Re: Are NSS bug fix releases still FIPS 140-2 certified?

Julien Pierre <[email protected]> Wed, 12 Apr 2017 18:07:33 -0700

Newsgroups	gmane.comp.mozilla.crypto
Organization	Oracle Corporation
Message-ID	<[email protected]>

Ernie,


On 4/10/2017 2:58 PM, Ernie Kovak wrote:
> That means NSS does not provide FIPS compliance on any platform other than the one they tested on. So, not on Windows. Not anywhere other than Red Hat Enterprise Linux on a few platforms.
>
Many other vendors have done NSS FIPS validation on tons of other 
platforms in the past. This includes Windows. Sun did so in the past, 
for example. You can browse the CMVP certificate list for yourself to 
find that out. I don't know about the state of current validations on 
Windows, though.

Julien
-- 
dev-tech-crypto mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-crypto