[Cscwg-public] Small typo

Tomas Gustavsson tomas.gustavsson at primekey.com
Wed Mar 31 08:17:04 UTC 2021


On 2021-03-31 09:47, Dimitris Zacharopoulos (HARICA) wrote:
> 
> 
> On 31/3/2021 10:12 π.μ., Tomas Gustavsson via Cscwg-public wrote:
>>
>> How about 140-3 then? 140-3 certifications have started we should 
>> expect crypto modules with 140-3 appear soonish.
>>
> 
> I am sure any auditor would consider 140-3 as "equivalent" or better 
> than 140-2 but it's better to be explicit.
> 
> Does FIPS keep a structure of levels (2, 3, 4) for the 140-3 
> certifications as they had for the 140-2? If so, the text could be:

Yes, my reading of 140-3 understands that it have the same levels.

> 
> "A hardware crypto module with a unit design form factor certified as 
> conforming to at least FIPS 140-2 Level 2, FIPS 140-3 Level 2, Common 
> Criteria EAL 4+, or equivalent. "
> 
> Dimitris.
>>
>> On 2021-03-31 08:32, Adriano Santoni via Cscwg-public wrote:
>>> All,
>>>
>>> I think I spotted a small typo in the current CSBR.
>>>
>>> Section 16.3 item 2 reads:
>>>
>>> "A hardware crypto module with a unit design form factor certified as 
>>> conforming to at least FIPS 140 Level 2, Common Criteria EAL 4+, or 
>>> equivalent. "
>>>
>>> That should probably have been:
>>>
>>> "A hardware crypto module with a unit design form factor certified as 
>>> conforming to at least FIPS 140*-2* Level 2, Common Criteria EAL 4+, 
>>> or equivalent. "
>>>
>>> Adriano
>>>
>>>
>>>
>>> _______________________________________________
>>> Cscwg-public mailing list
>>> Cscwg-public at cabforum.org
>>> https://lists.cabforum.org/mailman/listinfo/cscwg-public
>>>
>> _______________________________________________
>> Cscwg-public mailing list
>> Cscwg-public at cabforum.org
>> https://lists.cabforum.org/mailman/listinfo/cscwg-public
> 


More information about the Cscwg-public mailing list