219
edits
NSSCryptoModuleSpec/Section 9: Self Tests: Difference between revisions
Jump to navigation
Jump to search
m
NSSCryptoModuleSpec/Section 9: Self Tests (view source)
Revision as of 02:26, 22 September 2005
, 22 September 2005no edit summary
mNo edit summary |
mNo edit summary |
||
| Line 1: | Line 1: | ||
'''''Note: This is a draft - A work in progress! - Not official.''''' | |||
{| border="1" cellpadding="2" | {| border="1" cellpadding="2" | ||
|+ | |+ | ||
| Line 239: | Line 242: | ||
|- | |- | ||
| '''Critical Functions''' | | '''Critical Functions''' | ||
|| [http://wiki.mozilla.org/VE_09#VE.09.27.01 VE.09.27.01 ] | || | ||
[http://wiki.mozilla.org/VE_09#VE.09.27.01 VE.09.27.01 ] | |||
[http://wiki.mozilla.org/VE_09#VE.09.28.01 VE.09.28.01 ] | |||
|| | || | ||
Random Number Generator Self tests are the | Random Number Generator Self tests are the | ||
[http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/freebl/prng_fips1861.c.dep.html#alg_fips186_1_x3_1 Continuous Pseudo-Random Number Self-Tests ] | [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/freebl/prng_fips1861.c.dep.html#alg_fips186_1_x3_1 Continuous Pseudo-Random Number Self-Tests ] | ||
|| | || | ||
|- | |- | ||
| | | | ||
| Line 260: | Line 256: | ||
[http://wiki.mozilla.org/VE_09#VE.09.32.01 VE.09.32.01 ] | [http://wiki.mozilla.org/VE_09#VE.09.32.01 VE.09.32.01 ] | ||
|| | || | ||
RSA encryption is the only FIPS approved key transport | |||
method that VE.09.31.01 applies to. See [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/pkcs11c.c.dep.html#sftk_PairwiseConsistencyCheck sftk_PairwiseConsistencyCheck] | |||
The other key transport/establishment methods either | |||
use a symmetric wrapping key | |||
(encrypting/wrapping with TDES or AES) or require | |||
two public/private key pairs (Diffie-Hellman or | |||
its elliptic curve variants). | |||
|| | || | ||
|- | |- | ||
| Line 270: | Line 273: | ||
[http://wiki.mozilla.org/VE_09#VE.09.35.02 VE.09.35.02 ] | [http://wiki.mozilla.org/VE_09#VE.09.35.02 VE.09.35.02 ] | ||
|| | || | ||
[http://www.itl.nist.gov/fipspubs/fip186.htm Digital Signature Standard (DSS) ] | When components are externally loaded in the cryptographic | ||
module, | |||
[http://www.itl.nist.gov/fipspubs/fip186.htm Digital Signature Standard (DSS) ] | |||
is used. | |||
|| | || | ||
|- | |- | ||