Are there any standards for encryption?
The National Institute of Standards and Technology (NIST) has issued FIPS 140-2 [PDF - 1.4 MB], Security Requirements for Cryptographic Modules. FIPS 140-2 refers to the Federal Information Processing Standards Publication (FIPS) for Computer Security. Although it is a U. S. government computer security standard, many private sector organizations use the information as a guide. In addition, encrypting the data on your mobile device with a valid encryption process consistent with FIPS 140-2 can help you meet HHS Guidance to Render Unsecured Protected Health Information Unusable, Unreadable, or Indecipherable to Unauthorized Individuals.