NSSCryptoModuleSpec/Section 9: Self Tests

Document Description

DTR

Section

Assesment

Status

List every error state & error indicator - Document all error states associated with each self-test, and indicate for each error state the expected error indicator.

VE.09.04.01


CKR_USER_NOT_LOGGED_IN	User has not logged in by supplying their password to the FIPS-140-1 PKCS#11 module.
CKR_DEVICE_ERROR	Crypographic operation failure
CKR_HOST_MEMORY	Memory allocation failure
CKR_OK	Success, no error

Module in Error State: Ensure that cryptographic operations cannot be performed while the module is in the error state. See VE02.06.01 for the vendor design requirement.

VE.09.05.01 VE.09.06.01

Power-up Self Test: PKCS#11 Initialization (todo: need link to FC_Initialize in fipstokn.c) : As part of the PKCS#11 initialization of the FIPS-140-2 module, any error return from the battery of self tests will put the PKCS#11 module in the fatalError state. The fatalError state will inhibit further cryptographic operations.

List of mandatory & optional self-tests performed by the module - Provide a list of all self-tests, both mandatory and optional, that the module can perform. This list must include both power-up tests and conditional tests.

VE.09.07.01

(todo: link to fipstest.c)

Power up SelfTest Design

No operator call backs have been implemented at any point within the power-up self tests. These tests are mandatory for the FIPS-140-1 mode of operation.