FIPS 140 - Revision history

Tom: /* Context */

2024-02-15T21:15:19Z

‎Context

Tom: /* Open Source */

2024-01-10T02:08:38Z

‎Open Source

Tom: /* Full Title */

2023-12-28T05:59:39Z

‎Full Title

Tom: /* Open Source */

2023-10-07T05:54:06Z

‎Open Source

Tom: /* Context */

2023-10-07T05:51:11Z

‎Context

Tom: /* Context */

2022-10-17T17:23:11Z

‎Context

Tom: /* References */

2021-11-27T14:53:59Z

‎References

Tom at 03:42, 17 February 2021

2021-02-17T03:42:15Z

Tom: /* Comparisons */

2021-02-17T03:40:54Z

‎Comparisons

Tom: /* Comparisons */

2021-02-17T03:32:13Z

‎Comparisons

@@ Line 6: / Line 6: @@
 * Latest version as of 2019-05-22 is [https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf FIPS 140-3], version 3.
 * The newer version are issued as a joint effort with the Canadians called CMVP.
 ==Open Source==

@@ Line 10: / Line 10: @@
 * Originally FIPS implementations were very expensive to get approved by the NVLAP (now CAVP) process and so were closed source.
 * On 2023-10-05 [https://aws.amazon.com/blogs/security/aws-lc-is-now-fips-140-3-certified/ AWS-LC is now FIPS 140-3 certified] AWS created a Open Source version that was FIPS 140-3 certified. This is needed to create wallets of the type required by the DHS SVIP grant program.
 ==Comparisons==

@@ Line 1: / Line 1: @@
 ==Full Title==
-Federal Information Processing Standard 140 Security Requirements for Cryptographic Modules.
+Federal Information Processing Standard 140 Security Requirements for [[Cryptographic Modules]].
 ==Context==
 * A new approach to release NIST SP 800-14B  [https://mail.google.com/mail/u/0/?q=ccg#inbox/FMfcgzGqQwDLzGxwqMzpnqcbCStzJWQf CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B], is scheduled for public comment by 2022-12-05

@@ Line 8: / Line 8: @@
 ==Open Source==
 * Originally FIPS implementations were very expensive to get approved by the NVLAP (now CAVP) process and so were closed source.
-* On 2023-10- AWS
+* On 2023-10-05 [https://aws.amazon.com/blogs/security/aws-lc-is-now-fips-140-3-certified/ AWS-LC is now FIPS 140-3 certified] AWS created a Open Source version that was FIPS 140-3 certified. This is needed to create wallets of the type required by the DHS SVIP grant program.
 ==Comparisons==

@@ Line 4: / Line 4: @@
 * A new approach to release NIST SP 800-14B  [https://mail.google.com/mail/u/0/?q=ccg#inbox/FMfcgzGqQwDLzGxwqMzpnqcbCStzJWQf CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B], is scheduled for public comment by 2022-12-05
 * Latest version as of 2019-05-22 is [https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf FIPS 140-3], version 3.
 ==Comparisons==

← Older revision		Revision as of 14:53, 27 November 2021
Line 23:		Line 23:
	[[Category: Security]]		[[Category: Security]]
	[[Category: Standard]]		[[Category: Standard]]
		+	[[Category: Cryptography]]

@@ Line 15: / Line 15: @@
 ISO/IEC 19790:2012(E), Information technology — Security techniques — Security requirements for cryptographic modules, is an international standard based on updates of the earlier versions of FIPS 140, Security Requirements for Cryptographic Modules. ISO/IEC 24759:2017(E), Information technology — Security techniques — Test requirements for cryptographic modules is an international standard based on the Derived Test Requirements for FIPS 140-2, Security Requirements for Cryptographic Modules. It is currently in the best interest to use these standards, superseding those sections where national standards are permitted. Therefore, FIPS 140-3 is based on ISO/IEC 19790:2012/Cor.1:2015(E) and ISO/IEC 24759:2017(E). The following documents identify those elements that are superseded or modified.
-The supported crypto suites are in the [https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140C.pdf SP 800-40C] doc.
+The supported crypto suites are in the [https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140C.pdf SP 800-140C] doc.
 ==References==

← Older revision		Revision as of 03:32, 17 February 2021
Line 14:		Line 14:

	ISO/IEC 19790:2012(E), Information technology — Security techniques — Security requirements for cryptographic modules, is an international standard based on updates of the earlier versions of FIPS 140, Security Requirements for Cryptographic Modules. ISO/IEC 24759:2017(E), Information technology — Security techniques — Test requirements for cryptographic modules is an international standard based on the Derived Test Requirements for FIPS 140-2, Security Requirements for Cryptographic Modules. It is currently in the best interest to use these standards, superseding those sections where national standards are permitted. Therefore, FIPS 140-3 is based on ISO/IEC 19790:2012/Cor.1:2015(E) and ISO/IEC 24759:2017(E). The following documents identify those elements that are superseded or modified.		ISO/IEC 19790:2012(E), Information technology — Security techniques — Security requirements for cryptographic modules, is an international standard based on updates of the earlier versions of FIPS 140, Security Requirements for Cryptographic Modules. ISO/IEC 24759:2017(E), Information technology — Security techniques — Test requirements for cryptographic modules is an international standard based on the Derived Test Requirements for FIPS 140-2, Security Requirements for Cryptographic Modules. It is currently in the best interest to use these standards, superseding those sections where national standards are permitted. Therefore, FIPS 140-3 is based on ISO/IEC 19790:2012/Cor.1:2015(E) and ISO/IEC 24759:2017(E). The following documents identify those elements that are superseded or modified.
		+
		+	The supported crypto suites are in the [https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-140C.pdf SP 800-40C] doc.

	==References==		==References==