https://hardac.org/advisories/ Advisories from HARDAC Industries LLC on CMMC, NIST SP 800-171, FIPS validation and post-quantum cryptography for defense and federal contractors. en-us Tue, 27 Oct 2026 12:00:00 +0000 https://hardac.org/advisories/hardac-adv-2026-04/ https://hardac.org/advisories/hardac-adv-2026-04/ Tue, 27 Oct 2026 12:00:00 +0000 Between November 2025 and October 2026 the federal post-quantum cryptography (PQC) requirements turned from targets into dated obligations with gates. https://hardac.org/advisories/hardac-adv-2026-03/ https://hardac.org/advisories/hardac-adv-2026-03/ Tue, 27 Oct 2026 12:00:00 +0000 NIST SP 800-171 control 3.13.11, carried into CMMC as SC.L2-3.13.11, asks whether FIPS-validated cryptography is employed to protect the confidentiality of CUI. https://hardac.org/advisories/hardac-adv-2026-02/ https://hardac.org/advisories/hardac-adv-2026-02/ Tue, 27 Oct 2026 12:00:00 +0000 CMMC control SC.L2-3.13.11 requires FIPS-validated cryptography wherever cryptography protects the confidentiality of CUI. https://hardac.org/advisories/hardac-adv-2026-01/ https://hardac.org/advisories/hardac-adv-2026-01/ Tue, 27 Oct 2026 12:00:00 +0000 On 21–22 September 2026, NIST's Cryptographic Module Validation Program (CMVP) moved every FIPS 140-2 certificate to its Historical List.