Some of algorithms used by the products meet NIST FIPS
standards, but that's far different than being NIST
certified. If you wanted to sell a device to the
government for top secret usage for example, and even if
all the components meet the standards, the NSA still
inspects the implementation. Just because you're using
AES doesn't mean you implemented AES correctly.
In this case, the products implement strong encryption
but useless authentication.
Discussion on:
Message 15 of 1
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
