Background NIST publishes cryptographic standards and specifications Agencies protecting unclassified data with cryptography need to use Approved algorithms Based on FIPS 140, FISMA, etc.. Exception: where no Approved algorithms exist, agencies can select any algorithm CMVP may impose additional constraints |