New answers tagged nist
I realize this post does not directly answer your question, but I thought I'd post it anyway as a "devil's advocate" rebuttal to Thomas's post. I fully agree with Thomas; there is no one who could give any reason to think you'll ever need more than 128 bits of security in our lifetime. That being said, Bernstein, the author of Curve25519, did co-author ...
This certification is typically done through FIPS certification. The list of labs certified by NIST to perform FIPS certifications is here
I'm thinking that if the FIPS-validated and FIPS-enabled network switch will allow me to get away with something (such as not securing syslog traffic, to reference the example in my original post), then I don't need to do that something in order to be operating in a FIPS-compliant manner. Any disagreement?
Every FIPS 140-2 device must have a publicly available non-proprietary Security Policy document which is obtainable from the FIPS 140 program web site (CMVP - http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm). Although some Security Policies are far better written than others, there is a minimum requirement for these documents that should ...
Top 50 recent answers are included