NSSCryptoModuleSpec/Section 6: Operation Enviroment - Revision history

GPHemsley: GPHemsley moved page Section 6: Operation Enviroment to NSSCryptoModuleSpec/Section 6: Operation Enviroment without leaving a redirect: NSSCryptoModuleSpec page

2015-05-11T12:03:15Z

GPHemsley moved page Section 6: Operation Enviroment to NSSCryptoModuleSpec/Section 6: Operation Enviroment without leaving a redirect: NSSCryptoModuleSpec page

← Older revision	Revision as of 12:03, 11 May 2015
(No difference)

Glenb at 20:13, 6 May 2009

2009-05-06T20:13:42Z

← Older revision		Revision as of 20:13, 6 May 2009
Line 25:		Line 25:
	\|-		\|-
	\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:		\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:
	* Sun ~~Trusted~~ Solaris Version ~~8 4~~/01: ~~assurance level EAL4, certification date March 2004, [~~http://www.~~commoncriteriaportal~~.~~org~~/~~public~~/~~files/epfiles~~/~~CRP170v3.pdf certification report] and [http:~~//~~www~~.~~commoncriteriaportal~~.~~org/public/files/epfiles/TSolaris8_Issue3~~.1.pdf ~~security target];~~		* Sun Solaris Version 10 5/08: Security Target Url For Solaris 10 5/08: http://www.sun.com/software/security/securitycert/docs/st-base.Sol10u5.v1.3.pdf
	* Red Hat Enterprise Linux (RHEL) Version ~~4 Update 1 AS and Red Hat Enterprise Linux (RHEL) Version 4 Update 1 WS: assurance level EAL4+, certification date 26 January 2006, [~~http://www.~~commoncriteriaportal.org/public/files/epfiles/ST_VID10072~~-~~VR.pdf certification report], [http://www.commoncriteriaportal~~.org/~~public/files/epfiles/ST_VID10072~~-~~ST.pdf security target], atsec's [http://www.atsec.com~~/01/index.~~php?id=03-0002-01&news=80 press release], and [http://www.atsec.com~~/~~downloads~~/~~pdf/certificates/ibm_linux_eal4_cert.pdf the certificate].~~		* Red Hat Enterprise Linux (RHEL) Version 5 http://www.niap-ccevs.org/cc-scheme/st/index.cfm/vid/10125
	\|\| Draft		\|\| Draft
	\|-		\|-

