The IT Law Wiki

Definition[]

A cryptographic module security policy is

a precise specification of the security rules under which a cryptographic module must operate, including the security rules derived from the requirements of this standard and the additional security rules imposed by the manufacturer.[1]

References[]

  1. NIST, FIPS 140-2, at 14.