FIPS 140-3 Announcement to the world

    • wolfSSL Inc. is very pleased to announce our wolf pack has successfully hunted down and captured the ever elusive FIPS 140-3 certificate! The world’s first automated submission (SP800-140Br1) FIPS 140-3 validated certificate #4718 posted to the NIST website on July 11th 2024, valid through July 10th, 2029!

    “wolfSSL remains focused on enhancing our technologies and expanding capabilities. We are dedicated to continuous innovation in security. The advancements in our FIPS 140-3 module highlight our commitment to delivering state-of-the-art cryptographic solutions that meet the rigorous demands of today’s cybersecurity landscape.” Stated wolfSSL CTO, Todd Ouska.

    We are thrilled to work with ÆGISOLVE, INC. on this journey. The wolfSSL team is grateful for the ÆGISOLVE staff’s hard-work and dedication in realizing the very first SP800-140Br1 140-3 certificate in the world! A note from the ÆGISOLVE team:

    “‘AEGISOLVE is pleased to announce the world’s first SP800-140Br1 compliant FIPS 140-3 Validation Certificate for wolfSSL’s wolfCrypt module’ reported Travis Spann, Founder and President of AEGISOLVE (NVLAP Lab Code: 200802-0).

    ‘As a first of its kind, this is a tremendous achievement and a huge step forward for the next generation of FIPS 140-3 Validated Cryptographic Modules. Congratulations, wolfSSL!

    Highlights

    • Boot Times
      • wolfCrypt FIPS 140-2, power-on times could be slower due to mandatory self-tests
      • wolfCrypt FIPS 140-3 requires self-tests only at the first algorithm use or during a slower event cycle
        • faster boot times
        • optimal power and resource consumption with careful planning!
    • Design
      • The wolfCrypt FIPS 140-3 validated module is the only commercial FIPS solution tailored for embedded
        • Emphasis on a minimal footprint, low resource use, reduced power consumption, and high performance for standard and real time systems
        • Design leads to superior scalability across devices, from mobile to server
          • 10 times more connections per device at 15-20% better performance than competing solutions.
    • OpenSSL Replacement
    • Embeddability
      • Embedded Systems (Medical, networking, sensors, security systems, etc.)
      • Extended Battery life and high performance
      • Hardware Encryption Support
      • Assembly Acceleration

    Changes from the historic wolfCrypt FIPS 140-2 cert #3389 to the active wolfCrypt FIPS 140-3 cert #4718:

    • CAST (conditional algo self tests)
    • KDF-TLS, TLS v1.2 KDF and TLSv1.3 KDF
    • SSH KDF
    • AES-OFB mode
    • RSA 3072, 4096 and PSS
    • New Degraded mode of operation in the event of a CAST failure other algorithm services will remain available.

    For more about what FIPS is please checkout these blogs:

    For information on transitioning from 140-2 to 140-3 please checkout our blog: What is the difference between FIPS 140-2 and FIPS 140-3?

    Algo cert Link
    Security Policy Link
    Ref: Section 2.5 Algorithms
    Ref: Section 2.2 Table 6 “Tested Operational Environments – Software, Firmware, Hybrid”
    Cert #4718 Link

    For questions, comments or feedback please contact the wolfSSL team anytime at fips@wolfssl.com.

    Download wolfSSL Now