How to Use FIPS 140-Compliant Algorithms for Encryption

FIPS defines encryption standards to use with computers.

The United States Federal Information Processing Standard (FIPS) applies to U.S. non-military agencies and government contractors. The FIPS 140 standard describes the algorithms approved for cryptography. You can change a Security Policy setting in Microsoft Windows to notify applications that they should only use FIPS 140-compliant encryption algorithms.

Things You'll Need

• Computer

Instructions

1. Open your computer's Local Security Policy editor or the Group Security Policy editor. For example, in Windows Explorer, choose "Start," "All Programs," "Administrative Tools" and then either "Local Security Policy" or "Group Security Policy."

2. Locate the FIPS Cryptography rule using the policy editor. In the tree on the left, click "Security Options." The system will display a list of rules in the panel on the right. Scroll down the list on the right and locate "System cryptography: Use FIPS complaint algorithms for encryption, hashing, and signing."

3. Double-click the policy rule to open the properties window for the rule. Click the radio button next to "Enabled" and click "OK" to save your changes. Close the Security Policy Window.

4. Restart your application, for example Internet Explorer.

References

• National Institute of Standards and Technology: Cryptographic Algorithm Validation Program
• U.S. Department of Commerce: FIPS PUB 140-2
• Microsoft Support: System Cryptography