<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1678611822423757&amp;ev=PageView&amp;noscript=1">

MOVEit Crypto earns new FIPS 140-2 validation

Ipswitch Blog| July 02 2010

| security

MOVEit Crypto, the encryption component used to secure data and settings in MOVEit DMZ and MOVEit Central in mission-critical, Internet-exposed applications, has been revalidated under FIPS 140-2 and has been issued certificate #1363.   This certificate should be available on the Cryptographic Module Validation Program (CMVP)'s website (nist.gov) in 1-2 weeks.

The changes in MOVEit Crypto that required the revalidation were mainly related to the introduction of "SHA-2" hashes such as as SHA-256.  As you may already be aware, use of unkeyed SHA-1 hashes will be disallowed in U.S. government applications by the end of the year.  (Weaker hashes such as MD5 and non-cryptographic quality integrity checks such as CRC are already disallowed.)  Fortunately, existing MOVEit products make use of keyed SHA-1 hashes (not the unkeyed hashes that will soon be disallowed), so use of existing MOVEit products with the older version of MOVEit Crypto will be allowed in U.S. government applications well beyond the end of the year.

Topics: security

Leave a Reply

Your email address will not be published. Required fields are marked *

THIS POST WAS WRITTEN BY Ipswitch Blog

Free Trials

Getting started has never been easier. Download a trial today.

Download Free Trials

Contact Us

Let us know how we can help you. Focus on what matters. 

Send us a note

Subscribe to our Blog

Let’s stay in touch! Register to receive our blog updates.