NIST platform security: roots of trust, firmware and secure enclaves FIPS 140-2 → FIPS 140-3
Published 2019-03-22
Snapshot taken 2026-10-19 23:50 · fips-140 source
Snapshot taken 2026-10-19 23:50 · fips-140 source
+ 4 added: 3.1, 3.2, 3.3, 3.4
− 40 removed: 1.1, 1.2, 1.3, 1.4, 2.1, 2.2, 4, 4.1, 4.10, 4.10.1…
~ 3 revised: 1, 2, 3
Why this release, in the publisher's words
Planning Note (05/01/2019): See the FIPS 140-3 Transition project for the following information: FIPS 140-3 Transition Schedule Supporting SP 800-140x documents that modify requirements of ISO/IEC 19790:2012 and ISO/IEC 24759:2017
https://csrc.nist.gov/pubs/fips/140-3/finalAll · 471 INTRODUCTION · 11 OVERVIEW · 42 DOCUMENT BASIS · 12 GLOSSARY OF TERMS AND ACRONYMS · 23 APPLICABLE STANDARDS · 54 SECURITY REQUIREMENTS · 34
Controls added, removed or revised 47
| Control | Title | Change |
|---|---|---|
| 1 | INTRODUCTION | Control text, Title |
| 1.1 | Security Level 1 | removed |
| 1.2 | Security Level 2 | removed |
| 1.3 | Security Level 3 | removed |
| 1.4 | Security Level 4 | removed |
| 2 | DOCUMENT BASIS | Control text, Title |
| 2.1 | Glossary of Terms | removed |
| 2.2 | Acronyms | removed |
| 3 | APPLICABLE STANDARDS | Control text, Title |
| 3.1 | Normative References | added |
| 3.2 | International standards | added |
| 3.3 | Documents Modifying ISO/IEC 19790:2012(E) | added |
| 3.4 | Documents Modifying ISO/IEC 24759:2017(E) | added |
| 4 | SECURITY REQUIREMENTS | removed |
| 4.1 | Cryptographic Module Specification | removed |
| 4.10 | Design Assurance | removed |
| 4.10.1 | Configuration Management | removed |
| 4.10.2 | Delivery and Operation | removed |
| 4.10.3 | Development | removed |
| 4.10.4 | Guidance Documents | removed |
| 4.2 | Cryptographic Module Ports and Interfaces | removed |
| 4.3 | Roles, Services, and Authentication | removed |
| 4.3.1 | Roles | removed |
| 4.3.2 | Services | removed |
| 4.3.3 | Operator Authentication | removed |
| 4.4 | Finite State Model | removed |
| 4.5 | Physical Security | removed |
| 4.5.1 | General Physical Security Requirements | removed |
| 4.5.2 | Single-Chip Cryptographic Modules | removed |
| 4.5.3 | Multiple-Chip Embedded Cryptographic Modules | removed |
| 4.5.4 | Multiple-Chip Standalone Cryptographic Modules | removed |
| 4.5.5 | Environmental Failure Protection/Testing | removed |
| 4.5.5.1 | Environmental Failure Protection Features (Alternative 1) | removed |
| 4.5.5.2 | Environmental Failure Testing Procedures (Alternative 2) | removed |
| 4.6 | Operational Environment | removed |
| 4.6.1 | Operating System Requirements | removed |
| 4.7 | Cryptographic Key Management | removed |
| 4.7.1 | Random Number Generators (RNGs) | removed |
| 4.7.2 | Key Generation | removed |
| 4.7.3 | Key Establishment | removed |
| 4.7.4 | Key Entry and Output | removed |
| 4.7.5 | Key Storage | removed |
| 4.7.6 | Key Zeroization | removed |
| 4.8 | Electromagnetic Interference/Electromagnetic Compatibility (EMI/EMC) | removed |
| 4.9 | Self-Tests | removed |
| 4.9.1 | Power-Up Tests | removed |
| 4.9.2 | Conditional Tests | removed |
Read every requirement in this version · All versions of NIST platform security: roots of trust, firmware and secure enclaves