FIPS 140-3 Adopts ISO/IEC Standards

Schaffer, Kim

ITL Bulletin

FIPS 140-3 Adopts ISO/IEC Standards

Documentation Topics

Date Published: May 2019

Editor(s)

Kim Schaffer (NIST)

Abstract

This bulletin summarizes the information found in FIPS 140-3: Security Requirements for Cryptographic Modules which is applicable to all federal agencies that use cryptographic-based security systems to provide adequate information security for all agency operations and assets as defined in 15 U.S.C. Section 278g-3. The updated standard specifies requirements for cryptographic modules within cyber systems protecting sensitive information. The most notable change in this version of the standard is the use of ISO/IEC standards, ISO/IEC 19790:2012 and associated testing standard ISO/IEC 24759:2017.

Keywords

cryptographic modules; Federal Information Processing Standard (FIPS); ISO/IEC 19790; ISO/IEC 24759; computer security; FIPS 140-3

Control Families

None selected

Documentation

Publication:
Download (pdf)

Supplemental Material:
None available

Related NIST Publications:
FIPS 140-3

Document History:
05/20/19: ITL Bulletin (Final)

Topics

Security and Privacy

cryptography, testing & validation

Laws and Regulations

E-Government Act, Federal Information Security Modernization Act