RNG90

As part of the FIPS 140-3 certification process, the SP800-90B entropy validation will now be done using the Entropy Source Validation Test Server (ESVTS). These tools remain as part of the overall Cryptographic Module Validation Program (CMVP). A provider of the Entropy Source will still need to work with a NIST accredited cryptographic security laboratory to achieve certification. Once an entropy source has been validated it will now be allowed to be used by end systems without each end system having to recertify the entropy source. This will help to reduce the certification time of a system and improve the overall time to market.

Our new cost-efficient, ready-to-use, standalone random number generator IC device meets the design principles and requirements for entropy sources used by random-bit generators with CMVP “ESV” certification of the entropy source and “ACVTS” certification of the HashDRBG function. A validated entropy source is not module specific and end users can more efficiently complete their FIPS module evaluation by referring to the pre-certification elements of the RNG90 device.

The FIPS certification process take about about 2 years wherein 8-11 months are consumed by the 3rd party laboratory for action items such as documentation review, data review, report creation, report submission, wait time in queue for approval, answer question from FIPS. The usage of the RNG90 will reduce the process by 1-2 months accelerating the evaluation phase.