TW
Tricia Wolff
— On the schedule —
The Case for Binding and Embedding – Many Modules One Validation
FIPS 140-3 supports the binding and embedding of hardware and software cryptographic modules within a single Tested Operational Environment Physical Perimeter (TOEPP). This streamlined approach provides many validation efficiencies; however, presents complex design and validation challenges. This session provides a practical framework for justifying module boundaries and documenting trust domains when discrete or embedded modules coexist. Attendees will learn how to manage shared resources, coordinate self-tests, and effectively handle failures across multiple modules within a single environment. The presentation includes actionable strategies for preparing robust evidence packages for CMVP submissions. Ultimately, participants will gain the expertise needed to maintain ongoing cryptographic compliance for complex, multi-module systems.FIPS 140-3 supports the binding and embedding of hardware and software cryptographic modules within a single Tested Operational Environment Physical Perimeter (TOEPP). This streamlined approach provides many validation efficiencies; however, presents complex design and validation challenges. This session provides a practical framework for justifying module boundaries and documenting trust domains when discrete or embedded modules coexist. Attendees will learn how to manage shared resources, coordinate self-tests, and effectively handle failures across multiple modules within a single environment. The presentation includes actionable strategies for preparing robust evidence packages for CMVP submissions. Ultimately, participants will gain the expertise needed to maintain ongoing cryptographic compliance for complex, multi-module systems.
— Compositor's note —
Trish Wolff is a Security Research Engineering Technical Leader at Cisco Systems, Inc., serving as an expert in Federal Information Processing Standards (FIPS). With over a decade of experience in cybersecurity, she shapes cryptographic compliance strategies across Cisco’s global portfolio, including routing, switching, and IoT solutions. Trish drives a "security-first" strategy by integrating complex requirements - such as ISO/IEC 19790, FIPS 140-3 and NIST SP 800-90B/C - directly into product design and lifecycle planning. An active leader in the cybersecurity community, she serves on the Cryptographic Module Users Forum (CMUF) Steering Committee and leads the industry-wide Request for Guidance Working Group. She is a frequent contributor to premier industry forums, including the International Cryptographic Module Conference (ICMC) and Defense Industrial Base - Commercial Solutions for Classified Day. Trish holds an M.S. in Engineering and Public Policy from Washington University in St. Louis. She is deeply committed to mentoring the next generation of security professionals and fostering technical excellence within the industry.