FIPS-140-3

NIST crypto module standard replacing FIPS 140-2.

Definition

FIPS 140-3 defines 4 levels: Level 1 (software-only baseline), Level 2 (tamper-evidence), Level 3 (tamper-resistance), Level 4 (tamper-detection + zeroisation). NIST CMVP handles validation. End of FIPS 140-2 submissions 1 April 2022 ; coexistence until 21 September 2026.

Origin

NIST FIPS 140-3 published 22 March 2019, effective 22 September 2019.

Example in context

A Thales Luna 7 HSM obtains FIPS 140-3 Level 3 validation in 2024 for US government sales.

Related terms

• CC EAL — international standard.