CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759

Schaffer, Kim

doi:https://doi.org/10.6028/NIST.SP.800-140Cr1-draft2

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-140C Rev. 1 (2nd Public Draft)

Obsoleted on May 20, 2022 by SP 800-140C Rev. 1

CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759

Documentation Topics

Date Published: February 10, 2022
Comments Due: March 25, 2022 (public comment period is CLOSED)
Email Questions to: sp800-140-comments@nist.gov

Author(s)

Kim Schaffer (NIST)

Announcement

The NIST Special Publication (SP) 800-140x series supports Federal Information Processing Standards (FIPS) Publication 140-3, Security Requirements for Cryptographic Modules, and its associated validation testing program, the Cryptographic Module Validation Program (CMVP). The series specifies modifications to ISO/IEC 19790 Annexes and ISO/IEC 24759 as permitted by the validation authority.

Revisions of the following subseries publications are now available for public comment:

Second Draft NIST SP 800-140C Rev. 1, CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759
Second Draft NIST SP 800-140D Rev. 1, CMVP Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759

These documents introduce the naming conventions that will be used for validation submissions and certificates. In addition, the following four standards are being added: SP 800-208, Stateful Hash-Based Signature Schemes (October 2020), SP 800-133 Rev.2, Recommendation for Cryptographic Key Generation (June 2020), SP 800-56C Rev. 2, Recommendation for Key-Derivation Methods in Key-Establishment Schemes (August 2020), RFC 8446, The Transport Layer Security (TLS) Protocol Version 1.3, Section 7.1 (August 2018).

Abstract

The approved security functions listed in this publication replace the ones listed in ISO/IEC 19790 Annex C and ISO/IEC 24759 6.15, within the context of the Cryptographic Module Validation Program (CMVP). As a validation authority, the CMVP may supersede Annex C in its entirety.

Keywords

Cryptographic Module Validation Program; CMVP; FIPS 140 testing; FIPS 140; ISO/IEC 19790; testing requirement; vendor evidence; vendor documentation; security policy; ISO/IEC 24759

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-140Cr1-draft2
Download URL

Supplemental Material:
None available

Document History:
08/20/21: SP 800-140C Rev. 1 (Draft)
02/10/22: SP 800-140C Rev. 1 (Draft)
05/20/22: SP 800-140C Rev. 1 (Final)

Topics

Security and Privacy

cryptography, testing & validation