Security Requirements for Cryptographic Modules [includes Change Notices as of 12/3/2002]

Published: May 25, 2001

Author(s)

Annabelle Lee, Miles E. Smid, Stanley R. Snouffer

Abstract

This Federal Information Processing Standard (140-2) specifies the security requirements that will be satisfied by a cryptographic module, providing four increasing, qualitative levels intended to cover a wide range of potential applications and environments. The areas covered, related to the secure design and implementation of a cryptographic module, include specification; ports and interfaces; roles, services, and authentication; finite state model; physical security; operational environment; cryptographic key management; electromagnetic interference/electromagnetic compatibility (EMI/EMC); self-tests; design assurance; and mitigation of other attacks. [Supersedes FIPS 140-1 (January 11, 1994): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=917970]
Citation: Federal Inf. Process. Stds. (NIST FIPS) - 140-2
Report Number:
140-2
Pub Type: NIST Pubs

Supersedes

Keywords

computer security, cryptographic module, FIPS 140-2, validation
Created May 25, 2001, Updated November 10, 2018