Were you thinking of a signed JSON or XML FIPS-140-approved-products-list metadata / resource file? With a script that runs as a side-car?


From: Trevor Vaughan []
Sent: Monday, October 29, 2018 2:43 PM
To: SCAP Security Guide <>
Subject: FIPS Checker


Hi All,


Does anyone know of a project that can correlate the running operating system with the latest information on the FIPS 140 approved products list.


Basically, I'm looking for a command where I can run something like `fipscertified` and get back a `0` or `1` based on the result of the latest/updated data.


Bonus points, I'd love to be able to point it at apps and have it tell me, but that's a long shot given the statically compiled wonderland we all seem to be living in these days.






Trevor Vaughan
Vice President, Onyx Point, Inc

(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --

THIS MESSAGE IS FOR THE USE OF THE INTENDED RECIPIENT(S) ONLY AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, PROPRIETARY, CONFIDENTIAL, AND/OR EXEMPT FROM DISCLOSURE UNDER ANY RELEVANT PRIVACY LEGISLATION. No rights to any privilege have been waived. If you are not the intended recipient, you are hereby notified that any review, re-transmission, dissemination, distribution, copying, conversion to hard copy, taking of action in reliance on or other use of this communication is strictly prohibited. If you are not the intended recipient and have received this message in error, please notify me by return e-mail and delete or destroy all copies of this message.