NSS 4.0 FIPS enabled for Windows

[tan...@gmail.com]

Hi All,
We are consuming NSS crpto libraries for our project. I had some queries regarding the FIPS compliance for NSS for Windows environment.

NSS cryptographic libraries ver 4.0 currently is certified for Red Hat Linux based environments as per https://www.cryptsoft.com/fips140/out/cert/2711.html
&& https://www.cryptsoft.com/fips140/out/cert/2721.html

Is there any plan to support the FIPS compliance for Windows OS based environments for the current version? Will the current version be supported for Win platforms in the near future?

If so please share the details.


Thanks,
Tanay

[tapas.a...@gmail.com]

+ 1 for this. Anyone have any information on this one?

[J.C. Jones]

Tapas, Tanay:

I'm not aware of any activity to re-valdiate FIPS for Windows targets at
this time. The last validation on Windows that I'm aware of was in 2009
[1], covering 32-bit Windows XP SP3, according to some of the certificates
at NIST CSRC [2].

It's possible that the previous validation will be sufficient for newer
versions of Windows, depending on the context in which you need to use a
validated module. CMVP would be the best source of guidance on that.

[1] https://wiki.mozilla.org/FIPS2009
[2] http://csrc.nist.gov/groups/STM/cavp/documents/aes/aesval.html#1128

Cheers,
J.C.

On Tue, Feb 28, 2017 at 9:22 PM, <tapas.a...@gmail.com> wrote:

> On Monday, January 9, 2017 at 11:35:50 PM UTC+5:30, tanaysees wrote:

> + 1 for this. Anyone have any information on this one?

> _______________________________________________
> dev-security mailing list
> dev-se...@lists.mozilla.org
> https://lists.mozilla.org/listinfo/dev-security
>