@alwayscurious@infosec.exchange
Post #2281532
2026-05-08 02:58 UTC
@filippo@abyssdomain.expert Wow.
No wonder so many despise FIPS 140-3.
Fun fact for anyone reading: last I checked, the most recently FIPS 140 validated version of Windows’s built-in cryptographic library was from an end-of-life version of Windows.
Replies (1)
-
@alwayscurious@infosec.exchange 2026-05-08 17:14
@filippo@abyssdomain.expert I’ve seen FIPS 140 certificates that make almost no sense, and I’m pretty sure it is to avoid these enormous delays. Last I checked, the IBM Cryptographic Coprocessor’s certificate only covers loading of a firmware by the bootloader. The certificate of the Private Machines Enforcer blades is invalidated by booting the Compute Engine. In both cases, the certificate doesn't cover what companies actually buy the hardware for.