canmove, Confirmed users
937
edits
NSSCryptoModuleSpec/Section 9: Self Tests: Difference between revisions
Jump to navigation
Jump to search
NSSCryptoModuleSpec/Section 9: Self Tests (view source)
Revision as of 01:47, 3 August 2006
, 3 August 2006no edit summary
No edit summary |
No edit summary |
||
| Line 193: | Line 193: | ||
|- | |- | ||
| | | | ||
'''Manual Key Entry''' | '''Manual Key Entry Test''' | ||
|| | || | ||
[http://wiki.mozilla.org/VE_09#VE.09.40.01 VE.09.40.01 ] | [http://wiki.mozilla.org/VE_09#VE.09.40.01 VE.09.40.01 ] | ||
[http://wiki.mozilla.org/VE_09#VE.09.40.02 VE.09.40.02 ] | [http://wiki.mozilla.org/VE_09#VE.09.40.02 VE.09.40.02 ] | ||
|| (N/A) | || (N/A) The cryptographic module does not support manual key entry. || | ||
|- | |- | ||
| | | | ||
| Line 206: | Line 206: | ||
[http://wiki.mozilla.org/VE_09#VE.09.43.01 VE.09.43.01 ] | [http://wiki.mozilla.org/VE_09#VE.09.43.01 VE.09.43.01 ] | ||
|| | || | ||
[http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/freebl/prng_fips1861.c.dep.html# | The module performs the continuous random number generator test on the Approved RNG. In the [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/freebl/prng_fips1861.c.dep.html#alg_fips186_2_cn_1 alg_fips186_2_cn_1] function, if the 320-bit block <code>x_j</code> matches | ||
the previous 320-bit block <code>rng->Xj</code> (the odds are 2^320), then | |||
the previous | the status code <code>SECFailure</code> is returned. This will | ||
the | |||
propogate up to calling functions to put the cryptographic | propogate up to calling functions to put the cryptographic | ||
module in | module in the Error state. The first block is not used (see the [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/freebl/prng_fips1861.c.dep.html#prng_RandomUpdate prng_RandomUpdate] function) but is saved for comparison with the next block. | ||
|| Draft | || Draft | ||
|- | |- | ||
| ''' | | '''Bypass Test''' || | ||
[http://wiki.mozilla.org/VE_09#VE.09.45.01 VE.09.45.01 ] | [http://wiki.mozilla.org/VE_09#VE.09.45.01 VE.09.45.01 ] | ||
[http://wiki.mozilla.org/VE_09#VE.09.45.02 VE.09.45.02 ] | [http://wiki.mozilla.org/VE_09#VE.09.45.02 VE.09.45.02 ] | ||
[http://wiki.mozilla.org/VE_09#VE.09.46.01 VE.09.46.01 ] | [http://wiki.mozilla.org/VE_09#VE.09.46.01 VE.09.46.01 ] | ||
[http://wiki.mozilla.org/VE_09#VE.09.46.02 VE.09.46.02 ] | [http://wiki.mozilla.org/VE_09#VE.09.46.02 VE.09.46.02 ] | ||
|| (N/A) NSS does not implement a | || (N/A) NSS does not implement a bypass service. | ||
|| Draft | || Draft | ||
|} | |} | ||
Return to: [[NSSCryptoModuleSpec]] | Return to: [[NSSCryptoModuleSpec]] | ||