The purpose of this notice is to announce NIST's five-year review of FIPS 140-1, Security Requirements for Cryptographic Modules, for federal agency use. FIPS 140-1 was first issued in 1994. The standard identifies requirements for four security levels for cryptographic modules to provide for a wide spectrum of data and a diversity of application environments. The standard provided that it be reviewed within five (5) years to consider its usefulness and new or revised requirements that may be needed to meet technological and economic changes.

Comments on this review of FIPS 140-1 must be received on or before January 21, 1999. [See the comments.]