Swarmauri Cipher FIPS 140-3

Policy-enforcing cipher suite that restricts operations to NIST FIPS 140-3 validated algorithms and parameter settings.

Features

• Enforces RSA minimum modulus sizes, approved elliptic curves, and SHA hashes
• Provides FIPS-aligned defaults for AES-GCM, RSA-OAEP, and RSA-PSS operations
• Shares structured policy metadata so calling services understand enforced constraints
• Can be swapped with the JWA or COSE suites for tenants that require FIPS-only cryptography

Installation

pip

pip install swarmauri_cipher_suite_fips1403

Poetry

poetry add swarmauri_cipher_suite_fips1403

uv

To add the dependency to a pyproject.toml managed by uv:

uv add swarmauri_cipher_suite_fips1403

Or install it into the active environment:

uv pip install swarmauri_cipher_suite_fips1403

Usage

from swarmauri_cipher_suite_fips1403 import FipsCipherSuite

suite = FipsCipherSuite(name="fips-mode")

# Describe a compliant RSA-PSS signing request
descriptor = suite.normalize(op="sign", alg="PS256")
print(descriptor["params"]["saltBits"])   # -> 256 enforced default
print(descriptor["constraints"]["minKeyBits"])  # -> 2048 minimum RSA modulus

If an unsupported algorithm is requested, the suite raises ValueError immediately, making it straightforward for upstream services to surface a policy violation.

Entry Point

The suite registers under the swarmauri.cipher_suites entry point as FipsCipherSuite.

Want to help?

If you want to contribute to swarmauri-sdk, read up on our guidelines for contributing that will help you get started.