48 CFR § 1252.239-78 - 1252.239-78 Validated Cryptography for Secure Communications.

---
identifier: "/us/cfr/t48/s1252.239-78"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "48 CFR § 1252.239-78 - 1252.239-78   Validated Cryptography for Secure Communications."
title_number: 48
title_name: "Federal Acquisition Regulations System"
section_number: "1252.239-78"
section_name: "1252.239-78   Validated Cryptography for Secure Communications."
chapter_number: 12
chapter_name: "DEPARTMENT OF TRANSPORTATION"
subchapter_number: "H"
subchapter_name: "CLAUSES AND FORMS"
part_number: "1252"
part_name: "SOLICITATION PROVISIONS AND C


  ONTRACT CLAUSES"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "5 U.S.C. 301; 41 U.S.C. 1121(c)(3); 41 U.S.C. 1702; and 48 CFR 1.301 through 1.304."
regulatory_source: "87 FR 61159, Oct. 7, 2022, unless otherwise noted."
cfr_part: "1252"
---


# 1252.239-78 1252.239-78   Validated Cryptography for Secure Communications.

As prescribed in 1239.7204(c), insert a clause substantially as follows:

****Validated Cryptography for Secure Communications (NOV 2022)

(a) The Contractor shall use only cryptographic mechanisms that comply with ___ [*Contracting Officer insert FIPS 140-2 level #*]. All deliverables shall be labeled ___ [*Contracting Officer insert appropriate label such as “For Official Use Only” (FOUO) or other DOT-agency selected designation per document sensitivity*].

(b) External transmission/dissemination of ___ [*Contracting Officer fill-in: e.g., labeled deliverables*] to or from a Government computer must be encrypted. Certified encryption modules must be used in accordance with ___ [*Contracting Officer shall insert the standard, such as FIPS PUB 140-2, “Security requirements for Cryptographic Modules.”*

****(End of clause)