Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

For compliance with FIPS 140-1/2, is it OK to just validate a hardware module that is used?

April 26, 2017compliance FIPS hardware module Ok Used

0

Posted

For compliance with FIPS 140-1/2, is it OK to just validate a hardware module that is used?

1 Answer

0

Posted

Cryptographic implementations (“modules”) can be hardware, software, or a combination of both. If an application uses multiple cryptographic modules then all of them must be FIPS 140-1/2 validated. All cryptography must be performed by FIPS 140-1/2 validated components in order to claim FIPS 140-1/2 validation for the application.