Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation

Lightship Security and the OpenSSL Corporation have submitted OpenSSL version 3.5.4 to the Cryptographic Module Validation Program for FIPS 140-3 validation, according to Jason Lawlor, President of Lightship Security, and Tim Hudson, President of the OpenSSL Corporation. The submission, made for CMVP, confirms that the code is complete and that all included algorithms have passed NIST testing and independent laboratory review, with the final CMVP review and certificate issuance remaining as the last step.

OpenSSL 3.5.4, released in April 2025, introduces support for post-quantum cryptographic algorithms, including ML-KEM, ML-DSA, and SLH-DSA, aligning with NIST’s PQC standardisation and supporting preparations for quantum-resistant deployments. The OpenSSL 3.5.4 FIPS Object Module is described as an open-source, standards-compliant cryptographic module suitable for use by governments and industries once validation certification is issued.

This collaboration continues the OpenSSL Library’s history of FIPS 140 validated modules widely deployed across government, defence, and commercial systems to support secure and compliant operations.