[Cscwg-public] FIPS 140-3 and the CSBRs

[Martijn Katerbarg]

This was indeed discussed on a recent call.  You'll find a reference to it in the April 20, 2023
Minutes.

Regards,
Martijn

________________________________
From: Cscwg-public <cscwg-public-bounces at cabforum.org> on behalf of Tim Hollebeek via Cscwg-public <cscwg-public at cabforum.org>
Sent: Friday, July 7, 2023 8:32:49 pm
To: cscwg-public at cabforum.org <cscwg-public at cabforum.org>
Subject: [Cscwg-public] FIPS 140-3 and the CSBRs


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.


A colleague at another company asked me about the acceptability of FIPS 140-3 and its acceptability for the CSBRs, namely whether “FIPS 140-3 level 2” should be interpreted as being “at least FIPS 140-2 level 2”.  This is especially relevant now that it is no longer possible to obtain a new FIPS 140-2 certification.

I think we discussed it at some point, but couldn’t find any information in a quick search.

I can’t imagine any reason why the answer isn’t “YES”, but I wanted to check if anyone else had a different opinion.

-Tim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cabforum.org/pipermail/cscwg-public/attachments/20230707/f3646bcd/attachment.html>