Validation Simplified
Specializing in providing FIPS 140-3 support services to both vendors, and cryptographic security test labs.
About CryptCore
CryptCore Security Inc. is a Canada-based consulting firm specializing in providing support services to vendors pursuing FIPS 140-3 validation for their cryptographic modules. We provide documentation review, gap analysis, and technical advisory rooted in real-world lab experience.
Founded by Gus Burgess, CryptCore Security combines deep technical insight with clear, outcome-focused guidance. Whether you’re new to the validation process or managing re-certification, we’ll help you move forward with confidence and precision.
Our Services
-
Strategy & Planning: Requirements Clarification
There are over 50 documents that make up the FIPS 140-3 validation ecosystem. We help your team understand which requirements apply to your product — and how to interpret them correctly.
Clear guidance up front prevents confusion (and delays) later. -
Strategy & Planning: Validation Strategy Development
We help you identify the right certification path, select the appropriate security level, define your cryptographic module, and draw a clear cryptographic boundary. We also advise on recertification timelines based on your product roadmap.
A strong strategy at the outset sets the tone for a smooth, successful validation. -
Assessment Services: Gap Analysis
Flag issues early — before they become delays. Our pre-validation gap analysis identifies areas of non-compliance and provides actionable feedback to help you align with FIPS 140-3 and ISO/IEC 19790 requirements.
This early insight gives your team the opportunity to remediate gaps before entering validation testing. -
Evidence Support: Documentation Development & Review
Producing the required vendor evidence for a FIPS 140-3 submission can be daunting — but it doesn't have to be. We simplify the process by helping you develop, refine, and review all necessary documentation to align with lab expectations and program requirements.
Well-prepared evidence means fewer surprises, fewer revisions, and a smoother path to validation. -
Lab Readiness: Testing Preparation & Guidance
We work directly with your development team to ensure you're fully prepared for operational testing and source code review — two critical components of the validation process.
Preparation at this stage minimizes test lab delays and avoids costly rework. -
Lab Readiness: CST Lab Coordination Support
Let us act as the intermediary between your team and the NVLAP-accredited Cryptographic Security Test Lab. From selecting and contracting a lab to managing communication and timelines throughout the project, we help ensure the validation process stays on track.
You focus on your product — we’ll handle the lab side.
Why Choose CryptCore?
-
CVP-Certified Consultant
All services are delivered by a Cryptographic Validation Program (CVP)-certified professional with a deep understanding of both vendor and lab-side requirements.
-
10+ Years of Hands-On Experience
With over a decade in conformance testing — including 6+ years managing FIPS programs across two NVLAP-accredited CST Labs — CryptCore brings practical insight, not just theory.
-
Vendor + Lab Perspective
We’ve operated on both sides of the validation process. That means we anticipate lab questions and help you meet expectations before they’re even asked.
-
End-to-End Validation Support
From gap analysis and strategy to documentation and lab coordination, we support your validation effort at every stage — not just one piece of it.
-
Streamlined Communication
We translate technical and regulatory requirements into plain language so your entire team — from engineers to execs — can stay aligned.
-
Independent, Transparent, and Focused
We don’t answer to a parent lab or testing firm. Our only goal is to help you succeed with a faster, clearer path to certification.
Contact us.
-
CryptCore Security Inc.
6-430 Hazeldean Rd
Ottawa, ON,
K2L 1T9
Canada
-
(613) 899-5829
-
info@cryptcore.net