[Cscwg-public] FIPS 140-3 and the CSBRs

[Tim Hollebeek]

A colleague at another company asked me about the acceptability of FIPS 140-3 and its acceptability for the CSBRs, namely whether "FIPS 140-3 level 2" should be interpreted as being "at least FIPS 140-2 level 2".  This is especially relevant now that it is no longer possible to obtain a new FIPS 140-2 certification.

I think we discussed it at some point, but couldn't find any information in a quick search.

I can't imagine any reason why the answer isn't "YES", but I wanted to check if anyone else had a different opinion.

-Tim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20230707/6f29fe53/attachment.html>