FIPS 140-3 Archives - Corsec Security, Inc.®

Deconstructing FIPS 140-3: Myth #2 – FIPS Is Only Required for Federal Agencies

Mary Broerman — Wed, 22 Jul 2026 13:52:34 +0000

In the first installment of this series, we explored why incorporating a FIPS-validated cryptographic module into a product does not automatically make the product FIPS 140-3 validated. While understanding validation boundaries is critical, another common misconception often shapes organizations’ decisions much earlier in the product lifecycle.

Many development teams assume FIPS 140-3 only matters if they plan to sell directly to the U.S. federal government. If federal contracts are not part of the business strategy, validation is often viewed as unnecessary.

At first glance, this assumption seems reasonable. After all, FIPS standards are developed by the National Institute of Standards and Technology (NIST) for use by federal agencies. However, today’s cybersecurity landscape has significantly expanded the role of FIPS validation well beyond traditional government procurement.

Myth 2: “FIPS Is Only Required for Federal Agencies”

Reality

While FIPS 140-3 originated as a federal security standard, its influence now extends across numerous commercial industries, regulated sectors, and global technology markets. Organizations pursuing FIPS validation are often motivated by customer requirements, contractual obligations, regulatory expectations, and competitive positioning and not by direct federal sales. Many organizations discover that FIPS validation becomes important because their customers expect it, their partners require it, or their industry recognizes it as an established benchmark for cryptographic assurance.

Why This Myth Exists

FIPS publications are issued by NIST, and federal agencies are required to use validated cryptography for protecting sensitive government information. Because of this, many organizations assume the standard applies exclusively to government systems.

However, cybersecurity expectations have evolved considerably. As cyber threats have become more sophisticated, many organizations have adopted established security frameworks originally developed for government use. FIPS validation has become one of the most widely recognized methods for demonstrating that cryptographic functionality has undergone independent testing and evaluation.

Today, many procurement teams consider FIPS validation an indicator of security maturity rather than simply a government requirement.

Where FIPS Validation Is Commonly Requested

Organizations are often surprised by where FIPS validation appears during the sales process. Some examples include:

Government contractors supporting federal programs,
State and local government projects,
Critical infrastructure providers,
Defense and aerospace organizations,
Healthcare technology vendors,
Financial services institutions,
Cloud service providers, and
Enterprise software vendors serving highly regulated industries.

In many cases, customers include FIPS requirements in procurement documentation even when they are not federal agencies themselves. As a result, organizations that previously believed FIPS was irrelevant may suddenly discover validation has become a prerequisite for pursuing new business opportunities.

Beyond Compliance: Building Customer Confidence

Validation requires independent testing through the Cryptographic Module Validation Program (CMVP) and the result is it provides customers with greater confidence that the cryptographic implementation performs as intended and meets established security requirements.

For many organizations, validation serves as an objective way to demonstrate their commitment to protecting sensitive information. This can help strengthen customer trust, reduce lengthy security questionnaire discussions, and support purchasing decisions where cryptographic assurance is an important evaluation criterion.

Planning Early Matters

One challenge organizations frequently encounter is waiting until late in product development before considering FIPS validation.

If validation requirements are introduced after product architecture has already been finalized, engineering teams may need to revisit cryptographic implementations, operational environments, documentation, or module boundaries.

Addressing these considerations early allows organizations to make informed architectural decisions, better estimate project timelines, and reduce the likelihood of costly rework later in the validation process.

For help with planning and guidance, Corsec offers FIPS 140-3 Assessments. These engagements help clarify requirements, outline paths to validation, and give business leaders the information they need to make decisions on validation.

Looking Ahead

The next installment in this series examines another common misconception:

Myth #3: FIPS Validation Is Just a Documentation Exercise

While documentation is certainly an important part of the process, successful validation depends on much more than producing the required paperwork. We’ll explore why engineering decisions, implementation details, testing, and documentation all play equally important roles in achieving FIPS 140-3 validation.

The post Deconstructing FIPS 140-3: Myth #2 – FIPS Is Only Required for Federal Agencies appeared first on Corsec Security, Inc.®.

