thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Federal Information Processing Standard 140-3 (FIPS 140-3)

US/Canadian standard for validating cryptographic modules at four increasing security levels.

Definition

FIPS 140-3, aligned with ISO/IEC 19790, is administered through the NIST Cryptographic Module Validation Program (CMVP). Level 1 requires approved algorithms, Level 2 adds tamper evidence and role-based authentication, Level 3 adds tamper resistance and identity-based authentication, and Level 4 adds complete environmental protection. FIPS 140-2 certificates moved to the historical list in September 2026.

Example

A government agency requires HSMs validated at FIPS 140-3 Level 3 for its PKI.

Exam tip

Higher levels add physical protection; Level 3 is the common HSM requirement.

Related terms