What is the difference between FIPS 140-2 and FIPS 140 3?
While both FIPS 140-2 and FIPS 140-3 include the four logical interface data input, data output, control input, and status output. Instead of requiring module support for crypto officer and user roles with the maintenance role as optional, FIPS 140-3 only requires the crypto officer role.
What is SAP FIPS?
FIPS stands for Federal Information Processing Standard and is a US standard required by US public sector agencies. Adapting to the latest compliance standards, SAP follows the strategy to build and keep customer trust.
What are the FIPS 140 levels?
What Is FIPS 140-2?
- Level 1: Requires that production-grade equipment and externally tested algorithms be used.
- Level 2: Requires physical tamper-evidence and role-based authentication for hardware.
- Level 3: Hardware must feature physical tamper-resistance and identity-based authentication.
How do I get FIPS 140-2 Certification?
To be FIPS 140-2 certified or validated, the software (and hardware) must be independently validated by one of 13 NIST specified laboratories. The process takes weeks. Sometimes the software fails and must be fixed and then the testing process repeated.
What are the requirements for FIPS 140-3 level?
Levels 3 and 4 add requirements such as physical tamper switches on the chassis, automatic zeroization of keys when the chassis is opened, etc. Fortinet currently validates products to FIPS 140-2 Levels 1 and 2.
When does Fortinet transition to FIPS 140-2?
FIPS 140-2 is the currently active version of the standard. FIPS 140-2 submissions will be accepted until the fall of 2021. Fortinet’s transition to FIPS 140-3 is will start in 2021 with the first 140-3 based certificates expected in 2022. Note: FIPS refers to “validated” products instead of “certified” products.
Which is the second revision of the FIPS standard?
FIPS is a cryptographic validation program jointly run by the US and Canadian governments. FIPS 140 is the standard and the -2 indicates the second revision of the standard. FIPS 140-2 is the currently active version of the standard.