FIPs140-3 A Thematic Review
- Brian Couzens
- 6 days ago
- 1 min read
A half-year read on where FIPS 140-3 validation actually stands.
Between January and mid-July 2026, 30 new FIPS 140-3 certificates were issued or announced across non-hyperscaler, non-tier-1 vendors, spanning HSMs, authentication, cryptographic libraries, edge/IoT and embedded modules.
With FIPS 140-2 fully retiring on 21 September 2026, this is no longer a future consideration. It's active, measurable, and already reshaping vendor selection.
This SITG-Consulting Thematic Review breaks down the data by category, maps validation levels against real deployment context, and spotlights five vendors leading their respective segments: Utimaco in HSM, Yubico in authentication, EnQuanta in software/PQC, enQase in edge/IoT, and Apple in embedded.
Full report can be found in the carousel



Comments