Connect with us

Technology

CIQ Announces FIPS 140-3 Compliance for Rocky Linux, Empowering Secure Open Source Adoption

Published

1 year ago

on

RENO, Nev., April 24, 2025 /PRNewswire/ — CIQ today announced that users of both the community-driven Rocky Linux and Rocky Linux from CIQ can now leverage the security benefits of FIPS 140-3 compliance. Rocky Linux 8 and Rocky Linux 9.2 have been officially listed under the NIST Modules in Process (MIP) list following review by our lab partner, atsec. This significant achievement provides organizations an Enterprise Linux distribution with the assurance of a validated security posture for their critical workloads.

This FIPS 140-3 certification for Rocky Linux 8 and 9 offers several key benefits for organizations:

Demonstrable Cryptographic Posture: Reduces liability and supports compliance with stringent enterprise and government security standards, effectively mitigating negligence risks.Increased Efficiency: Pre-hardened components minimize the time and specialized skills required to configure systems to meet rigorous organizational security needs and standards.

Compliance, particularly with standards like FIPS 140-3, is a mandatory requirement for a significant portion of enterprises and government agencies. Even for organizations where it is not mandated, achieving this compliance is crucial for building and maintaining customer trust. This compliance provides a valuable option for prospects within these sectors who are already utilizing Enterprise Linux distributions and have limited choices for a compliant operating system.

“FIPS 140-3 certification for a Linux distribution is a significant undertaking, and obtaining this for Rocky Linux 8 and 9 represents a substantial investment of time and effort from our team,” said Gregory Kurtzer, CEO and founder of CIQ. “The process is meticulous, and I am incredibly proud of our work. We are now excited to support both the community-driven Rocky Linux and Rocky Linux from CIQ users. However, our work is just beginning. We will continuously provide updates to ensure all users have a path to ongoing security, and will work to deliver additional compliance with other standards for our customers and the community.”

FIPS 140-3 encompasses key cryptographic modules essential for regulated environments, including the kernel, NSS, Libgcrypt, OpenSSL, and GnuTLS. These packages have been updated by CIQ with FIPS-compliant security patches and are a prerequisite for achieving FIPS 140-3 compliance in regulated workloads. When FIPS mode is enabled, strict algorithm restrictions are enforced, adhering to minimum standards for entropy and encryption strength as mandated by FIPS 140-3.

Additionally, the OpenSSL modules in both Rocky 8 and Rocky 9 have been enhanced by CIQ to add full FIPS 140-3 support for the EDDSA-based elliptic curve signing algorithm ED25519 and ED448, which is in addition to the upstream cryptographic support in the open source released versions. The OpenSSL module in Rocky 8 has been enhanced to be fully certified for TLS1.3 in FIPS mode.

“Rocky Linux is deployed massively through organizations that have strict compliance restrictions including the US Government,” said Scott Shinn, Compliance and Security Team co-lead of Rocky Linux and CTO of Atomicorp. “The validation that FIPS provides to the Rocky Linux community is a massive testament to both Rocky Linux as a premier community-based Enterprise Linux operating system as well as CIQ, whose commitment to open source and Rocky Linux is clear. Thank you CIQ for making such an impactful investment to the community and supporting other security focused organizations like Atomicorp.”

The FIPS 140-3 standard represents a significant evolution in cryptographic security from FIPS 140-2, imposing stricter algorithmic strength requirements to address increasing processing power and sophistication. Consequently, legacy algorithms with known vulnerabilities or insufficient security margins, such as SHA-1 for digital signatures, RSA keys smaller than 2048 bits, and Triple DES (3DES) encryption, have been deprecated or disallowed.

Artifacts and Links

All of the FIPS work that has been completed by the CIQ team is available as open source in a public repository on Github.

Validation details for the Rocky Linux cryptographic modules are publicly available on the NIST website through the following links:

Entropy Certificates: https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/search?Vendor=ctrl+iq&ipp=25Cryptographic Algorithm Certificates (Approved Algorithms): https://csrc.nist.gov/projects/cryptographic-algorithm-validation-program/validation-search?searchMode=implementation&vendor=ctrl+iq&productType=-1&ipp=25Modules on MIP list (search for “Rocky”): https://csrc.nist.gov/projects/cryptographic-module-validation-program/modules-in-process/modules-in-process-list 

The final CMVP certificate will be accessible in the ‘Validated Modules’ section of the NIST website upon NIST’s completion of the lab report validation in the future.

