NSSCryptoModuleSpec/Section 9: Self Tests: Difference between revisions

Jump to navigation Jump to search
m
no edit summary
mNo edit summary
mNo edit summary
Line 1: Line 1:
{| border="1" cellpadding="2"
{| border="1" cellpadding="2"
|+
|+
Line 14: Line 13:
Status
Status
|-
|-
| || [http://wiki.mozilla.org/VE_09#VE.09.04.01 VE.09.04.01 ] || ||
|  
'''List every error state & error indicator''' - Document all error states associated with each self-test, and indicate for each error state the expected error indicator.
|| [http://wiki.mozilla.org/VE_09#VE.09.04.01 VE.09.04.01 ] ||  
{| border="1" cellpadding="2"
|+
|-
|'''CKR_USER_NOT_LOGGED_IN''' || User has not logged in by supplying their password to the FIPS-140-1 PKCS#11 module.
|-
|'''CKR_DEVICE_ERROR''' ||  Crypographic operation failure
|-
| '''CKR_HOST_MEMORY''' || Memory allocation failure
|-
|-
| || [http://wiki.mozilla.org/VE_09#VE.09.05.01 VE.09.05.01 ] || ||
|'''CKR_OK''' || Success, no error
|}
||
|-
|-
| || [http://wiki.mozilla.org/VE_09#VE.09.06.01 VE.09.06.01 ] || ||
|  
'''Module in Error State''':
Ensure that cryptographic operations cannot be performed while the module is in the error state. See VE02.06.01 for the vendor design requirement.
||  
[http://wiki.mozilla.org/VE_09#VE.09.05.01 VE.09.05.01 ]  [http://wiki.mozilla.org/VE_09#VE.09.06.01 VE.09.06.01 ]  
||  
'''Power-up Self Test''':
PKCS#11 Initialization (todo: need link to FC_Initialize in fipstokn.c) : As part of the PKCS#11 initialization of the FIPS-140-2 module, any error return
from the battery of self tests will put the PKCS#11
module in the fatalError state. The fatalError state
will inhibit further cryptographic operations.
||
|-
|-
| || [http://wiki.mozilla.org/VE_09#VE.09.07.01 VE.09.07.01 ] || ||
|
'''List of mandatory & optional self-tests performed by the module''' - Provide a list of all self-tests, both mandatory and optional, that the module can perform. This list must include both power-up tests and conditional tests.
||  
[http://wiki.mozilla.org/VE_09#VE.09.07.01 VE.09.07.01 ]  
||  
 
(todo: link to fipstest.c)
 
[[Power up SelfTest Design]]
 
No operator call backs have been implemented
at any point within the power-up self tests. These
tests are mandatory for the FIPS-140-1 mode of
operation.
||
|-
|-
| || [http://wiki.mozilla.org/VE_09#VE.09.07.02 VE.09.07.02 ] || ||
| || [http://wiki.mozilla.org/VE_09#VE.09.07.02 VE.09.07.02 ] || ||
219

edits

Navigation menu