Igor's Techno Club

submited by
Style Pass
2024-04-18 13:00:05

FIPS, or Federal Information Processing Standards, are public standards developed by the United States federal government. In particular, they are a set of US government standards that specify which cryptographic algorithms allowed for use. There are many versions of FIPS, your code must be compliant at least with version 140-2

You will need to have an environment where FIPS is enabled. In such an environment, the usage of non-compliant algorithms is prohibited, so the application won't start up or will throw a runtime error. Therefore, extensive testing of the changes will be needed.

It's not strictly required, but if you are planning to get FIPS certification, it will be necessary for all external services your application interacts with to be running in FIPS mode (e.g., Kafka, Cassandra, etc.).

Leave a Comment