Welcome to the Acumen Security Blog

Time to comment on FIPS 140-NEXT

The time has come to provide comments on the proposed successor to FIPS 140-2. NIST has put a proposal for comment to use ISO 19790 as the next revision of FIPS 140 (we like to call it FIPS 140-NEXT but it will probably end up being called FIPS 140-3). The link to the request for comments can be found on Federal Register, here:

https://www.federalregister.gov/articles/2015/08/12/2015-19743/government-use-of-standards-for-security-and-conformance-requirements-for-cryptographic-algorithm

As a reminder, we performed an analysis comparing FIPS 140-2 to ISO 19790. You can find our original here: https://blog.acumensecurity.net/getting-ready-for-an-iso-19790-based-fips-140-next/

We here at Acumen will be providing comments both on the content of ISO 19790 and the usage of it as the next version of FIPS 140. What do you are all think? Will you be commenting on the proposal?

Speak Your Mind

*