NSSCryptoModuleSpec/Section 9: Self Tests: Difference between revisions

'''List every error state & error indicator''' - Document all error states associated with each self-test, and indicate for each error state the expected error indicator.

|'''CKR_USER_NOT_LOGGED_IN''' || User has not logged in by supplying their password to the FIPS-140-1 PKCS#11 module.

Ensure that cryptographic operations cannot be performed while the module is in the error state. See VE02.06.01 for the vendor design requirement.

[http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/fipstokn.c.html#FC_Initialize PKCS#11 Initialization]: As part of the PKCS#11 initialization of the FIPS-140-2 module, any error return

from the battery of self tests will put the PKCS#11

module in the fatalError state. The fatalError state

will inhibit further cryptographic operations.

'''List of mandatory & optional self-tests performed by the module''' - Provide a list of all self-tests, both mandatory and optional, that the module can perform. This list must include both power-up tests and conditional tests.  

 

For fatal error conditions CKR_DEVICE_ERROR and CKR_HOST_MEMORY

the only way to clear the condition is to reboot the module. Upon

restart the power-up tests shall be initiated automatically

and do not require operator intervention.   

'''Describe self-test initiation on demand''' -  requires that the running of power-up self-tests not involve any inputs from or actions by the operator.

 

'''The products will not have a user visible way to initiate

these tests other than restarting the program.'''

'''Document cryptographic algorithm's known answer test:'''

The vendor shall document the indicator that the module outputs upon

[http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/fipstokn.c.html Power Up Self Test Code] This is demonstrated throughout

the self test module. Each of the following functions declares

static key material at the beginning of each test and upon  

a known answer is shall be conducted for all cryptographic functions (e.g., encryption, decryption, authentication and random number generation) of each Approved cryptographic algorithm self test.

'''If the calculated output does not equal the known answer, the known-answer test shall fail.'''

CKR_DEVICE_ERROR is returned when ever the calculated output does not equal  

the known answer.  

'''specify the method used to compare the calculated output with the known answer.'''

PORT_Memcmp is used to compare the computed cipher text with the known

ciphertext.  

When keys are used for encryption/decryption the  

[http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/pkcs11c.c.dep.html#sftk_PairwiseConsistencyCheck  'Pairwise Consistency Check Self Tests'] are used.