Designing to FIPS-140: A Guide for Engineers and Programmers - Image 1

£36.43

Apress Designing to FIPS-140: A Guide for Engineers and Programmers

Name: Designing to FIPS-140: A Guide for Engineers and Programmers
Brand: Apress
Price: 33.63 GBP
Availability: InStock

Security

Price History & Forecast

Last 17 days • 17 data points (No recent data available)

Historical

Generating forecast...

Price Distribution

Price distribution over 17 days • 3 price levels

Days at Price

Current Price

Price Analysis

Most common price: £33 (8 days, 47.1%)

Price range: £33 - £36

Price levels: 3 different prices over 17 days

Description

This book provides detailed and practical information for practitioners to understand why they should choose certification. It covers the pros and cons, and shows how to design to comply with the specifications (FIPS-140, SP800 documents, and related international specs such as AIS31, GM/T-0005-2021, etc.). It also covers how to perform compliance testing. By the end of the book, you will know how to interact with accredited certification labs and with related industry forums (CMUF, ICMC). In short, the book covers everything you need to know to make sound designs. There is a process for FIPS-140 (Federal Information Processing Standard) certification for cryptographic products sold to the US government. And there are parallel certifications in other countries, resulting in a non-trivial and complex process. A large market of companies has grown to help companies navigate the FIPS-140 certification process. And there are accredited certification labs you must contract toget the certification. Although this was once a fairly niche topic, it is no longer so. Other industries―banking, military, healthcare, air travel, and more―have adopted FIPS certification for cryptographic products. The demand for these services has grown exponentially. Still, the available skills pool has not grown. Many people are working on products with zero usable information on what to do to meet these standards and achieve certification or even understand if such certification applies to their products. What You Will Learn What is FIPS-140? What is the SP800 standard? What is certification? What does it look like? What is it suitable for? What is NIST? What does it do? What do accredited certification labs do? What do certification consultants do? Where and when is certification required? What do FIPS-140 modules look like? What are the sub-components of FIPS-140 modules (RNGs, PUFs, crypto functions)? How does certification work for them? What are the physical primitives (RNGs, PUFs, key stores) and how do you handle the additional complexity of certifying them under FIPS? What are the compliance algorithms (AES, SP800-90 algos, SHA, ECDSA, key agreement, etc.)? How do you design for certification (BIST, startup tests, secure boundaries, test access, zeroization, etc.)? How do you get CAVP certificates (cert houses, ACVTs)? How do you get CMVP certifications (cert houses, required documents, design information, security policy, etc.)? Who This Book Is For Hardware and software engineers or managers of engineering programs that include any form of cryptographic functionality, including silicon vendors, library vendors, OS vendors, and system integrators

Product Specifications

Brand: Apress
Format: paperback
ASIN: B0CNCZ1QDM
Category: Books > Subjects > Computing & Internet > Networking & Security > Security
Domain: Amazon UK
Release Date: 26 April 2024
Listed Since: 15 November 2023

Barcode

No barcode data available

Apress Designing to FIPS-140: A Guide for Engineers and Programmers

Price History & Forecast

Price Distribution

Price Analysis

Description

Product Specifications

Barcode

Similar Products You Might Like

Guide to Elliptic Curve Cryptography (Springer Professional Computing)

Embedded Cryptographic Hardware: Design and Security: Design & Security

Understanding and Applying Cryptography and Data Security

Social Networks Science: Design, Implementation, Security, and Challenges: From Social Networks Analysis to Social Networks Intelligence

Hardware Security and Trust: Design and Deployment of Integrated Circuits in a Threatened Environment

Discovering Cybersecurity: A Technical Introduction for the Absolute Beginner

Model-Implementation Fidelity in Cyber Physical System Design

Computer Security and the Internet: Tools and Jewels from Malware to Bitcoin (Information Security and Cryptography)

Understanding and Applying Cryptography and Data Security

Practical Cryptography in Python: Learning Correct Cryptography by Example

Cryptographic Engineering

Cryptography for Payment Professionals

Springer Advances in Cyber Security - Principles and Techniques

Foundations of Hardware IP Protection

Authentication and Access Control: Practical Cryptography Methods and Tools

Information Security Policies, Procedures, and Standards: A Practitioner's Reference

Guide to Elliptic Curve Cryptography (Springer Professional Computing)

Intelligent Computing, Communication and Devices: Proceedings of ICCD 2014, Volume 1: 308 (Advances in Intelligent Systems and Computing, 308)

Principles of High-Performance Processor Design: For High Performance Computing, Deep Neural Networks and Data Science

CISSP Exam Certification Companion: 1000+ Practice Questions and Expert Strategies for Passing the CISSP Exam (Certification Study Companion Series)

Security Engineering for Embedded and Cyber-Physical Systems (Advances in Cybersecurity Management)

Google Cloud Platform (GCP) Professional Cloud Security Engineer Certification Companion: Learn and Apply Security Design Concepts to Ace the Exam (Certification Study Companion Series)

Computer and Network Security Essentials

The CISO’s Transformation: Security Leadership in a High Threat Landscape