We very specifically say "Compliant" rather than "Validated" on our website.

We are working with a lab to assist us through the FIPS 140-1 validation process.

We says FIPS Compliant on the website, rather than FIPS Validated, because we have crypto components that have passed FIPS validation, but our overall product is in process. Once the full product has been validated, we will update the site from Compliant to Validated.

- Dave

-------------
 from Dennis

Looks interesting, but I notice they say "FIPS Compliant" rather than "FIPS
Validated." This means lack the money to go through the validation process,
lack the confidence they could pass the validation process, or the person
who designed their web page did not know the difference. Lacking a
validated implementation of AES means they can't be used to protect
sensitive federal government data.

Dennis Kezer
_______________________________________________
FDE mailing list
[email protected]
http://www.xml-dev.com/mailman/listinfo/fde

Reply via email to