Federal Information Processing Standard (FIPS) 140-2, Security Requirements for Cryptographic Modules (original) (raw)

Publications

Documentation Topics

Date Published: May 25, 2001 (Change Notice 2, 12/3/2002)

Superseded By: FIPS 140-3
Supersedes: FIPS 140-2 (10/10/2001)

Planning Note (03/22/2019): Testing of cryptographic modules against FIPS 140-2 will end on September 22, 2021. See FIPS 140-3 Development for more details.

Author(s)

This Federal Information Processing Standard (140-2) specifies the security requirements that will be satisfied by a cryptographic module, providing four increasing, qualitative levels intended to cover a wide range of potential applications and environments. The areas covered, related to the secure design and implementation of a cryptographic module, include specification; ports and interfaces; roles, services, and authentication; finite state model; physical security; operational environment; cryptographic key management; electromagnetic interference/electromagnetic compatibility (EMI/EMC); self-tests; design assurance; and mitigation of other attacks.

Keywords

cryptographic module; FIPS 140-2; computer security; validation

Control Families

Identification and Authentication; System and Communications Protection; System and Information Integrity