Skip to main content

 

 

Coupa Success Portal

FIPS Cipher Deprecation 2022

Introduction

We'll be enabling the latest FIPS encryption standards to the Coupa Cloud Infrastructure with an upcoming update. To ensure your encryption continues to work as expected, you’ll need to test your system once the update has been deployed to your sandbox instance.

Who's affected

Any customer who's enabled encryption for their instance and is using a symmetric cipher to encrypt or decrypt files should make sure that the cipher is supported by the FIPS standard.

Important dates

For this update, we'll provide customers with a 2-week sandbox period to test your existing encryption workflows and make the necessary updates to your ciphers.

Environment Suggested readiness date Deployment date
Sandbox 11 November, 2022 14 November, 2022
Production  25 November, 2022 28 November, 2022

FIPS supported ciphers

  • TLSv1.2
  • TLSv1.2+FIPS:kRSA+FIPS:!eNULL:!aNULL:!3DES:!EDH 
  • ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-
  • GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-
  • SHA:ECDHE-ECDSA-AES256-SHA:ECDH-RSA-AES256-SHA384:ECDH-ECDSA-AES256-SHA384:ECDH-RSA-AES256-SHA:ECDH-
  • ECDSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:
  • ECDHE-ECDSA-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:ECDHE-RSA-
  • AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:
  • DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-
  • ECDSA-AES128-SHA:ECDH-RSA-AES128-SHA256:ECDH-ECDSA-AES128-SHA256:ECDH-RSA-AES128-SHA:ECDH-ECDSA-AES128-
  • SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:AES128-GCM-SHA256:AES128-SHA256:AES128-SHA

Coupa suggests that where possible, you use our RSA-2048 public key to encrypt inbound files.

  • Was this article helpful?