Tuesday, June 28, 2022

Technology Collaborators Announced for CMVP Project

NIST

View As Web Page

Header

National Cybersecurity Center of Excellence

NCCoE Automates the NIST Cryptographic Module Validation Program

Every organization relies on cryptography to protect its data, communications, and other cyber resources. NIST's Cryptographic Module Validation Program (CMVP) establishes standards to promote the use of validated cryptographic modules and provide Federal agencies and regulated industries with a security metric to use in procuring equipment containing validated cryptographic modules. Unfortunately, today the validation review is largely manual, causing significant delays in making new CMVP-validated software, updates, and patches available.

The National Cybersecurity Center of Excellence (NCCoE) aims to change that. The NCCoE launched the Automation of the NIST CMVP project to automate review processes that are being done manually and to streamline how testing and validation results are communicated to NIST. All combined, these steps will empower organizations to install, patch, and upgrade software swiftly using tested modules that meet NIST's validation requirements.

Meet the Team

The NCCoE has selected the following group of technology collaborators to join the CMVP project team:

  • Acumen
  • AEGISOLVE 
  • atsec
  • AWS
  • Cisco
  • Galois
  • Microsoft
  • NXP Semiconductors
  • SUSE

These organizations responded to a Federal Register notice and submitted their capabilities for consideration. The accepted collaborators were extended a Cooperative Research and Development Agreement (CRADA), enabling them to take part in the consortium. As the project progresses, they will contribute expertise and hardware or software to help demonstrate ways to modernize and automate manual review processes.

The results of this demonstration project will inform the operational integration and deployment of automation in the NIST CMVP.

Stay Connected

To receive news and updates about our progress, please join the Applied Cryptography Community of Interest. Learn more about this project by visiting the CMVP project page. And follow us on Twitter: @NISTcyber.

Learn More

NIST Cybersecurity and Privacy Program
Questions/Comments about this notice: applied-crypto-visibility@nist.gov
NCCoE Website questions: nccoe@nist.gov


If you have questions or problems with the subscription service, please contact subscriberhelp.govdelivery.com.
Technical questions? Contact inquiries@nist.gov. (301) 975-NIST (6478).

This service is provided to you at no charge by National Institute of Standards and Technology (NIST). 100 Bureau Drive, Stop 1070 · Gaithersburg, MD 20899 · 301-975-6478

GovDelivery logo

No comments:

Post a Comment

Here's something you should know about fat loss:

You don't 𝑛𝑒𝑒𝑑 to go 'low-carb' in order to lose fat. ͏     ­͏     ­͏     ­͏     ­͏     ­͏     ­͏     ­͏     ­͏     ­͏...