3.13.11 FIPS-Validated Cryptography

3.13.11  Employ FIPS-validated cryptography when used to protect the confidentiality of CUI.

To go back to the NIST 800-171 Controls page, click here.

Guides

• SANS Institute – Securing Sensitive Data: Understanding Federal Information Processing Standards (FIPS)
• NIST – Implementation Guidance for FIPS PUB 140-2 and the Cryptographic Module Validation Program
• DFARS FAQ Q35
• Microsoft TechNet – FIPS 140 Validation

Videos

• BrightTALK – Best Practices for Layer 2 Network Encryption

Sample Policy & Procedures

• US Department of Justice – Criminal Justice Information Services Security Policy (Page 54)

Example Tools

• NIST – Validated FIPS 140-1 and FIPS 140-2 Cryptographic Modules
• Exostar Encryption & Digital Rights Management

Additional Lessons Learned

• Configuring OS to be FIPS compliant

Vendor Documentation

• Cisco FIPS 140 – Innovation in Next Generation Encryption