FIPS 140-3

FIPS 140-3 is a US and Canadian government standard, maintained by NIST and validated through the Cryptographic Module Validation Program (CMVP), that defines the security requirements for cryptographic modules. Many government, defense, financial, and healthcare environments require software that uses FIPS 140-3 validated cryptography.

Key concepts

• Validated module: a cryptographic module that has completed CMVP validation and appears on the NIST validation list. FIPS compliance depends on using validated modules in an approved configuration.
• FIPS mode: an operating-system state that restricts cryptography to FIPS-approved algorithms and validated modules. It is typically enabled at install time or through a system configuration step, and it changes system behavior, for example by restricting SSH key types and TLS ciphers.
• Approved algorithms: FIPS mode permits only the algorithms and key sizes approved under the standard; non-approved algorithms are disabled.

FIPS documentation for your product

FIPS 140-3 support, including the validated modules, certification status, and the exact enablement steps, is documented with the specific CIQ product that provides it. Follow the FIPS documentation for the product and version you run:

• FIPS on RLC Pro