NSSCryptoModuleSpec/Section 7: Cryptographic Key Management

This is a draft document

Document Description	DTR Section	Assessment	Status
Specification of all aspects of key management; key generation, key establishment, key entry and output, key storage, and key zeroization.	VE.07.03.01 VE.07.13.01 through VE.07.17.01 VE.07.19.01 VE.07.24.01 VE.07.39.01 VE.07.40.01 VE.07.41.01	Key Management Key Zeroization	draft
Description of key protection	VE.07.01.01 VE.07.02.01	Key Management	draft
Proof of FIPS approved key generation	VE.07.11.01	Key Generation	draft
Security of key generation method	VE.07.13.01	Key Generation	draft
Random number generator description	VE.07.08.01 VE.07.09.01 VE.07.10.01	RNG	draft
Documentation of means to ensure entity association of stored keys	VE.07.39.01	Entity Association Assurance	draft
Output of intermediate key generation values	VE.07.15.01 VE.07.15.02	No intermediate key generation values are output from the cryptographic module upon completion of the key generation process.	draft
Key generation methods employed by the cryptographic module	VE.07.16.01	Key Generation	draft
Key establishment	VE.07.17.01 VE.07.18.01 VE.07.19.01 VE.07.21.01	Key Establishment Techniques	draft
Key entry and output methods	VE.07.23.01 VE.07.24.01 VE.07.27.01 VE.07.28.01 VE.07.29.01	Key Entry and Output Methods	draft
Documentation of means to ensure entity association of entered or output keys	VE.07.25.01	Entity Association Assurance	draft
Manual key entry test	VE.09.40.01 VE.09.40.02	N/A. Manual key entry and output methods are not employed by the cryptographic module.	draft

Return to: NSSCryptoModuleSpec