GM/T 0028-2014

This standard specifies the security requirements for cryptographic modules used in security systems to protect sensitive information in computer and telecommunications systems. The standard defines four security levels for cryptographic modules to meet the different security needs of sensitive data and various application fields. For the 11 security domains of cryptographic modules, the standard provides corresponding requirements for each of the four security levels. The higher security level further enhances the security based on the lower security level.