Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cryptographic Module Validation Program CMVP


Entropy Source Validations (ESV) are rolling out. Here are some key dates to remember concerning ESV submissions

April 11, 2022

  • ESV submissions are accepted.

October 1, 2022

  • ESV cost recovery billing initiates.
  • ESV becomes the only method of submitting entropy sources for validation.

October 1 2023

  • ESV submissions only accepted from testing labs who have completed the NVLAP application for the 17ESV scope.


With a lot happening around Entropy Validations, the CMVP offers the following roadmap to help others plan ahead. Dates provided may not be exact. If modifications to this schedule are needed, the CMVP will update this page as well. 

April 2021

  • NIST hosted an Entropy Validation Workshop to discuss future plans and understand concerns from the industry around entropy validations.

June 2021

  • Checklist outlining requirements from SP 800-90B and associated IGs with details on what a reviewer is looking for. 

Summer 2021

  • CMVP will begin work with the CMUF Entropy Working Group to create Entropy Report templates for certain common technology types. 
  • CMVP will begin work with SP 800-90B authors to evaluate an open-source entropy source and write an analysis of the entropy model.

September 2021

  • ICMC21 will occur with many updates about the Entropy Validation process. Stay tuned for the full schedule from ICMC.  

End of 2021

  • Publish updated Handbook 150-17 with 17ESV accreditation scope. Existing 17CM labs will be allowed to utilize the 17ESV scope before completing the accreditation for a period of time. 
  • Prod ESV Server will be opened for Entropy Validation submissions.


Created October 11, 2016, Updated May 20, 2024