# Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0

DevFeed: [Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0](<https://devfeed.tech/articles/owning-the-boundary-introducing-the-chainguard-fips-provider-for-openssl-3-4-0-13124.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/introducing-the-chainguard-fips-provider-for-openssl-3-4-0>)

Published: 2026-03-11T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [chainguard-fips-images](<https://devfeed.tech/tags/chainguard-fips-images.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [open-ssl-3-4-0](<https://devfeed.tech/tags/open-ssl-3-4-0.md>), [updates](<https://devfeed.tech/tags/updates.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

## AI overview

Chainguard announces the Chainguard FIPS Provider for OpenSSL 3.4.0, validated under CMVP certificate #5132. Beginning March 17, 2026, Chainguard FIPS container images will upgrade to it. The article explains that owning the validated cryptographic module lets Chainguard remediate vulnerabilities within the validated boundary and manage the required resubmission process without depending on third parties.

## Source excerpt

Chainguard is the first and only to FIPS-validate OpenSSL 3.4, owning the validated cryptographic module that powers our FIPS images.