Cryptographic Module Validation Program (CMVP) | NIST

The Cryptographic Module Validation Program (CMVP) is a joint initiative between NIST and the Canadian Centre for Cyber Security. Its purpose is to ensure that cryptographic modules used by federal agencies meet specific security standards. Independent laboratories accredited by NVLAP verify that each module meets the required cryptographic and security requirements.

CMVP will continue to accept submissions for FIPS 140-2 validation until March 31, 2022, but submissions after September 21, 2021 must have an existing extension request. Starting April 1, 2022, CMVP will no longer accept new FIPS 140-2 validation certificates. Since September 22, 2020, CMVP has also been validating cryptographic modules to the updated FIPS 140-3 standard. For more information, visit the Computer Security Resource Center (CSRC).

Source: https://www.nist.gov/programs-projects/cryptographic-module-validation-program-cmvp

Keywords: Validation, Cryptographic, Modules, Security, Requirements

Relevance to Rolling Plan

StandardsGPT

Ask your questions!