The U.S. Federal Information Processing Standard (FIPS) has requirements concerning acceptable encryption methods and strengths. FIPS section 140-2 applies to information processing for government agencies and the military, and it often also applies to vendors, contractors, and suppliers doing business with those entities. For a product to meet FIPS requirements, it must not only comply with FIPS standards, but also must be validated by the appropriate government testing authorities.
The FIPS testing process ensures that a solution meets encryption strength requirements, and also passes stringent tests that detect a variety of flaws, including back doors and hardcoded keys. These tests make FIPS validation relevant not just to the government and military, but to all organizations looking for a secure file transfer solution.
This whitepaper briefly describes the FIPS encryption standards as well as Ipswitch’s solution, first implemented in Ipswitch’s MOVEit products in 2003.
Learn more about the WS_FTP product line and the exciting new features available in the latest release of WS_FTP Server with SSH.
See how the capabilities of WS_FTP products map to the detailed requirements of today’s most common compliance regulations.