Whykeykeysoft

KCMVP Consulting

Expert consulting services for obtaining National Cryptographic Module Verification Program certification.

KCMVP

What is a National Cryptographic Module?

KCMVP (Korean Cryptographic Module Validation Program) is a national program that validates the security and implementation suitability of cryptographic modules. All cryptographic products supplied to public institutions must obtain KCMVP certification.

WhyKeyKeySoft WhyKeyKeySoft, based on a team of cryptography experts, has conducted numerous KCMVP certification consulting projects. We provide comprehensive and continuous consulting tailored to each demand organization's situation, from application preparation to certification acquisition.

📋

Proven Track Record

Consulting Experience

🔬

Crypto Experts

Dedicated Team

KCMVP Verification Process

An overview of the entire KCMVP verification flow.

KCMVP Verification Process

Consulting Items

Since preparation varies based on practitioner experience and capability, items are confirmed after an initial meeting.

1Comprehensive training on the cryptographic module verification process for practitioners
2Specialized cryptographic algorithm training for developers
3Consulting on cryptographic module development methods
4Support for initial verification tests and re-verification tests
5Consulting optimized for recently strengthened evaluation standards

Consulting Process

01

Pre-diagnosis

Analysis of current cryptographic modules and assessment against KCMVP requirements

02

Gap Analysis

Analysis of differences between technical requirements and current modules, with identification of areas to supplement

03

Improvement Planning

Establishment of certification acquisition roadmap and technical improvement plan

04

Implementation Support

Technical implementation and code review to satisfy KCMVP requirements

05

Test Preparation

Preparation of documents for test agency submission and test response support

06

Certification

Support for passing evaluation at accredited test agencies such as NSR; continuous support for re-verification

Algorithms Subject to Validation

CategoryAlgorithm
Block CipherSEED, ARIA, LEA, HIGHT
Modes of OperationECB, CBC, CFB, OFB, CTR, CCM, GCM
Hash FunctionSHA-2, SHA-3, LSH
Message AuthenticationHMAC, CMAC, GMAC
RNGHash_DRBG, HMAC_DRBG, CTR_DRBG
Public Key EncryptionRSAES
Digital SignatureRSA-PSS, KCDSA, EC-KCDSA, ECDSA
Key AgreementDH, ECDH
Key DerivationKBKDF, PBKDF

Supported Environments & Post-Management

We provide consulting across various languages and environments. Continued support is provided when re-validation is needed — including certification renewal, algorithm additions, and bug fixes.

LanguagesC / C++ / Java
OSWindows · Linux · Unix · macOS · Android · iOS
OthersFirmware

KCMVP Test Agencies

The following agencies conduct KCMVP cryptographic module verification tests.