Purpose of FIPS 140
The National Institute of Standards and Technology (NIST) issues the 140 Publication Series to coordinate the requirements and standards for cryptographic modules which include both hardware and software components for use by departments and agencies of the United States federal government. FIPS 140 does not purport to provide sufficient conditions to guarantee that a module conforming to its requirements is secure, still less that a system built using such modules is secure. The requirements cover not only the cryptographic modules themselves but also their documentation and (at the highest security level) some aspects of the comments contained in the source code.
User agencies desiring to implement cryptographic modules should confirm that the module they are using is covered by an existing validation certificate. FIPS 140-1 and FIPS 140-2 validation certificates specify the exact module name, hardware, software, firmware, and/or applet version numbers. For Levels 2 and higher, the operating platform upon which the validation is applicable is also listed. Vendors do not always maintain their baseline validations.
The Cryptographic Module Validation Program (CMVP) is operated jointly by the United States Government's National Institute of Standards and Technology (NIST) Computer Security Division and the Communications Security Establishment (CSE) of the Government of Canada. The use of validated cryptographic modules is required by the United States Government for all unclassified uses of cryptography. The Government of Canada also recommends the use of FIPS 140 validated cryptographic modules in unclassified applications of its departments.
Read more about this topic: FIPS 140
Famous quotes containing the words purpose of and/or purpose:
“The United States is the only great nation whose government is operated without a budget. The fact is to be the more striking when it is considered that budgets and budget procedures are the outgrowth of democratic doctrines and have an important part in developing the modern constitutional rights.... The constitutional purpose of a budget is to make government responsive to public opinion and responsible for its acts.”
—William Howard Taft (1857–1930)
“In using the strong hand, as now compelled to do, the government has a difficult duty to perform. At the very best, it will by turns do both too little and too much. It can properly have no motive of revenge, no purpose to punish merely for punishment’s sake. While we must, by all available means, prevent the overthrow of the government, we should avoid planting and cultivating too many thorns in the bosom of society.”
—Abraham Lincoln (1809–1865)