219
edits
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
<BODY LANG="en-US" DIR="LTR"> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.04in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=4><I><B>SECTION | |||
1: CRYPTOGRAPHIC MODULE SPECIFICATION</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.01</FONT></B>The | |||
cryptographic module shall be a set of hardware, software, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>firmware, | |||
or some combination thereof that implements cryptographic </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>functions | |||
or processes, including cryptographic algorithms and, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>optionally, | |||
key generation, and is contained within a defined </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
boundary.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.02</FONT></B>The | |||
cryptographic module shall implement at least one Approved </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>security | |||
function used in an Approved mode of operation.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Note: | |||
This assertion is tested as part of AS01.12.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.03</FONT></B>The | |||
operator shall be able to determine when an Approved mode of </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>operation | |||
is selected.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.03.01</FONT></B>The | |||
vendor provided nonproprietary security policy shall provide a </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>description | |||
of the Approved mode of operation.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.03.02</FONT></B>The | |||
vendor provided non-proprietary security policy shall provide </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>instructions | |||
for invoking the Approved mode of operation.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.05</FONT></B>The | |||
cryptographic boundary shall consist of an explicitly defined </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>perimeter | |||
that establishes the physical bounds of the cryptographic </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.06</FONT></B>If | |||
the cryptographic module consists of software or firmware </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components, | |||
the cryptographic boundary shall contain the processor(s) </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>and | |||
other hardware components that store and protect the software and</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>firmware | |||
components.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.55in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.06.01</FONT></B>For | |||
each processor in the module, the vendor shall identify, by major </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>services, | |||
the software or firmware that are executed by the processor, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>and | |||
the memory devices that contain the executable code and data.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.06.02</FONT></B>For | |||
each processor, the vendor shall identify any hardware with which </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the | |||
processor interfaces.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.07</FONT></B>The | |||
following documentation requirements shall apply to all </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>security-specific | |||
hardware, software, and firmware contained within the</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Note: | |||
This assertion is not separately tested.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.08</FONT></B>Documentation | |||
shall specify the hardware, software, and firmware </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components | |||
of the cryptographic module, specify the cryptographic </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>boundary | |||
surrounding these components, and describe the physical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>configuration | |||
of the module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.01</FONT></B>All | |||
hardware, software, and firmware components of the cryptographic </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>module | |||
shall be identified in the vendor documentation. Components </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>to | |||
be listed shall include, as applicable, all of the following:</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>1. | |||
Integrated circuits, including processors, memory, and (semi-) </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>custom | |||
integrated circuits</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>2. | |||
Other active electronic circuit elements</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>3. | |||
Power inputs and outputs, and internal power supplies or </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>converters</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>4. | |||
Physical structures, including circuit boards or other mounting </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>surfaces, | |||
enclosures, and connectors</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>5. | |||
Software and firmware modules</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>6. | |||
Other component types not listed above</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.02in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.02</FONT></B>The | |||
above list of components shall be consistent with the information </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>provided | |||
for all other assertions of this section.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.2in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.03</FONT></B>The | |||
vendor documentation shall specify the module's cryptographic </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>boundary. | |||
The cryptographic boundary shall be an explicitly defined, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>contiguous | |||
perimeter that establishes the physical bounds of the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
module. The boundary definition shall specify module </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components | |||
and connections (ports), and also module information </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>flows, | |||
processing, and input/output data.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.04</FONT></B>The | |||
cryptographic boundary shall include any hardware or software </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>that | |||
inputs, processes, or outputs important security parameters that </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>could | |||
lead to the compromise of sensitive information if not properly </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.05</FONT></B>The | |||
vendor documentation shall specify the physical embodiments of </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the | |||
module ( single-chip cryptographic module, multiple-chip embedded</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
module, or multiple-chip standalone cryptographic </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>module, | |||
as defined in Section 4.5 of FIPS PUB 140-2.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.06</FONT></B>The | |||
vendor's documentation shall indicate the internal layout and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>assembly | |||
methods (e.g., fasteners and fittings) of the module, including </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>drawings | |||
that are at least approximately to scale. The interior of </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>integrated | |||
circuits need not be shown.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.08.07</FONT></B>The | |||
vendor's documentation shall describe the primary physical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>parameters | |||
of the module, including descriptions of the enclosure, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>access | |||
points, circuit boards, location of power supply, interconnection </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>wiring | |||
runs, cooling arrangements, and any other significant parameters.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.09</FONT></B>Documentation | |||
shall specify any hardware, software, or firmware </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components | |||
of the cryptographic module that are excluded from the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>security | |||
requirements of this standard and explain the rationale for the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>exclusion.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.09.01</FONT></B>All | |||
components that are to be excluded from the security requirements </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>shall | |||
be explicitly listed in the vendor documentation.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.02in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.2in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.09.02</FONT></B>The | |||
