140-3 for a 140-2 Module; Some Gotchas (C20c)
This talk is primarily for vendors with existing FIPS 140-2 modules highlighting some of the subtler changes between the standards that could still force a change in module design before achieving 140-3 validation (e.g. zeroization of temporary SSPs; test algorithms used in integrity test prior to using in the integrity test, etc.). Changes that would be to documentation only are outside the scope of the talk; as the intent is to allow vendors a head-start on updating the module design.