FIPS Module Specification

This is a draft document

Cryptographic Module Specification

The cryptographic module is defined to be a subset of the functions within the libraries that form the NSS distribution. The subset is below the top layer of functions normally called by application programs. The interface between the upper level functions forms the cryptographic boundary. The NSS FIPS 140-2 Cryptographic Module resides below this boundary. The diagram below shows the relationship of the layers.