Wtchang at 19:18, 9 March 2007

2007-03-09T19:18:48Z

← Older revision	Revision as of 19:18, 9 March 2007
Line 1:	Line 1:
		{\| border="1" cellpadding="2"
		\|+
		\|-
		!
		Document Description
		!
		DTR
		Section
		!
		Assessment
		!
		Status
		\|-
		\| Describe the operational environment in which the module operates. \|\| [http://wiki.mozilla.org/VE_06#VE.06.02.01 VE.06.02.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Operational_Environment Operational Environment] \|\| Draft
		\|-
		\| Describe the mechanism used to ensure that only one user at a time can use the cryptographic module. \|\| [http://wiki.mozilla.org/VE_06#VE.06.04.01 VE.06.04.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Single_Operator_Mode_of_Operation Single Operator Mode of Operation] \|\| Draft
		\|-
		\| Describe the mechanism used to ensure that no other process can access private and secret keys, intermediate key generation values, and other CSPs, while the cryptographic process is in use. \|\| [http://wiki.mozilla.org/VE_06#VE.06.05.01 VE.06.05.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
		\|-
		\| Describe the mechanism used to ensure that no other process can interrupt the cryptographic module during execution. \|\| [http://wiki.mozilla.org/VE_06#VE.06.06.01 VE.06.06.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
		\|-
		\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
		\|-
		\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Software_Integrity_Test Software Integrity Test] \|\| Draft
		\|-
		\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:
		* Sun Trusted Solaris Version 8 4/01: assurance level EAL4, certification date March 2004, [http://www.commoncriteriaportal.org/public/files/epfiles/CRP170v3.pdf certification report] and [http://www.commoncriteriaportal.org/public/files/epfiles/TSolaris8_Issue3.1.pdf security target];
		* Red Hat Enterprise Linux (RHEL) Version 4 Update 1 AS and Red Hat Enterprise Linux (RHEL) Version 4 Update 1 WS: assurance level EAL4+, certification date 26 January 2006, [http://www.commoncriteriaportal.org/public/files/epfiles/ST_VID10072-VR.pdf certification report], [http://www.commoncriteriaportal.org/public/files/epfiles/ST_VID10072-ST.pdf security target], atsec's [http://www.atsec.com/01/index.php?id=03-0002-01&news=80 press release], and [http://www.atsec.com/downloads/pdf/certificates/ibm_linux_eal4_cert.pdf the certificate].
		\|\| Draft
		\|-
		\| Specify how the discretionary access control (DAC) mechanism is configured to meet the requirements of AS06.11, AS06.12, AS06.13, and AS06.14. \|\| [http://wiki.mozilla.org/VE_06#VE.06.14.01 VE.06.14.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Configuring_Discretionary_Access_Control Configuring Discretionary Access Control] \|\| Draft
		\|-
		\| Specify how the operating system prevents all operators and executing processes from modifying executing cryptographic processes. \|\| [http://wiki.mozilla.org/VE_06#VE.06.15.01 VE.06.15.01 ] \|\| The operating system protects the address space of an executing process from modifications by another process. \|\| Draft
		\|-
		\| Specify how the operating system prevents operators and executing processes from reading cryptographic software stored within the cryptographic boundary. \|\| [http://wiki.mozilla.org/VE_06#VE.06.16.01 VE.06.16.01 ] \|\| The operating system protects the address space of an executing process from reading by another process. \|\| Draft
		\|-
		\| Identify all the events that are auditable by the cryptographic module software. \|\| [http://wiki.mozilla.org/VE_06#VE.06.17.01 VE.06.17.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Auditable_Events Auditable Events] \|\| Draft
		\|}

		Return to: [[NSSCryptoModuleSpec]]

Wtchang at 23:21, 19 December 2006

2006-12-19T23:21:16Z

← Older revision		Revision as of 23:21, 19 December 2006
Line 1:		Line 1:
	~~{\| border="1" cellpadding="2"~~
	\|+
	\|-
	!
	~~Document Description~~
	!
	~~DTR~~
	~~Section~~
	!
	~~Assessment~~
	!
	~~Status~~
	\|-
	\| Describe the operational environment in which the module operates. \|\| [http://wiki.mozilla.org/VE_06#VE.06.02.01 VE.06.02.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Operational_Environment Operational Environment] \|\| Draft
	\|-
	\| Describe the mechanism used to ensure that only one user at a time can use the cryptographic module. \|\| [http://wiki.mozilla.org/VE_06#VE.06.04.01 VE.06.04.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Single_Operator_Mode_of_Operation Single Operator Mode of Operation] \|\| Draft
	\|-
	\| Describe the mechanism used to ensure that no other process can access private and secret keys, intermediate key generation values, and other CSPs, while the cryptographic process is in use. \|\| [http://wiki.mozilla.org/VE_06#VE.06.05.01 VE.06.05.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-
	\| Describe the mechanism used to ensure that no other process can interrupt the cryptographic module during execution. \|\| [http://wiki.mozilla.org/VE_06#VE.06.06.01 VE.06.06.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-
	\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-
	\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Software_Integrity_Test Software Integrity Test] \|\| Draft
	\|-
	\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:
	* Sun Trusted Solaris Version 8 4/01: assurance level EAL4, certification date March 2004, [http://www.commoncriteriaportal.org/public/files/epfiles/CRP170v3.pdf certification report] and [http://www.commoncriteriaportal.org/public/files/epfiles/TSolaris8_Issue3.1.pdf security target];
	* Red Hat Enterprise Linux (RHEL) Version 4 Update 1 AS and Red Hat Enterprise Linux (RHEL) Version 4 Update 1 WS: assurance level EAL4+, certification date 26 January 2006, [http://www.commoncriteriaportal.org/public/files/epfiles/ST_VID10072-VR.pdf certification report], [http://www.commoncriteriaportal.org/public/files/epfiles/ST_VID10072-ST.pdf security target], atsec's [http://www.atsec.com/01/index.php?id=03-0002-01&news=80 press release], and [http://www.atsec.com/downloads/pdf/certificates/ibm_linux_eal4_cert.pdf the certificate].
	~~\|\| Draft~~
	\|-
	\| Specify how the discretionary access control (DAC) mechanism is configured to meet the requirements of AS06.11, AS06.12, AS06.13, and AS06.14. \|\| [http://wiki.mozilla.org/VE_06#VE.06.14.01 VE.06.14.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Configuring_Discretionary_Access_Control Configuring Discretionary Access Control] \|\| Draft
	\|-
	\| Specify how the operating system prevents all operators and executing processes from modifying executing cryptographic processes. \|\| [http://wiki.mozilla.org/VE_06#VE.06.15.01 VE.06.15.01 ] \|\| The operating system protects the address space of an executing process from modifications by another process. \|\| Draft
	\|-
	\| Specify how the operating system prevents operators and executing processes from reading cryptographic software stored within the cryptographic boundary. \|\| [http://wiki.mozilla.org/VE_06#VE.06.16.01 VE.06.16.01 ] \|\| The operating system protects the address space of an executing process from reading by another process. \|\| Draft
	\|-
	\| Identify all the events that are auditable by the cryptographic module software. \|\| [http://wiki.mozilla.org/VE_06#VE.06.17.01 VE.06.17.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Auditable_Events Auditable Events] \|\| Draft
	\|}