Deconstructing FIPS 140-3: 5 Myths & Realities

Mary Broerman — Wed, 15 Jul 2026 12:56:00 +0000

For organizations developing products that rely on cryptography to protect sensitive information, FIPS 140-3 validation has become the benchmark for security compliance. Whether serving federal agencies, government contractors, critical infrastructure providers, or highly regulated industries, organizations often encounter FIPS 140-3 requirements as part of procurement, compliance, and security assurance efforts.

Despite its widespread recognition, FIPS 140-3 is frequently misunderstood. Teams may assume that using a validated cryptographic component automatically makes their product compliant. Product managers may view validation as a documentation exercise. Engineering teams may underestimate the technical meticulousness involved, while executives may question why validation is necessary at all.

These misconceptions can lead to delayed projects, unexpected costs, architectural rework, and missed market opportunities. More importantly, they can create a false sense of readiness when customers or procurement requirements demand validation.

This blog series, Deconstructing FIPS 140-3: 5 Myths and Realities, examines five common misconceptions that continue to shape how organizations approach cryptographic validation. We will explore how these assumptions affect product planning, development, compliance strategies, and go-to-market decisions.

We begin with one of the most common misconceptions in the industry which is confusing the use of validated cryptography with validation of the product itself.

Myth 1: “FIPS Inside” Is the Same as Being FIPS 140-3 Validated

Reality: Incorporating a FIPS-validated cryptographic module into a product does not automatically make the product FIPS 140-3 validated.

Organizations frequently advertise that their solution contains or utilizes validated cryptography. While this may be technically accurate, FIPS validation applies to the specific cryptographic module that underwent testing and validation through the Cryptographic Module Validation Program (CMVP). Simply inserting that module does not transfer validation status to the broader product.

Depending on how the cryptographic module is integrated, configured, and exposed to users, additional evaluation activities may be required to demonstrate adherence with FIPS requirements. Organizations must carefully understand the validation boundary, operational environment, and implementation details to accurately represent their security posture.

Confusing “FIPS Inside” with FIPS validation can create challenges during procurement reviews, customer assessments, and certification planning efforts. Understanding this distinction early helps organizations avoid costly misunderstandings and better prepare for validation activities.

For more information on FIPS Inside, download an in depth overview on the topic.

Upcoming Myths in This Series

In the remaining posts, we will examine four additional myths that continue to influence FIPS validation strategies:

Myth 2: FIPS Is Only Required for Federal Agencies

Myth 3: FIPS Validation Is Just a Documentation Exercise

Myth 4: Our Product Has a FIPS 140-2 Validation, We Don’t Need FIPS 140-3

Myth 5: The Cost and Timeline of FIPS Validation Aren’t Justified

Each of these assumptions fail to capture the full reality of today’s validation landscape. Left unchallenged, they can influence decisions that impact product architecture, project timelines, security adherence, product readiness, and market access. Throughout this series, we will break down each myth, explain the underlying realities, and highlight practical considerations organizations should evaluate when developing a FIPS 140-3 validation strategy.

Successfully navigating FIPS 140-3 requires more than simply understanding the standard. It often demands early coordination across engineering, product management, compliance, and certification stakeholders. Organizations that align validation requirements with product development activities from the start are typically better positioned to avoid rework, reduce risk, and achieve validation more efficiently.

Corsec supports organizations throughout the FIPS 140-3 lifecycle from architectural reviews and validation planning to documentation development, laboratory coordination, testing support, and CMVP submission activities. If FIPS 140-3 validation is part of your action plan or becoming a requirement for your customers and target markets—engaging early can help establish a clear path forward. Contact Corsec to learn how your organization can approach FIPS 140-3 validation with confidence and ease.

The post Deconstructing FIPS 140-3: 5 Myths & Realities appeared first on Corsec Security, Inc.®.

Wind River Completes FIPS 140-3 Validation with Corsec

Jake Nelson — Sun, 12 Jul 2026 19:57:49 +0000

Corsec would like to congratulate our partner, Wind River Systems, Inc., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Wind River FIPS Object Module. Completion of the FIPS 140-3 validation process provides reassurance and third-party confirmation that the product meets rigorous government security requirements for protecting sensitive data.

