Attending this event?
Back To Schedule
Sunday, June 18 • 12:30pm - 1:40pm
Life beyond FIPS 140-3: identity tales

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

FIPS 140-3 standard has been published by NIST in 2019. When an operating system environment is put into a compliance with FIPS 140 standard series, the requirements extend to applications running in the environment as well. Each FIPS 140 standard generation was bringing ground breaking changes at the time, FIPS 140-3 is no different and its enforcement is like a snow at winter: we know things will break and they get broken but at a surprising angle.

The talk will look into how FIPS 140-3 affects identity management solutions with a focus on FreeIPA and Samba AD DC. These projects implement a complex stack of protocols whose lifetime spans more than forty years. Introducing new compliance requirements highlight hidden issues that weren't addressed for decades. Many of the issues intertwine protocol design evolution and implementation details. They also affect Linux systems' administrators in surprising and unpredictable ways.

avatar for Alexander Bokovoy

Alexander Bokovoy

Sr. Principal Software Engineer, Red Hat
Sr. Principal Software Engineer at Red Hat, working on security and identity management. Actively participates in FreeIPA, SSSD, Samba, and many other free software projects targeting an open source enterprise environments.

Sunday June 18, 2023 12:30pm - 1:40pm CEST
G202 | Talks
Feedback form isn't open yet.