Which standard defines Security requirements for cryptographic modules?

• A. FIPS 140-2
• B. FIPS 180-2
• C. FIPS 181
• D. FIPS 186-2

Answer: (A)

FIPS 140-2 specifies the security requirements for cryptographic modules, outlining how these modules must be designed, implemented, and validated to protect sensitive information. It covers aspects such as physical security, access control, key management, operational environment, authentication, and integrity, and it defines multiple security levels to match different risk environments. This makes it the standard that governs how a cryptographic module is evaluated and trusted for use.

The other standards focus on specific cryptographic functions rather than overall module security: the hashing standard defines how hash functions operate, the digital signature standard covers signatures, and the glossary serves as a terminology reference rather than a security requirement framework.