GPG4win FIPS certified or not

sudhanshu · October 2, 2024, 12:38pm

Hi All,

Someone please tell me that GPG4win tool is FIPS level certified or not?

please help me to clear it.

cklassen · October 4, 2024, 6:53am

Hi @sudhanshu,

simple answer: No. If that would be the case you could see it on: GnuPG VS-Desktop

eebb · October 4, 2024, 7:39am

The website you refer to is only valid for GnuPG VS-Desktop. It does not say anything about Gpg4win.

Gpg4win does not have any certifications.

cklassen · October 4, 2024, 10:38am

You’re right but they’re almost the same so if one wants to get a version of Gpg4win that is certified it would be GnuPG VS-Desktop.

sudhanshu · October 7, 2024, 9:42am

Hi cklassen,

First of all thanks for the response.
And I am talking about Kleopatra (GUI) tool.

cklassen · October 8, 2024, 11:02am

In the first post you mentioned Gpg4win and not Kleopatra. However, Kleopatra is not FIPS certified.

sudhanshu · October 14, 2024, 10:28am

Hi cklassen,

So can you please tell me we can generate a key in PGP format by the help of [GnuPG VS-Desktop] tool.

cklassen · October 14, 2024, 1:40pm

Yes, you can create a PGP key by using Gpg4win or GnuPG VS-Desktop (which is the same as Gpg4win but contains a support contract and thus has to be paid) but no, these tools are not FIPS certified.