CME-402
FIPS 140-3 Mode
Description
Enables FIPS-validated cryptographic modules system-wide. Only NIST-approved algorithms are available for all cryptographic operations. Non-compliant operations fail rather than fall back.
CVSS Vector Impacts
| Metric | Transition | Rationale |
|---|---|---|
| Attack Complexity (AC) | L → H | All crypto operations use validated, audited implementations |
CWE Relationships
Verification
Verify FIPS mode is enabled
$ fips-mode-setup --check
# Expected: FIPS mode is enabled
# Expected: FIPS mode is enabled
Platform: rhel
$ cat /proc/sys/crypto/fips_enabled
# Expected: 1
# Expected: 1
Platform: linux