是否可以用 Perl 创建符合 FIPS 140-2 的服务器？
问题很简单，是否可以用 Perl 创建符合 FIPS 140-2 的服务器？特别是，是否可以不修改模块的任何 C 代码？如果直接用 Perl 不可能，那么从 C 角度来看最简单的方法是什么？
我基本上正在创建一个仅提供单个文件的迷你 httpd，但由于安全限制，它需要在符合 FIPS 合规性的 SSL 上提供。
The question is pretty simple, is it possible to create a FIPS 140-2 compliant server in Perl? Especially, is it possible without modifying any of the C code for the modules? If it's not possible in straight Perl, what would be the easiest way to go about it from a C perspective?
I'm basically creating a mini-httpd that only serves up a single file, but due to security restrictions it needs to be served up on SSL under FIPS compliance.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我不知道 FIPS 140-2 的所有规则。然而，与 HIPAA 和 PCI-DSS 不同的是，它是一个管理加密强度的标准，并且不考虑整个系统。 OpenSSL 的某些部分可以兼容 FIPS 140-2，并且该库通过 Crypt::OpenSSL 模块。您只需确保您的密钥大小足够大，足以满足您所需的 FIPS 认证级别，并且您不会违反众多 加密问题。
I don't know all of the rules when it comes to FIPS 140-2. However, unlike HIPAA and PCI-DSS its a standard that governs the strength of cryptography and doesn't take the system as a whole into consideration. Parts of OpenSSL can be FIPS 140-2 compliant and this library is exposed to perl via the Crypt::OpenSSL module. You just have to make sure your key size is large enough for the level of FIPS certification you need and that you don't violate a one of the many Cryptographic Issues.
查看 Mozilla 的 FIPS 策略。三重 DES 最有可能是开源的。我不知道 Perl 中有任何经过认证的 FIPS 140-2 解决方案。
大多数实施批准都非常严格，例如在特定的硬件平台、CPU 和操作系统版本上。如果您使用的是这些平台之一，则通常可以借助操作系统的批准，例如 Windows 7、Redhat 等。
Take a look at Mozilla's FIPS strategy. Triple DES is most likely to be Open Source. I am unaware of any certified FIPS 140-2 solutions in Perl.
Most implementation approvals are very restrictive, such as being on a certain hardware platform, CPU, and OS version. If you are on one of those platforms, you can often piggyback on the OS approval, such as Windows 7, Redhat, etc.