FIPS PUB 140-2
Testing of cryptographic modules and cryptographic algorithms
FIPS PUB 140-2 is the de-facto standard for testing of cryptographic modules. Certification according to this standard fulfils the requirements of US-American and Canadian authorities. The TÜViT test laboratory is the only one in Germany, which is accredited by NIST/NVLAP (USA) for testing and validation against FIPS PUB 140-2 (NVLAP Lab Code: 200636-0).
TÜViT is the contact for organisations who wish to have the implementation of their algorithms and crypto modules tested and certified according to FIPS PUB 140-2. So as to take due account of the varying security requirements of different clients, organisations can choose between four security levels against which the cryptographic module is tested. Successful completion of the module validation tests and implemented cryptographic algorithms ends in certification. The Cryptographic Module Validation Program (CMVP) of the National Institute of Standards and Technology (NIST, USA) and the Communications Security Establishment Canada (CSEC) is used for crypto modules, whilst the Cryptographic Algorithm Validation Program (CAVP) from NIST is used for the certification of implemented cryptographic algorithms. The corresponding certificates do not only fulfil the requirements of official authorities and agencies, but act in general as an important marketing instrument.
In addition to the validation tests, TÜViT offers advice concerning the requirements of FIPS PUB 140-2 and their fulfilment. Clients can receive all the important information regarding these topics in optional pre-validation workshops.
- Validation tests on implementations of cryptographic algorithms with the objective of certification by the CAVP
- Validation tests on cryptographic modules according to FIPS PUB 140-2 with the objective of certification by CMVP
- Pre-validation workshops for clarification of the extent to which an existing or planned cryptographic module fulfils the requirements and discussion of any changes that have to be made