To achieve this benchmark, Wind River partnered with Corsec, completing the validation at a Level 1 as seen in certificate #5396. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn how to engineer your product to meet federal and regulated industry requirements—and avoid common certification delays, schedule time to speak to a Corsec engineer.

About FIPS 140

FIPS 140-2 / FIPS 140-3 are a joint effort by the National Institute of Standards and Technology (NIST) in the United States and the Communications Security Establishment Canada (CSEC), under the Canadian government. The Cryptographic Module Validation Program (CMVP), headed by NIST, provides module and algorithm testing for FIPS 140, which applies to Federal agencies using validated cryptographic modules to protect sensitive government data in computer and telecommunication systems. FIPS 140 provides stringent third-party assurance of security claims on any product containing cryptography that may be purchased by a government agency.

FIPS 140 is mandated by law in the U.S. and very strictly enforced in Canada. FIPS 140 has gained worldwide recognition as an important benchmark for third party validations of encryption products of all kinds. A FIPS 140 validation of a product provides end users with a high degree of product security, assurance, and dependability.

About the Wind River FIPS Object Module

The Wind River FIPS Object Module is a general-purpose software cryptographic library offering symmetric encryption/decryption, digital signature generation/verification, hashing, cryptographic key generation, random number generation, message authentication, and key establishment functions.

It is designed for ease of use with the popular OpenSSL cryptographic library and toolkit and is available for use as part of Wind River’s platforms.

About Corsec Security, Inc.

For over 28 years, Corsec has guided companies through complex security certifications, like FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and DoD STIG / DoDIN APL.

Corsec’s end-to-end approach helps organizations reduce risk, avoid certification delays, and accelerate time to market. From mobile devices to satellites, our expertise ensures a more predictable and efficient path to validation.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post Wind River Completes FIPS 140-3 Validation with Corsec appeared first on Corsec Security, Inc.®.

Sunhillo Completes FIPS 140-3 Validation

Jake Nelson — Sun, 12 Jul 2026 19:46:47 +0000

Corsec would like to congratulate our partner, Sunhillo Corporation, on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Sunhillo Cryptographic Module. Completion of the FIPS 140-3 validation process provides reassurance and third-party confirmation that the product meets rigorous government security requirements for protecting sensitive data.

To achieve this benchmark, Sunhillo partnered with Corsec, completing the validation at a Level 1 as seen in certificate #5394. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn how to engineer your product to meet federal and regulated industry requirements—and avoid common certification delays, schedule time to speak to a Corsec engineer.

About FIPS 140

About the Sunhillo Cryptographic Module

The Sunhillo Cryptographic Module 1.1.1zd.001 is a cryptographic library embedded in the Sunhillo SureLine OS and SureSentry application software. The Sunhillo Cryptographic Module 1.1.1zd.001 offers symmetric encryption/decryption, digital signature generation/verification, hashing, cryptographic key generation, random number generation, and message authentication; support for key establishment functions to secure data-at-rest and data-in-flight; and support for secure communications protocols (including TLS 1.2 and 1.3).

About Corsec Security, Inc.

For over 28 years, Corsec has guided companies through complex security certifications, like FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and DoD STIG / DoDIN APL.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post Sunhillo Completes FIPS 140-3 Validation appeared first on Corsec Security, Inc.®.

FIPS 140-3 Validated: Citrix (CSG) NetScaler VPX Product

Jake Nelson — Fri, 10 Jul 2026 19:45:31 +0000

Corsec would like to congratulate our partner, Citrix (Cloud Software Group), on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their NetScaler VPX product. Completion of the FIPS 140-3 validation process provides reassurance and third-party confirmation that the product meets rigorous government security requirements for protecting sensitive data.

To achieve this benchmark, Citrix partnered with Corsec, completing the validation at a Level 1 as seen in certificate #5391. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn how to engineer your product to meet federal and regulated industry requirements—and avoid common certification delays, schedule time to speak to a Corsec engineer.

