Study. uk . com
  1. Home
  2. All questions
  3. Question 232

CISSP study material · question 232 of 500

A module implements a proprietary cipher the vendor considers stronger than any published one. May a FIPS 140-3 conformant module use it?

  1. Yes, provided the proprietary cipher is used only for key wrapping.
  2. Yes, provided an accredited laboratory reviews the design.
  3. No, unless the module is validated at Level 1, where the restriction does not apply.
  4. No: only approved security functions may be used, drawn from a FIPS or from the SP 800-140C and 800-140D lists.
Show the answer

Answer: D. No: only approved security functions may be used, drawn from a FIPS or from the SP 800-140C and 800-140D lists.

A conformant module must employ approved security functions: those specified in a FIPS, adopted in a FIPS, listed in SP 800-140C, or given as parameter establishment methods in SP 800-140D.

Source: NIST FIPS 140-3 (NIST) — FIPS 140-3 > 10. Approved Security Functions

Challenge yourself on this topic → Study as cards