FIPS Cryptographic Modules
Certified cryptography for US and Canadian Government Agencies (Veteran Affairs Hospitals, Department of Defense Hospitals, Military) and enterprises with the most stringent cryptographic requirements.
FIPS Cryptographic Modules
What is FIPS 140-3?
FIPS 140-3 (Federal Information Processing Standard 140-3) is a U.S. and Canadian government security standard for cryptographic modules. Validation is performed by accredited laboratories under the Cryptographic Module Validation Program (CMVP) operated jointly by NIST and Canada's Centre for Cyber Security (CCCS). It is built on international standards — ISO/IEC 19790:2012 (security requirements for cryptographic modules) and ISO/IEC 24759:2017 (test methods for conformance).
FIPS 140-3 Level 1 Validated Modules
Available today on select Ezurio SOMs — shipping on the 60 Series SOM now; With additional SOMs under evaluation.
Wi-Fi Data-in-Transit
- WPA3-Personal & Enterprise
- WPA3-Enterprise CNSA 192-bit mode
- Auth: SAE, EAP-TLS/TTLS/PEAP
TLS Data-in-Transit
- TLS 1.3 validated
- Works with any transport protocol using OpenSSL TLS APIs
- Secures application-layer data if required
Lifecycle Coverage
- Regular validation updates as NIST guidance and FIPS standards evolve
- BSP updates with updated validations included
- Non-cryptographic updates to address bug fixes and known CVEs in code
Now Certified for FIPS 140-3!
Ezurio is the first vendor to provide a validated FIPS 140-3 Level 1 module that includes Wi-Fi data-in-transit which is pre-engineered to integrate into highly sensitive device designs. Our 60 Series SOM is that offering, validated by NIST's Cryptographic Module Validation Program for the most stringent software requirements in today's data-sensitive applications.
Chain of Trust
- Device security framework using secure boot with hardware root of trust and secure device storage
- Production-Grade Image Signing - Secure signing service for generating signed firmware and certificates, backed by AWS
- Manufacturing Provisioning - Mass programming of hardware root of trust and secure image programming with optional provisioning of customer-specific application keys, certificates, and credentials
Security BSP Releases
- LTS Linux kernel, Yocto, and Buildroot releases out of our normal cycle to address CVEs
- Ezurio QA re-tests the BSP/hardware combination to preserve features
- Customer outsources the burden of retesting core BSP functionality
- Yocto & Buildroot generate SBOMs for use in customer’s CVE scanner or each build system’s built in CVE scanner.
- Supports EU CRA, EO 14028 & NTIA SBOM compliance
FIPS Cryptographic Modules
- FIPS 140-3 Level 1 certified
- Wi-Fi data-in-transit
- TLS data-in-transit
- Currently on 60 Series SOM
- In design for select SMARC and OSM SOMs
- Required for medical, government, defense
Ready to Get Started?
Get in touch with our sales and engineering team to find the SOM that best meets your needs, powered by our comprehensive EZ BSP.