Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759

Calis, Alexander

doi:https://doi.org/10.6028/NIST.SP.800-140Dr2

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-140D Rev. 2

Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759

Documentation Topics

Date Published: July 2023

Supersedes: SP 800-140D Rev. 1 (05/20/2022)

Author(s)

Alexander Calis (NIST)

Abstract

The approved sensitive security parameter generation and establishment methods listed in this publication replace the ones listed in International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 19790 Annex D and ISO/IEC 24759 paragraph 6.16, within the context of the Cryptographic Module Validation Program (CMVP). As a validation authority, the CMVP may supersede Annex D in its entirety. This document also supersedes SP 800-140Dr1.

Keywords

Cryptographic Module Validation Program; CMVP; FIPS 140 testing; FIPS 140-3; ISO/IEC 19790; ISO/IEC 24759; sensitive security parameter establishment methods; sensitive security parameter generation; testing requirement; vendor evidence; vendor documentation

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-140Dr2
Download URL

Supplemental Material:
SP 800-140D: Approved SSP Generation and Establishment Methods

Document History:
07/25/23: SP 800-140D Rev. 2 (Final)

Topics

Security and Privacy

cryptography, testing & validation