Entropy Archives - Corsec Security, Inc.®

Fed Roundup: June 2024

Jake Nelson — Wed, 03 Jul 2024 15:36:29 +0000

Announcements:

None

Security Technical Implementation Guide Updates:

None

Updates & Announcements:

None

Special Publications & Interagency Reports:

Draft SP 800-224
Draft IR 8505, A Data Protection Approach for Cloud-Native Applications
Comments Requested on SP 800-38C, Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality, 2007 and SP 800-38B, Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication, 2016
IR 8517, Hardware Security Failure Scenarios: Potential Weaknesses in Hardware Design

Updates & Announcements:

None

Protection Profile Announcements:

NIAP has published the PP-Module for VPN Client v2.5
The Assurance Package for Flaw Remediation V1.0 has been released
NIAP has endorsed cPP for Application Software V1.0E and cPP Modules
NIAP is calling for participants to join the Application Software Technical Community

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: June 2024 appeared first on Corsec Security, Inc.®.

Fed Roundup: May 2024

Jake Nelson — Mon, 03 Jun 2024 19:17:07 +0000

Announcements:

None

Security Technical Implementation Guide Updates:

DISA has released STIG Updates

Updates & Announcements:

NIST’s FY 2023 Cybersecurity & Privacy Annual Report

Special Publications & Interagency Reports:

Updates & Announcements:

None

Protection Profile Posting:

None

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: May 2024 appeared first on Corsec Security, Inc.®.

Fed Roundup: January 2024

Jake Nelson — Fri, 02 Feb 2024 13:32:11 +0000

Announcements:

None

Security Technical Implementation Guide Updates:

Updates & Announcements:

Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations (NIST AI 100-2e2023)

Special Publications & Interagency Reports:

Updates & Announcements:

None

Protection Profile Posting:

None

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: January 2024 appeared first on Corsec Security, Inc.®.

Fed Roundup: December 2023

Jake Nelson — Tue, 02 Jan 2024 21:34:46 +0000

Announcements:

Security Technical Implementation Guide Updates:

None

Updates & Announcements:

NIST has released Cybersecurity White Paper (CSWP) 30, Automation Support for Control Assessments – Project Update and Vision

Special Publications & Interagency Reports:

Updates & Announcements:

None

Protection Profile Posting:

NIAP has endorsed the new Network Device collaborative Protection Profile v3.0e (NDcPP v3.0e)

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: December 2023 appeared first on Corsec Security, Inc.®.

Fed Roundup: November 2023

Jake Nelson — Tue, 05 Dec 2023 15:41:06 +0000

Announcements:

Security Technical Implementation Guide Updates:

Updates & Announcements:

None

Special Publications & Interagency Reports:

Updates & Announcements:

Protection Profile Posting:

Call for participants on Retransmission Device (RD) Technical Community (TC)

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: November 2023 appeared first on Corsec Security, Inc.®.

Fed Roundup: October 2023

Jake Nelson — Wed, 01 Nov 2023 17:01:26 +0000

Announcements:

Security Technical Implementation Guide Updates:

Updates & Announcements:

None

Special Publications & Interagency Reports:

Updates & Announcements:

NIAP has asked for participants in the Software Defined Networking (SDN) Technical Community (TC)

Protection Profile Posting:

None

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: October 2023 appeared first on Corsec Security, Inc.®.

Fed Roundup: September 2023

Jake Nelson — Tue, 03 Oct 2023 22:06:06 +0000

Announcements:

DISA’s Hosting and Compute Center (HaCC) released the Distributed Hybrid Multi Cloud (DHMC) request for White Papers (RWP)

Security Technical Implementation Guide Updates:

Updates & Announcements:

None

Special Publications & Interagency Reports:

Updates & Announcements:

None

Protection Profile Posting:

Virtual Private Network (VPN) Gateway, Version 1.3

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: September 2023 appeared first on Corsec Security, Inc.®.

Fed Roundup: August 2023

Jake Nelson — Thu, 31 Aug 2023 18:24:44 +0000

Announcements:

Security Technical Implementation Guide Updates:

Updates & Announcements:

None

Special Publications & Interagency Reports:

Updates & Announcements:

Protection Profile Posting:

None

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: August 2023 appeared first on Corsec Security, Inc.®.

Fed Roundup: June 2023

Jake Nelson — Fri, 30 Jun 2023 19:01:08 +0000

Announcements:

Security Technical Implementation Guide Updates:

Updates & Announcements:

None

Special Publications & Interagency Reports:

Updates & Announcements:

None

Protection Profile Posting:

None

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Dir of Marketing
Jnelson@corsec.com

The post Fed Roundup: June 2023 appeared first on Corsec Security, Inc.®.

Cloud Software Group Completes ESV Process

Jake Nelson — Wed, 07 Jun 2023 15:46:00 +0000

Corsec would like to congratulate our partner, Cloud Software Group (CSG), on completing the Entropy Source Validation (ESV) process for their NetScaler CPU Jitter Entropy Source.

As part of the FIPS 140-2 and FIPS 140-3 module validation submission process, NIST’s CMVP requires vendors to include documentation justifying conformance to SP 800-90B. To achieve this milestone, CSG partnered with Corsec, completing the ESV process and receiving certificate #E52.

For more information and details on the validation process visit the CMVP’s Entropy Validation site. To speak to a Corsec expert on how to engineer your product to meet federal and regulated industry security requirements, schedule time here.

About Cloud Software Group and Their ESV Certificate

More than 100 million users around the globe rely on Cloud Software Group to help them adapt, transform, and meet the challenges facing every modern enterprise across private, public, managed and sovereign cloud environments.

The focus of CSG’s ESV is CPU Jitter Entropy (JENT), a non-physical true random number generator source of entropy.

About Corsec Security, Inc.

For two decades Corsec has assisted companies through the IT security certification process for FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and the DoD’s APL. We are a privately owned company focused on partnering with organizations worldwide to assist with the process of security certifications and validations. Our certification methodology helps open doors to new markets and increase revenue for clients with products ranging from mobile phones to satellites. Our broad knowledge safeguards against common pitfalls and thwarts delays, translating to a swift and seamless path to certification. Corsec has created the benchmark for providing business leaders with fast, flexible access to industry knowledge on security certifications and validations.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post Cloud Software Group Completes ESV Process appeared first on Corsec Security, Inc.®.