FIPS mode versus Standard [non-fips] with 256-bit AES encryption

[nanoman9]

Hi, I am confused. I recognize there is a "FIPS mode" if I change my registry however, I thought the non FIPs mode protection required to open with 256-BIT AES would be FIPS 140-2 compliant. That is, why would I need to use "FIPS mode (by creating and flagging REG_DWORD bFIPSMode = 1) if I can protect / encrypt to open with "standard mode" with Compatibility mode Acrobat X and Later (256-bit AES) Encrypt all documents contents.  I would appreciate a better understanding of what is really to required to be FIPS-140-2 compliant (at least to level 1).

\

Thank you.

[margueritek]

FIPS mode tells Acrobat what algorithms and protection methods it can use when creating a PDF. As you are aware, you can't password-encrypt a file in FIPS mode. However, Acrobat is permissive in that it will let you open such a file without having to leave FIPS mode.