	~~Return to: [[NSSCryptoModuleSpec]]~~

Wtchang at 00:54, 18 August 2006

2006-08-18T00:54:47Z

← Older revision		Revision as of 00:54, 18 August 2006
Line 11:		Line 11:
	!		!
	Status		Status
			\|-
			\| Describe the operational environment in which the module operates. \|\| [http://wiki.mozilla.org/VE_06#VE.06.02.01 VE.06.02.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Operational_Environment Operational Environment] \|\| Draft
	\|-		\|-
	\| Describe the mechanism used to ensure that only one user at a time can use the cryptographic module. \|\| [http://wiki.mozilla.org/VE_06#VE.06.04.01 VE.06.04.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Single_Operator_Mode_of_Operation Single Operator Mode of Operation] \|\| Draft		\| Describe the mechanism used to ensure that only one user at a time can use the cryptographic module. \|\| [http://wiki.mozilla.org/VE_06#VE.06.04.01 VE.06.04.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Single_Operator_Mode_of_Operation Single Operator Mode of Operation] \|\| Draft

Wtchang at 00:25, 18 August 2006

2006-08-18T00:25:29Z

← Older revision		Revision as of 00:25, 18 August 2006
Line 33:		Line 33:
	\| Specify how the operating system prevents operators and executing processes from reading cryptographic software stored within the cryptographic boundary. \|\| [http://wiki.mozilla.org/VE_06#VE.06.16.01 VE.06.16.01 ] \|\| The operating system protects the address space of an executing process from reading by another process. \|\| Draft		\| Specify how the operating system prevents operators and executing processes from reading cryptographic software stored within the cryptographic boundary. \|\| [http://wiki.mozilla.org/VE_06#VE.06.16.01 VE.06.16.01 ] \|\| The operating system protects the address space of an executing process from reading by another process. \|\| Draft
	\|-		\|-
	\| Identify all the events that are auditable by the cryptographic module software. \|\| [http://wiki.mozilla.org/VE_06#VE.06.17.01 VE.06.17.01 ] \|\| ~~TO DO~~. \|\| Draft		\| Identify all the events that are auditable by the cryptographic module software. \|\| [http://wiki.mozilla.org/VE_06#VE.06.17.01 VE.06.17.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Auditable_Events Auditable Events] \|\| Draft
	\|}		\|}

	Return to: [[NSSCryptoModuleSpec]]		Return to: [[NSSCryptoModuleSpec]]

