<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="auto">This was indeed discussed on a recent call. You'll find a reference to it in the <span style="font-family:Calibri, sans-serif;font-size:14.6667px;display:inline !important">April 20, 2023</span><span></span></div>
<div id="ms-outlook-mobile-signature" dir="auto">
<div dir="auto">Minutes.</div>
<div dir="auto"><br>
</div>
<div dir="auto">Regards,<span><br>
Martijn</span></div>
</div>
<div id="mail-editor-reference-message-container" dir="auto"><br>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" style="font-size: 11pt;"><strong>From:</strong> Cscwg-public <cscwg-public-bounces@cabforum.org> on behalf of Tim Hollebeek via Cscwg-public <cscwg-public@cabforum.org><br>
<strong>Sent:</strong> Friday, July 7, 2023 8:32:49 pm<br>
<strong>To:</strong> cscwg-public@cabforum.org <cscwg-public@cabforum.org><br>
<strong>Subject:</strong> [Cscwg-public] FIPS 140-3 and the CSBRs<br>
</div>
<br>
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<p></p>
<div style="background-color:#FAFA03; width:100%; border-style:solid; border-color:#000000; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:'Calibri'; color:Black; text-align:left">
<span style="color:000000">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.</div>
<br>
<p></p>
<div>
<div class="WordSection1">
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
A colleague at another company asked me about the acceptability of FIPS 140-3 and its acceptability for the CSBRs, namely whether “FIPS 140-3 level 2” should be interpreted as being “at least FIPS 140-2 level 2”. This is especially relevant now that it is
no longer possible to obtain a new FIPS 140-2 certification.</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
I think we discussed it at some point, but couldn’t find any information in a quick search.</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
I can’t imagine any reason why the answer isn’t “YES”, but I wanted to check if anyone else had a different opinion.</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
</p>
<p class="MsoNormal" style="margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif;">
-Tim</p>
</div>
</div>
<br>
</div>
</body>
</html>