From d566a2a12ebf0ec4fa49bbadcf23ca2007762ffa Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Thu, 20 Oct 2022 09:37:53 -0400 Subject: [PATCH] refactor[rules] Updated fips information for 12.0 macOS Monterey is moved along in the FIPS process --- rules/os/os_implement_cryptography.yaml | 2 +- rules/os/os_required_crypto_module.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/os/os_implement_cryptography.yaml b/rules/os/os_implement_cryptography.yaml index 20045e25..bc6beea5 100644 --- a/rules/os/os_implement_cryptography.yaml +++ b/rules/os/os_implement_cryptography.yaml @@ -5,7 +5,7 @@ discussion: | Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The operating system must implement cryptographic modules that adhere to the higher standards that have been tested, validated, and approved by the federal government. - macOS Big Sur has been submitted to the National Institute of Standards and Technology (NIST) and is in review for the cryptographic module for FIPS 140-3 validation. + macOS Monterey has been submitted to the National Institute of Standards and Technology (NIST) and is in review for the cryptographic module for FIPS 140-3 validation. link:https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/Modules-In-Process-List[] diff --git a/rules/os/os_required_crypto_module.yaml b/rules/os/os_required_crypto_module.yaml index 45d9e679..6ae79060 100644 --- a/rules/os/os_required_crypto_module.yaml +++ b/rules/os/os_required_crypto_module.yaml @@ -5,7 +5,7 @@ discussion: | macOS contains many open source projects that may use their own cryptographic libraries typically for the purposes of maintaining platform independence. These services are not covered by the Apple FIPS Validation of the CoreCrypto and CoreCrypto Kernel modules. - macOS Monterey is in process of testing from an accredited laboratory to submit the National Institute of Standards and Technology (NIST) for FIPS validation. + macOS Monterey has been submitted to the National Institute of Standards and Technology (NIST) and is in review for the cryptographic module for FIPS 140-3 validation. link:https://csrc.nist.gov/Projects/cryptographic-module-validation-program/modules-in-process/IUT-List[]