Automating the CMVP: The Present and Future of SP 800-140B Revision 1 and Webcryptik (C20c)
The transition to FIPS 140-3 introduced significant challenges and concerns as the program incorporated additional changes. These changes led to an extended validation timeline of nearly two years. To address these issues, the CMVP initiated a new procedure to automate and streamline validation with the goal of clearing the queue by the end of 2025. This talk explores SP 800-140B Revision 1 requirements, their implementation in the Webcryptik reporting tool, and upcoming automation changes.