Which NIST IR includes the Crypto Module Validation Program and the Crypto Algorithm Validation Program?

• A. IR 7536
• B. IR 7358
• C. IR 7816
• D. IR 7581

Answer: (A)

The key idea is recognizing which NIST Interagency Report actually presents both cryptographic validation programs together. The document that lays out and explains how the Crypto Algorithm Validation Program (CAVP), which tests and validates algorithm implementations, and the Crypto Module Validation Program (CMVP), which tests entire cryptographic modules against FIPS 140-2/3, are run and coordinated is the one that covers both programs in one place. It describes the scope, roles of laboratories and vendors, and the validation processes for both aspects of cryptographic assurance. That's why this IR is the best choice: it explicitly documents how these two related validation programs operate under a single umbrella. The other reports focus on different topics and do not consolidate both programs in the same way.