Making Sense of the FIPS 140 Validation Review Queue (C30a)
Vendors are required to submit their cryptographic module implementations to the Cryptographic Module Validation Program (CMVP) for validation and qualification of their products or cloud services for deployment within the US and Canadian governments. Over the past five years, the FIPS 140 validation queue has experienced exponential growth. This presentation examines the series of events contributing to this backlog and proposes interim solutions to alleviate the issue until a long-term resolution is identified.