top of page

FIPs140-3 A Thematic Review

  • Writer: Brian Couzens
    Brian Couzens
  • 6 days ago
  • 1 min read

A half-year read on where FIPS 140-3 validation actually stands.


Between January and mid-July 2026, 30 new FIPS 140-3 certificates were issued or announced across non-hyperscaler, non-tier-1 vendors, spanning HSMs, authentication, cryptographic libraries, edge/IoT and embedded modules.


With FIPS 140-2 fully retiring on 21 September 2026, this is no longer a future consideration. It's active, measurable, and already reshaping vendor selection.


This SITG-Consulting Thematic Review breaks down the data by category, maps validation levels against real deployment context, and spotlights five vendors leading their respective segments: Utimaco in HSM, Yubico in authentication, EnQuanta in software/PQC, enQase in edge/IoT, and Apple in embedded.


Full report can be found in the carousel


 
 
 

Comments


bottom of page