[
https://issues.apache.org/jira/browse/CASSANDRA-20512?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17940766#comment-17940766
]
Stefan Miklosovic edited comment on CASSANDRA-20512 at 4/3/25 5:10 PM:
-----------------------------------------------------------------------
What is unfortunate is that ACCP is not providing FIPS-certified builds for
osx. Anyway, I dont think that anybody is running Cassandra on Mac in
production so FIPS compliance is irrelevant.
was (Author: smiklosovic):
What is unfortunate is that ACCP is not providingFIPS-certified builds for osx.
Anyway, I dont think that anybody is running Cassandra on Mac in production so
FIPS compliance is irrelevant.
> Investigate the usage of FIPS-certified Amazon Corretto Crypto Provider
> -----------------------------------------------------------------------
>
> Key: CASSANDRA-20512
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20512
> Project: Apache Cassandra
> Issue Type: Task
> Components: Legacy/Core
> Reporter: Stefan Miklosovic
> Priority: Normal
>
> We are using version 2.2.0 which is almost 2 years old. There is 2.5.0
> already.
> What is very interesting is that from 2.3.0, they are also offering
> FIPS-certified version of that. (1, 2, 3).
> (1)https://github.com/corretto/amazon-corretto-crypto-provider?tab=readme-ov-file#notes-on-accp-fips
> (2)
> https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4816
> (3) https://github.com/aws/aws-lc/blob/main/crypto/fipsmodule/FIPS.md
> https://central.sonatype.com/artifact/software.amazon.cryptools/AmazonCorrettoCryptoProvider-FIPS/2.5.0/versions
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
