United States Government Publishing Office publisher pbl distributor dst United States Commerce Department National Institute of Standards and Technology (NIST) author aut Government Organization Snouffer, Ray. author aut text government publication eng GOVPUB Executive Agency Publications executive 2016-05-23 Commerce Department 2001-01-01 monographic deposited born digital 36 digital object pages C 13.10: https://www.govinfo.gov/app/details/GOVPUB-C13-e0580902633304ae5083cd1c5a233891 P0b002ee18f84fe4f DGPO 2016-05-23 2026-07-07 GOVPUB-C13-e0580902633304ae5083cd1c5a233891 machine generated eng fdlp C13 GOVPUB-C13-e0580902633304ae5083cd1c5a233891 e0580902633304ae5083cd1c5a233891 GOVPUB NIST Special Publications This series includes proceedings of conferences sponsored by NIST, NIST annual reports, and other special publications appropriate to this grouping such as wall charts, pocket cards, and bibliographies. NOTE: THE “DATE ISSUED” ABOVE MAY DEFAULT TO JANUARY 1ST OF A GIVEN YEAR. TO VIEW THE MOST ACCURATE DATE OF ISSUE, REVIEW THE TITLE PAGE OF THE PUBLICATION. National Institute of Standards and Technology Commerce Department. National Institute of Standards and Technology. 2001 2001 https://www.govinfo.gov/app/details/GOVPUB-C13-e0580902633304ae5083cd1c5a233891 https://www.govinfo.gov/content/pkg/GOVPUB-C13-e0580902633304ae5083cd1c5a233891/pdf/GOVPUB-C13-e0580902633304ae5083cd1c5a233891.pdf Cryptographic modules Cryptography Cryptography security requirements FIPS PUB 140-1 FIPS PUB 140-2 Snouffer, Ray. creator Snouffer, Ray. Lee, Annabelle. Oldehoeft, Arch. National Institute of Standards and Technology (U.S.) Computer Security Division. mdu Gaithersburg, MD U.S. Dept. of Commerce, National Institute of Standards and Technology 2001 monographic 1 online resource text eng Federal agencies, industry, and the public now rely on cryptography to protect information and communications used in critical infrastructures, electronic commerce, and other application areas. Cryptographic modules are implemented in these products and systems to provide cryptographic services such as confidentiality, integrity, non-repudiation and identification and authentication. A documented methodology for conformance testing through a defined set of security requirements in FIPS 140-1 and FIPS 140-2 and other cryptographic standards is specified in the Derived Test Requirements.FIPS 140-1 is one of NIST's most successful standards and forms the very foundation of the Cryptographic Module Validation Program. FIPS 140-2 addresses lessons learned from questions and comments and reflects changes in technology. The standard was strengthened, but not changed in focus or emphasis. Also, the standard was minimally restructured to: standardize the language and terminology to add clarity and consistency; remove redundant and extraneous information to make the standard more concise; and revise or remove vague requirements. Finally, a new section was added detailing new types of attacks on cryptographic modules that currently do not have specific testing available. This differences paper summarizes the changes from FIPS 140-1 to FIPS 140-2 and documents the detailed requirements. Ray Snouffer, Annabelle Lee, Arch Oldehoeft. 2001. Title from PDF title page. Includes bibliographical references. Mode of access: World Wide Web. Systems requirements: Adobe Acrobat PDF reader. Cryptographic modules Cryptography Cryptography security requirements FIPS PUB 140-1 FIPS PUB 140-2 http://dx.doi.org/10.6028/NIST.SP.800-29