Windows Client Platform:
G/On 5.5 and G/On 5.4 is using the FIPS validated Crypto++ v 5.3.0 for it's encryption functionality and G/On 5 is therefore FIPS 140-2 compliant. It is possible to validate G/On 5's use of the FIPS validated DLL's in Crypto++ for the Windows platform.
Mac, Linux, iOS Client Platforms
G/On 5 is using the latest version Crypto++ v 5.6.1 of the same encryption code as for the Windows platform. However, it is not formally FIPS validated.
Future versions of G/On.
To achieve FIPS compliance across all platforms, Giritech will switch to using platform specific and FIPS certified encryption:
- On Windows Client Platform: The built-in encryption library supplied by Microsoft
- On OS X and iOS: The built-in encryption library supplied by Apple
- On Linux: NXX or OpenSSL
Comments on FIPS validation:
Although Giritech has achieved FIPS 140-2 validation of our own set of encryption facilities, we have decided to use generally available encryption tools in our products. We do not believe that we can add any value on top of already existing FIPS validated encryption tools so we are concentrating on building solutions that makes it simple for our customers to reap the benefits of FIPS validated encryption. However, we do consider it a significant achievement for Giritech to be awarded our own FIPS validation and it has given us valuable insight and has helped us improve our methods and procedures for applying encryption capabilities in our products.
You find Giritech's certificate for our FIPS 140-2 validation here.
