home/glossary/Cryptographic Module Validation Program

Cryptographic Module Validation Program

nouncandidate·updated May 9, 2026

Validates cryptographic modules to Federal Information Processing Standard (FIPS) 140-2 and other cryptography-based standards. The CMVP is a joint effort between National Institute of Standards and Technology (NIST) and the Communications Security Establishment (CSE) of the government of Canada. Products validated as conforming to FIPS 140-2 are accepted by the federal agencies of both countries for the protection of sensitive information (United States) or Designated Information (Canada). The goal of the CMVP is to promote the use of validated cryptographic modules and provide federal agencies with a security metric to use in procuring equipment containing validated cryptographic modules.

MWE

Classifications

Entity Type

Capability85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Sensitivity

Regulated90%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Information Class

Cui70%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Variants

acronym
CMVP
plural
Cryptographic Module Validation Programs
possessive
Cryptographic Module Validation Program's
pluralpossessive
Cryptographic Module Validation Programs'