About FIPS 140-2

The Federal Information Processing Standards Publication (FIPS) 140-2, “Security Requirements for Cryptographic Modules,” was issued by the National Institute of Standards and Technology (NIST) in May, 2001. The standard specifies the security requirements for cryptographic modules utilized within a security system that protects sensitive, but unclassified information. FIPS 140-2 is one of the standards adopted by the governments of the U.S. and Canada to promote the use of validated cryptographic modules and provide Federal agencies with a security metric to use in procuring equipment that complies with the standard and contains validated cryptographic modules.

SA supports FIPS 140-2 by using FIPS-compliant cryptographic modules.