{"id":3681,"date":"2024-07-30T17:17:36","date_gmt":"2024-07-30T15:17:36","guid":{"rendered":"https:\/\/webdev.atsec.us\/?page_id=3681"},"modified":"2024-08-19T16:40:09","modified_gmt":"2024-08-19T14:40:09","slug":"blog-post-archive","status":"publish","type":"page","link":"https:\/\/webdev.atsec.us\/blog-post-archive\/","title":{"rendered":"Blog Post Archive"},"content":{"rendered":"\n<div class=\"wp-block-group is-style-column-box-shadow has-border-color has-main-accent-border-color has-tertiary-background-color has-background has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"border-width:1px;padding-top:var(--wp--preset--spacing--small);padding-right:var(--wp--preset--spacing--small);padding-bottom:var(--wp--preset--spacing--small);padding-left:var(--wp--preset--spacing--small)\">\n<p style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:0\"><strong>Blog Post Categories<\/strong><\/p>\n\n\n\n<p style=\"margin-top:0;margin-right:0;margin-bottom:0;margin-left:0\"><a href=\"https:\/\/webdev.atsec.us\/category\/atsec-information-security\/\" target=\"_blank\" rel=\"noopener\" title=\"atsec Information Security\">atsec information security<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/common-criteria\/\" target=\"_blank\" rel=\"noopener\" title=\"Common Criteria\">Common Criteria<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/conferences\/\" target=\"_blank\" rel=\"noopener\" title=\"Conferences\">Conferences<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/cyber-security\/\" target=\"_blank\" rel=\"noopener\" title=\"Cyber Security\">Cyber Security<\/a> <br><a href=\"https:\/\/webdev.atsec.us\/category\/cryptographic-algorithms\/\" target=\"_blank\" rel=\"noopener\" title=\"Cryptographic Algorithms\">Cryptographic Algorithms<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/entropy-source-validation\/\" target=\"_blank\" rel=\"noopener\" title=\"Entropy Source Validation\">Entropy Source Validation<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/fips-140-3\/\" target=\"_blank\" rel=\"noopener\" title=\"FIPS 140-3\">FIPS 140-3<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/iccc\/\" target=\"_blank\" rel=\"noopener\" title=\"ICCC\">ICCC<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/icmc\/\" target=\"_blank\" rel=\"noopener\" title=\"ICMC\">ICMC<\/a> <br><a href=\"https:\/\/webdev.atsec.us\/category\/information-security\/\" target=\"_blank\" rel=\"noopener\" title=\"Information Security\">Information Security<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/medical-devices\/\" target=\"_blank\" rel=\"noopener\" title=\"Medical Devices\">Medical Devices<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/news\/\" target=\"_blank\" rel=\"noopener\" title=\"News\">News<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/newsletter\/\" target=\"_blank\" rel=\"noopener\" title=\"Newsletter\">Newsletter<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/pci\/\" target=\"_blank\" rel=\"noopener\" title=\"PCI\">PCI<\/a> <strong>|<\/strong> <a href=\"https:\/\/webdev.atsec.us\/category\/april-fools\/\" target=\"_blank\" rel=\"noopener\" title=\"April Fools\">April Fools<\/a><\/p>\n<\/div>\n\n\n\n<p>If you&#8217;re looking for an older post and can&#8217;t find it here, it can likely be found on our <a title=\"old blog\" href=\"https:\/\/atsec-information-security.blogspot.com\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">old blog<\/a>.<\/p>\n\n\n\n<p>Below are our blog posts, from newest to oldest.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<div class=\"wp-block-query is-layout-flow wp-block-query-is-layout-flow\"><ul class=\"wp-block-post-template is-layout-flow wp-container-core-post-template-is-layout-1 wp-block-post-template-is-layout-flow\"><li class=\"wp-block-post post-3948 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-cyber-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-2 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-08-28T16:29:12+02:00\">2024-08-28<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/exciting-milestone-first-atsec-cybersecurity-certificate-issued-for-common-criteria\/\" target=\"_blank\" >Exciting Milestone: First atsec Cybersecurity Certificates Issued for Common Criteria<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Written by Rasma Mozuraite Araby We are thrilled to announce that atsec\u2019s Certification Body (CB) officially issued its first cybersecurity certificates for Common Criteria. This achievement represents atsec\u2019s readiness for the upcoming European Cybersecurity Certification Scheme (EUCC), positioning our Certification Body at the forefront of cybersecurity compliance in the European Union. The EUCC is an&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3876 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-cyber-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-3 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-08-15T16:13:54+02:00\">2024-08-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/first-post-quantum-cryptographic-algorithm-certificates-published\/\" target=\"_blank\" >First Post Quantum Cryptographic Algorithm Certificates Issued<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Written by Stephan Mueller NIST published the final version of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA) on August 13, 2024, making the first post-quantum cryptographic (PQC) algorithms official and wrapping up an eight-year effort to prepare us for a future where quantum cyberattacks are a more common threat. NIST enabled the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3863 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-4 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-08-14T16:21:10+02:00\">2024-08-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-selected-to-be-a-pci-gear-member-for-2024-2026\/\" target=\"_blank\" >atsec Selected as PCI GEAR Member for 2024 &#8211; 2026<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Written by Yan Liu atsec (Beijing) Information Technology Co., Ltd (short for \u201catsec\u201d) is pleased to announce that atsec has become one of the PCI Global Executive Assessor Roundtable (GEAR) members for the 2024 &#8211; 2026 term. The PCI Security Standards Council (SSC) GEAR is a direct communication channel between senior leadership of payment security&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3823 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security category-news category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-5 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-08-05T17:18:12+02:00\">2024-08-05<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-adds-swift-csp-assessment-qualification\/\" target=\"_blank\" >atsec Adds Swift CSP Assessment Qualification<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Written by Yan Liu Now listed by Swift as an assessment provider in the directory of Swift Customer Security Programme (CSP) Certified Assessors, atsec information security assessors can help global financial institutes assess their level of compliance with the CSP mandatory and advisory controls. In the financial industry, Swift requires that financial institutes using its&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3043 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-6 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-07-22T01:00:00+02:00\">2024-07-22<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsecs-new-website\/\" target=\"_blank\" >Guiding the Way through the World of Cyber Security<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Roughly every five years, we refresh our website with a new appearance. As a precursor to our 25th anniversary in January 2025, we are thrilled to show the world our stylish, modern look. It is atsec\u2019s firm belief that effective security assurance can only truly be accomplished when the product developers proactively incorporate security requirements&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2831 post type-post status-publish format-standard has-post-thumbnail hentry category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-7 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-07-13T04:21:21+02:00\">2024-07-13<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/first-sp800-140br1-compliant-fips-140-3-certificates\/\" target=\"_blank\" >First SP800-140Br1 Compliant FIPS 140-3 Certificates<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">On July 11th, 2024, the first three FIPS 140-3 certificates for NIST\u2019s SP800-140Br1 pilot program were posted on the NIST website. atsec information security was one of the labs that took part in the pilot program. SP 800-140Br1 specifies modifications of the methods to be used by a Cryptographic and Security Testing Laboratory (CSTL) to&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3434 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-8 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-06-15T23:35:00+02:00\">2024-06-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-has-become-an-official-gsma-member\/\" target=\"_blank\" >atsec has become an official GSMA member<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec has become an official GSMA member. The GSMA represents the interests of mobile operators worldwide, uniting more than 750 operators with almost 400 companies in the broader mobile ecosystem, including handset and device makers, software companies, equipment providers and internet companies, as well as organizations in adjacent industry sectors. atsec is a GSMA appointed&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2340 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-entropy-source-validation\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-9 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-06-14T20:08:46+02:00\">2024-06-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/changes-coming-to-niap-entropy-assessment-reports-in-2025\/\" target=\"_blank\" >Changes Coming to NIAP Entropy Assessment Reports in 2025<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">\u201cWhat do you say to a room full of DRBGs standing around you? Everyone, please be seeded.\u201d\u00a0 -Quin, atsec tester When things change, it can help to approach that change with a light heart like this.Recently, NIAP announced that Entropy Assessment Reports (EARs) must include a NIST Entropy Source Validation (ESV) certificate starting at the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2020 post type-post status-publish format-standard has-post-thumbnail hentry category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-10 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-06-07T16:57:44+02:00\">2024-06-07<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/bsi-nesas-ccs-gi-scheme-updates\/\" target=\"_blank\" >BSI NESAS CCS-GI Scheme Updates<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We&#8217;d like to inform our customers and partners that the German Federal Office for Information Security (BSI) recently published new documents approving the use of additional Security Assurance Specifications (SCAS) under the BSI 5G NESAS Certification and Evaluation Scheme (BSI NESAS CCS-GI). We encourage our customers to fully review the newly published documents and explore&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1717 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms category-entropy-source-validation category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-11 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-05-21T23:38:45+02:00\">2024-05-21<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/introduction-to-the-cmvp-and-cavp\/\" target=\"_blank\" >Introduction to the CMVP and CAVP<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Please enjoy our quick primer on CMVP, CAVP and ESV testing. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1435 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-cyber-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-12 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-04-23T17:39:06+02:00\">2024-04-23<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/eucc-and-cybersecurity-certification-in-europe\/\" target=\"_blank\" >EUCC and Cybersecurity Certification in Europe<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The European Union Agency for Cybersecurity (ENISA) hosted a cybersecurity certification conference on April 18, 2024, in Brussels, Belgium. The conference very much focused on the implementation of the EUCC &#8211; European Cybersecurity Certification Scheme. This scheme, based on the established Common Criteria (CC), aims to harmonize cybersecurity assessments for Information and Communication Technology (ICT)&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1356 post type-post status-publish format-standard has-post-thumbnail hentry category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-13 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-04-10T16:40:57+02:00\">2024-04-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-adds-fido-evaluation-qualification\/\" target=\"_blank\" >atsec Adds FIDO Evaluation Qualification<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security (branded as \u201catsec\u201d) has been qualified by the FIDO Alliance as one of the FIDO Accredited Security Laboratories to evaluate the authenticator products. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1250 post type-post status-publish format-standard has-post-thumbnail hentry category-cyber-security category-medical-devices\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-14 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-04-03T20:56:00+02:00\">2024-04-03<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-ab-first-ieee-2621-accredited-medical-device-testing-facility\/\" target=\"_blank\" >atsec AB first IEEE 2621 Accredited Medical Device Testing Facility<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec AB Stockholm, Sweden is thrilled to announce:&nbsp; We are the first IEEE Authorized Testing Facility! We&#8217;ve officially been approved as an IEEE Authorized Testing Facility, making atsec AB Stockholm, Sweden the first company able to provide testing of medical devices according to the IEEE 2621 standard. Additional locations include atsec corporation Austin TX, USA&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1231 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-15 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-04-01T16:41:31+02:00\">2024-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/breaking-news-ctsec-information-security-unveils-revolutionary-quantum-computer\/\" target=\"_blank\" >BREAKING NEWS: c@tsec information security Unveils Revolutionary Quantum Computer<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Austin, TX: In a groundbreaking announcement today, c@tsec information security, a subsidiary of atsec information security, and the leader in quantum computing technology, proudly unveils its latest innovation: the Quantum PurrProcessor\u2122. The Quantum PurrProcessor\u2122 operates on a revolutionary principle, harnessing the power of Schr\u00f6dinger&#8217;s Cat to perform computations beyond the limitations of classical computers. By&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1290 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-16 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-03-27T16:28:29+01:00\">2024-03-27<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/xdrgb-random-bit-generator-using-any-xof\/\" target=\"_blank\" >XDRGB &#8211; Random Bit Generator using any XOF<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Resulting from a joint collaboration between John Kelsey (NIST), Stefan Lucks (Bauhaus-Universit\u00e4t Weimar, Germany) and Stephan M\u00fcller (atsec information security), a new deterministic random bit generator (DRBG) is published. The XDRBG was publicly presented at the 30th Fast Software Encryption Conference 2024 in Leuven, Belgium. The XDRBG uses an extensible output function (XOF) as primitive&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-85 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-17 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-03-01T14:43:25+01:00\">2024-03-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/crypto-module-bootcamp-2024\/\" target=\"_blank\" >Crypto Module Bootcamp 2024<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security hosted a free day-long hybrid event on the Concordia University campus in Austin, TX. With 330 registered attendees, both in-person and remote. