How does CC evaluation fit with FIPS 140 validation?
top) So far, Entrust software cryptographic modules have achieved 21 successful validatioms against the FIPS 140-1 or FIPS 140-2 standards. These validations provide Entrust users with third-party confirmation that the cryptographic services delivered by Entrust products (e.g., encryption/decryption, digital signature creation/verification, hashing, key generation/zeroization, etc.) are secure. The Common Criteria Evaluation is a natural extension to the FIPS 140 process. The successful CC evaluation of these products provides third-party confirmation that these products have met the specified Common Criteria EAL 3 and/or EAL 4 augmented requirements. The CC assurance requirements themselves impose specific FIPS 140-2 level requirements for cryptographic modules within the evaluated product.
