Related industry documentation

FIPS PUB 140-2

Information Processing Standards (FIPS) document published by the Information Technology Laboratory of the National Institute of Standards and Technology (NIST). Issued May 25, 2001.

http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf

OpenSSL Cryptographic Module

The FIPS 140-2 Non-Proprietary Security Policy Level 1 and 2 Validation for the OpenSSL Cryptographic Module version 0.9.8j, published by OpenSSL.org.

http://www.openssl.org/docs/fips/fipsvalidation.html

http://www.openssl.org/docs/fips/UserGuide-2.0.pdf

Approved Cryptographic Modules

A list of all cryptographic modules approved by NIST.

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140valall.htm

PKCS #11

A description of the Public Key Cryptographic Standards (PKCS) #11. Describes the cryptographic token interface API, which allows device independence and resource sharing among multiple applications that access multiple devices.

http://www.rsa.com/rsalabs/node.asp?id=2133

Transport Layer Protocol (TLS)

An overview of Transport Layer Protocol (TLS), the next generation of Secure Sockets Layer, (SSL).

http://en.wikipedia.org/wiki/Transport_Layer_Security

Notes about how and why TLS is implemented:

Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations published by NIST in 2005:

http://csrc.nist.gov/publications/nistpubs/800-52/SP800-52.pdf

Internet Engineering Task Force (IETF)

An overview of the IETF, the organization that developed of the TLS protocol, which promotes Internet standards recognized by the World Wide Web Consortium (W3C), International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC):

http://en.wikipedia.org/wiki/IETF

The IETF web site:

http://www.ietf.org/