Readynas 628x Encryption-what standard

---

SidSheldon wrote:

Sadly this does not answer the question.  Is the 256 AES to the  FIPS ENCRYPTED certified standard .  That becomes a yes or no answer.  Which is it?

---

Actually, it answers the question you asked, but doesn't give enough information for what you really want to know.  FIPS doesn't just certify an encryption type (like AES), it certifies an implementation as well.

Per Aadvanced-encryption-standard-aes , AES does meet the FIPS standard: 

Abstract

The Advanced Encryption Standard (AES) specifies a FIPS-approved cryptographic algorithm that can be used to protect electronic data.

But it is doubtful that Netgear expected the ReadyNAS to be used in an environment that requires FIPS certification and would go to the expense of getting it.  A second party cannot use another's FIPS-certified code and claim certification without getting the implementation certified.  Even if you could, I don't know how you'd prove the code was not altered, and I don't even know that Netgear didn't.  I know that different Red Hat kernels have different FIPS certifications, so you can't even update your own product and not get re-certified.

ReadyNAS encrtption appears to be based LUKS.  LUKS does have a "FIPS compliant" mode, which is the default, but can be installed without it.  That would seem to indicate that Netgear probably could get ReadyNAS OS6 FIPS certified if so inclined.  But I know some have tried and failed to use LUKS to open an encrypted volume in generic Linux and had no luck, so Netgear may have modified it.