locked
FIPS compliance in Silverlight RRS feed

  • Question

  • How to obtain FIPS compliance in Silverlight 4? 

    Are there any solutions?

    Tuesday, August 17, 2010 2:38 AM

Answers

  • Silverlight uses Managed Assemblies, which are not FIPS enabled. Please have a look at the following article-

    http://msdn.microsoft.com/en-us/library/system.security.cryptography.aesmanaged.aspx

     

    Please look at the Note section, it says-

    If the Windows security policy setting for Federal Information Processing Standards (FIPS)-compliant algorithms is enabled, using this algorithm throws a CryptographicException.

     

    Silverlight has its own version of CLR. It does not use the same CLR that is used by other .Net applications. Unfortunately, unlike other CLR’s there is no unmanaged implementation of AesManaged Class, hence you are seeing this

    issue.

    Thursday, August 26, 2010 4:25 PM

All replies

  • Silverlight uses Managed Assemblies, which are not FIPS enabled. Please have a look at the following article-

    http://msdn.microsoft.com/en-us/library/system.security.cryptography.aesmanaged.aspx

     

    Please look at the Note section, it says-

    If the Windows security policy setting for Federal Information Processing Standards (FIPS)-compliant algorithms is enabled, using this algorithm throws a CryptographicException.

     

    Silverlight has its own version of CLR. It does not use the same CLR that is used by other .Net applications. Unfortunately, unlike other CLR’s there is no unmanaged implementation of AesManaged Class, hence you are seeing this

    issue.

    Thursday, August 26, 2010 4:25 PM
  • Hi Bill,

    Is the answer above still valid today? Was wondering if there is any Fips compliant CryptoServiceProvider to replace AesManaged in Silverlight?

    Monday, July 17, 2017 3:46 PM
  • Also interested in this.  Have FIPS compliant algorithms been added?
    Monday, October 23, 2017 8:14 PM