Power Up Selftests: Difference between revisions
No edit summary |
|||
| Line 1: | Line 1: | ||
=Power-Up Self-Tests= | |||
=Power-Up | |||
The module can perform the following power-up self-tests: | |||
==Cryptographic algorithm tests== | ==Cryptographic algorithm tests== | ||
A known-answer test is conducted for all cryptographic functions (e.g., encryption, decryption, authentication and random number generation) of each Approved cryptographic algorithm implemented by the cryptographic module: | A known-answer test is conducted for all cryptographic functions (e.g., encryption, decryption, authentication, and random number generation) of each Approved cryptographic algorithm implemented by the cryptographic module. (See the [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/fipstest.c.html power-up self-tests source code].) | ||
{| border="1" cellpadding="2" | {| border="1" cellpadding="2" | ||
| Line 52: | Line 51: | ||
Single-Round Known Answer Hashing | Single-Round Known Answer Hashing | ||
|- | |- | ||
| HMAC-SHA-1|| | | HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512|| | ||
Single-Round Known Answer HMAC | Single-Round Known Answer HMAC | ||
|- | |- | ||
| RSA|| | | RSA|| | ||
| Line 71: | Line 67: | ||
|- | |- | ||
| RNG|| | | RNG|| | ||
FIPS 182 | FIPS 182-2 Change Notice 1 Known Answer Test | ||
|- | |- | ||
| ECDSA|| | | ECDSA|| | ||
Single-Round Known Answer Signature<br> | Single-Round Known Answer Signature<br> | ||
Single-Round Known Answer Verification | Single-Round Known Answer Verification | ||
|} | |} | ||
<div class=note>'''Note:''' Cryptographic algorithms whose outputs vary for a given set of inputs (DSA and ECDSA) are tested using a known-answer test. The message digest algorithms have independent known-answer tests.</div> | |||
==Random number generator test== | ==Random number generator test== | ||
See the known-answer test for RNG above. | |||
==Software/firmware test== | ==Software/firmware integrity test== | ||
An integrity check is performed on the libraries that contain the NSS cryptographic module. If the check fails, the module immediately enters the Error state. | |||
==Critical functions test== | ==Critical functions test== | ||
No critical functions | No other critical functions tests are performed on power-up. | ||
Revision as of 20:08, 7 August 2006
Power-Up Self-Tests
The module can perform the following power-up self-tests:
Cryptographic algorithm tests
A known-answer test is conducted for all cryptographic functions (e.g., encryption, decryption, authentication, and random number generation) of each Approved cryptographic algorithm implemented by the cryptographic module. (See the power-up self-tests source code.)
|
Algorithm |
Tests |
|---|---|
| RC2 |
RC2-ECB Single-Round Known Answer Encryption |
| RC4 |
Single-Round Known Answer Encryption |
| DES |
DES-ECB Single-Round Known Answer Encryption |
| Triple DES |
DES3-ECB Single-Round Known Answer Encryption |
| AES-128, AES-192, AES-256 |
AES-ECB Single-Round Known Answer Encryption |
| MD2 |
Single-Round Known Answer Hashing |
| MD5 |
Single-Round Known Answer Hashing |
| SHA-1, SHA-256, SHA-384, SHA-512 |
Single-Round Known Answer Hashing |
| HMAC-SHA-1, HMAC-SHA-256, HMAC-SHA-384, HMAC-SHA-512 |
Single-Round Known Answer HMAC |
| RSA |
Single-Round Known Answer Encryption |
| DSA |
Single-Round Known Answer Signature |
| RNG |
FIPS 182-2 Change Notice 1 Known Answer Test |
| ECDSA |
Single-Round Known Answer Signature |
Random number generator test
See the known-answer test for RNG above.
Software/firmware integrity test
An integrity check is performed on the libraries that contain the NSS cryptographic module. If the check fails, the module immediately enters the Error state.
Critical functions test
No other critical functions tests are performed on power-up.