ABOUT CIQ
CIQ delivers secure and performant software infrastructure for the demands of all modern workloads, from the most mundane to the most extreme HPC and AI jobs. We believe infrastructure should drive the future of your business and that both the operating system of a single machine and the orchestration layer to manage a cluster of machines and even hybrid environments needs to be optimized for your requirements. We are an open source company who has started and/or contributed to critical infrastructure projects such as Rocky Linux, Warewulf, Ascender, and Apptainer. 

Media Contact
Cristin Connelly
cristin@cathey.co
Cathey.co for CIQ

View original content to download multimedia:https://www.prnewswire.com/news-releases/ciq-announces-fips-140-3-compliance-for-rocky-linux-empowering-secure-open-source-adoption-302437642.html

SOURCE CIQ

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

AFP Launches No Code AI for Finance Certificate to Upskill Finance Teams

Published

3 hours ago

on

April 29, 2026

By

New certificate empowers financial professionals with real-world AI skills that don’t require programming expertise

ROCKVILLE, Md., April 29, 2026 /PRNewswire/ — The Association for Financial Professionals (AFP) announced the launch of its No Code AI for Finance Certificate Program. Taught by an AI expert with a background in finance and operations, the virtual on-demand program goes beyond theory, providing practical applications of AI in finance.

Key takeaways

Practical curriculum: The certificate course, developed through feedback from finance practitioners, provides hands-on exercises and lessons on building a data foundation, training and interpreting machine learning models, generating insights with generative AI and embedding ethics in AI adoptionSelf-paced learning: Once registered for the certificate, eight hours of on-demand content across four modules are available in AFP Learn.Professional recognition: The certificate course is eligible for 9.6 CTP, FPAC and CCM Credits and provides a Digital Badge and printable certificate upon successful completion.

Why it matters
The finance function is at a critical turning point. Data volumes are growing while finance professionals are increasingly being asked to do more with less. The No Code AI for Finance Certificate equips teams to scale their impact by automating labor-intensive workflows and speeding up processes while maintaining accuracy.

Comprehensive curriculum
The certificate program includes four modules that are tailored to the specific needs of finance professionals:

Data Foundations for Trustworthy Finance Analytics: Learn about decision cycles AI can shorten, mitigation tactics for AI hallucinations, and the difference between supervised, unsupervised and generative tasks.Understanding the Full Machine Learning Process and Its Results: Learn to frame finance machine learning problems correctly, choose and defend the right success metrics for each task and translate model results into business-ready insights.Generative AI for Finance: Smarter Questions, Faster Insights: Learn to write prompts for GenAI, generate and refine GenAI-supported data-prep code, pressure test insights with GenAI and apply guardrails for GenAI.From AI Capability to Adoption & Ethics by Design: Learn to select and prioritize a first AI pilot, design an operating cadence, draft an ethics and risk control sheet, and define ROI and adoption KPIs.

Each module includes downloadable assets to help learners apply the lessons to their day-to-day work.

Key quote
“At AFP, we recognized a clear need for training that addresses finance-specific applications of AI. This certificate acts as a bridge to connect financial professionals to the transformative power of AI, ensuring they remain the indispensable strategic partners their organizations require,” said Pat Culkin, President & CEO of AFP.

Ready to lead AI adoption in your finance team?
Enroll in the certificate program and begin working toward the No Code AI for Finance Certificate.

FAQs
Who should enroll in this certificate program?
The program is designed for financial professionals at all levels looking to integrate AI into their workflows.

Are there any prerequisites for the course?
There are no prerequisites for this course. It is accessible to professionals of all technical backgrounds. No coding knowledge is required.

How is the course delivered?
The course consists of eight hours of on-demand content across four modules, which can be completed at the learner’s own pace.

How much does it cost to enroll in the certificate program?
The certificate program is $295 for AFP members and $495 for non-members.

About AFP®
Headquartered outside of Washington, D.C., and located regionally in Singapore, the Association for Financial Professionals (AFP) is the professional society committed to advancing the success of treasury and finance members and their organizations. Established and administered by AFP, the Certified Treasury Professional and Certified Corporate FP&A Professional credentials set standards of excellence in treasury and finance. Each year, AFP hosts the largest networking conference worldwide for about 7,000 corporate financial professionals.

