Algorithm & Entropy Validation
CAVP & ESV Testing
Expert testing support for cryptographic algorithm validation and entropy source validation—essential prerequisites for FIPS 140 certification.
Why CAVP and ESV Testing Matter
CAVP testing validates the approved cryptographic algorithms used within a FIPS 140-3 cryptographic module and is a prerequisite for module validation. When a module includes an applicable entropy source, that source must also meet NIST SP 800-90B requirements and may require Entropy Source Validation (ESV).
These processes use NIST’s automated validation systems and require coordination with an NVLAP-accredited cryptographic testing laboratory.
Successfully validated implementations receive official certificates and appear on NIST’s public validation lists, demonstrating compliance with federal cryptographic standards.
Understanding CAVP and ESV
Both validations are critical prerequisites for achieving FIPS 140 certification
CAVP
Cryptographic Algorithm Validation Program
NIST’s program for testing and validating FIPS-approved cryptographic algorithms including AES, SHA, RSA, ECDSA, and more.
Established in 1995, CAVP validates that cryptographic implementations correctly execute approved algorithms—a mandatory prerequisite for FIPS 140 certification.
ESV
Entropy Source Validation
NIST’s validation system for entropy sources that generate random data for cryptographic purposes, assessed using SP 800-90B standards.
Ensures cryptographic systems use properly vetted entropy sources, which are critical for generating strong encryption keys and maintaining security.
What Gets Validated
Comprehensive testing coverage for cryptographic algorithms
and entropy sources
Symmetric Cryptography
- AES
- GCM
- CMAC
Hash Functions
- SHA-2
- SHA-3
- SHAKE
- HMAC
Digital Signatures
- ECDSA
- RSA
Key Establishment / Derivation
- Applicable KAS and KDF Implementations
Post-Quantum Cryptography
- ML-KEM
- ML-DSA
- SLH-DSA
Random Bit Generation
- DRBG
- SP 800-90B Entropy Sources
- SP 800-90C RBG
The Testing Process
Automated validation through NIST's testing systems
Define Implementation Capabilities
Work with your accredited testing lab to document the algorithms, parameters, operating environments, and capabilities that require validation.
Generate Validation Tests
The accredited lab uses NIST's ACVTS or ESV Server to generate the applicable test cases.
Execute Tests & Return Results
Your implementation processes the test vectors and returns results through the validation system.
Automated Validation & Documentation
The system validates correctness and accredited labs submit supplementary documentation to NIST reviewers.
Receive Official Certificate
Successfully validated algorithm implementations and entropy sources receive NIST validation identifiers/certificates and appear in the applicable public validation databases.
How SafeLogic Can Help
Expert guidance and support throughout the validation process
CryptoComply cryptographic software includes CAVP-validated algorithm implementations, reducing the testing burden associated with starting from scratch
Leverage our existing validations and expertise to achieve compliance faster than starting from scratch
Expert assistance with preparing the technical documentation and test submissions required by NIST
Guidance on integrating validated algorithms and entropy sources into your cryptographic modules
SafeLogic has completed CAVP testing for NIST-standardized PQC algorithms, including ML-KEM, ML-DSA, and SLH-DSA
MaintainCert helps keep cryptographic software and FIPS validations current as algorithms, platforms, vulnerabilities, and NIST requirements evolve
Need Help with
CAVP Testing or ESV Validation?
Navigate algorithm testing, entropy validation, documentation, and accredited-lab coordination with SafeLogic’s cryptography experts.
