SECURITY REQUIREMENTS FOR CRYPTOGRAPHIC MODULES

What SECURITY REQUIREMENTS FOR CRYPTOGRAPHIC MODULES requires

This standard specifies the security requirements for a cryptographic module utilized within a security system protecting sensitive but unclassified information. It is applicable to all federal agencies that use cryptographic-based security systems and shall be used in designing and implementing cryptographic modules that federal departments and agencies operate or that are operated for them under contract. The standard provides four increasing, qualitative levels of security (Level 1, Level 2, Level 3, and Level 4) intended to cover a wide range of potential applications and environments. The core obligation is for federal agencies to use cryptographic modules that have been validated by the Cryptographic Module Validation Program (CMVP), a joint effort between the National Institute of Standards and Technology (NIST) and the Canadian Centre for Cyber Security. The security requirements cover areas related to the secure design, implementation, and operation of a cryptographic module, including its specification, interfaces, roles, services, authentication, software/firmware security, operating environment, physical security, non-invasive security, sensitive security parameter management, self-tests, life-cycle assurance, and mitigation of other attacks. In the CMVP, vendors use independent, accredited Cryptographic and Security Testing (CST) laboratories to have their modules tested for conformance.

Pillar: Aviation, Defense & Quantum · Authority: National Institute of Standards and Technology · Version: 1.0.0 · Last updated: 2019-03-22

Primary source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf

SHA-256 integrity: b7ad09c0b4c2b8472e0053e8d57329019c3d1228017eb804ce8b7adee313b27c

Primary Citations — 8 traced to source

• Abstract: This standard is applicable to all federal agencies that use cryptographic-based security systems to provide adequate information security for all agency operations and assets as defined in 15 U.S.C. § 278g-3.
• Section 3: The standard provides four increasing, qualitative levels of security: Level 1, Level 2, Level 3, and Level 4. These levels are intended to cover the wide range of potential applications and environments in which cryptographic modules may be employed.

+ 6 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

• Discovery (free): /api/v1/nodes/fips-140-3-cryptographic-modules.json — 6-field metadata
• Vault (full node): /api/v1/vault/nodes/fips-140-3-cryptographic-modules.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
• Canonical URL: https://bidda.com/intelligence/fips-140-3-cryptographic-modules
• Back to registry: Browse all 10,090 compliance nodes