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1293 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-18 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-02-14T16:30:32+01:00\">2024-02-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-valentines-day\/\" target=\"_blank\" >Happy Valentine&#8217;s Day!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Happy Valentine&#8217;s Day to our customers, our partners, colleagues and communities around the world that we work with. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3260 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-19 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2024-01-11T22:35:00+01:00\">2024-01-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-birthday-atsec-2\/\" target=\"_blank\" >Happy Birthday, atsec!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">As always on the 11th of January atsec celebrates its birthday.This year it is the 24th! As they say: time flies when you&#8217;re doing IT security!Our best wishes and thanks to all of the contributors: our customers, our partners, and our colleagues. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1306 post type-post status-publish format-standard has-post-thumbnail hentry category-newsletter\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-20 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-12-20T16:35:37+01:00\">2023-12-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cst-newsletter-december-2023\/\" target=\"_blank\" >CST Newsletter December 2023<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We invite you to take a look at our current newsletter that contains information on algorithm transitions, updates to the FIPS IG and announcements for FIPS 140-2 and FIPS 140-3. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1121 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-21 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-12-04T14:43:25+01:00\">2023-12-04<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/a-fips-140-3-compliant-hybrid-kem-algorithm\/\" target=\"_blank\" >A FIPS 140-3 compliant hybrid KEM algorithm<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">n addition to the sole use of Kyber KEM, a hybrid mechanism using X25519 can be devised that acts as a drop-in replacement for Kyber KEM. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3263 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-22 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-12-01T22:37:00+01:00\">2023-12-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/merry-christmas-and-a-happy-new-year-from-atsec-2\/\" target=\"_blank\" >Merry Christmas and a Happy New Year from atsec<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The whole atsec team wishes our colleagues, customers, partners and suppliers a Merry Christmas and a Happy New Year. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1253 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-23 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-11-17T21:00:00+01:00\">2023-11-17<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/pqc-kyber-and-dilithium-state-of-the-draft-standards\/\" target=\"_blank\" >PQC: Kyber and Dilithium &#8211; State of the (Draft) Standards<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">On August 24 2023 NIST published the first drafts of: On November 15 2023 NIST announced that the three algorithms will be available for testing at the ACVP Demo service. During the course of the development of both Kyber and Dilithium reference implementations, NIST developers reached out to atsec to compare intermediate results of both&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1262 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-24 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-11-15T21:02:00+01:00\">2023-11-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-pci-community-meeting-2023\/\" target=\"_blank\" >atsec at the PCI Community Meeting 2023<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec participated in the PCI (Payment Card Industry) Security Standards Council 2023 Asia-Pacific Community Meeting held in Kuala Lumpur, Malaysia, on 15 and 16 November and hosted a booth. atsec\u2019s principal consultant Di Li provided a presentation on \u201cOur &#8216;Key&#8217; Experience in PIN Security \/ P2PE \/ FIPS 140-3.\u201d A short summary of the presentation&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1264 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-iccc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-25 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-10-31T21:04:00+01:00\">2023-10-31<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/1264-2\/\" target=\"_blank\" >atsec at the International Common Criteria Conference 2023<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">As in previous years, atsec is attending the International Common Criteria Conference, this time in Washington DC from October 31st to November 2nd 2023. We invite you to come and talk to us at our booth (#10) or attend our colleagues&#8217; contributions to the conference: <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1313 post type-post status-publish format-standard has-post-thumbnail hentry category-cyber-security category-medical-devices\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-26 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-10-13T16:41:08+02:00\">2023-10-13<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cybersecurity-requirements-for-medical-devices\/\" target=\"_blank\" >Cybersecurity Requirements for Medical Devices<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">On September 26, 2023, The Food and Drug Administration (FDA) released their finalized Cybersecurity in Medical Devices: Quality System Considerations and Content of Premarket Submissions guidance document. This document provides general principles for device cybersecurity relevant to device manufacturers. It seeks to emphasize the importance of safeguarding medical devices throughout a product&#8217;s life cycle. The&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1316 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-27 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-09-20T16:42:19+02:00\">2023-09-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-11th-international-cryptographic-module-conference\/\" target=\"_blank\" >The 11th International Cryptographic Module Conference<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The 11th International Cryptographic Module Conference (ICMC) started today. This year the conference is held from September 20th to 22nd 2023 at the Shaw Center in Ottawa Canada. The conference itself kicked off with Yi Mao, CEO of atsec US, giving the opening speech. It featured our latest animation, which has become somewhat of a&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1319 post type-post status-publish format-standard has-post-thumbnail hentry category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-28 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-09-11T16:46:04+02:00\">2023-09-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/artificial-intelligence-in-evaluation-validation-testing-and-certification\/\" target=\"_blank\" >Artificial Intelligence in Evaluation, Validation, Testing and Certification<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Everybody seems to jump on the AI bandwagon these days, \u201cenhancing\u201d their products and services with \u201cAI.\u201d It sounds, however, a bit like the IoT hype from the last decade when your coffee machine desperately needed Internet access. This time, though, there\u2019s also some Armageddon undertone, claiming that AI would make our jobs obsolete and&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-1323 post type-post status-publish format-standard has-post-thumbnail hentry category-entropy-source-validation\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-29 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-08-18T16:48:32+02:00\">2023-08-18<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/entropy-source-validation-esv-certificate-issued-for-the-intel-drng\/\" target=\"_blank\" >Entropy Source Validation (ESV) Certificate Issued for the Intel DRNG<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Recently the CMVP has granted ESV certificate #E57 to the Intel DRNG entropy source. The testing and submission was done by atsec and it marks the first ESV certificate granted to the Intel DRNG. The Intel DRNG (Digital Random Number Generator) is a hardware Random Bit Generator (RBG) integrated into a multitude of Intel processors,&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2029 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-30 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-07-20T22:28:00+02:00\">2023-07-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/first-post-quantum-algorithm-certificate-issued-by-cavp3\/\" target=\"_blank\" >First Post-Quantum Algorithm Certificate issued by CAVP3<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">On July 14, atsec obtained the first validation certificate for a post-quantum cryptographic algorithm: A4204. We used the Automated Cryptographic Validation Protocol (ACVP) to verify the correctness of the LMS (Leighton-Micali Signature) key pair generation, signature generation, and signature verification implementations in the QASM Hardware Security Module, developed by Crypto4A Technologies. This milestone represents an&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2032 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-31 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-07-17T22:32:00+02:00\">2023-07-17<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-iot-security-global-certification-challenges\/\" target=\"_blank\" >The IoT Security Global Certification Challenges<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">In today&#8217;s interconnected world, the Internet of Things (IoT) has become an integral part of our daily lives. From smart homes to industrial automation, IoT devices are revolutionizing various industries. However, with this increased connectivity comes the need for robust security measures to protect sensitive data and ensure the integrity of these devices. The Importance&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2035 post type-post status-publish format-standard has-post-thumbnail hentry category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-32 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-06-23T22:33:00+02:00\">2023-06-23<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cest-confidential-evaluation-of-software-trustworthiness-project-finished\/\" target=\"_blank\" >CEST (Confidential Evaluation of Software Trustworthiness) project finished<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Following the news published in early 2022, atsec would like to proudly announce a successful completion of the CEST (Confidential Evaluation of Software Trustworthiness) project &#8211; a Swedish research project funded by Vinnova. The CEST project provides a confidential software security assurance environment enabling software supply chains to be compliant with regulations, standards, and corporate&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2038 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-33 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-06-19T22:34:00+02:00\">2023-06-19<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-attended-the-omnisecure-conference-in-berlin\/\" target=\"_blank\" >atsec attended the Omnisecure conference in Berlin<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Like last year, three representatives of atsec Germany attended the Omnisecure conference from May 22 through 24, 2023, in Berlin. The Omnisecure conference has a clear focus on the German market and, in particular, national approvals of IT security products &#8211; one of the main business domains for atsec Germany. Therefore, there has been a&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2041 post type-post status-publish format-standard has-post-thumbnail hentry category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-34 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-06-15T22:37:00+02:00\">2023-06-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/moveit-vulnerability\/\" target=\"_blank\" >MOVEit Vulnerability<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">An alleged Russian-linked ransomware gang has exploited a vulnerability in a popular file transfer tool called MOVEit to attack both commercial and government targets world-wide. This attack appears to include data theft as well as the deployment of ransomware. Since we have been asked by one of our customers if this attack had any effect&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2044 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-35 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-04-13T22:39:00+02:00\">2023-04-13<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-eu-cybersecurity-act-conference-and-crypto-module-day\/\" target=\"_blank\" >atsec at the EU Cybersecurity Act Conference and Crypto Module Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec recently attended two conferences that focused on cybersecurity certification: the International Conference on the EU Cybersecurity Act and Crypto Module Day Conferences in Brussels, Belgium, from March 28 to March 30, 2023. Both conferences focused on the upcoming regulations in the EU and discussed cybersecurity certification schemes drafted by ENISA (the European Union Agency&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2056 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-36 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-04-01T22:46:00+02:00\">2023-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-turns-operations-over-to-artificial-intelligence\/\" target=\"_blank\" >atsec turns operations over to Artificial Intelligence<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security is proud to be on the forefront of developments in the world of IT security and strives to be a step ahead of the challenges in our area of expertise. So, it was a logical step to embrace the recent advances in AI technology and turn over the operations of our company&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-2061 post type-post status-publish format-standard has-post-thumbnail hentry category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-37 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-03-28T22:49:00+02:00\">2023-03-28<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/2061-2\/\" target=\"_blank\" >atsec information security at the Milan Security Summit 2023<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">After years of video conferences, the Security Summit was finally back in person in Milan, Italy, from March 14 to 16, 2023. atsec couldn\u2019t miss the opportunity to participate as gold sponsor in one of the most important cyber security events held in Italy and to meet our customers, partners, and people involved in the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3231 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-38 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-03-20T16:42:00+01:00\">2023-03-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cc2022-is-here\/\" target=\"_blank\" >CC:2022 is HERE!