Severity: Low New document US

FedRAMP publishes RFC-0035 on cryptographic module use updates

Original title: Published RFC-0035 Cryptographic Module Use Updates

Published
Source: fedramp.gov
Effective
Not stated
Deadline
Not stated
Framework: FedRAMP
CR26 source
in 53 days
CR26 becomes mandatory: new Rev5 applications and all active 20x certifications must follow it source

Why it matters

FedRAMP has published RFC-0035 addressing updates to cryptographic module use requirements. This guidance clarifies expectations for cloud service providers implementing cryptographic controls in FedRAMP authorizations. Organizations must review and align their cryptographic module implementations with the updated guidance to maintain compliance.

What changed

  • FedRAMP RFC-0035 released with updates to cryptographic module use requirements

Who is affected

Cloud service providers (CSPs) seeking or maintaining FedRAMP authorization in the United States

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.