FIPS 140: A Standard in Transition

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

ITL Bulletin

FIPS 140: A Standard in Transition

Documentation Topics

Date Published: April 1991

Abstract

The Computer Systems Laboratory (CSL) of the National Institute of Standards and Technology (NIST) receives many inquiries regarding the implementation of Federal Information Processing Standard (FIPS) 140, General Security Requirements for Equipment Using the Data Encryption Standard. Since FIPS 140 is currently being revised and will be reissued as FIPS 140-1, many agency officials ask if the provisions of FIPS 140 still apply. This CSL Bulletin addresses these issues and provides guidance to agencies on FIPS waiver procedures. The bulletin does not establish new policy or modify the status of existing FIPS; rather, it summarizes and clarifies existing policy.

Keywords

cryptographic modules; cryptographic standards; Federal Information Processing Standards (FIPS); validation testing

Control Families

None selected

Documentation

Publication:
April 1991 CSL Bulletin (pdf)

Supplemental Material:
None available

Document History:
04/01/91: ITL Bulletin (Final)

Topics

Security and Privacy

cryptography, testing & validation

Technologies

hardware