48 CFR 1252.239-78
1252.239-78 Validated Cryptography for Secure Communications.
United States · 48 CFR — Federal Acquisition Regulations System · Status: effective
Cite this
- Citation
- 48 CFR 1252.239-78, 1252.239-78 Validated Cryptography for Secure Communications, United States, version 1 as recorded 2026-07-09, yourstate.us, https://yourstate.us/provision/249145
- Permanent ID
ys:prov:249145@1- SHA-256
1815a2ddeff813f9ce972fb955e8a6ba47b51a161edd8a3373c3b44423805547
The hash is SHA-256 of this version's text, with every run of whitespace collapsed to a single space and the ends trimmed. The ID always leads back here, and checking it says whether the text you cited is still the current version.
Full text
As prescribed in 1239.7204(c), insert a clause substantially as follows:
(a) The Contractor shall use only cryptographic mechanisms that comply with ___ [Contracting Officer insert FIPS 140-2 level #]. All deliverables shall be labeled ___ [Contracting Officer insert appropriate label such as “For Official Use Only” (FOUO) or other DOT-agency selected designation per document sensitivity].
(b) External transmission/dissemination of ___ [Contracting Officer fill-in: e.g., labeled deliverables] to or from a Government computer must be encrypted. Certified encryption modules must be used in accordance with ___ [Contracting Officer shall insert the standard, such as FIPS PUB 140-2, “Security requirements for Cryptographic Modules.”
Legislative history
This is a federal regulation, adopted through agency rulemaking under the Administrative Procedure Act — not enacted by a recorded vote of Congress.