Rosenberry Associates Inc. - The Information Design Company

FIPS Documentation Development

RAI provides expert development of FIPS 140-2 required documents including:

Security Policy - This is the most important document that defines a cryptographic module according to the FIPS standard. This document is forwarded to NIST along with the NVLAP laboratory's Final Evaluation Report.

Finite State Machine - A supporting document required by a NVLAP laboratory that shows all operational and error states of a cryptographic module, and specifies all state transitions.

Design Assurance - Supporting documentation required by a NVLAP laboratory including configuration management, development correspondence, delivery and operation, and operator guidance.

Vendor Evidence - Every cryptographic module must provide complete vendor evidence documentation that specifies how the module or documentation fulfills each FIPS requirement.

Typical FIPS Evaluation Timeline


RAI || FIPS 140-2 || COMMON CRITERIA || RESOURCES || ABOUT RAI || CONTACT

© 2005 Rosenberry Associates Inc. All rights reserved.

Rosenberry Associates Inc. - The Information Design Company