NSA-approved products incorporating only UNCLASSIFIED components and UNCLASSIFIED cryptographic algorithms. This includes COTS products approved by NSA, but does not include Commercial Solutions for Classified (CSfC) or their components, unless an individual component has been approved as a CHVP. Unkeyed CHVPs are not classified or designated as Controlled Cryptographic Items (CCI).
Sources:
CNSSI 4009-2015
from
CNSSI 4031