198
edits
Power Up Selftests: Difference between revisions
→Power-Up Selftests
| Line 2: | Line 2: | ||
=Power-Up Selftests= | =Power-Up Selftests= | ||
==Cryptographic algorithm tests== | |||
A known-answer test is conducted for all cryptographic functions (e.g., encryption, decryption, authentication and random number generation) of each Approved cryptographic algorithm implemented by the cryptographic module: | A known-answer test is conducted for all cryptographic functions (e.g., encryption, decryption, authentication and random number generation) of each Approved cryptographic algorithm implemented by the cryptographic module: | ||
| Line 20: | Line 20: | ||
|- | |- | ||
| RC4|| | | RC4|| | ||
Single-Round Known Answer Encryption<br> | |||
Single-Round Known Answer Decryption | |||
|- | |- | ||
| DES|| | | DES|| | ||
| Line 42: | Line 42: | ||
|- | |- | ||
| MD2|| | | MD2|| | ||
Single-Round Known Answer Hashing | |||
|- | |- | ||
| MD5|| | | MD5|| | ||
Single-Round Known Answer Hashing | |||
|- | |- | ||
| SHA-1 | | SHA-1, SHA-256, SHA-384, SHA-512|| | ||
Single-Round Known Answer Hashing | |||
|- | |- | ||
| HMAC-SHA-1|| | | HMAC-SHA-1|| | ||
Single-Round Known Answer HMAC | |||
|- | |- | ||
| HMAC-SHA-256 | | HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512|| | ||
Single-Round Known Answer | |||
|- | |- | ||
| RSA|| | | RSA|| | ||
Single-Round Known Answer Encryption<br> | |||
Single-Round Known Answer Decryption<br> | |||
Single-Round Known Answer Signature Test SHA-1<br> | |||
Single-Round Known Answer Signature Test SHA-256<br> | |||
Single-Round Known Answer Signature Test SHA-384<br> | |||
Single-Round Known Answer Signature Test SHA-512<br> | |||
|- | |- | ||
| DSA|| | | DSA|| | ||
Single-Round Known Answer Signature<br> | |||
Single-Round Known Answer Verification | |||
|- | |- | ||
| RNG|| | | RNG|| | ||
|- | |- | ||
| ECDSA|| | | ECDSA|| | ||
Single-Round Known Answer Signature<br> | |||
Single-Round Known Answer Verification | |||
|- | |- | ||
(see the [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/fipstest.c.html power-up self-tests source code]).<div class=note>'''Note:''' Cryptographic algorithms whose outputs vary for a given set of inputs (DSA and ECDSA) are tested using a known-answer test. The message digest algorithms have independent known-answer tests.</div> | (see the [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/fipstest.c.html power-up self-tests source code]).<div class=note>'''Note:''' Cryptographic algorithms whose outputs vary for a given set of inputs (DSA and ECDSA) are tested using a known-answer test. The message digest algorithms have independent known-answer tests.</div> | ||
|} | |} | ||
==Software integrity test== | |||
=Conditional self-tests= | =Conditional self-tests= | ||