This is what the draft Security Policy says: The execution platform is a standard commercial off-the-shelf (COTS) computing platform running the Microsoft Windows 2000 operating system. For level 1 Operating System Security, the software cryptographic module remains compliant with the FIPS 140-2 validation when operating on any general purpose computer (GPC) as: a. the GPC uses the specified single operator system/mode specified on the validation certificate, or another compatible single operator system, and b. the software of the cryptographic module does not require modification when ported (platform specific configuration modifications are excluded). The library can be linked without change into Windows applications that run on the following Microsoft Windows platforms: ? Microsoft Windows 95 ? Microsoft Windows 98 ? Microsoft Windows ME ? Microsoft Windows NT (in single-operator mode) ? Microsoft Windows XP
On Tue, May 20, 2003 at 05:42:17PM -0700, Paul Coppinger wrote: > Wei Dai, > > Thanks for the info...this is certainly good news for my project. Based on > this news, I think that we'll keep moving forward with Crypto++ rather than > switch to an already approved module. > > BTW, what configuration(s) are being certified? As far as FIPS 140-2 > certification is concerned, how much does the platform really matter? > > Paul > > -----Original Message----- > From: Wei Dai [mailto:[EMAIL PROTECTED] > Sent: Tuesday, May 20, 2003 4:52 PM > To: [EMAIL PROTECTED] > Subject: Re: FIPS 140-2 certification? > > > The testing lab received the first round of comments from NIST and is > responding to them. Hopefully there will not need to be a second round, > in which case we may be able to get the certificate in about a month. > > On Mon, May 19, 2003 at 04:37:09PM -0700, Paul Coppinger wrote: > > Hi all, > > > > Does anybody know the status of FIPS 140-2 certification? On the NIST site > > it indicates that Crypto++ 5.0.1 is in "Validation Coordination" (an > > iterative step), so you really can't get a very good idea of how long this > > process might take. It would be helpful to know if Crypto++ is "nearing > > certification" or if it looks like there is a long way to go. > > > > TIA for any information, > > Paul > > > > Paul Coppinger > > President > > APPS Software International > > 6900 East Camelback Road > > Suite 700 > > Scottsdale, Arizona 85251 > > Tel: (480) 421-1203 > > Cel: (480) 231-8793 > > [EMAIL PROTECTED] > >
