[vc_row][vc_column][vc_column_text]The Cryptographic Module Validation Program (CMVP) is a part of the National Institute of Standards and Technology (NIST) which operates under the Department of Commerce.\u00a0 The CMVP’s role is to promote the use of validated cryptographic modules and provide Federal agencies with a security metric to use in procuring equipment containing validated cryptographic modules, this primarily occurs through management and oversight of the testing required as part of the FIPS 140-2<\/span><\/a>\u00a0\/\u00a0FIPS 140-3<\/span><\/a>\u00a0validation standards.<\/p>\n

The CMVP is currently experiencing longer than usual evaluation periods within the FIPS 140<\/span><\/a> programs. To rectify and hopefully assist in shortening those wait times, the CMVP is looking to automate processes and procedures related to the evaluation and testing of these cryptographic modules.<\/p>\n

To support this newly identified objective, the CMVP has developed a draft document<\/a><\/span> which outlines assumptions, challenges, current architectures, requirements, and guidance.\u00a0 The ultimate goal is to identify ideas and recommendations on how to automate some of the more tedious and manual elements of the FIPS 140<\/span><\/a> evaluation process.\u00a0 Specifically stating they hope to improve efficiencies and timelines within CMVP operations.<\/p>\n

Some of the current challenges outlined include:<\/p>\n

\n
• An increase in complex modules being evaluated<\/li>\n
• A lack of human resources to address the influx in evaluations<\/li>\n
• Insufficient information\/documentation submissions<\/li>\n
• Operating Environment Updates<\/li>\n<\/ul>\n

  This is not the first time the CMVP has turned to automation, as they recently implemented a change to the methods for testing algorithms within the Cryptographic Algorithm Validation Program (CAVP). Read more about that transition here<\/a><\/span>.<\/p>\n

  Although the effects of such an effort are not expected to make an impact in the near term, it is a positive sign that the CMVP is actively trying to improve things in the long run.[\/vc_column_text][vc_column_text]<\/p>\n

  \n

  Need Support?<\/strong><\/span><\/h5>\n

  Contact Corsec<\/a><\/span> to ask questions, discuss a project, or gain more insight on this post.<\/p>\n<\/div>\n

  [\/vc_column_text][vc_column_text]<\/p>\n

  ###<\/p>\n

  [\/vc_column_text][vc_separator color=”black”][\/vc_column][\/vc_row][vc_row][vc_column][vc_row_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

  Connect With Us:<\/a><\/strong><\/h5>\n

  Stay up to date with Corsec as we bring you all the most recent updates to the standards, certifications, and requirements \u2013\u00a0Subscribe<\/span><\/a>[\/vc_column_text][\/vc_column_inner][vc_column_inner width=”1\/2″][vc_column_text]<\/p>\n

  Press Contact:<\/strong><\/h5>\n

  Jake Nelson<\/a><\/span>
  \nCorsec Director of Marketing
  \njnelson@corsec.com[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_column_text]<\/p>\n

  \u00a0\u00a0\u00a0\u00a0\u00a0<\/a>\u00a0\u00a0\u00a0\u00a0\u00a0<\/a><\/a><\/div>\n

  [\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

  [vc_row][vc_column][vc_column_text]The Cryptographic Module Validation Program (CMVP) is a part of the National Institute of Standards and Technology (NIST) which operates under the Department of Commerce.\u00a0 The CMVP’s role is to promote the use of validated … <\/p>\n

  Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":18824,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,201,3,91],"tags":[195,82,87,200,114,143,4,94,136,39],"class_list":["post-18822","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fips-140-2","category-fips-140-3","category-news","category-security","tag-cavp","tag-certification-process","tag-industry-updates","tag-cmvp","tag-cybersecurity","tag-fips","tag-fips-140-2","tag-fips-140-3","tag-nist","tag-security-certifications","infinite-scroll-item","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","no-featured-image-padding"],"yoast_head":"\n