NSSCryptoModuleSpec/Section 7: Cryptographic Key Management: Difference between revisions

m
GPHemsley moved page Section 7: Cryptographic Key Management to NSSCryptoModuleSpec/Section 7: Cryptographic Key Management without leaving a redirect: NSSCryptoModuleSpec page
No edit summary
m (GPHemsley moved page Section 7: Cryptographic Key Management to NSSCryptoModuleSpec/Section 7: Cryptographic Key Management without leaving a redirect: NSSCryptoModuleSpec page)
 
(9 intermediate revisions by one other user not shown)
Line 22: Line 22:
[http://wiki.mozilla.org/VE_07#VE.07.39.01 VE.07.39.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.39.01 VE.07.39.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.40.01 VE.07.40.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.40.01 VE.07.40.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.41.01 VE.07.41.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.41.01 VE.07.41.01 ]
[http://wiki.mozilla.org/VE_07#VE.07.42.01 VE.07.42.01 ]
|| [http://wiki.mozilla.org/VE_07KeyMgmt Key Management]<br> [http://wiki.mozilla.org/VE_07KeyMgmt#Key_Zeroization Key Zeroization]
|| [http://wiki.mozilla.org/VE_07KeyMgmt Key Management]
|| draft
|| draft
|-
|-
Line 45: Line 44:
| '''Random number generator description'''|| [http://wiki.mozilla.org/VE_07#VE.07.08.01 VE.07.08.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.09.01 VE.07.09.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.10.01 VE.07.10.01 ]
| '''Random number generator description'''|| [http://wiki.mozilla.org/VE_07#VE.07.08.01 VE.07.08.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.09.01 VE.07.09.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.10.01 VE.07.10.01 ]
|| [http://wiki.mozilla.org/VE_07KeyMgmt#Random_Number_Generator RNG]
|| [http://wiki.mozilla.org/VE_07KeyMgmt#Random_Number_Generator RNG]
|| draft
|-
| '''Proof/affirmation that key establishment is FIPS approved''' -<br>Provide documentation stating that the key establishment technique is FIPS-approved.
|| [http://wiki.mozilla.org/VE_07#VE.07.17.01 VE.07.17.01 ]
|| The following FIPS Approved key establishment techniques listed in Annex D to FIPS PUB  140-2 are used: Diffie-Hellman (key agreement) and Key Wrapping using RSA keys.
|| draft
|| draft
|-
|-
Line 65: Line 59:
| '''Key generation methods employed by the cryptographic module'''||
| '''Key generation methods employed by the cryptographic module'''||
[http://wiki.mozilla.org/VE_07#VE.07.16.01 VE.07.16.01 ]
[http://wiki.mozilla.org/VE_07#VE.07.16.01 VE.07.16.01 ]
||
|| [http://wiki.mozilla.org/VE_07KeyMgmt#Key_Generation Key Generation]
|| draft
|-
| '''Key establishment'''
|| [http://wiki.mozilla.org/VE_07#VE.07.17.01 VE.07.17.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.18.01 VE.07.18.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.19.01 VE.07.19.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.21.01 VE.07.21.01 ]<br>
|| [http://wiki.mozilla.org/VE_07KeyMgmt#Key_Establishment_Techniques Key Establishment Techniques]
|| draft
|| draft
|-
|-
| '''Key entry and output methods'''||
| '''Key entry and output methods'''||
[http://wiki.mozilla.org/VE_07#VE.07.23.01 VE.07.23.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.24.01 VE.07.24.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.27.01 VE.07.27.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.27.01 VE.07.27.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.28.01 VE.07.28.01 ]
[http://wiki.mozilla.org/VE_07#VE.07.28.01 VE.07.28.01 ]<br> [http://wiki.mozilla.org/VE_07#VE.07.29.01 VE.07.29.01 ]
|| N/A. Neither manual nor electronic key entry and output methods are employed by the cryptographic module.
|| [http://wiki.mozilla.org/VE_07KeyMgmt#Key_Entry_and_Output_Methods Key Entry and Output Methods]
|| draft
|-
| '''Documentation of means to ensure entity association of entered or output keys'''||
[http://wiki.mozilla.org/VE_07#VE.07.25.01 VE.07.25.01 ]
|| [http://wiki.mozilla.org/VE_07KeyMgmt#Entity_Association_Assurance Entity Association Assurance]
|| draft
|| draft
|-
|-
Line 78: Line 83:
[http://wiki.mozilla.org/VE_09#VE.09.40.02 VE.09.40.02 ]
[http://wiki.mozilla.org/VE_09#VE.09.40.02 VE.09.40.02 ]
|| N/A. Manual key entry and output methods are not employed by the cryptographic module.
|| N/A. Manual key entry and output methods are not employed by the cryptographic module.
|| draft
|-
| '''Key generation'''||
[http://wiki.mozilla.org/VE_07#VE.07.18.01 VE.07.18.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.21.01 VE.07.21.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.23.01 VE.07.23.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.25.01 VE.07.25.01 ]<br>
[http://wiki.mozilla.org/VE_07#VE.07.29.01 VE.07.29.01 ]
|| (N/A)
|| draft
|| draft
|-
|-
canmove, Confirmed users, Bureaucrats and Sysops emeriti
960

edits