I cannot speak on Mozilla behalf, but this is expected. FIPs validation can 
take up to two years after submission. The FIPS validation soft token is in 
3.12.6 per their site.



There may be an update, you can search NIST directly for already validated, 
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm or this 
link to see what is in process, 
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140InProcess.pdf (opens a 
PDF).



From: Ananya [mailto:ananya.ya...@gmail.com]
Sent: Tuesday, November 24, 2015 3:11 PM
To: Eric Halbritter
Cc: dev-security-policy@lists.mozilla.org
Subject: Re: NSS FIPS certified library



Thanks, Eric. That is back from 2011. Is that the latest? There have been 
newer version of NSS out since then.



On Tue, Nov 24, 2015 at 2:07 PM, Eric Halbritter 
<eric.halbrit...@identrust.com> wrote:

https://wiki.mozilla.org/FIPS_Validation



-----Original Message-----
From: dev-security-policy
[mailto:dev-security-policy-bounces+eric.halbritter 
<mailto:dev-security-policy-bounces%2Beric.halbritter> 
=identrust....@lists.mozi
lla.org] On Behalf Of Ananya
Sent: Tuesday, November 24, 2015 2:43 PM
To: dev-security-policy@lists.mozilla.org
Subject: NSS FIPS certified library

Hi there,
Can anyone confirm that the latest FIPS certified NSS library is 3.12.4 Is
there anything more recent that is FIPs certieid - 3.16? 3.12.9?

-Ananya

_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy



Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy

Reply via email to