Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759

Calis, Alexander

doi:https://doi.org/10.6028/NIST.SP.800-140Dr2

NIST SP 800-140D Rev. 2

Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759

Documentation Topics

Date Published: July 2023

Supersedes: SP 800-140D Rev. 1 (05/20/2022)

Author(s)

Alexander Calis (NIST)

Abstract

The approved sensitive security parameter generation and establishment methods listed in this publication replace the ones listed in International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 19790 Annex D and ISO/IEC 24759 paragraph 6.16, within the context of the Cryptographic Module Validation Program (CMVP). As a validation authority, the CMVP may supersede Annex D in its entirety. This document also supersedes SP 800-140Dr1.

Keywords

Cryptographic Module Validation Program; CMVP; FIPS 140 testing; FIPS 140-3; ISO/IEC 19790; ISO/IEC 24759; sensitive security parameter establishment methods; sensitive security parameter generation; testing requirement; vendor evidence; vendor documentation

Control Families

None selected

Documentation

Publication:
https://doi.org/10.6028/NIST.SP.800-140Dr2
Download URL

Supplemental Material:
SP 800-140D: Approved SSP Generation and Establishment Methods

Publication Parts:
SP 800-140
SP 800-140A
SP 800-140B Rev. 1
SP 800-140C Rev. 2
SP 800-140E
SP 800-140F

Document History:
07/25/23: SP 800-140D Rev. 2 (Final)

Topics

Security and Privacy

cryptography, testing & validation