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Update: We greatly appreciate all the feedback we received on this blog article. For new updates, please see our revised handy overview to the new CC:2022 at the end of the blog article. It all started with Trusted Computer System Evaluation Criteria (TCSEC or Orange Book) in 1983; the German Security Evaluation Criteria (Green Book)&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3268 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-39 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-03-13T20:31:00+01:00\">2023-03-13<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-information-security-is-now-operating-a-certification-body-accredited-according-to-iso-iec-17065\/\" target=\"_blank\" >atsec information security is now operating a Certification Body accredited according to ISO\/IEC 17065<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We are pleased to announce that atsec information security AB has been accredited as a certification body by SWEDAC, the national accreditation body in Sweden, to provide Common Criteria (CC) certifications of IT products. With over 20 years of experience as a CC evaluation lab,&nbsp; atsec has taken the step to become a CC certification&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3274 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-40 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-03-08T20:43:00+01:00\">2023-03-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-international-womens-day\/\" target=\"_blank\" >Happy International Women&#8217;s Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security wishes all women &#8211; colleagues, customers, suppliers, and partners &#8211; a wonderful International Women&#8217;s Day. atsec highly values your contribution and praises your outstanding achievements in information security. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3278 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-41 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-02-15T20:45:00+01:00\">2023-02-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cnsa-2-0-and-quantum-resistant-encryption-algorithms\/\" target=\"_blank\" >CNSA 2.0 and Quantum Resistant Encryption Algorithms<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The National Security Agency (NSA) has released the Commercial National Security Algorithm (CNSA) Suite 2.0 and Frequently Asked Questions detailing future quantum resistant (QR) algorithm requirements for National Security Systems (NSS). CNSA 1.0 was published in 2016 to replace NSA Suite B and standardized the use of the AES, SHA, RSA, DH, ECDH, and ECDSA&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3282 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-42 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-02-14T20:48:00+01:00\">2023-02-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-valentines-day-2\/\" target=\"_blank\" >Happy Valentine\u2019s Day!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security wishes all colleagues, customers, suppliers,and partners a Happy Valentine\u2019s Day filled with joy, happiness, and security! <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3287 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-43 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-01-30T20:52:00+01:00\">2023-01-30<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/a-sign-for-atsec-sweden\/\" target=\"_blank\" >A Sign for atsec Sweden<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Our Swedish colleagues unveiled the atsec sign on the front of the office building. Talk about enhanced visibility. The other atsec offices around the world are only a little bit jealous\u2026 \ud83d\ude00 <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3291 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-44 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-01-25T20:56:00+01:00\">2023-01-25<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/saved-the-best-for-last\/\" target=\"_blank\" >Saved the Best for Last<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">After 40+ years of working, I am officially retired and can say that I saved the best for last. Four plus years ago, after working for IBM for over 29 years, I was hired by atsec information security corp., a small Austin company of approximately 25 people. Coming from Big Blue, I really had a&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3295 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-45 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-01-20T21:04:00+01:00\">2023-01-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-chinese-new-year\/\" target=\"_blank\" >Happy Chinese New Year<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We wish all our colleagues from atsec China as well as all our customers, partners, and suppliers celebrating the new lunar year, a Happy Chinese New Year.The year of the Rabbit is important since atsec was born under that zodiac sign. Tradition suggests wearing something red during the year of your sign, which is not&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3299 post type-post status-publish format-standard has-post-thumbnail hentry category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-46 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2023-01-11T21:19:00+01:00\">2023-01-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-birthday-atsec\/\" target=\"_blank\" >Happy Birthday, atsec!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Our best wishes and thanks to all of the contributors: our customers, our partners, and our colleagues. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3306 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-fips-140-3 category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-47 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-12-07T21:42:00+01:00\">2022-12-07<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-cryptographic-module-validation-program-cmvp-issues-the-first-fips-140-3-certificates\/\" target=\"_blank\" >The Cryptographic Module Validation Program (CMVP) issues the first FIPS 140-3 certificates<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The CMVP published four FIPS 140-3 certificates today, marking the first modules to go through testing and validation under the new version of the FIPS 140 standard. FIPS 140-3 became effective on September 22, 2019, and testing began on September 22, 2020. FIPS 140-3 has been mandatory for new modules since September 22, 2021. The&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3236 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-iccc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-48 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-11-23T16:44:00+01:00\">2022-11-23<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-international-common-criteria-conference-iccc-2022\/\" target=\"_blank\" >The International Common Criteria Conference (ICCC) 2022<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">After two years of virtualized conferences, the ICCC was back in person once again. The ICCC 2022 was held from November 15-17 in Toledo, Spain. It was a welcoming feeling to meet face-to-face with our customers, certification bodies, and peers alike. We reconnected with familiar faces and made new friends. The biggest highlights of the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3310 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-49 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-10-31T21:45:00+01:00\">2022-10-31<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-halloween\/\" target=\"_blank\" >Happy Halloween!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\"> <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3314 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-50 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-10-27T21:48:00+02:00\">2022-10-27<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/bsi-approves-core-security-functions-of-iphone-and-ipad\/\" target=\"_blank\" >BSI approves core security functions of iPhone and iPad<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We want to draw your attention to the following publication issued by the German Federal Office for Information Security (BSI): https:\/\/www.bsi.bund.de\/DE\/Service-Navi\/Presse\/Pressemitteilungen\/Presse2022\/221005_Apple_Sicherheitsfunktionen.html&nbsp; In a nutshell for the non-German readers, the article states that Apple has agreed to an independent evaluation of the core security functions of iOS and iPadOS by BSI.&nbsp;This evaluation has been conducted according&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3239 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-iccc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-51 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-10-17T16:46:00+02:00\">2022-10-17<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-international-common-criteria-conference-2022-in-toledo-spain\/\" target=\"_blank\" >atsec at the International Common Criteria Conference 2022 in Toledo, Spain<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The 21st International Common Criteria Conference (ICCC 2022) will be held from November 15 to 17, 2022, in Toledo, Spain. As always, atsec information security looks forward to opportunities for networking and exchanging ideas with our peers in Common Criteria and in the IT security community alike. After two years of virtual conferences, we are&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3318 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-52 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-10-10T21:51:00+02:00\">2022-10-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-is-recognized-as-a-scas-testing-laboratory-in-the-german-nesas-certification-scheme\/\" target=\"_blank\" >atsec is recognized as a SCAS Testing laboratory in the German NESAS certification scheme<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">As one of the first companies in Germany, atsec has become a certified evaluation laboratory in the German Network Equipment Security Assurance Scheme Cybersecurity Certification Scheme &#8211; German Implementation (NESAS CCS-GI) scheme maintained by BSI (Bundesamt f\u00fcr Sicherheit in der Informationstechnik). This certification scheme is based on the Groupe Speciale Mobile Association (GSMA) NESAS, in&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3323 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-53 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-09-26T21:53:00+02:00\">2022-09-26<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/new-cyber-resilience-act-in-the-european-union\/\" target=\"_blank\" >New Cyber Resilience Act in the European Union<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">On September 15, 2022, the EU Commission presented a proposal for a new Cyber Resilience Act to protect consumers and businesses from products with inadequate security features. This EU legislation introduces mandatory cybersecurity requirements for products with digital elements, throughout their whole lifecycle. The EU legislation will impose: The proposed regulation will apply to all&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3179 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-54 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-09-19T16:23:00+02:00\">2022-09-19<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-tenth-international-cryptographic-module-conference\/\" target=\"_blank\" >The Tenth International Cryptographic Module Conference<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The 10th International Cryptographic Module Conference (ICMC) was held from September 14th to 16th 2022, at the Westin Arlington Gateway in the Washington, D.C. area. Yi Mao, Managing Director for atsec information security, wrote the welcome letter in this year&#8217;s program: &#8220;Dear ICMC 2022 Participants, A very warm welcome to the tentth annual ICMC! In&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3326 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-cryptographic-algorithms category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-55 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-09-15T21:55:00+02:00\">2022-09-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/protocol-rule-enforcement-module-scope\/\" target=\"_blank\" >Protocol Rule Enforcement &amp; Module Scope<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Stephan M\u00fcller&#8217;s presentation at the 2022 ICMC. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3329 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-56 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-09-14T22:01:00+02:00\">2022-09-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/icmc-and-dr-bertrand-du-castel\/\" target=\"_blank\" >ICMC and Dr. Bertrand du Castel<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Sal La Pietra, the President and co-founder of atsec information security (atsec), opened the tenth annual International Cryptographic Module Conference this morning at Westin Arlington Gateway in the Washington D.C. area. