Achieving FIPS Compliance with NGINX Plus
Achieving FIPS Compliance with NGINX Plus If you work in government or a regulated industry, you’ve no doubt heard of the Federal Information Processing Standards, perhaps better known by the acronym FIPS. FIPS is a very broad set of standards publications, but in the software industry the term usually refers to the publication specifically about cryptography, FIPS 140-2 Security Requirements for Cryptographic Modules. FIPS 140-2 is a product of the joint effort between the United States and Canada called the Cryptographic Module Validation Program. It standardizes the testing and certification of cryptographic modules that are accepted by the federal agencies of both countries for the protection of sensitive information. FIPS 140-2 defines four security levels (1–4) which correlate to the level of protection a FIPS‑certified module must provide. Security Level 1 relates specifically to software cryptographic modules. It stipulates which cryptographic [ more… ]
