This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

FIPS 140-2 certification

Has anyone taken the Nordic LE Secure ECDH key exchange and encryption code though FIPS 140-2 certification and what level was attained? I was tasked with getting to level 1 for our product and wanted to see where others were at with respect to the US Gov encryption standards.

Parents
  • Hi Jim,

    I do not think that it is certified as it is not required to certify (unless we want US government to use our module for their security). We have to expose our module to the FIPS test suite and if we pass we can claim the compliance. I do know that we pass the compliance test but do not know which level. I have to come back to you on that next week. And for the LESC encryption, we DO support it from S13x_v2.0.0. If it works with specific version of Android, i am not sure.

Reply
  • Hi Jim,

    I do not think that it is certified as it is not required to certify (unless we want US government to use our module for their security). We have to expose our module to the FIPS test suite and if we pass we can claim the compliance. I do know that we pass the compliance test but do not know which level. I have to come back to you on that next week. And for the LESC encryption, we DO support it from S13x_v2.0.0. If it works with specific version of Android, i am not sure.

Children
No Data
Related