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3336 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-57 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-09-12T22:09:00+02:00\">2022-09-12<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/securing-the-software-supply-chain\/\" target=\"_blank\" >Securing the Software Supply Chain<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">All components comprising a software product are ultimately the responsibility of the developer of that product, even if one or more of those components is supplied by a third party. This is especially true when the product is evaluated for Common Criteria (CC) certification. Recently, the National Security Agency (NSA) and Cybersecurity and Infrastructure Security&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3340 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-58 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-08-15T22:11:00+02:00\">2022-08-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-became-a-pci-gear-member-again-for-2022-2024\/\" target=\"_blank\" >atsec became a PCI GEAR member again for 2022-2024<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec China is pleased to announce that atsec has become one of the PCI Global Executive Assessor Roundtable (GEAR) members for the 2022-2024 term. atsec China has joined in PCI GEAR since 2018 during its initial establishment. In 2022, atsec China is one of 27 organizations to join the PCI GEAR in its efforts to&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3344 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-59 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-08-08T22:14:00+02:00\">2022-08-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/clarice-assads-residence-workshop-with-austin-classical-guitar-society\/\" target=\"_blank\" >Clarice Assad&#8217;s Residence Workshop with Austin Classical Guitar Society<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">It is a different kind of blog entry, not about technical expertise or atsec\u2019s latest achievement.It is a 32-minute clip ending with atsec as a sponsor and detailingClarice Assad&#8217;s Residence Workshop with Austin Classical Guitar Society (ACGS): https:\/\/www.youtube.com\/watch?v=aeaNM-bIh-M I had the opportunity to meet with Matthew Hinsley, Executive Director, and Joe Williams, Artistic Director of&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3350 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-news category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-60 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-08-01T22:19:00+02:00\">2022-08-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-became-one-of-the-first-pci-dss-v4-qsa-companies\/\" target=\"_blank\" >atsec Became One of the First PCI DSS v4 QSA Companies<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec China (\u201catsec\u201d for short in this article) has completed the training and examination on \u201cPCI DSS QSA Version 4 Transition\u201d provided by the Payment Card Industry Security Standards Council (PCI SSC) and became one of the first Qualified Security Assessors (QSA) companies globally to perform the assessment according to the new version of the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3354 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-61 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-07-25T22:21:00+02:00\">2022-07-25<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/challenges-and-opportunities\/\" target=\"_blank\" >Challenges and Opportunities<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Many of us who have been in the evaluation and certification (validation) business\u00a0 have seen the development, not only of security requirements and schemes, but also how the \u201csecurity echo system\u201d works. A few weeks ago, I was generously given the opportunity to share some ideas at the EU CSA conference in Brussels. Here is&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3358 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-62 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-07-11T22:24:00+02:00\">2022-07-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/update-on-the-it-security-standards-in-china\/\" target=\"_blank\" >Update on the IT Security Standards in China<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">(\u201cInformation Security and Cryptography\u201d in Chinese Calligraphy) In this article, we provide an up-to-date overview regarding IT security standards as well as the current situation of IT security testing and certification in China. It also covers the topics related to security assessment and compliance in the financial industry. Security standards are established to support organizations&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3365 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-63 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-07-07T22:32:00+02:00\">2022-07-07<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/quality-and-security-more-than-just-words\/\" target=\"_blank\" >Quality and Security &#8211; more than just words<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">At atsec, quality and security are more than just words \u2013 they encompass everything we do and are deeply embedded in our four principles: We know the businessWe act with integrityWe stay focusedWe are independent Management is committed to the implementation and improvement of an integrated Management System. Every atsec colleague is committed to providing&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3368 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-cryptographic-algorithms category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-64 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-06-29T22:34:00+02:00\">2022-06-29<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-attended-the-20th-international-conference-on-applied-cryptography-and-network-security-acns\/\" target=\"_blank\" >atsec attended the 20th International Conference on Applied Cryptography and Network Security (ACNS)<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Last week, employees from atsec Germany and atsec Italy attended the 20th International Conference on Applied Cryptography and Network Security (ACNS) in Rome, Italy. As the name implies, ACNS highlights academic and industry research in the areas of applied cryptography and network security. Accepted papers are published in Springer&#8217;s Lecture Notes in Computer Science series,&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3372 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-65 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-06-27T22:37:00+02:00\">2022-06-27<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cybersecurity-certification-schemes-in-europe\/\" target=\"_blank\" >Cybersecurity Certification Schemes in Europe<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec has recently participated in two conferences that focused on cybersecurity certification: the 2022 International Conference on the EU Cybersecurity Act in Brussels, Belgium, and ENISA Cybersecurity Certification Conference 2022 in Athens, Greece. atsec contributed with two presentations at the EU Cybersecurity Conference \u201cSuccessful cPP Certification under the CSA,\u201d presented by Rasma Araby, and \u201cA&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3375 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-66 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-06-24T22:39:00+02:00\">2022-06-24<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-attended-the-omnisecure-conference-in-berlin-2\/\" target=\"_blank\" >atsec attended the Omnisecure conference in Berlin<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">After two years of video conferences, we were finally able to meet stakeholders of our community again in person as three representatives of atsec Germany attended the Omnisecure conference from June 21st through 23rd 2022 in Berlin. The Omnisecure conference has a clear focus on the German market with a strong presence of the Bundesamt&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3379 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-fips-140-3 category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-67 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-06-17T22:42:00+02:00\">2022-06-17<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-virtually-at-the-national-cybersecurity-center-of-excellence\/\" target=\"_blank\" >atsec virtually at the National Cybersecurity Center of Excellence<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec is excited to have been invited to the virtual kick-off meeting for the \u201cAutomation of the NIST Cryptographic Module Validation Program\u201d at the National Cybersecurity Center of Excellence (NCCoE). The National Institute for Standards and Technology (NIST) organized the kick-off meeting on June 1st of, 2022. It started with an introduction by NIST, followed&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3382 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-68 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-05-10T22:43:00+02:00\">2022-05-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-mothers-day\/\" target=\"_blank\" >Happy Mother&#8217;s Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec wishes all mothers and grandmothers a wonderful and happy Mother&#8217;s Day! <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3386 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-entropy-source-validation category-fips-140-3 category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-69 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-04-06T22:45:00+02:00\">2022-04-06<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/nist-entropy-source-validation-server-available\/\" target=\"_blank\" >NIST Entropy Source Validation Server Available<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">NIST plans to offer a separate validation program apart from FIPS 140 to cover entropy sources: the ESV (Entropy Source Validation) program (hereafter ESVP). As part of the new validation effort, NIST recently launched an automated system to upload the required information in a structured manner: the Entropy Source Validation (ESV) server. The protocol to&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3389 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-70 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-04-01T22:46:00+02:00\">2022-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-becoming-first-cybersecurity-metalab\/\" target=\"_blank\" >atsec becoming first cybersecurity MetaLab<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We are excited to announce that atsec information security has become the first IT Security Lab that has been accredited as a testing lab for the Metaverse. IT Security in virtual environments is as important as in the real world. While in the real world there are a lot of security mechanism already in place&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3392 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-71 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-03-14T22:48:00+01:00\">2022-03-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-pi-day\/\" target=\"_blank\" >Happy Pi Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">From Archimedes to the bright minds of our time, atsec would like to thank all the mathematicians contributing to making our world more secure. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3396 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-72 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-03-08T22:49:00+01:00\">2022-03-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-international-womens-day-2\/\" target=\"_blank\" >Happy International Women&#8217;s Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security wishes all women &#8211; colleagues, customers, suppliers, and partners &#8211; a wonderful International Women&#8217;s Day. atsec highly values your contribution and praises your outstandingachievements in information security. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3400 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-73 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-03-01T22:51:00+01:00\">2022-03-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/fips-140-3-submission-scenarios\/\" target=\"_blank\" >FIPS 140-3 Submission Scenarios<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">FIPS 140-3 has a more detailed set of submission scenarios than FIPS 140-2. It can be daunting to find the right scenario for your situation. The flow diagram below provides an overview and helps to explain the different scenarios. More information can be found in the FIPS 140-3 Management Manual. The Management Manual is currently&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3404 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-74 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-02-14T22:53:00+01:00\">2022-02-14<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-valentines-day-3\/\" target=\"_blank\" >Happy Valentine&#8217;s Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec information security wishes all colleagues, customers, suppliers, and partners a Happy Valentine\u2019s Day filled with joy, happiness, and security! <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3408 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-75 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-02-03T22:55:00+01:00\">2022-02-03<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/distinguishing-encrypted-from-non-encrypted-data\/\" target=\"_blank\" >Distinguishing encrypted from non-encrypted data<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Our colleague Quentin Gouchet, together with Eric J\u00e4rpe, authored an article on distinguishing encrypted from non-encrypted data. We invite you to read the article here. Introduction:The discrimination of encrypted data from other kinds of data is of interest in many areas of application. For instance for making other applications work for the communication traffic in&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3411 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-76 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2022-01-11T22:58:00+01:00\">2022-01-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/it-is-atsecs-22nd-anniversary\/\" target=\"_blank\" >It is atsec\u2019s 22nd Anniversary!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">A big hug to you all. Happy Birthday! \u201catsec is a big hug to the whole team represented in the at-sign @ of our logo!\u201d audaces fortuna juvat \u201cAn idea is nothing more or less than a new combination of old elements,\u201d James Webb. atsec, is: &#8220;A new idea based on old concepts.&#8221; When atsec&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3415 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-77 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-12-13T23:23:00+01:00\">2021-12-13<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-holidays-and-a-happy-new-year-from-atsec\/\" target=\"_blank\" >Happy Holidays and a Happy New Year from atsec<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">This year the motto for our Holiday greeting is \u201cBridges\u201d, as it symbolizes much of what we do in our daily work. We bridge the difficult terrain of international and national standards between vendors and government agencies, so both parties can reach their respective goals. We bridge the gaps in knowledge by constantly training our&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3418 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-78 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-11-15T23:26:00+01:00\">2021-11-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/is-working-for-atsec-an-option-for-me\/\" target=\"_blank\" >Is working for atsec an option for me?<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">I\u2019ve been with atsec for more than two years, and I am happy to be on board. But when I joined, I had some concerns. Coming from companies with thousands of employees and revenues in the billions, joining a company with less than one hundred employees worldwide and a few digits less in revenue felt&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3245 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-iccc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-79 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-10-22T16:57:00+02:00\">2021-10-22<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-virtual-international-common-criteria-conference-iccc-2021\/\" target=\"_blank\" >atsec at the (virtual) International Common Criteria Conference (ICCC) 2021<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec participated in ICCC 2021 from October 19th to 20th, which was held as a fully virtualized conference the second year in a row due to the worldwide pandemic. While we appreciate to have the opportunity to exchange new information as well as give and receive presentations in our domain, we cannot deny that we&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3421 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-80 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-09-15T23:27:00+02:00\">2021-09-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/reasonable-or-just-possible\/\" target=\"_blank\" >Reasonable or just possible?