# FIPS validation

Published articles for FIPS validation.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## FIPS 140-2 vs FIPS 140-3, Explained

DevFeed: [FIPS 140-2 vs FIPS 140-3, Explained](<https://devfeed.tech/articles/fips-140-2-vs-fips-140-3-explained-29647.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/fips-140-2-vs-fips-140-3-explained/>)

Author: info@goteleport.com (Mayur Pipaliya)

Published: 2026-09-09T00:00:00Z

Content type: article

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [fips 140-3](<https://devfeed.tech/topics/fips-140-3.md>), [FIPS validation](<https://devfeed.tech/topics/fips-validation.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [Security](<https://devfeed.tech/topics/security.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>)

Tags: [certificates](<https://devfeed.tech/tags/certificates.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [security](<https://devfeed.tech/tags/security.md>), [sensitive-data](<https://devfeed.tech/tags/sensitive-data.md>)

### AI overview

This article explains the differences between FIPS 140-2 and FIPS 140-3, including the standards' origins, CMVP validation certificates, applicable requirements for protecting sensitive data, and the transition timeline through September 2026.

### Source excerpt

Understand key changes from FIPS 140-2 to FIPS 140-3.

## Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility

DevFeed: [Chainguard FIPS enters 2026 with OpenSSL 3.1.2 and better CMVP visibility](<https://devfeed.tech/articles/chainguard-fips-enters-2026-with-openssl-3-1-2-and-better-cmvp-visibility-12944.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-fips-enters-2026-with-openssl-3-1-2-and-better-cmvp-visibility>)

Published: 2026-01-07T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [Docker Hardened Images](<https://devfeed.tech/topics/docker-hardened-images.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security, Privacy and Abuse Prevention](<https://devfeed.tech/topics/security-privacy-and-abuse-prevention.md>), [container images](<https://devfeed.tech/topics/container-images.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [cmvp-sboms](<https://devfeed.tech/tags/cmvp-sboms.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-compliance](<https://devfeed.tech/tags/fips-compliance.md>), [fips-containers](<https://devfeed.tech/tags/fips-containers.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

Chainguard updates its FIPS container images to use the Chainguard FIPS provider for OpenSSL 3.1.2, identified by CMVP certificate #5102. The images now expose CMVP and entropy certification numbers through SBOM packages, while future OpenSSL 3.4 and 3.6 upgrades remain under coordination and review with NIST.

### Source excerpt

We updated our FIPS container images with OpenSSL 3.1.2 (CMVP #5102), clearer CMVP visibility in SBOMs, and a roadmap for upcoming FIPS 140-3 cryptography.

## FIPS-Validated Container Images: When, Where, and Why

DevFeed: [FIPS-Validated Container Images: When, Where, and Why](<https://devfeed.tech/articles/fips-validated-container-images-when-where-and-why-13046.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/fips-validated-container-images-when-where-why>)

Published: 2025-07-10T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [financial-services](<https://devfeed.tech/tags/financial-services.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [healthcare](<https://devfeed.tech/tags/healthcare.md>), [nist](<https://devfeed.tech/tags/nist.md>), [public-sector](<https://devfeed.tech/tags/public-sector.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This article explains why FIPS-validated cryptography is required at the container image level for workloads subject to FedRAMP and NIST 800-53 requirements. It describes Chainguard's FIPS-validated container images, their cryptographic boundaries, and how they help organizations address compliance and authorization requirements in regulated environments.

### Source excerpt

Chainguard's catalog of 1,400+ trusted container images includes 400+ FIPS-validated variants.

## Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones

DevFeed: [Forging Ahead in Federal Compliance: Chainguard's FIPS 140-3 and 186-5 Milestones](<https://devfeed.tech/articles/forging-ahead-in-federal-compliance-chainguard-s-fips-140-3-and-186-5-milestones-13048.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/forging-ahead-in-federal-compliance-chainguards-fips-140-3-and-186-5-milestones>)

Published: 2025-06-06T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [interoperability](<https://devfeed.tech/topics/interoperability.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [digital-signature](<https://devfeed.tech/tags/digital-signature.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [federal-compliance](<https://devfeed.tech/tags/federal-compliance.md>), [federal-information-processing-standards](<https://devfeed.tech/tags/federal-information-processing-standards.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [nist](<https://devfeed.tech/tags/nist.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [standards](<https://devfeed.tech/tags/standards.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

Chainguard FIPS container images are being upgraded to support current FIPS 140-3 and FIPS 186-5 standards, including OpenSSL with FIPS 140-3 validation and Ed25519 signing support.

### Source excerpt

Chainguard FIPS images have been upgraded to start using the OpenSSL project 3.1.2 module with FIPS 140-3 validation. Learn more about what this means.

## An update on Chainguard Images FIPS Validation

DevFeed: [An update on Chainguard Images FIPS Validation](<https://devfeed.tech/articles/an-update-on-chainguard-images-fips-validation-12871.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/an-update-on-chainguard-images-fips-validation>)

Published: 2023-09-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [Security](<https://devfeed.tech/topics/security.md>), [Utility Software](<https://devfeed.tech/topics/utility.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container](<https://devfeed.tech/tags/container.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cryptographic](<https://devfeed.tech/tags/cryptographic.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-validation](<https://devfeed.tech/tags/fips-validation.md>), [migration](<https://devfeed.tech/tags/migration.md>), [nist](<https://devfeed.tech/tags/nist.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [wolfi](<https://devfeed.tech/tags/wolfi.md>)

### AI overview

Chainguard describes its FIPS-ready Chainguard Images, which use an OpenSSL 3.0.8 module validated by NIST for FIPS 140-2. The article explains the validation process, support for FedRAMP requirements, available FIPS-enabled base images, planned migration toward FIPS 140-3, and a utility for verifying that the module is correctly installed and configured to use approved cryptographic algorithms.

### Source excerpt

Need support on your FedRAMP journey? Chainguard's FIPS Images use the OpenSSL 3.0.8 module that is validated by NIST for 140-2.