Media contact
Joe Hodanich
Senior Director, Digital Strategy & Content
Association for Financial Professionals
Email: jhodanich@financialprofessionals.org

View original content to download multimedia:https://www.prnewswire.com/news-releases/afp-launches-no-code-ai-for-finance-certificate-to-upskill-finance-teams-302753219.html

SOURCE Association for Financial Professionals

Continue Reading

Technology

KT Corp. Files 2025 Annual Report on Form 20-F

Published

3 hours ago

on

April 29, 2026

By

SEOUL, South Korea, April 29, 2026 /PRNewswire/ — KT Corporation (NYSE: KT), South Korea’s largest integrated telecom and digital platform service provider, announced that it has filed its Form 20- F Annual Report on April 29th, 2026 for the year ended December 31, 2025 with the Securities and Exchange Commission of the United States. The report can be accessed on KT’s English website at https://corp.kt.com/eng in the Investors section under Business Report as well as the SEC’s Edgar database at www.sec.gov. Shareholders may also request a hard copy of the Form 20-F Annual Report that includes audited financial statements of 2025, free of charge, by sending an e-mail to the Company’s IR department at ktir@kt.com.

About KT Corporation (KRX: 030200; NYSE: KT)

KT Corporation is the leading integrated telecommunications and platform service provider based in South Korea. Principal services include mobile, Broadband, IPTV, B2B communications, and fixed-line telephony. The Company has industry-leading market presence in Broadband, media services, and fixed-line telephony by maintaining the No.1 market share positions. Also, the Company is the No.1 player in B2B communications and offers a wide range of digital transformation services (DC, Cloud, AI, etc.). Additionally, the Company possesses a well-balanced portfolio of diverse subsidiaries focusing on media/content, financial services, real estate developments, and commerce industries.

Forward-Looking Statements

This communication contains “forward-looking statements” that are based on our current expectations, assumptions, estimates and projections about us and the industries in which we operate. The forward-looking statements are subject to various risks and uncertainties. Generally, these forward-looking statements can be identified by the use of forward-looking terminology such as “anticipate,” “believe,” “estimate,” “expect,” “intend,” “project,” “should,” and similar expressions. Those statements include, among other things, the discussions of our business strategy and expectations concerning our market position, future operations, margins, profitability, liquidity and capital resources. We caution you that reliance on any forward-looking statement involves risks and uncertainties, and that although we believe that the assumptions on which our forward-looking statements are based are reasonable, any of those assumptions could prove to be inaccurate, and, as a result, the forward-looking statements based on those assumptions could be incorrect. The uncertainties in this regard include, but are not limited to, those identified in the risk factors discussed above. In light of these and other uncertainties, you should not conclude that we will necessarily achieve any plans and objectives or projected financial results referred to in any of the forward-looking statements. We do not undertake to release the results of any revisions of these forward-looking statements to reflect future events or circumstances.

IR department:
+82-70-4193-4036
ktir@kt.com

View original content:https://www.prnewswire.com/news-releases/kt-corp-files-2025-annual-report-on-form-20-f-302757200.html

SOURCE KT Corp.

Continue Reading

Technology

SK TELECOM CO. LTD. FILES ITS ANNUAL REPORT ON FORM 20-F

Published

3 hours ago

on

April 29, 2026

By

SEOUL, South Korea, April 29, 2026 /PRNewswire/ — On April 29, 2026, SK Telecom Co., Ltd. filed its Annual Report on Form 20-F for the year ended December 31, 2025 with the U.S. Securities and Exchange Commission. The 2025 Annual Report on Form 20-F can be viewed on www.sktelecom.com, as well as from the website of the U.S. Securities and Exchange Commission at www.sec.gov. Printed copies of SK Telecom’s complete audited financial statements (including footnotes) as of and for the year ended December 31, 2025 can be requested, free of charge, by written request to skt.ir@sk.com.

View original content:https://www.prnewswire.com/news-releases/sk-telecom-co-ltd-files-its-annual-report-on-form-20-f-302757201.html

SOURCE SK Telecom Co., Ltd

Continue Reading

Trending