FIPS 140-2 Cryptographic Module Validation Program

 As an NVLAP designated Lab (200697-0), ICSA Labs can test cryptographic modules to ensure they meet the FIPS 140-2 requirements for cryptographic module validation. Please see the ICSA Labs CST FIPS 140-2 Info Sheet.

 A vendor needs to thoroughly review all of the cryptographic references which relate to their cryptographic module, select Related Links to the left and then look at CMVP for FIPS 140-2 information and CAVP for algorithm specifics.  While reviewing these references, the vendor should determine which security level they want their cryptographic module to achieve. The vendor should also start preparing the necessary documentation and evidence relating to their cryptographic module.

 When all of the documentation is prepared, the vendor is ready for testing to start on their cryptographic module. ICSA Labs has designed the ICSA Labs CST Vendor Worksheet to aid the vendor in taking the cryptographic module from the unvalidated state into the testing process, and achieve CMVP or CAVP validation.
 
To schedule testing, or to discuss the certification process with a validation expert, please email us or call:

Harry Brittain, Senior Account Executive - 717.790.8111
Dick Buehler, Senior Account Executive - 717.790.8112
Mike Haas, Vendor Services Account Executive - 717.790.8161
Steve Ratcliffe, CST Lab Manager - 717.790.8127