Here is a collection of links to information about FIPS 140-2:

---

[A software engineer’s guide to encryption: How not to fail](http://techbeacon.com/software-engineers-guide-encryption-how-not-fail?es_p=2232765) (_written by Luther Martin of HPE_) provides a good overview of the importance of FIPS 140-2.

---

**The [FIPS 140-2 Publication](http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf) has some good introductory material.**

It is easy to get bogged down attempting to read start-to-finish. I suggest that you begin by quickly reading the following sections:

- Section 1 – Overview
- Section 1.1 – Security Level 1
- Section 3 – Functional Security Objectives

---

**The [CMVP landing page](https://csrc.nist.gov/projects/cryptographic-module-validation-program) addresses the following topics:**

- What is the purpose of the CMVP?
- What is the applicability of CMVP to the US government?
- Use of Unvalidated Cryptographic Modules by Federal Agencies and Departments

---

We are happy to be a resource to you. Please contact [mark@KeyPair.us](mailto:mark@KeyPair.us)

_[KeyPair Consulting](/content/site-root.html) – expert guidance to meet your FIPS 140-2 goals_