Company
Date Published
Author
Rich DuBose
Word count
992
Language
English
Hacker News points
None

Summary

HashiCorp Vault now supports FIPS 140-3, the latest NIST standard for cryptographic modules, enabling organizations to modernize their security posture while meeting evolving compliance mandates. FIPS 140-3 represents a modernization of standards and a step toward greater international alignment, aligning with ISO/IEC 19790. HashiCorp Vault has expanded support to include FIPS 140-3 level 1 in version 1.19.4, allowing organizations to adopt a compliant platform without re-architecting their security stack. The transition to FIPS 140-3 is a regulated transition managed by NIST and the Cryptographic Module Validation Program (CMVP), with key dates including March 2019 approval and September 2021 cessation of new FIPS 140-2 submissions. Organizations subject to federal or industry-specific regulations can use Vault with confidence, knowing that it meets the latest cryptographic standards mandated by NIST, providing improved security assurance, simplified compliance, international readiness, and long-term support.