Wtchang at 22:18, 17 August 2006

2006-08-17T22:18:35Z

← Older revision		Revision as of 22:18, 17 August 2006
Line 12:		Line 12:
	Status		Status
	\|-		\|-
	\| Describe the mechanism used to ensure that only one user at a time can use the cryptographic module. \|\| [http://wiki.mozilla.org/VE_06#VE.06.04.01 VE.06.04.01 ] \|\| ~~Link to the document describing how to configure each operating system with a single user~~. \|\| Draft		\| Describe the mechanism used to ensure that only one user at a time can use the cryptographic module. \|\| [http://wiki.mozilla.org/VE_06#VE.06.04.01 VE.06.04.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Single_Operator_Mode_of_Operation Single Operator Mode of Operation] \|\| Draft
	\|-		\|-
	\| Describe the mechanism used to ensure that no other process can access private and secret keys, intermediate key generation values, and other CSPs, while the cryptographic process is in use. \|\| [http://wiki.mozilla.org/VE_06#VE.06.05.01 VE.06.05.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft		\| Describe the mechanism used to ensure that no other process can access private and secret keys, intermediate key generation values, and other CSPs, while the cryptographic process is in use. \|\| [http://wiki.mozilla.org/VE_06#VE.06.05.01 VE.06.05.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft

Wtchang at 21:55, 17 August 2006

2006-08-17T21:55:47Z

← Older revision		Revision as of 21:55, 17 August 2006
Line 20:		Line 20:
	\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft		\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-		\|-
	\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Software~~.2FFirmware_Integrity_Test Software/Firmware~~ Integrity Test] \|\| Draft		\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Software_Integrity_Test Software Integrity Test] \|\| Draft
	\|-		\|-
	\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:		\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:

Wtchang at 21:54, 17 August 2006

2006-08-17T21:54:11Z

← Older revision		Revision as of 21:54, 17 August 2006
Line 20:		Line 20:
	\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft		\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-		\|-
	\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#~~Maintaining_Software_Integrity Maintaining~~ Software Integrity] \|\| Draft		\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Software.2FFirmware_Integrity_Test Software/Firmware Integrity Test] \|\| Draft
	\|-		\|-
	\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:		\| The operating system controlling the cryptographic module has passed evaluation at EAL2 for the Controlled Access Protection Profile (CAPP). \|\| [http://wiki.mozilla.org/VE_06#VE.06.10.01 VE.06.10.01 ] \|\| Please refer to the following documents on the [http://www.commoncriteriaportal.org/ Common Criteria portal]:

Wtchang at 21:42, 17 August 2006

2006-08-17T21:42:29Z

← Older revision		Revision as of 21:42, 17 August 2006
Line 18:		Line 18:
	\| Describe the mechanism used to ensure that no other process can interrupt the cryptographic module during execution. \|\| [http://wiki.mozilla.org/VE_06#VE.06.06.01 VE.06.06.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft		\| Describe the mechanism used to ensure that no other process can interrupt the cryptographic module during execution. \|\| [http://wiki.mozilla.org/VE_06#VE.06.06.01 VE.06.06.01 ] \|\| The operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-		\|-
	\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| ~~The~~ operating system protects the address space of the cryptographic process from the other processes. \|\| Draft		\| List the cryptographic software stored on the cryptographic module and describe the protection mechanisms used to prevent unauthorized disclosure and modification. \|\| [http://wiki.mozilla.org/VE_06#VE.06.07.01 VE.06.07.01 ] \|\| While the cryptographic software is in the RAM, the operating system protects the address space of the cryptographic process from the other processes. \|\| Draft
	\|-		\|-
	\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Maintaining_Software_Integrity Maintaining Software Integrity] \|\| Draft		\| Identify the technique used to maintain the integrity of the cryptographic software components. \|\| [http://wiki.mozilla.org/VE_06#VE.06.08.01 VE.06.08.01 ] \|\| [http://wiki.mozilla.org/FIPS_Operational_Environment#Maintaining_Software_Integrity Maintaining Software Integrity] \|\| Draft