About FIPS 140

About the Citrix NetScaler VPX Product

The NetScaler product line optimizes delivery of applications over the Internet and private networks. It is an Application Delivery Controller (ADC) that performs application-specific traffic analysis to intelligently distribute, optimize, and secure L4-L7 network traffic for web-applications. All these capabilities are combined into a single, integrated appliance for increased productivity, with lower overall total cost of ownership.

The NetScaler VPX is a virtual appliance consisting of a control plane processing function (providing all configuration and management processing functions) and multiple data planes which provide data packet processing functions. All configuration and management activities are performed via the web-based GUI, RESTful Nitro API, and CLI interfaces. The GUI includes a configuration utility for configuring the appliance as well as a statistical utility called Dashboard.

About Corsec Security, Inc.

For over 28 years, Corsec has guided companies through complex security certifications, like FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and DoD STIG / DoDIN APL.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post FIPS 140-3 Validated: Citrix (CSG) NetScaler VPX Product appeared first on Corsec Security, Inc.®.

Post Quantum Compliance: A New White House PQC Order Impacts Federal Product Vendors

Jake Nelson — Thu, 02 Jul 2026 13:30:33 +0000

On June 22, 2026, the White House issued Executive Order 14412, “Securing the Nation Against Advanced Cryptographic Attacks,” signaling a major acceleration in the federal government’s transition to post-quantum cryptography (PQC). The Executive Order recognizes a growing national security concern: adversaries can collect encrypted data today and potentially decrypt it in the future once large-scale quantum computers become operational, a threat commonly referred to as “harvest now, decrypt later.”

While the Order is directed primarily at federal agencies, the implications extend far beyond government networks. For technology vendors that sell into the federal market, the message is clear: quantum readiness is becoming a compliance and procurement issue, not just a technical roadmap discussion.

A Faster Federal Timeline for Post-Quantum Security

The Executive Order directs federal agencies to accelerate their migration to NIST-approved post-quantum cryptographic standards and establish agency-wide PQC migration strategies. Agencies must inventory cryptographic assets, designate PQC migration leaders, prioritize high-value systems, and transition critical use cases to PQC by 2030 and 2031. The Order also calls for expanded guidance from NIST, NSA, and DHS, along with pilot implementations to demonstrate successful migrations.

Perhaps most significant for industry, the accompanying White House Fact Sheet states that the Federal Acquisition Regulatory Council will require covered contractors to meet certain federal cybersecurity standards and vulnerability disclosure requirements by the end of 2030.

For federal product companies, this represents another clear signal that cybersecurity certifications and validated security claims will increasingly influence procurement decisions and contract eligibility.

Why FIPS 140-3 Matters More Than Ever

One of the most important details in the Executive Order is its direct reference to the Cryptographic Module Validation Program (CMVP) and FIPS 140-3, the federal standard governing cryptographic modules. The Order explicitly defines the CMVP by referencing FIPS 140-3, underscoring the central role validated cryptography will play in the federal government’s PQC migration. For vendors, the challenge is not simply adopting new post-quantum algorithms.

The federal market will increasingly expect cryptographic implementations to be incorporated into validated cryptographic modules and supported by formal assurance programs. Organizations should begin assessing how their cryptographic architectures will evolve as post-quantum algorithms become integrated into future FIPS 140-3 validations.

Many vendors have historically viewed FIPS validation as a program needed only when a procurement requirement explicitly calls for it. The new Executive Order suggests a broader reality: validated cryptography is becoming foundational to federal quantum readiness.

The Growing Connection to Common Criteria and NIAP

The Executive Order does not directly mandate Common Criteria certification. However, federal agencies face a practical challenge when adopting quantum-resistant technologies: they must be confident that security functions continue to operate as intended after significant architectural changes.

This is where the National Information Assurance Partnership (NIAP) and Common Criteria evaluations become increasingly relevant.

Historically, federal procurement policies have emphasized the use of NIAP-approved products for many cybersecurity categories. Internal federal guidance has long linked the use of Common Criteria-certified products and FIPS-validated cryptography as complementary assurance mechanisms for technology acquisitions.

As vendors redesign security products to incorporate:

Quantum-resistant key exchange
New digital signature algorithms
Hybrid cryptographic implementations
Updated trust architectures

those changes may impact both cryptographic validation boundaries and evaluated security functionality.

