# chainguard fips

Published articles for chainguard fips.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0

DevFeed: [Owning the boundary: Introducing the Chainguard FIPS Provider for OpenSSL 3.4.0](<https://devfeed.tech/articles/owning-the-boundary-introducing-the-chainguard-fips-provider-for-openssl-3-4-0-13124.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/introducing-the-chainguard-fips-provider-for-openssl-3-4-0>)

Published: 2026-03-11T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [chainguard-fips-images](<https://devfeed.tech/tags/chainguard-fips-images.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [cve-remediation](<https://devfeed.tech/tags/cve-remediation.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [open-ssl-3-4-0](<https://devfeed.tech/tags/open-ssl-3-4-0.md>), [updates](<https://devfeed.tech/tags/updates.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

Chainguard announces the Chainguard FIPS Provider for OpenSSL 3.4.0, validated under CMVP certificate #5132. Beginning March 17, 2026, Chainguard FIPS container images will upgrade to it. The article explains that owning the validated cryptographic module lets Chainguard remediate vulnerabilities within the validated boundary and manage the required resubmission process without depending on third parties.

### Source excerpt

Chainguard is the first and only to FIPS-validate OpenSSL 3.4, owning the validated cryptographic module that powers our FIPS images.

## Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility

DevFeed: [Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility](<https://devfeed.tech/articles/chainguard-fips-enters-2026-with-openssl-3-1-2-and-better-cmvp-visibility-12944.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-fips-enters-2026-with-openssl-3-1-2-and-better-cmvp-visibility>)

Published: 2026-01-07T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Docker Hardened Images](<https://devfeed.tech/topics/docker-hardened-images.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security, Privacy and Abuse Prevention](<https://devfeed.tech/topics/security-privacy-and-abuse-prevention.md>), [container images](<https://devfeed.tech/topics/container-images.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [cmvp-sboms](<https://devfeed.tech/tags/cmvp-sboms.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-compliance](<https://devfeed.tech/tags/fips-compliance.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

Chainguard updates its FIPS container images to use the Chainguard FIPS provider for OpenSSL 3.1.2, identified by CMVP certificate #5102. The images now expose CMVP and entropy certification numbers through SBOM packages, while future OpenSSL 3.4 and 3.6 upgrades remain under coordination and review with NIST.

### Source excerpt

We updated our FIPS container images with OpenSSL 3.1.2 (CMVP #5102), clearer CMVP visibility in SBOMs, and a roadmap for upcoming FIPS 140-3 cryptography.

## Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones

DevFeed: [Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones](<https://devfeed.tech/articles/forging-ahead-in-federal-compliance-chainguard-s-fips-140-3-and-186-5-milestones-13048.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/forging-ahead-in-federal-compliance-chainguards-fips-140-3-and-186-5-milestones>)

Published: 2025-06-06T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [interoperability](<https://devfeed.tech/topics/interoperability.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [digital-signature](<https://devfeed.tech/tags/digital-signature.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [federal-information-processing-standards](<https://devfeed.tech/tags/federal-information-processing-standards.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [nist](<https://devfeed.tech/tags/nist.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [standards](<https://devfeed.tech/tags/standards.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

Chainguard FIPS container images are being upgraded to support current FIPS 140-3 and FIPS 186-5 standards, including OpenSSL with FIPS 140-3 validation and Ed25519 signing support.

### Source excerpt

Chainguard FIPS images have been upgraded to start using the OpenSSL project 3.1.2 module with FIPS 140-3 validation. Learn more about what this means.

## Kernel-Independent FIPS Images

DevFeed: [Kernel-Independent FIPS Images](<https://devfeed.tech/articles/kernel-independent-fips-images-13136.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/kernel-independent-fips-images>)

Published: 2024-11-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [Security](<https://devfeed.tech/topics/security.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [CI/CD](<https://devfeed.tech/topics/cicd.md>)

Tags: [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [chainguard-fips-images](<https://devfeed.tech/tags/chainguard-fips-images.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [ci-cd](<https://devfeed.tech/tags/ci-cd.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [federal-information-processing-standards](<https://devfeed.tech/tags/federal-information-processing-standards.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fips](<https://devfeed.tech/tags/fips.md>), [linux](<https://devfeed.tech/tags/linux.md>), [security](<https://devfeed.tech/tags/security.md>), [zero-cves](<https://devfeed.tech/tags/zero-cves.md>)

### AI overview

Chainguard FIPS Images can run on any Linux kernel by replacing the kernel entropy source with a userspace entropy source. This enables FIPS workloads on current kernels, hardware, instance types, developer machines, CI/CD deployments, and non-FIPS managed cloud offerings while supporting runtimes such as NodeJS, Python, Go, PHP, .NET, and C/C++.

### Source excerpt

Chainguard's FIPS Images are available for deployment on any Linux kernel, thanks to some new innovation by our engineering team. Learn what this means.

## Achieve CMMC 2.0 compliance with Chainguard FIPS Images

DevFeed: [Achieve CMMC 2.0 compliance with Chainguard FIPS Images](<https://devfeed.tech/articles/achieve-cmmc-2-0-compliance-with-chainguard-fips-images-12862.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/achieve-cmmc-2-0-compliance-with-chainguard-fips-images>)

Published: 2024-08-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard fips images](<https://devfeed.tech/topics/chainguard-fips-images.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [chainguard-fips-images](<https://devfeed.tech/tags/chainguard-fips-images.md>), [cmmc](<https://devfeed.tech/tags/cmmc.md>), [cmmc-2-0](<https://devfeed.tech/tags/cmmc-2-0.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [fips](<https://devfeed.tech/tags/fips.md>), [government](<https://devfeed.tech/tags/government.md>), [nist](<https://devfeed.tech/tags/nist.md>), [requirements](<https://devfeed.tech/tags/requirements.md>), [standards](<https://devfeed.tech/tags/standards.md>), [stig](<https://devfeed.tech/tags/stig.md>)

### AI overview

This article explains how Chainguard FIPS-enabled, STIG-hardened container images may help organizations address CMMC 2.0 requirements. It outlines the framework's three assessment levels, including Level 2 requirements tied to NIST SP 800-171, and discusses compliance risks for organizations seeking U.S. government contracts.

### Source excerpt

Master CMMC 2.0 compliance! Get expert insights, downloadable resources, and guidance to safeguard your sensitive data.