4
votes
3answers
169 views

Android and FIPS

I've recently been tasked with a research project to write a "secure messaging application" using "government approved protocols" (the government being the USA). I'm taking this to mean asymmetric ...
1
vote
1answer
518 views

How does Cipher Block Chaining relate to AES?

I was reading FIPS197 for a class (found here: http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf ) trying to find some sort of specific relation between CBC and AES. I guess my problem is ...
4
votes
2answers
749 views

What cryptographic module does Sql Server 2008 use to run in Fips 140-2 compliant mode by default?

One can configure Sql Server 2008 to run in FIPS 140-2 compliant mode, in the same manner as running Bitlocker in FIPS 140-2 compliant mode. Which is to activate FIPS 140-2 compliant mode in the ...
2
votes
2answers
270 views

What does “if the Crypto Officer performs this operation” mean in this BitLocker security policy?

In the document Windows Server 2008 R2 BitLockerâ„¢ Drive Encryption Security Policy For FIPS 140-2 Validation, in the section 6.1.2 FIPS 140-2 Security Rules bullet point 2 it says: BitLockerâ„¢ will ...
2
votes
1answer
316 views

Does Bitlocker qualify as the 'Cryptographic Module' defined in FIPS140-2?

Wikipedia defines Bitlocker as: BitLocker Drive Encryption is a full disk encryption feature included with the Ultimate and Enterprise editions of Microsoft's Windows Vista and Windows 7 ...
3
votes
1answer
275 views

Help on interpretation of FIPS-140 paragraph

This is from the FIPS 140-2 standard: Cryptographic keys stored within a cryptographic module shall be stored either in plaintext form or encrypted form. Plaintext secret and private ...
5
votes
2answers
207 views

General Question on FIPS requirements

I understand that FIPS addresses cryptographic operations. My question is, is it addressing exactly this? For example, can an application loading a keystore use a non-FIPS provider? Any input or ...
3
votes
1answer
761 views

How to apply FIPS to Microsoft Access database with custom VBA

As the software engineer on a project, I have been asked to make a Microsoft Access application, with custom interfaces running custom VBA. That part is going just fine. Recently though I was asked to ...