FIPS Module Specification

This is a draft document

Cryptographic Module Specification

A series of security libraries represent the cryptographic module which present the same application programmer interface (API) to client and server products utilizing NSS. The cryptographic module is defined to be a subset of the functions within these libraries that form the NSS distribution. The subset is below the top layer of functions normally called by application programs. The interface between the upper level functions forms the cryptographic boundary. The NSS FIPS 140-2 Cryptographic Module resides below this boundary. The diagram below shows the relationship of the layers.