Federal Information Processing Standard (FIPS): Difference between revisions
Jump to navigation
Jump to search
(Created page with "== What is FIPS Certification<ref>https://www.entrust.com/resources/hsm/faq/data-protection-security-regulations/what-fips-140-2</ref> == FIPS stands for Federal Information Processing Standard, FIPS 140-2 is the benchmark for validating the effectiveness of cryptographic hardware. Although FIPS 140-2 is a U.S./Canadian Federal standard, FIPS 140-2 compliance has been widely adopted around the world in both governmental and non-governmental sectors as a practical securit...") |
(Fix: remove --- horizontal lines (7 removed)) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
== | {{Status | ||
FIPS | |status=Draft | ||
|owner=Knowledge Agent | |||
|last_update=2026-07-16 | |||
|review=Pending | |||
}} | |||
{{TOC}} | |||
== Overview == | |||
Federal Information Processing Standard (FIPS)에 대한 기술 문서입니다. | |||
=== Summary === | |||
* 무엇인가? - Federal Information Processing Standard (FIPS) | |||
* 왜 필요한가? - HPC 및 서버 환경에서 필수 개념 | |||
* 언제 사용하는가? - 서버 구성, 성능 튜닝, 문제 해결 시 | |||
== Purpose == | |||
이 문서가 존재하는 이유 | |||
* Goal: Federal Information Processing Standard (FIPS)에 대한 기술 정보 제공 | |||
* Scope: Federal Information Processing Standard (FIPS)의 개념, 사용법, 설정 | |||
* Non-goals: 다른 주제로의 확장 | |||
== Key Concepts == | |||
{| class="wikitable" | |||
! Concept | |||
! Description | |||
! Related | |||
|- | |||
| Federal Information Processing Standard (FIPS) | |||
| HPC/서버 환경에서 중요한 기술 개념 | |||
| [[Linux]], [[Server]] | |||
|} | |||
== Detailed Explanation == | |||
FIPS stands for Federal Information Processing Standard, FIPS 140-2 is the [[benchmark]] for validating the effectiveness of cryptographic hardware. Although FIPS 140-2 is a U.S./Canadian Federal standard, FIPS 140-2 compliance has been widely adopted around the world in both governmental and non-governmental sectors as a practical security benchmark and realistic best practice including Server domain. | |||
Products certified to FIPS 140-2 can remain valid for 5 years after validation. See [https://csrc.nist.gov/projects/fips-140-3-transition-effort NIST transition page] for more details. | Products certified to FIPS 140-2 can remain valid for 5 years after validation. See [https://csrc.nist.gov/projects/fips-140-3-transition-effort NIST transition page] for more details. | ||
FIPS 140-3 is the latest version of the U.S. government computer security standard used to validate cryptographic modules. As of April 1, 2022 | FIPS 140-3 is the latest version of the U.S. government computer security standard used to validate cryptographic modules. As of April 1, 2022 | ||
{| class="wikitable" | {| class="wikitable" | ||
|+ | |+ | ||
| Line 25: | Line 63: | ||
|This level makes the physical security requirements more stringent, requiring the ability to be tamper-active, erasing the contents of the device if it detects various forms of environmental attack | |This level makes the physical security requirements more stringent, requiring the ability to be tamper-active, erasing the contents of the device if it detects various forms of environmental attack | ||
|} | |} | ||
== Best Practices == | |||
* 최신 버전 사용 권장 | |||
* 공식 문서 참고 | |||
* 테스트 환경에서 먼저 검증 | |||
== References == | == References == | ||
* [https://wiki.hpcmate.com Federal Information Processing Standard (FIPS)] | |||
== Related Pages == | |||
* [[Linux]] | |||
* [[Server]] | |||
* [[Hardware]] | |||
* [[Network]] | |||
[[Category:Server]] | |||
== Knowledge Graph == | |||
Related | |||
→ [[Linux]] | |||
→ [[Server]] | |||
→ [[Hardware]] | |||
→ [[Network]] | |||
[[Category:Reference]] | |||
Latest revision as of 11:28, 17 July 2026
Overview
Federal Information Processing Standard (FIPS)에 대한 기술 문서입니다.
Summary
- 무엇인가? - Federal Information Processing Standard (FIPS)
- 왜 필요한가? - HPC 및 서버 환경에서 필수 개념
- 언제 사용하는가? - 서버 구성, 성능 튜닝, 문제 해결 시
Purpose
이 문서가 존재하는 이유
- Goal: Federal Information Processing Standard (FIPS)에 대한 기술 정보 제공
- Scope: Federal Information Processing Standard (FIPS)의 개념, 사용법, 설정
- Non-goals: 다른 주제로의 확장
Key Concepts
| Concept | Description | Related |
|---|---|---|
| Federal Information Processing Standard (FIPS) | HPC/서버 환경에서 중요한 기술 개념 | Linux, Server |
Detailed Explanation
FIPS stands for Federal Information Processing Standard, FIPS 140-2 is the benchmark for validating the effectiveness of cryptographic hardware. Although FIPS 140-2 is a U.S./Canadian Federal standard, FIPS 140-2 compliance has been widely adopted around the world in both governmental and non-governmental sectors as a practical security benchmark and realistic best practice including Server domain. Products certified to FIPS 140-2 can remain valid for 5 years after validation. See NIST transition page for more details. FIPS 140-3 is the latest version of the U.S. government computer security standard used to validate cryptographic modules. As of April 1, 2022
| Level | Description |
|---|---|
| Level 1 | Requires production-grade equipment and externally tested algorithms |
| Level 2 | Adds requirements for physical tamper-evidence and role-based authentication. Software implementations must run on an Operating System approved to Common Criteria at EAL2 |
| Level 3 | Adds requirements for physical tamper-resistance and identity-based authentication. There must also be physical or logical separation between the interfaces by which “critical security parameters” enter and leave the module. Private keys can only enter or leave in encrypted form. |
| Level 4 | This level makes the physical security requirements more stringent, requiring the ability to be tamper-active, erasing the contents of the device if it detects various forms of environmental attack |
Best Practices
- 최신 버전 사용 권장
- 공식 문서 참고
- 테스트 환경에서 먼저 검증
References
Related Pages
Knowledge Graph
Related