For organizations already maintaining NIAP certifications, quantum migration should be viewed through a compliance lens rather than solely a technical one. Engineering changes introduced to support PQC may have implications for future certification maintenance, evaluation activities, and product roadmaps.

What About DoD STIGs?

The Department of Defense will face many of the same quantum migration challenges outlined in the Executive Order. Although DoD Security Technical Implementation Guides (STIGs) are not specifically addressed in the Order, they play an important role in how secure technologies are deployed within defense environments.

Historically, STIG requirements evolve to reflect emerging federal cybersecurity mandates and approved technologies. As NIST, NSA, and other agencies publish guidance for post-quantum implementation, vendors should expect quantum-resilient cryptography to gradually influence secure configuration baselines and deployment expectations across defense environments.

For products deployed within DoD environments, compliance teams should monitor future updates for:

Cryptographic configuration requirements
Key management practices
Certificate and PKI guidance
Approved algorithm usage
Secure communications controls

Vendors that proactively align product roadmaps with emerging federal quantum guidance will be better positioned when future requirements are incorporated into operational frameworks.

Compliance Is Becoming a Competitive Advantage

The most important takeaway from the Executive Order is that quantum readiness is no longer a distant research topic. It is entering the realm of procurement policy, cybersecurity requirements, and compliance strategy.

Federal buyers are not simply looking for products that support post-quantum cryptography; they will increasingly need assurance that those capabilities are implemented securely, validated appropriately, and deployable in regulated environments.

Organizations that begin planning now by developing a post-quantum migration strategy will be better positioned to maintain eligibility for federal opportunities as the government’s quantum transition accelerates.

To help organizations navigate PQC requirements and FiPS 140-3, Corsec is setting calls with product vendors to outline security roadmaps.

About Corsec Security, Inc.

For 28+ years Corsec has guided companies through the IT security certification process for FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and the DoD (STIGs, DoDIN APL, UC APL). From mobile devices to satellites, Corsec helps companies reduce validation risk, shorten timelines, and expand into regulated markets.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Head of Marketing & BD
jnelson@corsec.com

The post Post Quantum Compliance: A New White House PQC Order Impacts Federal Product Vendors appeared first on Corsec Security, Inc.®.

FIPS 140-3 Validated: Citrix (CSG) NetScaler MPX Product Secured

Jake Nelson — Fri, 19 Jun 2026 20:39:48 +0000

Corsec would like to congratulate our partner, Citrix (Cloud Software Group), on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their NetScaler MPX product. Completion of the FIPS 140-3 validation process provides reassurance and third-party confirmation that the product meets rigorous government security requirements for protecting sensitive data.

To achieve this benchmark, Citrix partnered with Corsec, completing the validation at a Level 2 as seen in certificate #5342. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn how to engineer your product to meet federal and regulated industry requirements—and avoid common certification delays, schedule time to speak to a Corsec engineer.

About FIPS 140

About the Citrix NetScaler MPX Product

The NetScaler MPX is a hardware appliance consisting of a control plane processing function (providing all configuration and management processing functions) and multiple data planes which provide data packet processing functions.

About Corsec Security, Inc.

For over 28 years, Corsec has guided companies through complex security certifications, like FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and DoD STIG / DoDIN APL.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post FIPS 140-3 Validated: Citrix (CSG) NetScaler MPX Product Secured appeared first on Corsec Security, Inc.®.

Stryker Reaches New Security Milestone, Completes FIPS 140-3 Validation of Badge Crypto Module

Jake Nelson — Thu, 18 Jun 2026 20:30:51 +0000

Corsec would like to congratulate our partner, Stryker Corporation, on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Stryker Badge Cryptographic Module. Completion of the FIPS 140-3 validation process provides reassurance and third-party confirmation that the module meets rigorous government security requirements for protecting sensitive data.

To achieve this benchmark, Stryker partnered with Corsec, completing the validation at a Level 1 as seen in certificate #5336. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn how to engineer your product to meet federal and regulated industry requirements—and avoid common certification delays, schedule time to speak to a Corsec engineer.

