Hi Atsuhiko and All,
I know that Jsch hasn't got FIPS 140-2 certified. I looked into the source code and found that it supports FIPS approved algorithms AES, Triple-DES, DSA, RSA, SHA-1, HMAC-SHA-1. I wonder whether my software that uses Jsch can pass a FIPS 140-2 validation testing by NIST.
Do you get any experience of this?
I look forward to hearing your inputs.
Thanks a lot,
Viet
--- On Tue, 6/16/09, Atsuhiko Yamanaka <ymnk@...> wrote:
From: Atsuhiko Yamanaka <ymnk@...>
Subject: Re: [JSch-users] Is Jsch FIPS 140-2 compliant?
To: hoangvietphan@...
Cc: jsch-users@...
Date: Tuesday, June 16, 2009, 8:48 AM
Hi,
+-From: "Viet H. Phan" <hoangvietphan@...> --
|_Date: Mon, 15 Jun 2009 02:32:28 -0700 (PDT) _____
|
|We have been using Jsch to do data transfer with a partner.
|Recently we have got a requirement of following FIPS 104-2 standard
|(http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf).
|Could anyone tell me if Jsch is FIPS 140-2 compliant?
Unfortunately, it is not.
Sincerely,
--
Atsuhiko Yamanaka
JCraft,Inc.
1-14-20 HONCHO AOBA-KU,
SENDAI, MIYAGI 980-0014 Japan.
Tel +81-22-723-2150
+1-415-578-3454
Skype callto://jcraft/
|