rationale for excluding each of the components listed in response to</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>requirement | |||
VE01.09.01 shall be provided in the vendor </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>documentation. | |||
The vendor shall show that each component, even if </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>malfunctioning | |||
or misused, cannot cause a compromise under any </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.10</FONT></B>Documentation | |||
shall specify the physical ports and logical interfaces </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>and | |||
all defined input and output paths of the cryptographic module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Note: | |||
This assertion is tested as part of AS02.01.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.11</FONT></B>Documentation | |||
shall specify the manual or logical controls of the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
module, physical or logical status indicators, and their </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>physical, | |||
logical, and electrical characteristics. </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>Note: | |||
This assertion is tested as part of AS02.01.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.12</FONT></B>Documentation | |||
shall list all security functions, both Approved and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>non-Approved, | |||
that are employed by the cryptographic module and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>shall | |||
specify all modes of operation, both Approved and non-Approved.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.12.01</FONT></B>The | |||
vendor shall provide a validation certificate for all Approved </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
algorithms.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.12.02</FONT></B>The | |||
vendor shall provide a list of all non-Approved security functions.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.23in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.13</FONT></B>Documentation | |||
shall specify a block diagram depicting all of the major </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>hardware | |||
components of the cryptographic module and their </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>interconnections, | |||
including any microprocessors, input/output buffers, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>plaintext/ciphertext | |||
buffers, control buffers, key storage, working </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>memory, | |||
and program memory.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.13.01</FONT></B>The | |||
vendor documentation shall include a block diagram showing the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>hardware | |||
components and their interconnections. Components to be </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>included | |||
in the block diagram shall include, as applicable:</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>1. | |||
Microprocessors</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>2. | |||
Input/output buffers</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>3. | |||
Plaintext/ciphertext buffers</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>4. | |||
Control buffers</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>5. | |||
Key storage</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>6. | |||
Working memory</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>7. | |||
Program memory</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>8. | |||
Other components types not listed above</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.27in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.13.02</FONT></B>The | |||
block diagram shall also include any (semi-) custom integrated </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>circuits | |||
(e.g., gate arrays, field programmable gate arrays, or other </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>programmable | |||
logic).</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.13.03</FONT></B>The | |||
block diagram shall show interconnections among major </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components | |||
of the module and between the module and equipment or </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components | |||
outside of the cryptographic boundary.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.13.04</FONT></B>The | |||
block diagram shall show the cryptographic boundary of the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.14</FONT></B>Documentation | |||
shall specify the design of the hardware, software, and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>firmware | |||
components of the cryptographic module. High-level </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>specification | |||
languages for software/firmware or schematics for </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>hardware | |||
shall be used to document the design.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.14.01</FONT></B>The | |||
vendor shall provide a detailed specification of the design of the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>hardware, | |||
software, and/or firmware contained in the module. This </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>documentation | |||
shall include, the finite state model and description </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>referred | |||
to in Section 4.4 of FIPS PUB 140-2. If the relationship </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>between | |||
the finite state model and the design specification is not clear, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the | |||
vendor shall provide additional documentation that describes this </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.15</FONT></B>Documentation | |||
shall specify all security-related information, including </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>secret | |||
and private cryptographic keys (both plaintext and encrypted), </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>authentication | |||
data (e.g., passwords, PINs), CSPs, and other protected </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>information | |||
(e.g., audited events, audit data) whose disclosure or </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>modification | |||
can compromise the security of the cryptographic module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.2in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.15.01</FONT></B>The | |||
vendor shall provide documentation specifying all security-related </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>information, | |||
including secret and private cryptographic keys (both </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>plaintext | |||
and encrypted), authentication data (e.g., passwords, PINs), </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>CSPs, | |||
and other protected information (e.g., audited events, audit data)</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>whose | |||
disclosure or modification can compromise the security of the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>cryptographic | |||
module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.01.16</FONT></B>Documentation | |||
shall specify the cryptographic module security policy. </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>The | |||
security policy shall include the rules derived from the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>requirements | |||
of this standard and the rules derived from any additional </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>requirements | |||
imposed by the vendor.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.01.16.01</FONT></B>The | |||
vendor shall provide a separate nonproprietary security policy. </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>The | |||
security policy is defined in Appendix C of FIPS PUB 140-2.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.09in; margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.02in; margin-bottom: 0in; page-break-before: always"> | |||
<BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.04in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=4><I><B>SECTION | |||
2: MODULE PORTS AND INTERFACES</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.02.01</FONT></B>The | |||
cryptographic module shall restrict all information flow and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>physical | |||
access points to physical ports and logical interfaces that define</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>all | |||
entry and exit points to and from the module.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><BR> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.03in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.01.01</FONT></B>Vendor | |||
documentation shall specify each of the physical ports and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>logical | |||
