Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

Lightship Security , an Applus+ Laboratories company and accredited cryptographic security test laboratory, along with the OpenSSL Corporation , the co-maintainer of the OpenSSL Library, have announced the submission of OpenSSL version 3.5.4 to the Cryptographic Module Validation Program (CMVP) for FIPS 140-3 validation.

This submission indicates that the code is complete and all included algorithms have passed NIST testing and independent laboratory review. The final CMVP review and certificate issuance remain as the concluding steps in the process.

The submission is a significant milestone in the collaboration between Lightship Security and the OpenSSL Corporation to provide validated cryptographic solutions that meet modern security and compliance requirements.

The OpenSSL 3.5.4 FIPS Object Module offers an open-source, standards-compliant cryptographic module aligned with the FIPS 140-3 standard. This enables organizations across government and industry to deploy secure and compliant solutions upon issuance of the validation certificate.

OpenSSL 3.5 , released in April 2025, introduced support for post-quantum cryptographic (PQC) algorithms, including ML-KEM, ML-DSA, and SLH-DSA, consistent with NIST’s PQC standardization.

This submission is the initial step toward a FIPS-140 validated PQC-ready module, supporting organizations preparing for quantum-resistant cryptographic deployments.

Jason Lawlor, President of Lightship Security, stated that the submission of OpenSSL 3.5.4 to the CMVP is an important step in sustaining validated, standards-based cryptography within one of the world’s most widely used open-source libraries. Lightship Security continues to support OpenSSL’s FIPS 140-3 validation efforts to meet compliance requirements globally.

Tim Hudson, President of the OpenSSL Corporation, emphasized that OpenSSL 3.5.4 represents a completed, tested, and ready module that brings value today, with the final certificate formalizing its compliance with FIPS 140-3.

This effort continues the history of the OpenSSL Library FIPS 140 validated modules widely deployed across government, defense, and commercial systems to support secure and compliant operations.

The OpenSSL Corporation is a global leader in cryptographic solutions, specializing in developing and maintaining the OpenSSL Library—an essential tool for secure digital communications.

The OpenSSL Corporation offers a range of services to assist businesses in the secure and efficient implementation of OpenSSL solutions.

The OpenSSL Corporation also supports projects aligned with its mission and values by providing infrastructure, resources, expert advice, and engagement through advisory committees, particularly in the commercial sector. Collaboration among these projects fosters innovation, enhances security standards, and addresses common challenges effectively.

Based on reporting by Cyber Security News.