atsec information security completes the CMVP testing for two ZTE modules2011-08-15
Beijing, China – atsec information security is pleased to announce that it worked with ZTE CORPORATION (branded as “ZTE”) to validate two cryptographic modules, UPCL (Unified Platform Cryptographic Library,) and UEPCM (UEP Cryptographic Module), under the FIPS 140-2 standard at the Cryptographic Module Validation Program (CMVP), a joint program between the National Institute for Standards and Technology (NIST), USA and the Communication Security Establishment Canada (CSEC). ZTE is the first vendor from P.R.China to successfully validate modules according to the FIPS 140-2 standard under the CMVP.
The successful validation results are published on the CMVP official website (certificates #1586 & #1589). The certificates along with the security policies for each module and relevant vendor information can be found there.
Apostol Vassilev, CST laboratory manager for atsec, commented: “The validation of cryptographic modules under the FIPS 140-2 standard is increasingly important in many industry and government sectors, not just in the United States and Canada, but in many countries around the world. We applaud ZTE’s commitment to providing security assurance for their products through testing and validation under open and rigorous international standards such as FIPS 140-2.”
“ZTE believes that meeting international standards is key to delivering the most secure and reliable solutions demanded by customers”, said Lixin Cheng, CEO, ZTE USA. “Earning the FIPS 140-2 standard certification further demonstrates the work we are doing to ensure that our R&D strategy reflects the importance of these standards to instilling customer confidence in our products’ quality and reliability.”
The Federal Information Processing Standard 140-2 (FIPS 140-2) describes the U.S. and Canada Federal Governments’ requirements for IT products in sensitive, but unclassified use. FIPS 140-2 is published by the CMVP at NIST and CSEC. The compliance to the standard is mandatory for cryptographic products used by the Federal Agencies in the U.S. and Canada.
About atsec information security
atsec information security (www.atsec.com) is an independent, standards-based information technology security services company that combines a business-oriented approach to information security with in-depth technical knowledge and global experience. atsec was founded in Munich, Germany in 2000 and has extensive international operations with offices in the U.S., Germany, Sweden, and China. atsec's services include formal laboratory testing and evaluation, independent testing and evaluation, as well as information security consultancy.
atsec offers cryptographic module and algorithm testing under the Cryptographic Module Validation Program of the National Institute of Standards and Technology (NIST) in the U.S. and Communications Security Establishment Canada (CSEC) in Canada. atsec also offers formal testing under the NIST's PIV Program (NPIVP), Cryptographic Algorithm Validation Program (CAVP), Security Content Automation Protocol Program (SCAP), and product approval testing under the GSA FIPS 201 EP.
atsec works with leading global companies such as IBM, Apple, Hewlett-Packard, Red Hat, Wind River, SUSE and ZTE Corporation.
ZTE is a publicly-listed global provider of telecommunications equipment and network solutions with the most comprehensive product range covering virtually every sector of the wireline, wireless, service and terminals markets. The company delivers innovative, custom-made products and services to over 500 operators in more than 140 countries, helping them to meet the changing needs of their customers while achieving continued revenue growth. ZTE’s 2010 revenue led the industry with a 21% increase to USD10.609 billion. ZTE commits 10 percent of its revenue to research and development and takes a leading role in a wide range of international bodies developing emerging telecoms standards. A company with sound corporate social responsibility (CSR) initiatives, ZTE is a member of the UN Global Compact. ZTE is China’s only listed telecom manufacturer, publicly traded on both the Hong Kong and Shenzhen Stock Exchanges (H share stock code: 0763.HK / A share stock code: 000063.SZ). For more information, please visit www.zte.com.cn.