I am trying to determine whether the default encryption algorithms used by
the .NET framework cryptographic APIs are FIPS 140 compliant (ideally
narrowing it down to FIPS 140-1 and FIPS 140-2). I have seen documentation
([url]http://www.microsoft.com/technet/Security/topics/issues/fipseval.mspx[/url])
indicating that the default Microsoft CSPs and the Windows Kernel Mode
Cryptographic Module running on Windows Server 2003 have completed at least
the FIPS 140-1 evaluation process, but have not found any documentation
indicating that these are in fact being used under the hood by the .NET
cryptographic APIs. Can somebody please point me to some documentation
indicating whether or not this is the case and clarify the level of FIPS
compliance.