Also, there is additional testing of the DRBG entropy sources. The self tests can be run at appropriate times for your application startup. This helps with startup times as the public key self-testing can be time consuming. The pre-operational self-test is now faster, as all the algorithms are not tested until needed. Keeping FIPS 140-3 as a separate standard will still allow NIST to mandate additional requirements on top of what the ISO standard contains when needed.Īmong the changes for FIPS 140-3 are conditional algorithm self-tests, where the algorithm self-tests are only performed if used. FIPS 140-3 will now point back to ISO 19790 for security requirements. Federal Information Processing Standards (FIPS) 140-2 is a mandatory standard for the protection of sensitive or valuable data within Federal systems.įIPS 140-3 is an incremental advancement of FIPS 140-2, which now standardizes on the ISO 19790:2012 and ISO 24759:2017 specifications. Historically, ISO 19790 was based on FIPS 140-2, but has continued to advance since that time.
0 kommentar(er)