<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">A few days ago, I returned from my first business trip in months. I didn\u2019t travel because I had to, but because I decided that it would be better to be on-site instead of handling the project remotely. And we are handling a lot of projects remotely at the moment. But for this project it&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3185 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-81 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-09-01T16:28:00+02:00\">2021-09-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-2021-icmc\/\" target=\"_blank\" >atsec at the 2021 ICMC<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Please enjoy this year&#8217;s animation from Yi Mao&#8217;s opening presentation at the 2021 International Cryptographic Module Conference (ICMC). We also invite you to watch a recording of Yi Mao&#8217;s welcome address for the ICMC: <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3424 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-entropy-source-validation\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-82 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-08-26T23:29:00+02:00\">2021-08-26<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/sample-size-in-nist-sp800-90b\/\" target=\"_blank\" >Sample Size in NIST SP800-90B<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We invite you to watch this presentation by Richard Fant on Sample Size in SP800-90B. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3427 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-83 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-08-10T23:32:00+02:00\">2021-08-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/do-remote-site-visits-work\/\" target=\"_blank\" >Do Remote Site Visits Work?<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">While the home office has become a normality for many IT companies and operations during the pandemic, the requirements for security evaluation, certifications, accreditations, and other approvals have remained constant. Site visits at the development sites are required to achieve the approval of certification and accreditation. How could this be accomplished when developers, auditors, and&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3430 post type-post status-publish format-standard hentry category-atsec-information-security category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-84 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-06-16T23:33:00+02:00\">2021-06-16<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-china-adds-pci-cpsa-logical-and-physical-assessor-qualifications\/\" target=\"_blank\" >atsec China adds PCI CPSA (Logical and Physical) Assessor Qualifications<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec China has been qualified by PCI SSC (Payment Card Industry Security Standards Council) as a Card Production Security Assessor (CPSA) Company to validate an entity&#8217;s adherence to the PCI Card Production and Provisioning Logical Security and&nbsp; Physical Security Requirements (two separate security standards). Currently atsec provides the PCI Card Production Logical Security and Physical&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3438 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-85 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-06-08T23:39:00+02:00\">2021-06-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/reflections-on-security-assurance\/\" target=\"_blank\" >Reflections on Security Assurance<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Some reflections on security assurance, how it can be achieved and verified, from the view of an evaluation lab. Security assurance is usually hard to grasp and sometimes we have seen there is the misconception how it can be achieved. One of the early milestones in understanding assurance came with the vulnerability analysis of Multics&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3441 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-86 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-05-25T23:42:00+02:00\">2021-05-25<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-genesis-of-atsecs-name-logo-and-websites\/\" target=\"_blank\" >The genesis of atsec\u2019s name, logo, and websites<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">When atsec was about to be founded, one of the first questions the founders (a German, an Italian, and a Swede) had was which name would best represent the company&#8217;s approach to information security, but more importantly, whether the domain would be available.&nbsp; Here is the list of all the available domain names in December&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3463 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-87 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-05-07T23:54:00+02:00\">2021-05-07<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-scholarship-connects-logic-and-cryptography\/\" target=\"_blank\" >atsec Scholarship Connects Logic and Cryptography<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The two most repeated terms at the NIST Entropy Workshop held on April 27-29 are \u201cmathematical model\u201d and \u201cjustification.\u201d That brought me back to my&nbsp;college&nbsp;days at Peking University where I first studied Mathematical Logic. Logic is all about valid rules of inference. Mathematical logic applies the techniques of formal logic to mathematics and mathematical&nbsp;reasoning,&nbsp;and applies&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3466 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-88 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-04-01T23:55:00+02:00\">2021-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/new-cybersecurity-initiative-will-use-detection-dogs-to-spot-cyber-security-attacks-to-the-us-it-infrastructure\/\" target=\"_blank\" >New Cybersecurity Initiative will use Detection Dogs to spot Cyber Security Attacks to the US IT Infrastructure<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Washington, DC\u2014A new cybersecurity initiative dubbed PAWS (Puppy Assisted Warning Systems) has been introduced today by the US Department of Defense (DoD) to combat and deter the rising threat of cybersecurity attacks from countries who have vested interests to undermine US IT infrastructure and businesses. The 1.7 trillion dollar program will be entirely self-funded through&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3476 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-89 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-03-08T17:26:00+01:00\">2021-03-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/choose-to-challenge\/\" target=\"_blank\" >Choose to Challenge<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Celebrating International Women&#8217;s Day 2021! <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3480 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-90 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-03-02T17:37:00+01:00\">2021-03-02<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-impact-of-tls-1-3-and-acvts-on-fips-certification-testing\/\" target=\"_blank\" >The Impact of TLS 1.3 and ACVTS on FIPS Certification Testing<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Marcos Portnoi, Stephan Mueller, and Viktoria Meyerhoff In 2018, the Internet Engineering Task Force (IETF) published RFC 8446, \u201cTransport Layer Security (TLS) Protocol Version 1.3\u201d, a new standard for the latest version of TLS. TLS is the successor of SSL (Secure Sockets Layer), which was developed by Netscape in 1995. In 2020, the Cryptographic&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3483 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-91 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-01-25T17:44:00+01:00\">2021-01-25<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/on-software-supply-chains\/\" target=\"_blank\" >On Software Supply Chains<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by King Ables The attack on the SolarWinds network management platform Orion allowed a bad actor to inject malware into the product prior to it being signed and deployed to customers during a regular software update. This highlights a largely underappreciated but universal truth of the Internet age&#8211;almost all businesses depend on a software supply&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3486 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-92 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-01-19T17:51:00+01:00\">2021-01-19<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-is-recognized-as-a-nesas-security-test-laboratory-to-perform-security-evaluation-of-telecommunication-equipment\/\" target=\"_blank\" >atsec is recognized as a NESAS Security Test Laboratory to perform Security Evaluation of Telecommunication Equipment<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The GSMA (Global System for Mobile Communications) organization recognizes atsec&#8217;s ISO\/IEC 17025 accreditation that now allows network product evaluations against NESAS Security Assurance Specifications (SCAS). The NESAS scheme is a collaboration and jointly led by 3GPP and the GSMA, and is open to all vendors of network equipment products that support 3GPP defined functions. NESAS&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3489 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-93 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2021-01-11T18:05:00+01:00\">2021-01-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/happy-birthday-atsec-3\/\" target=\"_blank\" >Happy Birthday atsec!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Today atsec celebrates its 21st Birthday! We can finally get a pilot license, gamble at the casino and we won&#8217;t be mad when we get carded at the ICMC! We are happy to look back on more than two interesting decades and would like to thank our customers, the government agencies, our colleagues and friends&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3492 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-94 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-12-18T18:09:00+01:00\">2020-12-18<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/holiday-greetings-from-atsec\/\" target=\"_blank\" >Holiday Greetings from atsec<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Our colleagues from around the world wish you Happy and Healthy Holidays and a good start into 2021. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3495 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-95 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-12-08T18:15:00+01:00\">2020-12-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/biometric-e-passports\/\" target=\"_blank\" >Biometric e-Passports<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Richard Fant Figure 1:&nbsp; e-Passports issued by different countries In today\u2019s climate of COVID-19, domestic travel has become difficult, and international travel almost impossible. Many US airlines&nbsp; now require their passengers to submit to a COVID-19 test within 24-48 hours prior to travel to prove the traveler is not currently infected. Some countries have&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3249 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-iccc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-96 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-11-18T17:01:00+01:00\">2020-11-18<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-virtual-international-common-criteria-conference-iccc-2020\/\" target=\"_blank\" >atsec at the (virtual) International Common Criteria Conference (ICCC) 2020<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec participated in ICCC 2020 from November 16th through 18th, which for the first time had to be held fully virtualized due to the worldwide pandemic. The ICCC used the same conference platform as for the ICMC 2020. In addition to attending the ICCC 2020, a number of atsec consultants joined the virtual CCUF Workshop&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3187 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-97 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-09-21T16:34:00+02:00\">2020-09-21<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/you-raise-me-up-icmc-2020\/\" target=\"_blank\" >You Raise Me Up &#8211; ICMC 2020<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">It has become an atsec tradition to produce an animation with an FIPS-relevant topic for the ICMC. This year it has the transition from FIPS 140-2 to FIPS 140-3 as the subject &#8211; with a personal touch. Yi Mao presented the animation during her opening speech at the virtual ICMC 2020. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3506 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-fips-140-3 category-newsletter\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-98 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-09-01T18:32:00+02:00\">2020-09-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cst-newsletter-september-2020\/\" target=\"_blank\" >CST Newsletter September 2020<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We invite you to take a look at our current newsletter that contains information on algorithm transitions, updates to the FIPS IG and announcements for FIPS 140-2 and FIPS 140-3. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3510 post type-post status-publish format-standard has-post-thumbnail hentry category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-99 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-08-28T20:27:00+02:00\">2020-08-28<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/transitioning-to-nist-sp-800-56a-rev3-what-you-need-to-know\/\" target=\"_blank\" >Transitioning to NIST SP 800-56A Rev3: what you need to know<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Swapneela Unkule NIST SP 800-56A provides recommendations for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography. Diffie-Hellman (DH), Elliptic Curve DH (ECDH) and Menezes-Qu-Vanstone (MQV) key-agreement schemes are specified in this standard. These Key-Agreement Schemes (KAS) are widely used in network protocols such as TLS. The SP 800-56A has been revised twice since its initial&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3515 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-100 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-08-11T20:40:00+02:00\">2020-08-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsecs-20-year-anniversary\/\" target=\"_blank\" >atsec&#8217;s 20 Year Anniversary<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">It was the beginning of January when I first heard about the new virus causing severe flu-like symptoms, such as upper respiratory infection, spreading throughout China.&nbsp; I started to worry about our China team. Nevertheless, we continued to plan for the global celebration of atsec\u2019s&nbsp; 20th anniversary, assuming the virus would go away by Spring.