41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0871e-069a-71cb-a02a-2fb0d327b2cb

FIPS 140-3 is not a security guarantee, and auditors know it

808bits.com · published 5 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at 808bits.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 17
Words captured: 2,788

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://csrc.nist.gov/projects/fips-140-3-transition-effort

csrc.nist.gov

https://www.safelogic.com/blog/what-happens-on-september-21-2026

safelogic.com

https://crocs-muni.github.io/roca/

crocs-muni.github.io

https://ninjalab.io/eucleak/

ninjalab.io

https://www.yubico.com/support/security-advisories/ysa-2024-03/

yubico.com

https://www.nist.gov/news-events/news/2014/04/nist-removes-cryptography-algorithm-random-number-generator-recommendations

nist.gov

https://www.yubico.com/support/security-advisories/ysa-2019-02/

yubico.com

https://www.corsec.com/cmvp-interim/

corsec.com

https://ubuntu.com/blog/interim-validation-jammy-fips

ubuntu.com

https://go.dev/blog/fips140

go.dev

https://go.dev/doc/security/fips140

go.dev

https://csrc.nist.gov/pubs/sp/800/90/b/final

csrc.nist.gov

https://csrc.nist.gov/pubs/sp/800/90/c/final

csrc.nist.gov

Coldcard's seed bug: the right RNG was in every binary, never called Read at the source ↗

The ECDSA tax: a field guide to threshold signing Read at the source ↗

https://www.federalregister.gov/documents/2023/02/03/2023-02273/announcing-issuance-of-federal-information-processing-standard-fips-186-5-digital-signature-standard

federalregister.gov

https://docs.aws.amazon.com/cloudhsm/latest/userguide/pkcs11-key-types.html

docs.aws.amazon.com