U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Cryptographic Module Validation Program CMVP

FIPS 140-3 Management Manual

NEW! Draft FIPS 140-3 CMVP Management Manual (updated 07-13-2022)

A new draft FIPS 140-3 CMVP Management Manual has been released for comment. This is a major revision, including incorporating implementation guidance addressing issues that were formally found in FIPS 140-2 IG section G.x.
Please send any comments using the Comments Template to CMVPcomments@list.nist.gov. Comments for the FIPS 140-3 CMVP Management Manual are due August 10, 2022. 

 

The purpose of the CMVP Management Manual is to provide effective lab management and coordination  with the management of the CMVP. The CMVP Management Manual includes a description of the CMVP process and is applicable to the Validation Authority, the CST Laboratories, and the vendors who participate in the program.

Consumers who procure validated cryptographic modules may also be interested in the contents of this manual. This manual outlines the management activities and specific responsibilities which have been assigned to the various participating groups. This manual does not deal with the actual standards and technical aspects of the standards.

Archived Draft FIPS 140-3 Management Manual (9-18-2020)

Created October 11, 2016, Updated July 28, 2022