&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3530 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-cyber-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-101 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-07-23T21:03:00+02:00\">2020-07-23<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-leading-in-automated-cryptographic-validation-testing\/\" target=\"_blank\" >atsec leading in Automated Cryptographic Validation Testing<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">With the sunset of the Cryptographic Algorithm Validation System (CAVS) at end of June 2020, algorithm testing for NIST and NIAP validations and evaluations must now be performed using the Automated Cryptographic Validation Testing System (ACVTS). The list of issued CAVP certificates using ACVTS (i.e. the certificates prefixed with &#8220;A&#8221;) illustrates that atsec is clearly&hellip; <\/p><\/div>\n<\/li><\/ul>\n\n<\/div>\n\n\n\n<div class=\"wp-block-query is-layout-flow wp-block-query-is-layout-flow\"><ul class=\"wp-block-post-template is-layout-flow wp-block-post-template-is-layout-flow\"><li class=\"wp-block-post post-3533 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-cyber-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-102 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-06-30T21:16:00+02:00\">2020-06-30<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/bye-bye-cavs-tool-old-friend\/\" target=\"_blank\" >Bye bye, CAVS tool, old friend\u2026<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Dear CAVS Tool, We want to congratulate you on years and years of dedicated service. Without you, algorithm testing would not have been what it is today, and we salute you for staying with us for so long. On June 30th you will finally get your well-deserved retirement. Rumors are you will relocate to a&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3536 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-fips-140-3 category-newsletter\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-103 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-06-08T21:20:00+02:00\">2020-06-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cst-newsletter-june-2020\/\" target=\"_blank\" >CST Newsletter June 2020<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We invite you to take a look at our current newsletter that contains information on algorithm transitions, updates to the FIPS IG and a breakdown of the changes in TEs from FIPS 140-2 to FIPS 140-3. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3540 post type-post status-publish format-standard has-post-thumbnail hentry category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-104 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-05-16T21:24:00+02:00\">2020-05-16<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/congratulations-to-qualcomm\/\" target=\"_blank\" >Congratulations to Qualcomm<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">One of the rewards of working in the evaluation and testing business is to see our customers succeed and show the results of their efforts. We are always happy to work with organizations who are committed to IT security and want to improve their products and processes for the benefit of their customers. In that&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3543 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-105 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-04-17T21:28:00+02:00\">2020-04-17<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/rise-fall-of-md5\/\" target=\"_blank\" >Rise &amp; Fall of MD5<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Richard FantThe RiseMD5 (message digest version 5) was developed in 1991 and is still very popular today, with a wide range of commercial and government applications. MD5 is used to generate hash values of passwords stored on a system as opposed to storing the passwords in plain text. This password protection method was used&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3546 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-106 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-04-09T21:50:00+02:00\">2020-04-09<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-china-adds-two-pci-ssf-assessor-qualifications\/\" target=\"_blank\" >atsec China adds two PCI SSF Assessor Qualifications<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec China has been qualified by the PCI SSC (Payment Card Industry Security Standards Council) as a Secure Software Lifecycle (SLC) Assessor and Secure Software Assessor company under the PCI Software Security Framework (SSF) program to evaluate a vendor&#8217;s software lifecycle and\/or validate a vendor&#8217;s payment software. The PCI SSF is a collection of standards&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3549 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-107 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-04-01T21:54:00+02:00\">2020-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/data-recycling-to-become-mandatory-in-2022\/\" target=\"_blank\" >Data Recycling to Become Mandatory in 2022<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">According to sources in the DPA (Data Protection Agency) new guidelines will be issued soon that will make digital trash separation mandatory. Every year an estimated 240 zettabytes of re-usable bits are thrown into desktop trash cans. The new guidelines require operating system manufacturers to implement a recycling bin next to the trash can on&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3553 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-108 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-03-10T21:58:00+01:00\">2020-03-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/meltdown-attack-2-years-later\/\" target=\"_blank\" >Meltdown Attack: 2 Years Later<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Richard Fant Meltdown Attack:&nbsp; 2 years laterIn February 2017, independent security researchers discovered a catastrophic security flaw in the cache design for processors developed by Intel Corporation. After embargoing the information for almost a year while working on a fix, Intel publicly announced in January 2018 the security flaw known as the Meltdown Attack.&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3556 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-109 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-03-08T22:02:00+01:00\">2020-03-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/international-womens-day\/\" target=\"_blank\" >International Women&#8217;s Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Happy International Women&#8217;s Day to all our wonderful atsec colleagues in Europe, US and Asia. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3559 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-110 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-03-04T22:06:00+01:00\">2020-03-04<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/zen-or-the-art-of-fips-certificate-maintenance\/\" target=\"_blank\" >Zen, or the Art of FIPS Certificate Maintenance<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Andreas Fabis When we talk to our customers about FIPS 140-2 testing some questions regarding certificate maintenance frequently come up: There are many factors that can lead to module or platform changes: technical, business and marketing, to name a few. Navigating the rules and options of FIPS 140-2 re-certification can be challenging, and currently&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3521 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-111 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-02-26T20:48:00+01:00\">2020-02-26<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/my-experience-during-the-covid-19-outbreak-in-china\/\" target=\"_blank\" >My Experience During the COVID-19 Outbreak in China<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">During the period of the novel coronavirus (COVID-19) outbreak in China, I, and many others, have cancelled parties with family, friends and colleagues\u2014even during the traditional Chinese Lunar New Year. We have also decided to work remotely with atsec colleagues, customers, and partners. This gave me more time to think and learn, and I wanted&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3564 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-112 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-02-20T22:15:00+01:00\">2020-02-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/new-service-eidas-trust-service-provider-assessments\/\" target=\"_blank\" >New Service \u2013 eIDAS Trust Service Provider Assessments<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec is happy to announce that we are now a licensed Conformity Assessment Body (CAB) under Electronic Identification, Authentication and Trust Services (eIDAS). eIDAS is an EU regulation on electronic identification and trust services for electronic transactions that applies as law within the whole of the EU. Trust services include electronic signatures, electronic seals, time&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3567 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-113 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2020-01-09T22:22:00+01:00\">2020-01-09<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/youve-grown-so-much-atsecs-20th-birthday\/\" target=\"_blank\" >\u201cYou\u2019ve grown so much!\u201d \u2013 atsec\u2019s 20th Birthday<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">During my almost 20 years with the company (first as a freelancer, then as an employee) I have seen atsec grow from a small, determined group of IT professionals in a crammed room full of computers into an international company with a well-earned, excellent reputation in the IT security world. Growing from the first baby&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3572 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-114 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-12-20T22:32:00+01:00\">2019-12-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/holiday-greetings-from-atsec-2\/\" target=\"_blank\" >Holiday Greetings from atsec!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">(click on the image or follow this link for a special greeting from atsec) To all of our valued customers, colleagues, friends and family we wish Happy Holidays and a Safe and Secure New Year.\u00a0 We are looking forward to working with you in the coming year.&nbsp; Regards,your atsec team <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3575 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-115 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-11-25T22:46:00+01:00\">2019-11-25<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/a-pci-walk-in-the-clouds\/\" target=\"_blank\" >A PCI WALK IN THE CLOUDS<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">November 21, 2019, Melbourne, Australia atsec China participated in the PCI Security Standards Council\u2019s 2019 Asia-Pacific Community Meeting held in Melbourne, Australia from the 20th to 21st of November, and also hosted a booth. atsec\u2019s principal consultants provided a presentation on \u201ca PCI Walk in the Clouds.\u201d atsec shared their experience in Payment Card Industry&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3581 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-cryptographic-algorithms category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-116 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-11-22T22:54:00+01:00\">2019-11-22<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-presented-at-innotech-austin-2019\/\" target=\"_blank\" >atsec presented at InnoTech Austin 2019<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec US Corporate Vice President and Lab Director, Yi Mao, presented \u201cCrypto Testing Leading to Better Security\u201d at InnoTech Austin 2019. Through many examples, Dr. Mao showed the audience that cryptography is the hard core providing data confidentiality, integrity and authenticity. Cryptographic algorithms are used to encrypt sensitive data (e.g. password files), to authenticate users&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3584 post type-post status-publish format-standard has-post-thumbnail hentry category-cyber-security category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-117 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-11-18T23:01:00+01:00\">2019-11-18<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/how-can-openssl-survive-fips-140-2-validation-in-2020\/\" target=\"_blank\" >How can OpenSSL survive FIPS 140-2 validation in 2020?<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Stephan MuellerThe OpenSSL project outlined the development strategy pertaining to the Federal Information Processing Standard (FIPS) 140-2 code in the November 7th, 2019 OpenSSL blog titled \u201cUpdate on 3.0 Development, FIPS and 1.0.2 EOL.\u201d[1] As a summary, the following relevant aspects for FIPS 140-2 are communicated. \u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;The standard OpenSSL 1.0.2 will be End of&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3587 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-entropy-source-validation category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-118 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-11-13T23:06:00+01:00\">2019-11-13<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/sp800-90a-and-sp800-90b-compliant-linux-random-number-generator\/\" target=\"_blank\" >SP800-90A and SP800-90B compliant Linux Random Number Generator<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Stephan Mueller With the enforcement of SP800-90B starting in November 2020, the noise sources behind the Linux \/dev\/random, \/dev\/urandom and the getrandom system call interfaces must comply with all requirements stipulated by SP800-90B. If this compliance is not achieved, all modules using Linux random number generator as entropy source from its operational environment will likely&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3590 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-cyber-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-119 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-11-06T23:14:00+01:00\">2019-11-06<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/first-commercial-acvp-testing-with-regular-three-party-setup-completed\/\" target=\"_blank\" >First Commercial ACVP Testing with Regular Three-party Setup Completed<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The atsec Automated Cryptographic Validation Protocol (ACVP) tool set demonstrated that ACVT is fully production-ready with the completion of the ACVP test run of 3,529 test vector sets managed by 329 test sessions. The testing marks the first successful production test run of ACVT with the three-party approach commonly used during FIPS 140-2 testing. The&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3595 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-120 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-10-21T16:08:00+02:00\">2019-10-21<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-china-adds-pci-qpa-qualification\/\" target=\"_blank\" >atsec China adds PCI QPA qualification<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec China (with the official name \u2013 atsec (Beijing) Information Technology Co., Ltd) has been qualified by the PCI SSC (Payment Card Industry Security Standards Council) as a QPA (Qualified PIN Assessor) company to perform the PCI personal identification number (PIN) security assessments according to the PCI PIN Security standard. The recent version of the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3598 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-entropy-source-validation\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-121 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-10-15T16:10:00+02:00\">2019-10-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/stephan-mueller-publishes-sp800-90b-compliant-linux-implementation-of-cpu-jitter-rng\/\" target=\"_blank\" >Stephan Mueller publishes SP800-90B compliant Linux implementation of CPU Jitter RNG<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">NIST\u2019s Special Publication 800-90B \u201cRecommendation for the Entropy Sources Used for Random Bit Generation\u201d (SP800-90B) lays out the testing requirements for random bit generators. According to Implementation Guidance 7.18, compliance to SP800-90B will be mandatory for FIPS 140-2 validations starting November 8th 2020. Our colleague Stephan Mueller recently published an updated, SP800-90B compliant version of&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3252 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-iccc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-122 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-10-09T17:05:00+02:00\">2019-10-09<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-at-the-international-common-criteria-conference-iccc-2019\/\" target=\"_blank\" >atsec at the International Common Criteria Conference (ICCC) 2019<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec participated in ICCC 2019 held in Singapore from October 1st to 3rd in conjunction with Singapore International Cyber Week (SICW). It was the perfect venue to celebrate the 20th anniversary of the Common Criteria standard with an increase of the Common Criteria Recognition Arrangement (CCRA) membership from 27 to 31 with the addition of&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3601 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cyber-security category-fips-140-3 category-newsletter\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-123 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-09-30T16:17:00+02:00\">2019-09-30<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cst-newsletter-and-fips-140-3-change-summary\/\" target=\"_blank\" >CST Newsletter and FIPS 140-3 Change Summary<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">We invite you to take a look at our CST Newsletter. This newsletter is intended to inform our customers about recent changes within the Implementation Guidance and NIST&#8217;s Cryptographic Module Validation Program (CMVP). We also included a high-level summary of changes to the testing and documentation that FIPS 140-3 will introduce. