Validation scope

Short definition

The elements and conditions actually examined in a validation. In NIST’s CMVP, the certificate identifies the cryptographic module, its version and, where applicable, its operating environment. The security policy describes functions and conditions of use. Embedding the module in another product does not automatically validate that whole product or establish that it uses the module correctly. The reach of a security assurance therefore needs checking against its validation documents.