日時: 平成23年5月27日(金)15時 30分 - 17時 00分

      場所: 場 所 情報科学研究科 5階 コラボレーションルーム7

      講演者氏名:Randall J.Easter
        講演者所属機関・部局・役職名:Director of the NIST Cryptographic Module Validation Program, USA

      講演題目:「NIST Cryptographic Validation Programs」

      The Computer Security Division as the National Institute of Standards and Technology conducts research, development and outreach necessary to provide standards and guidelines, mechanisms, tools, metrics and practices to protect our nation's information and information systems.The Cryptographic Algorithm Validation Program (CAVP) and the Cryptographic Module Validation Program (CMVP) were developed by NIST to support the needs of the user community for strong, independently tested and commercially available cryptographic algorithms and modules. Through these programs, NIST works with the commercial sector and the cryptographic community to achieve security, interoperability, and assurance of correct implementation. The goal of these programs is to promote the use of validated algorithms, modules and products which provides federal agencies with a security metric to use in procuring cryptographic modules. The testing performed by accredited laboratories and the validation performed by these two programs provides this metric. Federal agencies, industry, and the public can choose cryptographic modules and/or products containing cryptographic modules from the CMVP Validated Modules List and have confidence in the claimed level of security and assurance of correct implementation.Cryptographic algorithm and cryptographic module testing and validation are based on underlying published standards and guidance that is developed within the Computer Security Division in collaboration with many other organizations. As Federal agencies are required to use validated cryptographic modules for the protection of sensitive non-classified information, the validated modules and the validated algorithms they contain represent the culmination and delivery of the division's cryptography based work to the end user.



[戻る]