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3605 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-124 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-09-16T16:20:00+02:00\">2019-09-16<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-adds-singaporean-common-criteria-scheme-accreditation\/\" target=\"_blank\" >atsec adds Singaporean Common Criteria Scheme accreditation<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec is pleased to announce that it has been licensed by CSA to be a Common Criteria Testing lab (CCTL) under the Singapore Common Criteria Scheme (SCCS). Please check the Common Criteria Portal:https:\/\/www.commoncriteriaportal.org\/labs\/index.cfm as well the Singapore Common Criteria Scheme:https:\/\/www.csa.gov.sg\/our-programmes\/certification-and-labelling-schemes\/singapore-common-criteria-scheme\/approved-labs atsec is already operating Common Criteria labs under BSI Germany, US NIAP, CSEC Sweden and&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3619 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-125 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-07-31T17:49:00+02:00\">2019-07-31<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/a-multi-level-model-for-common-criteria-certificate-maintenance\/\" target=\"_blank\" >A Multi-Level Model for Common Criteria Certificate Maintenance<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">by Trang Huynh I had the privilege of being on a discussion panel at the NIAP Validator Workshop this past June. The topic for the panel was \u201cContinuous Software Update,\u201d and the issue we were trying to tackle was Common Criteria (CC) evaluations for products with a high frequency of software updates, such as those&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3622 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-126 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-07-09T17:51:00+02:00\">2019-07-09<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsecs-acvt-service-is-operational\/\" target=\"_blank\" >atsec\u2019s ACVT service is operational<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec is proud to announce that the Automated Cryptographic Validation Testing (ACVT) service is operational. The atsec Cryptographic Security Testing (CST) laboratory is the first ever to achieve operational status with the Automated Cryptographic Validation Protocol (ACVP) production server operated by NIST. atsec&#8217;s ACVP tools are fully implemented and functional. After the test results for&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3625 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-127 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-07-03T17:56:00+02:00\">2019-07-03<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsecs-rome-office-is-accredited-by-ocsi-for-common-criteria-evaluations\/\" target=\"_blank\" >atsec\u2019s Rome office is accredited by OCSI for Common Criteria evaluations<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec is pleased to announce that the atsec Rome office has been accredited by the Italian scheme, OCSI, for performing Common Criteria evaluations. This is in addition to the accreditations by the Italian security agency, OCSI of our atsec laboratories in the U.S., Germany and Sweden. Garibaldi Conte: Managing Director, atsec Italy, 2019: \u201cI am&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3631 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-cyber-security category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-128 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-07-02T18:04:00+02:00\">2019-07-02<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/congratulating-qualcomm-on-cc-certification-of-their-snapdragon-855-soc\/\" target=\"_blank\" >Congratulating Qualcomm on CC certification of their Snapdragon 855 SOC<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec congratulates Qualcomm on the successful evaluation of their Snapdragon 855 system on a chip (SOC) processor. The evaluation was performed jointly by atsec information security laboratory GmbH and&nbsp;T-Systems International GmbH laboratory; with the software evaluation being performed by atsec, and the hardware evaluation performed by T-Systems. atsec is proud to have contributed to the&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3633 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-cyber-security category-pci\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-129 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-06-24T18:06:00+02:00\">2019-06-24<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-provided-pci-training-at-visa-security-summit-2019\/\" target=\"_blank\" >ATSEC PROVIDED PCI TRAINING AT VISA SECURITY SUMMIT 2019<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">China, Shanghai\u2014From June 19th to 20th, Visa held the Asia Pacific Security Summit in Shanghai, China. During the \u201cEcosystem Data Security Workshop\u201d on the 19th, Diana Greenhaw, VISA\u2019s Vice President of Global Payment System Risk, gave a speech on &#8220;Ecosystem Risk Updates\u2014A Global Perspective&#8221;. As one of the signature sponsors, atsec draws attention from industry&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3193 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-130 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-05-15T16:43:00+02:00\">2019-05-15<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/international-cryptographic-module-conference-2019-in-vancouver-canada\/\" target=\"_blank\" >International Cryptographic Module Conference 2019 in Vancouver, Canada<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">After a day of pre-conference workshops, the 7th International Cryptographic Module Conference (ICMC) was kicked off this morning with a welcome address from atsec&#8217;s VP and Lab Director Yi Mao. (from left to right: Renaudt Nunez, Stephan Mueller, Fiona Pattinson, Swapneela Unkule, Yi Mao) \u00a0Yi Mao&#8217;s Opening Speech for the ICMC 2019: &#8220;Good morning everyone!&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3638 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-131 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-04-01T18:12:00+02:00\">2019-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/green-entropy\/\" target=\"_blank\" >Green Entropy<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">White Paper international Think-tank Community (iTC) April 1st, 2019 Green Entropy Tasked with consideration of ways and means to reduce the carbon footprint of IT security; after a year of deliberation the&nbsp;iTC&nbsp;have produced the following summary of their report.&nbsp;The full report is available on request to itc@green-entropy.org Research has shown that much effort has recently&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3640 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-132 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-03-08T18:29:00+01:00\">2019-03-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/international-womens-day-2\/\" target=\"_blank\" >International Women&#8217;s Day<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Happy International Women&#8217;s Day to all our wonderful atsec colleagues in Europe, US and Asia. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3657 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-133 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-03-04T18:51:00+01:00\">2019-03-04<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/cryptographic-module-related-work-in-iso-iec-jtc-1-sc-27-wg-3\/\" target=\"_blank\" >Cryptographic module related work in ISO\/IEC JTC 1\/SC 27\/WG 3<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">For several years the value of conformance testing against the FIPS 140-2 specification has been well accepted, and the assurance gained through validated conformance has been specified in several other markets. <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3643 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-134 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-01-11T18:32:00+01:00\">2019-01-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-has-been-operating-for-19-years\/\" target=\"_blank\" >atsec has been operating for 19 years.<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\"> <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3646 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-135 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2019-01-03T18:34:00+01:00\">2019-01-03<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/how-the-u-s-government-shutdown-affects-us\/\" target=\"_blank\" >How the U.S. government shutdown affects us<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">As many of our customers will be aware, the current U.S. government shutdown can affect their projects with atsec. This time, the partial shutdown includes the U.S. Department of Commerce, and hence NIST&#8217;s Computer Security Resource Center. This affects our customers with FIPS 140-2 conformance validations (CMVP), and cryptographic algorithm validations CAVP\/ACVP). The U.S. Common&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3693 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-cryptographic-algorithms category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-136 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-11-26T21:53:00+01:00\">2018-11-26<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/automated-cryptographic-validation-protocol-acvp-support-from-atsec\/\" target=\"_blank\" >Automated Cryptographic Validation Protocol (ACVP) support from atsec<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec is proud to present support for the NIST\u00a0ACVP testing framework\u00a0which replaces the legacy NIST CAVS testing. Cryptographic algorithm validation program (CAVP) testing is required for\u00a0cryptographic modules undergoing conformance testing and validation according to the FIPS 140-2 specification. It is also required for Common Criteria evaluations performed in accordance with the NIAP Common Criteria Evaluation&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3699 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-137 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-09-24T22:02:00+02:00\">2018-09-24<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/ndcpp-v2-1-has-been-published\/\" target=\"_blank\" >NDcPP v2.1 has been published<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The Network International Technical Community (iTC) published the Network Device Collaborative Protection Profile (NDcPP) version 2.1. This is the latest update to the NDcPP series of cPPs. Vendors looking to perform a NIAP evaluation using this cPP will need to wait until NIAP approves the new version. In the past, NIAP has taken about one&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3198 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-138 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-05-09T16:51:00+02:00\">2018-05-09<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/3198-2\/\" target=\"_blank\" >International Cryptographic Module Conference 2018 in Ottawa, Canada<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">After a day of pre-conference workshops, the International Cryptographic Module Conference (ICMC) 2018 was kicked off this morning with a welcome address from atsec&#8217;s VP and Lab Director Yi Mao. The welcome was followed by keynote speeches from Jason Hart, CTO of Data Protection for Gemalto UK and Scott Jones, Assistant Deputy Minister of Information&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3703 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-cryptographic-algorithms category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-139 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-04-05T22:08:00+02:00\">2018-04-05<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/sp-800-56b-and-rsaes-pkcs1-v1-5-update\/\" target=\"_blank\" >SP 800-56B and RSAES-PKCS1-v1.5 Update<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Near the end of 2017, NIAP issued and later retracted Labgram #106. This Labgram warned that RSAES-PKCS1-v1.5 would be disallowed by NIST after 2017 which meant that it would also be disallowed by NIAP after 2017 in CC evaluations. The reason for the retraction was because NIST delayed the publication of their update to NIST&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3648 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-140 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-04-01T18:38:00+02:00\">2018-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-partners-with-major-retail-outlets-for-provision-of-security-assurance\/\" target=\"_blank\" >atsec partners with major retail outlets for provision of security assurance<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">In a major announcement, atsec information security announces the establishment of partnerships with major retail outlets around the world, in a bid to provide more convenient provision of security assurance to users of commercial IT products. Users of commercial off the shelf products purchased through major retail outlets can set default profile options such as&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3705 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-141 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-03-08T22:18:00+01:00\">2018-03-08<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/a-giant-leap-for-mankind\/\" target=\"_blank\" >A giant leap for mankind?