The Legion Goes Native, Experiences and Findings in the Hardware Jungle (S20a)
FIPS 140-3 has seen improvements in a few areas. Two of these deal with the management of self-tests and hybrid modules, or modules that can selectively use hardware assistance where available and both of these have created opportunities for improving overall module performance. The Bouncy Castle project, with some assistance, is now in the process of certifying a new FIPS Java module which provides access to the underlying support for AES, SHA-2, and RNG on Intel based architectures. Detailing lessons around risk, experiences of development and testing learned, benchmarks and performance figures measured, this talk will attempt to communicate what was found and gained in the process and answer the question: was it all worth it?