[Fed-Talk] FIPS 140 Certification (was: How to tell if FileVault. . .)
[Fed-Talk] FIPS 140 Certification (was: How to tell if FileVault. . .)
- Subject: [Fed-Talk] FIPS 140 Certification (was: How to tell if FileVault. . .)
- From: "Henry B. Hotz" <email@hidden>
- Date: Fri, 4 Apr 2008 10:48:55 -0700
I just DL'd today's version and I see no listing for Apple. OTOH I
see no Apple listing on <http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm
> either.
Does this mean they have finished the process, but the web page hasn't
been updated yet? Or am I missing something? It does appear that
Preview doesn't like the PDF, and I can't search its text except with
my eyes.
On Feb 1, 2008, at 7:18 AM, Peter Link wrote:
Gary,
On that topic, remember to regularly watch this site,http://csrc.nist.gov/groups/STM/cmvp/inprocess.html
, downloading the pdf file to check the status of Apple's
Cryptographic Service Provider (CSP) submission for FIPS 140-2
certification. They are still in the initial Implementation Under
Test step but once certified (generally a 12 month process),
everything relating to Apple's encryption processes (FV, disk
utility, keychain) will be certified. Our DAA is allowing us to use
FV to satisfy encryption of PII while Apple is in the FIPS 140-2
certification process. This might not be the case at other DOE sites.
------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
email@hidden, or email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden