Replies to post #173881 on Wave Systems Corp. (fka WAVXQ)

[RootOfTrust]

SL, I think tampa is attempting to imply that the government won't buy FDE drives because they aren't FIPS 140-2 compliant...lol! What he remains unclear on is that first, the drives are already FIPS 197 compliant for AES encryption (certified earlier this year)

http://www.seagate.com/ww/v/index.jsp?locale=en-US&name=null&vgnextoid=ade81f7095904110VgnVCM100000f5ee0a0aRCRD

and second, the NSA has already approved the drives for government use,

http://www.net-security.org/secworld.php?id=6120

thus skirting the FIPS 140-2 requirement.

http://en.wikipedia.org/wiki/FIPS_140-2

http://en.wikipedia.org/wiki/FIPS_197

The government has already begun piloting and adopting FDE drives (refer to comments in Wave CCs on government seats of Wave software implemented) and will continue along that course.

And tampa, no, TPMs are not cryptographic modules and thus subject to FIPS 140-2 certification. They are secure cryptoprocessors.

http://en.wikipedia.org/wiki/Trusted_Platform_Module

The government is thus free to adopt FDE drives and TPMs without any further FIPS-related certifications.

[yangside]

This is a relevent question Sheldon, my thoughts/memory is do they need to be as aren't they (Wave) tied into the actual certificate issuer.... who are FIPS compliant ? ? It also reminds me this has been covered before.
p.s. Happy New year to you! Thanks for all you do here.

[tampa123]

biometrics