<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Oh boy!!! Yet another year has gone by and we are celebrating International Women&#8217;s Day\u00a0again. This year the theme is &#8220;Time is Now: Rural and urban activists transforming women\u2019s lives&#8221;. I must say that working in atsec has always been free of the worries about gender inequality that I&#8217;ve been reading such a lot about&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3708 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-142 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-01-10T22:20:00+01:00\">2018-01-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-is-celebrating\/\" target=\"_blank\" >atsec is celebrating!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">It is 18 years since atsec was founded on January 11th, 2000.\u00a0 Since then atsec has made a very significant contribution to information security. As one of the only truly independent labs atsec is still \u00a0self-funded, owned by professionals in the security assurance business and a key player in the technologies and geographies in which&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3710 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-143 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2018-01-02T22:22:00+01:00\">2018-01-02<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/eidas-for-remote-centralised-server-signing\/\" target=\"_blank\" >eIDAS for Remote (Centralised Server) Signing<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">What is eIDAS? Evaluation and certification of trustworthy systems and signature and seal creation devices becomes increasingly important due to the new eIDAS regulation (EU Regulation No. 910\/2014) that entered into force in the 28 EU Member States in July 2016. eIDAS is an EU regulation on electronic identification (eID) and trust services (AS), which&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3255 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-144 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2017-08-11T17:08:00+02:00\">2017-08-11<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/as-you-like-it\/\" target=\"_blank\" >As You Like It!<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Over the last few years we have seen some maturation in the processes of providing information security assurance. This is good. First let\u2019s roll back into history, to the days in the \u201870\u2019s and \u201880\u2019s, when it could not be safely assumed that the operating systems in use implemented access control correctly. \u201cThe Birth and&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3202 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-145 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2017-05-17T16:57:00+02:00\">2017-05-17<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/yi-maos-opening-speech-at-the-fifth-icmc\/\" target=\"_blank\" >Yi Mao&#8217;s Opening Speech at the Fifth ICMC<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">&#8220;Dear Community, It is the second time that I have had the honor and pleasure to open the International Cryptographic Module Conference. This year is very special since it is the fifth anniversary of the conference.\u00a0 I\u2019d like to welcome you all with an image from the end of the 1st ICMC. Many of you&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3651 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-146 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2017-04-01T18:43:00+02:00\">2017-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/mea-culpa\/\" target=\"_blank\" >Mea Culpa<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Unfortunately, atsec has been accused of distributing fake news. Here at atsec we take such an accusation seriously. We have performed a thorough internal investigation and have determined that the accusation is true. atsec has been guilty of disseminating fake news on an annual basis for the last fifteen years. We have followed our internal&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3608 post type-post status-publish format-standard has-post-thumbnail hentry category-cyber-security category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-147 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2016-11-10T17:03:00+01:00\">2016-11-10<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/fips-140-2-and-iso-standards\/\" target=\"_blank\" >FIPS 140-2 and ISO Standards<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">atsec customers who have projects for testing, validating, and certifying cryptographic modules for the US government market are intimately familiar with the FIPS 140-2 standard. This standard and its associated supporting documents are produced and published by NIST. Together, the suite of documents define the specification and testing requirements for a cryptographic module that is&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3212 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-148 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2016-05-18T17:03:00+02:00\">2016-05-18<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/icmc-presidential-debate\/\" target=\"_blank\" >ICMC Presidential Debate<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The votes have been counted and Zippa Futura and ISO\/IEC 19790 win by a large margin: <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3654 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-149 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2016-04-01T18:48:00+02:00\">2016-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-vatican-signs-the-iso-iec-15408-international-recognition-arrangement\/\" target=\"_blank\" >The Vatican Signs the ISO\/IEC 15408 International Recognition Arrangement<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Recognizing the need for secure IT products in all regions of the world, and in support of an internationally agreed Arrangement allowing for the mutual recognition of independently evaluated and validated information technology (IT) products, the Vatican has decided to sign the ISO\/IEC 15408 International Recognition Arrangement (I2RA) and has started to validate the security&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3617 post type-post status-publish format-standard has-post-thumbnail hentry category-cryptographic-algorithms category-cyber-security category-fips-140-3\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-150 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2016-03-22T17:38:00+01:00\">2016-03-22<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/commercial-assurance-of-cryptography-in-north-america\/\" target=\"_blank\" >Commercial Assurance of Cryptography in North America<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Cryptographic Algorithm Validations The Cryptographic Algorithm Validation Program (CAVP) is an organization that is managed solely by the National Institute of Standards and Technology (NIST). Information about the CAVP scheme, including the official validation lists, can be found at NIST&#8217;s web page for the CAVP. The CAVP certifies that certain algorithms and related security functions&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3216 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-151 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2015-11-05T17:07:00+01:00\">2015-11-05<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-third-international-cryptographic-module-conference-has-begun\/\" target=\"_blank\" >The Third International Cryptographic Module Conference Has Begun<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The 2015 International Cryptographic Module Conference (ICMC) started yesterday with a day of pre-conference workshops on FIPS 140 Projects, Breaking into Embedded Devices, and Addressing Unique Security Challenges through Standardization. The main conference was opened today by Yi Mao, Ph.D., CST Lab Manager of atsec, followed by keynote speakers Phil Zimmermann (Creator of PGP, Co-founder,&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3221 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-152 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2014-11-20T17:11:00+01:00\">2014-11-20<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-second-international-cryptographic-module-conference\/\" target=\"_blank\" >The Second International Cryptographic Module Conference<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The 2014 ICMC started with a day of workshops on FIPS 140-2 and ISO\/IEC 19790, followed today by keynote speakers Helmut Kurth (atsec information security) and Mary Ann Davidson (Oracle). Almost 200 attendees from around the world came to this year&#8217;s conference to discuss topics ranging from high-level policy to advanced technical subjects. One of&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3615 post type-post status-publish format-standard has-post-thumbnail hentry category-common-criteria category-conferences category-cyber-security category-iccc category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-153 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2013-10-30T17:25:00+01:00\">2013-10-30<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/collaboration-and-openness-to-the-rescue-of-entropy\/\" target=\"_blank\" >Collaboration and Openness to the Rescue of Entropy<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">This past September was my conference month. I first went to the 14th International Common Criteria Conference (ICCC) in Orlando, Florida and then a week later I was at the 1st International Cryptographic Module Conference (ICMC) in Gaithersburg, Maryland. The theme of the ICCC this year was a collaborative approach. The conference directed the CC&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3225 post type-post status-publish format-standard has-post-thumbnail hentry category-conferences category-fips-140-3 category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-154 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2013-09-30T17:15:00+02:00\">2013-09-30<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/a-summary-of-the-first-icmc\/\" target=\"_blank\" >A Summary of the First ICMC<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">The first ICMC is over.It was a wonderful event and thanks are due to all of the 171 participants for making it so. Participant Quote: &#8220;This conference is Win Win Win!&#8221;These attendees represented developers, governments, laboratories, consultants,\u00a0 and academics from the cryptographic module community. It turned out to be a truly international affair with people&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3610 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-conferences category-cyber-security category-icmc category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-155 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2013-01-23T17:14:00+01:00\">2013-01-23<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/call-for-papers-the-first-international-cryptographic-module-conference-icmc-2013\/\" target=\"_blank\" >Call for Papers: The First International Cryptographic Module Conference (ICMC 2013)<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">This first ICMC aims to bring together experts from around the world to confer on the topic of cryptographic modules, with emphasis on their secure design, implementation, assurance, and use, referencing both new and established standards such as FIPS 140-2 and ISO\/IEC 19790. We are focused on attracting participants from the engineering and research community,&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3613 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-fips-140-3 category-information-security\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-156 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2013-01-21T17:22:00+01:00\">2013-01-21<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/the-top-3-mistakes-when-starting-a-fips-140-2-project\/\" target=\"_blank\" >The Top 3 Mistakes When Starting a FIPS 140-2 Project<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">1. Starting without the standard in mindProbably the biggest problem causing issue in a FIPS 140-2 validation project is when the developer decides to \u2018back into\u2019 the standard after the fact. Trying to validate a product that was developed without being mapped to the standard is more difficult at the very least and has a&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3689 post type-post status-publish format-standard has-post-thumbnail hentry category-april-fools category-atsec-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-157 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2007-04-01T21:48:00+02:00\">2007-04-01<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-information-security-evaluates-mark-vii-transporter-beam-control-software\/\" target=\"_blank\" >atsec information security Evaluates Mark VII Transporter Beam Control Software<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Galactic Emperor pleased about timely completion GAMMA DELPHI, Phnil\u2019krq-Nebula \u2013 Stardate 2454191.50001atsec information security is pleased to announce Cosmic Criteria certification of the Mark VII Transporter Beam Control Software (Update 3.1, Fix Pack 2) at Stellar Assurance Level 9 augmented with flaw remediation (SAL9+) in compliance with the Particle Transmission Protocol Protection Profile (PTPPP). PTPPP&hellip; <\/p><\/div>\n<\/li><li class=\"wp-block-post post-3686 post type-post status-publish format-standard has-post-thumbnail hentry category-atsec-information-security category-common-criteria category-information-security category-news\">\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-158 wp-block-group-is-layout-flex\"><div class=\"wp-block-post-date\"><time datetime=\"2007-03-19T21:45:00+01:00\">2007-03-19<\/time><\/div>\n\n<h2 class=\"wp-block-post-title\"><a href=\"https:\/\/webdev.atsec.us\/atsec-ab-performing-first-eal4-evaluation-to-swedish-common-criteria-scheme-csec\/\" target=\"_blank\" >atsec AB performing first EAL4 evaluation to Swedish Common Criteria Scheme (CSEC)<\/a><\/h2><\/div>\n\n\n<div class=\"wp-block-post-excerpt\"><p class=\"wp-block-post-excerpt__excerpt\">Evaluation of F\u00e4rist VPN and Firewall marks pioneering effort for Tutus AB, atsec AB, and CSEC Stockholm, Danderyd, Sweden &#8211; atsec information security AB is performing an EAL4+ evaluation of Tutus Data AB F\u00e4rist VPN and Firewall for certification by the Swedish Certification Body for IT Security (CSEC). Of course an EAL4+ evaluation is nothing&hellip; <\/p><\/div>\n<\/li><\/ul>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Blog Post Categories atsec information security | Common Criteria | Conferences | Cyber Security Cryptographic Algorithms | Entropy Source Validation | FIPS 140-3 | ICCC | ICMC Information Security | Medical Devices | News | Newsletter | PCI | April Fools If you&#8217;re looking for an older post and can&#8217;t find it here, it can [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"_links":{"self":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/pages\/3681"}],"collection":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/comments?post=3681"}],"version-history":[{"count":9,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/pages\/3681\/revisions"}],"predecessor-version":[{"id":3908,"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/pages\/3681\/revisions\/3908"}],"wp:attachment":[{"href":"https:\/\/webdev.atsec.us\/wp-json\/wp\/v2\/media?parent=3681"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}