What is FIPS certification?

• Computer Security Division at NIST maintains cryptographic standards such as FIPS, and coordinates Cryptographic Module Validation (CMV) Program for testing for cryptographic modules and algorithms.
• Security requirements cover 11 areas related to the design and implementation of a cryptographic module (FIPS PUB 140-2, Security Requirements for Cryptographic Modules (PDF file, KB)).
• Cryptographic module receives a security level rating (1-4, from lowest to highest).
• ITSEC and Common Criteria certification increasingly accepted as internationalization" of FIPS 140-2 program.

Where is FIPS certification required?

• FIPS standard is requirement for all US federal agencies that use cryptographic-based security systems to protect information in computer and telecommunication systems
• Also important to Canadian Government and many NATO-country governments in Europe