Forum Discussion

mastersingh24's avatar
mastersingh24
Copper Contributor
Dec 10, 2019

WebCrypto / FIPS 140-2 in Edge and Edge/Chromium

If Windows 10 is running in "FIPS 140-2 mode" per https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp3544.pdf, does that mean that Edge...
j_hawkins's avatar
j_hawkins
Copper Contributor
Sep 10, 2020

Can anyone (Microsoft or Others) answer this question as to FIPS 140-2 validated Cryptographic Module usage by EDGE.  Is it using Windows Crypto under the hood on Windows Platforms?   

 

 

  • Eric_Lawrence's avatar
    Eric_Lawrence
    Icon for Microsoft rankMicrosoft
    Sep 17, 2020

    j_hawkins Microsoft Edge Legacy uses the Windows Cryptographic libraries that are a part of the Windows operating system. 

    Microsoft Edge (version 76+) instead uses the Chromium cryptographic libraries and does not rely upon the Windows system cryptographic libraries or configuration. 

    • j_hawkins's avatar
      j_hawkins
      Copper Contributor
      Apr 18, 2023
      Eric_Lawrence or anyone at Microsoft, any changes on the status of Microsoft Edge using FIPS 140-2 validated cryptography? Is it still using non FIPS validated Chromium built-in cryptographic modules or are the latest versions using FIPS validated cryptography ?

Resources