FIPS 140 Demystified: An Introductory Guide for Vendors

Description

We all transmit and store sensitive and confidential electronic data in our everyday lives. Consumers send their credit card numbers across the Internet to make online purchases. Corporations store financial and medical information. This data must be protected and encryption (or cryptographic technologies) is the last line of defense against unauthorized access to this precious information. The Federal Information Processing Standard 140 (FIPS 140) is an internationally-recognized standard for assessing and validating that the cryptographic technologies used in our computer systems and networks are secure. The FIPS 140 validation process can be confusing and mystifying to the uninitiated. FIPS 140 Demystified: An Introductory Guide for Developers is the first book to unravel the complexities and intricacies of this product testing process. In this book, the reader will learn: • What the FIPS 140 standards cover • How much the testing process costs in terms of hours and money • Who needs to be involved in the process • What practices help ensure a successful validation • How examples demonstrate real-world situations and solutions • What the issues are with FIPS 140 • What the future holds for FIPS 140 Leveraging the experience of many FIPS 140 validation projects, the authors have gathered valuable lessons learned to produce this book. It removes the clouds of uncertainty about the validation process and shines a light on the best practices to follow on the path toward success. FIPS 140 Demystified: An Introductory Guide for Developers is an essential tool to help product developers understand the complex FIPS 140 security requirements and how to complete a successful validation project.