Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Automation of the NIST Cryptographic Module Validation Program: September 2024 Status Report
October 31, 2024

A draft of NIST Cybersecurity White Paper (CSWP) 37, Automation of the NIST Cryptographic Module Validation Program: September 2024 Status Report, is now available for public comment.

The Cryptographic Module Validation Program (CMVP) validates third-party assertions that cryptographic module implementations satisfy the requirements of Federal Information Processing Standards (FIPS) Publication 140-3, Security Requirements for Cryptographic Modules.

The NIST National Cybersecurity Center of Excellence (NCCoE) has undertaken the Automated Cryptographic Module Validation Project (ACMVP) to support improvement in the efficiency and timeliness of CMVP operations and processes. The goal is to demonstrate a suite of automated tools that would permit organizations to perform testing of their cryptographic products according to the requirements of FIPS 140-3, then directly report the results to NIST using appropriate protocols.

This is a status report of progress made so far with the ACMVP and the planned next steps for the project. The public comment period is open through December 4, 2024. See the publication details for a copy of the draft and instructions for submitting comments.

Related Topics

Security and Privacy: cryptography, security automation, testing & validation

Technologies: software & firmware

Laws and Regulations: Federal Information Security Modernization Act

Created October 31, 2024