相關主題
商品描述
This book provides a comprehensive, practice-driven guide to understanding and implementing secure cryptographic modules. It bridges newly published international standards--ISO/IEC 19790:2025 and ISO/IEC 24759:2025--with decades of hands-on validation experience from astec's globally respected testing laboratory. Designed to demystify cryptographic compliance, it serves developers, security professionals, researchers, and advanced-level students in computer science.
It explores the evolution and current practices of the Cryptographic Module Validation Program (CMVP), jointly managed by NIST and Canada's CCCS, highlighting its foundational role in securing global digital infrastructure. Topics include technical requirements, testing methodologies, real-world case studies, and future developments such as post-quantum cryptography and validation automation through NCCoE's ACMVP.
This book also highlights the collaborative ecosystem supporting cryptographic assurance--focusing on the CMUF, ICMC, and atsec's FIPS 'n' Chips bootcamp. These forums help shape standards, foster innovation, and strengthen community. By connecting theory with implementation and policy with practice, this book delivers actionable insights at a critical time for modern cryptography.
商品描述(中文翻譯)
本書提供一份全面且以實務為導向的指南，協助讀者理解並實作安全的密碼模組。內容將最新發布的國際標準——ISO/IEC 19790:2025 與 ISO/IEC 24759:2025——與 atsec 全球知名測試實驗室數十年的實務驗證經驗相結合。全書旨在釐清密碼學合規性的複雜概念，適合開發人員、資安專業人員、研究人員，以及資訊工程領域的進階學生閱讀。
本書探討 Cryptographic Module Validation Program（CMVP，密碼模組驗證計畫）的演進與現行實務。CMVP 由 NIST 與加拿大的 CCCS 共同管理，對於保護全球數位基礎架構扮演奠基性角色。內容涵蓋技術要求、測試方法、真實世界案例研究，以及後量子密碼學和透過 NCCoE 的 ACMVP 實現驗證自動化等未來發展。
本書也特別介紹支援密碼學保障的協作生態系，聚焦於 CMUF、ICMC，以及 atsec 的 FIPS 'n' Chips bootcamp。這些論壇有助於制定標準、促進創新並強化社群。透過連結理論與實作、政策與實務，本書在現代密碼學面臨關鍵轉型的時刻，提供可實際採用的深入見解。
作者簡介
Dr. Yi Mao is a CISSP and holds a Ph.D. in Mathematical Logic (2003) and a Master's degree in Computer Science (2000) from the University of Texas at Austin. Dr. Mao is the CEO at atsec U.S. Corporation. She runs the overall U.S. branch operation, coordinates with atsec sibling branches in Europe and Asia, and supervises IT product security testing and evaluation based on standards such as FIPS and Common Criteria (CC). She is an expert member of ISO/IEC JTC1/SC27, a former CMUF to ISO WG3 Liaison Officer, CMUF Steering Committee Member, and the ICMC Program Committee Chair.
作者簡介(中文翻譯)
Yi Mao 博士持有 CISSP 認證，並於 University of Texas at Austin 分別取得數理邏輯博士學位（2003 年）及 Computer Science 碩士學位（2000 年）。Mao 博士現任 atsec U.S. Corporation 執行長，負責美國分公司的整體營運，與 atsec 在歐洲及亞洲的姊妹分公司進行協調，並依據 FIPS、Common Criteria（CC）等標準，督導 IT 產品的安全性測試與評估工作。她是 ISO/IEC JTC1/SC27 的專家成員，曾任 CMUF 對 ISO WG3 的聯絡官、CMUF Steering Committee 委員，以及 ICMC Program Committee 主席。