About FIPS 140

About Stryker Corporation and Their Stryker Badge Cryptographic Module

Stryker Corporation is a global leader in medical technologies, offering innovative products and services in medsurg, neurotechnology, orthopedics, and spine that help improve patient and healthcare outcomes.

Stryker’s Vocera Badges are wearable communication devices that enable clinician agility and accelerate patient care. Small and lightweight, the Vocera Badges redefine healthcare communications by bringing together voice calling, secure messaging, alerts, and alarms in a lightweight wearable. Communications are protected via industry standard secure wireless communications protocols.

The Stryker Badge Cryptographic Module is a firmware module that is installed on the badge, and badge applications can leverage the module’s cryptographic services (including encryption/decryption, hashing, digital signature functions, and random number generation) needed to support secure communications.

About Corsec Security, Inc.

For over 28 years, Corsec has guided companies through complex security certifications, like FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and DoD STIG / DoDIN APL.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post Stryker Reaches New Security Milestone, Completes FIPS 140-3 Validation of Badge Crypto Module appeared first on Corsec Security, Inc.®.

HP Inc Completes FIPS 140-3 Validation of HP Poly Crypto Module

Jake Nelson — Fri, 15 May 2026 18:30:19 +0000

Corsec would like to congratulate our partner, Hewlett Packard, Inc., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their HP Poly Cryptographic Module. Completion of the FIPS 140-3 validation process provides reassurance and confirmation to users of the protection of sensitive information within their environment.

To achieve this benchmark, HP partnered with Corsec, completing the validation at a Level 1 as seen in certificate #5011. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn more about engineering your product to meet Federal and regulated industry security requirements, schedule time to speak to a Corsec engineer.

About FIPS 140

About the HP Poly Cryptographic Module

The HP Poly Cryptographic Module is an open-source, general-purpose cryptographic library which provides approved cryptographic algorithms to serve BoringSSL and other user-space applications. The module is intended for use in a variety of environments and any general-purpose environment that requires cryptographic primitives.

About Corsec Security, Inc.

For over 28 years, Corsec has assisted companies through the IT security certification process for FIPS 140-2 / FIPS 140-3, Common Criteria (CC), CSfC, and DoD STIG / DoDIN APL. We are a privately owned company focused on partnering with organizations worldwide to assist with the process of security certifications and validations. Our certification methodology helps open doors to new markets and increase revenue for clients with products ranging from mobile phones to satellites. Our broad knowledge safeguards against common pitfalls and thwarts delays, translating to a swift and seamless path to certification. Corsec has created the benchmark for providing business leaders with fast, flexible access to industry knowledge on security certifications and validations.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post HP Inc Completes FIPS 140-3 Validation of HP Poly Crypto Module appeared first on Corsec Security, Inc.®.

FIPS 140-3 Validation Complete for Infinidat on Cryptographic Module

Jake Nelson — Wed, 22 Apr 2026 18:47:16 +0000

Corsec would like to congratulate our partner, Infinidat, Ltd., on completing the Federal Information Processing Standard Publication 140-3 (FIPS 140-3) validation process on their Infinidat Cryptographic Module. Completion of the FIPS 140-3 validation process provides reassurance and confirmation to users of the protection of sensitive information within their environment.

To achieve this benchmark, Infinidat partnered with Corsec, completing the validation at a Level 1 as seen in certificate #5245. For more information on the validation and to find additional details on the module’s security policy, visit NIST’s validated modules site.

To learn more about engineering your product to meet Federal and regulated industry security requirements, schedule time to speak to a Corsec engineer.

About FIPS 140

About the Infinidat Cryptographic Module

The Infinidat Cryptographic Module is a set of cryptographic libraries that implement TLS, symmetric key generation and encryption/decryption, and SED authentication key derivation for the InfuzeOS™, which is the core component of the InfiniBox and InfiniBox SSA appliances.

The Infinidat Cryptographic Module comes preinstalled on each InfiniBox node.

About Corsec Security, Inc.

###

Connect With Us:

Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements – Subscribe

Press Contact:

Jake Nelson
Corsec Director of Marketing
jnelson@corsec.com

The post FIPS 140-3 Validation Complete for Infinidat on Cryptographic Module appeared first on Corsec Security, Inc.®.