list of approved functions (which annex A is), or specified in a Federal Information Processing Standard(FIPS). The DES is specified in FIPS. However FIPS 140-2 Implementation Guide states that DES is not approved since May 19, 2007. And looking at the List of FIPS-140 validated modules I can see that DES is listed only in other algorithms section. However, Microsoft .Net Framework doesn't thrown an exception if you try to use DES when FIPS policy is forced (as it does with other non-approved algorithms). $\endgroup$ – mistika Aug 6 '15 at 15:23
  • 2
    $\begingroup$ @mistika Original/single DES (formally DEA) was specified by FIPS 46, through several revisions, but 46-3 was withdrawn in 2005, see csrc.nist.gov/publications/PubsFIPSArch.html . "Triple-DES" or "3DES" (formally TDEA) only, not single-DES, was reissued as a special publication (SP800-67) -- and that SP is referenced by current 140-2 IG and 140-2 annex A. $\endgroup$ – dave_thompson_085 Nov 16 '15 at 22:14
  • 1
    $\begingroup$ the FIPS document is a draft $\endgroup$ – David 天宇 Wong Mar 6 '19 at 3:09
  • $\begingroup$ In the approved modes there is ECB in, SP 800-38A, why is that even if it's not recommended by the security community ? $\endgroup$ – 3lokh Sep 18 '19 at 9:14

The current list of FIPS-approved cryptographical methods is here.

For encryption, we're limited to AES, 3DES (known as TDEA in FIPS-speak), and EES (Skipjack).

As for signing algorithms, we have RSA, DSA and ECDSA.

Note that the list of FIPS-approved algorithms does change at times; not extremely frequently, but more often than they come out with a new version of FIPS 140.


Looks like there is no FIPS 140-2 approved asymmetric encryption algorithm, as DSA/RSA/ECDSA are only approved for key generation/signature.

  • $\begingroup$ My understanding is that RSA can be used to encrypt a symmetric key, so you then perform a (standard) hybrid encryption. TBH, you really have to do this anyway with RSA. $\endgroup$ – user7761803 Mar 15 '19 at 13:41

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.