|
|
Line 1: |
Line 1: |
| ==SECTION 4: FINITE STATE MODEL==
| | I eat fish and chips fish and chips fish and chips fish and chips fish and chips fish and chips and shhhhhhhhhhhhhhhhhhit for breakfast |
| <P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.04.01</FONT></B>The
| |
| operation of the cryptographic module shall be specified using a </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>finite
| |
| state (or equivalent) represented by a state transition diagram </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>and/or
| |
| a state transition table. (The state transition diagram and/or state </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>transition
| |
| table includes all operational and error states of the </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic
| |
| module, the corresponding transitions from one state to </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>another,
| |
| the input events that cause transitions from one state to </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>another,
| |
| and the output events resulting from transitions from one state </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>to
| |
| another.)</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.04.02</FONT></B>The
| |
| cryptographic module shall include the following operational and </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>error
| |
| states:</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Power
| |
| on/off states. States for primary, secondary, or backup power.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>These
| |
| states may distinguish between power sources being applied to </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the
| |
| cryptographic module.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Crypto
| |
| officer states. States in which the crypto officer services are </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>performed
| |
| (e.g., cryptographic initialization and key management).</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Key/CSP
| |
| entry states. States for entering cryptographic keys and </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>CSPs
| |
| into the cryptographic module.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>User
| |
| states. States in which authorized users obtain security services, </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>perform
| |
| cryptographic operations, or perform other Approved or </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>non-Approved
| |
| functions.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Self-test
| |
| states. States in which the cryptographic module is </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>performing
| |
| self-tests.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Error
| |
| states. States when the cryptographic module has encountered </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>an
| |
| error (e.g., failed a self-test or attempted to encrypt when missing </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>operational
| |
| keys or CSPs). Error states may include "hard" errors that </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>indicate
| |
| an equipment malfunction and that may require maintenance, </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>service
| |
| or repair of the cryptographic module, or recoverable "soft"
| |
| </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>errors
| |
| that may require initialization or resetting of the module.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Note:
| |
| This assertion is tested as part of AS04.05.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.29in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.04.03</FONT></B>Recovery
| |
| from error states shall be possible except for those caused by </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>hard
| |
| errors that require maintenance, service, or repair of the </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic
| |
| module.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.2in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.04.04</FONT></B>If
| |
| the cryptographic module contains a maintenance role, then a </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>maintenance
| |
| state shall be included.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Note:
| |
| This assertion is tested as part of AS04.05.</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.04.05</FONT></B>Documentation
| |
| shall include a representation of the finite state (or </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>equivalent)
| |
| using a state transition diagram and/or state transition table </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>that
| |
| shall specify:</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>*
| |
| all operational and error states of the cryptographic module,</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>*
| |
| the corresponding transitions from one state to another,</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>*
| |
| the input events, including data inputs and control inputs, that
| |
| cause </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>transitions
| |
| from one state to another, and</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>*
| |
| the output events, including internal module conditions, data </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>outputs,
| |
| and status outputs resulting from transitions from one state to </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P>
| |
| ==VE.04.05.01==
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.04.05.01</FONT></B>The
| |
| vendor shall provide a description of the finite state model. This </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>description
| |
| shall contain the identification and description of all states of</FONT></FONT></FONT></P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the
| |
| module, and a description of all corresponding state transitions. </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>The
| |
| descriptions of the state transitions shall include internal module </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>conditions,
| |
| data inputs and control inputs that cause transitions from </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>one
| |
| state to another, data outputs and status outputs resulting from </FONT></FONT></FONT>
| |
| </P>
| |
| <P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>transitions
| |
| from one state to another.</FONT></FONT></FONT></P>
| |