Security Requirements for Cryptographic Modules

Get BibTex-formatted data

Author

US Department of Commerce

Entry type

techreport

Abstract

The selective application of technological and related procedural safeguards is an important responsibility of ever Federal organization in providing adequate security in its computer and telecommunications systems. The publication provides a standard to be used by Federal organizations when these organizations specify that cryptographic based security systems are to be used to provide protection for sensitive or valuable data. Protection of a cryptographic module within a security system is necessary to maintain the confidentiality and integrity of the information protected by the module. This standard specifies the security requirements that are to be satisfied by a cryptographic module. The standard provides four increasing, qualitative levels of security intended to cover a wide range of potential applications and environments. the security requirements cover areas related to the secure design and implementation of a cryptographic module. These areas include basic design and documentation, module interfaces, authorized roles and services, physical security, software security, operating system security, key management, cryptographic algorithms, electromagnetic interference/electromagnetic compatibility (EMI/RMC), and self-testing. This revision supersedes FIPS 140 in its entirety.

Date

1994 – January – 11

Institution

US Department of Commerce

Key alpha

commerce

Number

FIPS PUB 140-1

Publication Date

0000-00-00

Coden

FIPPAT

Keywords

computer security, cryptographic modules, cryptography, Federal Information Processing Standard (FIPS), telecommunication security

Location

A hard-copy of this is in Haas

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Techreport{ commerce,
	title = "Security Requirements for Cryptographic Modules",
	author = "US Department of Commerce",
	year = "1994",
	month = "January",
	institution = "US Department of Commerce",
	number = "FIPS PUB 140-1",
	day = "11",
	abstract = "The selective application of technological and related procedural safeguards is an important responsibility of ever Federal organization in providing adequate security in its computer and telecommunications systems.  The publication provides a standard to be used by Federal organizations when these organizations specify that cryptographic based security systems are to be used to provide protection for sensitive or valuable data.  Protection of a cryptographic module within a security system is necessary to maintain the confidentiality and integrity of the information protected by the module.  This standard specifies the security requirements that are to be satisfied by a cryptographic module.  The standard provides four increasing, qualitative levels of security intended to cover a wide range of potential applications and environments.  the security requirements cover areas related to the secure design and implementation of a cryptographic module.  These areas include basic design and documentation, module interfaces, authorized roles and services, physical security, software security, operating system security, key management, cryptographic algorithms, electromagnetic interference/electromagnetic compatibility (EMI/RMC), and self-testing.  This revision supersedes FIPS 140 in its entirety.",
	coden = "FIPPAT",
	keywords = "computer security, cryptographic modules, cryptography, Federal Information Processing Standard (FIPS), telecommunication security",
}