5 ms·
"At my last job we had to roll our own physical security solution for protecting keys because the off-the-shelf FIPS level 3 stuff was so brain-dead stupid and
by mcguire 6y ago
"At my last job we had to roll our own physical security solution for protecting keys because the off-the-shelf FIPS level 3 stuff was so brain-dead stupid and easy to defeat that it didn't meat our security needs."
Have you considered contacting NIST to get certified? You could get in on the action.
- garmaine 6y agoIt was not possible because FIPS mandates use of certain crypto systems (and to NOT use others), and our application domain—bitcoin private key management—required the use of non-standard cryptography. According to the lawyers we talked to, we couldn’t meet both needs. In my experience with the government, a waiver is probably possible though. But none of our customers were demanding FIPS certification.