VE 11

SECTION 11: MITIGATION OF OTHER ATTACKS

AS.11.01 If the cryptographic module is designed to mitigate one or more specific attacks, then the module's security policy shall specify the security mechanisms employed by the module to mitigate the attack(s).

Assessment:

Not Applicable

VE.11.01.01

VE.11.01.01 The vendor provided nonproprietary security policy shall specify whether the cryptographic module is designed to mitigate specific attacks. The vendor shall specify in the nonproprietary security policy the security mechanism(s) implemented by the cryptographic module to mitigate the attack(s).

Assessment:

The NSS software cryptographic module is designed to mitigate timing attacks against RSA and cache attacks against the modular exponentiation operation used in RSA. The NSS software cryptographic module implements RSA blinding to mitigate timing attacks against RSA. It implements a "weaving" method to mitigate cache attacks against the modular exponentiation operation used in RSA and DSA.

VE.11.01.02

VE.11.01.02 The vendor provided nonproprietary security policy shall indicate how the implemented mechanism(s) were shown to mitigate the attack(s).

Assessment:

Not Applicable