Cryptographic Module Validation Program

The Cryptographic Module Validation Program (CMVP)' is an Information Technology (IT) security accreditation program for cryptographic modules produced by private sector vendors or open source communities who seek to have their products certified for use in government departments and regulated industries (such as financial and health-care institutions) that collect, store, transfer, share and disseminate "sensitive, but not classfied" information. Product certifications under the CMVP are performed in accordance with the requirements of Federal Information Processing Standard Publication 140-2 (FIPS PUBS 140-2 [1]) "Requirements for Cryptographic Modules" (2001).

The CMVP [2] was established by the US National Institute of Standards and Technology and the Communications Security Establishment of the Government of Canada in July 1995.