Timeline for Does FIPS 140-2 crypto certification matter for Bitcoin?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 19, 2012 at 3:51 | comment | added | David Schwartz | Too many reasons. For one thing, say you find a bug in your FIPS validated code. Do you pay $35,000 to fix it (since you'll need a new validation) or do you leave the bug in? And FIPS requires you to break things that are perfectly capable of working. Also, FIPS modes are maintained under the assumption that nobody will ever enable them. They're only there so that you can put a checkmark in the "FIPS validated" box. If you enable FIPS mode and something doesn't work and you file a bug report, you will be told "disable FIPS mode". | |
| Dec 19, 2012 at 0:47 | comment | added | Highly Irregular | Would upvote if you said why FIPS-140 is less desirable. | |
| Dec 17, 2012 at 19:16 | vote | accept | makerofthings7 | ||
| Feb 2, 2014 at 16:27 | |||||
| Dec 14, 2012 at 2:10 | history | answered | David Schwartz | CC BY-SA 3.0 |