interfaces of the cryptographic module, including the:</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>1. | |||
Physical ports and their pin assignments </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>2. | |||
Physical covers, doors or openings</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>3. | |||
Logical interfaces (e.g., APIs and all other data/control/status </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>signals) | |||
and the signal names and functions</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>4. | |||
Manual controls (e.g., buttons or switches) for applicable physical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>control | |||
inputs</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>5. | |||
Physical status indicators (e.g., lights or displays) for applicable </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>physical | |||
status outputs</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>6. | |||
Mapping of the logical interfaces to the physical ports, manual </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>controls, | |||
and physical status indicators of the cryptographic module</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>7. | |||
Physical, logical, and electrical characteristics, as applicable, of | |||
the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>above | |||
ports and interfaces</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.24in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.01.02</FONT></B>Vendor | |||
documentation shall specify the information flows and physical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>access | |||
points of the cryptographic module by highlighting or annotating </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>copies | |||
of the block diagrams, design specifications and/or source code </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>and | |||
schematics provided in Sections 1 and 10. The vendor shall also </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>provide | |||
any other documentation necessary to clearly specify the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>relationship | |||
of the information flows and physical access points to the </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>physical | |||
ports and logical interfaces.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.18in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.01.03</FONT></B>For | |||
each physical or logical input to the cryptographic module, or </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>physical | |||
and logical output from the module, vendor documentation </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>shall | |||
specify the logical interface to which the physical input or output </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>belongs, | |||
and the physical entry/exit port. The specifications provided </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>shall | |||
be consistent with the specifications of the cryptographic module </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>components | |||
provided under sections 1 and 10, and the specifications of</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the | |||
logical interfaces provided in assertions AS02.03 to AS02.09 of this</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>section.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.25in; margin-bottom: 0in"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><I><FONT COLOR="#000080">Assessment:</FONT></I></B><FONT COLOR="#000000"> | |||
</FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.06in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.02.02</FONT></B>The | |||
cryptographic module interfaces shall be logically distinct from </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>each | |||
other although they may share one physical port (e.g., input data </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>may | |||
enter and output data may exit via the same port) or may be </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>distributed | |||
over one or more physical ports (e.g., input data may enter </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>via | |||
both a serial and a parallel port).</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.02.01</FONT></B>The | |||
vendor's design shall separate the cryptographic module interfaces </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>into | |||
logically distinct and isolated categories, using the categories | |||
listed </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>in | |||
assertion AS02.03, and, if applicable, AS02.09 in this section. This | |||
</FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>information | |||
shall be consistent with the specification of the logical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>interfaces | |||
and physical ports provided in AS02.01 in this section.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.02.02</FONT></B>Vendor | |||
documentation shall provide a mapping of each category of </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>logical | |||
interface to a physical port of the cryptographic module. A </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>logical | |||
interface may be physically distributed across more than one </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>physical | |||
port, or two or more logical interfaces may share one physical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>port | |||
as long as the information flows are kept logically separate. If two | |||
</FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>or | |||
more logical interfaces share the same physical port, vendor </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>documentation | |||
shall specify how the information from the different </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>interface | |||
categories is kept logically separate.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.02.03</FONT></B>The | |||
cryptographic module shall have the following four logical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>interfaces | |||
("input" and "output" are indicated from the | |||
perspective of </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>the | |||
module):</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
Data input interface</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
Data output interface</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
Control input interface</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.03.01</FONT></B>Vendor | |||
documentation shall specify that the following four logical </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>interfaces | |||
have been designed within the cryptographic module ("input" | |||
</FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>and | |||
"output" are indicated from the perspective of the module):</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
data input interface (for the entry of data as specified in AS02.04),</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.08in; margin-bottom: 0in"><FONT COLOR="#000000"> | |||
<FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
data output interface (for the output of data as specified in </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>AS02.05),</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
control input interface (for the entry of commands as specified in </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>AS02.07), | |||
and </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>* | |||
status output interface (for the output of status information as </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.19in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.2in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>AS.02.04</FONT></B>All | |||
data (except control data entered via the control input interface) | |||
that</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"> <FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>is | |||
input to and processed by the cryptographic module (including </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>plaintext | |||
data, ciphertext data, cryptographic keys and CSPs, </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>authentication | |||
data, and status information from another module) shall enter via the | |||
"data input" interface.</FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.17in; margin-bottom: 0in"><FONT COLOR="#000080"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><I><B>Assessment:</B></I></FONT></FONT></FONT></P> | |||
<P ALIGN=LEFT STYLE="margin-top: 0.11in; margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3><B><FONT SIZE=4>VE.02.04.01</FONT></B>The | |||
cryptographic module shall have a data input interface. All data </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>(except | |||
control data entered via the control input interface) that is to be </FONT></FONT></FONT> | |||
</P> | |||
<P ALIGN=LEFT STYLE="margin-bottom: 0in"><FONT COLOR="#000000"><FONT FACE="Times New Roman, Times New Roman, serif"><FONT SIZE=3>input | |||
to and processed by the cryptographic module shall enter via the </FONT></FONT></FONT> | |||
</P> | |||
edits