Cryptographic Module Validation Program

The Cryptographic Module Validation Program (CMVP) is an Information Technology (IT) security accreditation program for cryptographic modules produced by private sector vendors or open source communities who seek to have their products certified for use by the U.S. government and regulated industries (such as financial and health-care institutions) that collect, store, transfer, share and disseminate "sensitive, but not classfied" information. Product certifications under the CMVP are performed in accordance with the requirements of FIPS 140-2.

The CMVP was established by the US National Institute of Standards and Technology (NIST) and the Communications Security Establishment (CSE) of the Government of Canada in July 1995.

External References

• NIST FIPS 140-2
• NIST CMVP