FIPS Design Assurance: Difference between revisions

m (Reverted edit of Otbfn, changed back to last version by Wtchang)
 
(2 intermediate revisions by one other user not shown)
Line 35: Line 35:


===Components===
===Components===
All software components of the NSS cryptographic module are contained within two libraries, libsoftokn3 and libfreebl3, as described in [http://wiki.mozilla.org/FIPS_Module_Specification#Module_Components Section 1]. The combined role that is supported is realized entirely within these two libraries. Each of these libraries is shipped with a checksum file containing a DSA signature of the library file. When the NSS cryptographic module is started up in FIPS mode, the module recomputes the SHA-1 hash of the library file and verifies the signature. Initialization fails if the signature is not valid.
All software components of the NSS cryptographic module are contained within three libraries, libsoftokn3, libfreebl3, and libnssdbm3 as described in [http://wiki.mozilla.org/FIPS_Module_Specification#Module_Components Section 1]. The combined role that is supported is realized entirely within these three libraries. Each of these libraries is shipped with a checksum file containing a DSA signature of the library file. When the NSS cryptographic module is started up in FIPS mode, the module recomputes the SHA-1 hash of the library file and verifies the signature. Initialization fails if the signature is not valid.


An annotated source listing of the software components contained in the NSS cryptographic module is [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/softoken/fipstokn.c.dep.html here].
An cross-reference source listing of the software components contained in the NSS cryptographic module is [http://mxr.mozilla.org/security/source/security/nss/lib/softoken/fipstokn.c here].


The hardware components contained in the NSS cryptographic module are the hardware components of a general purpose computer.
The hardware components contained in the NSS cryptographic module are the hardware components of a general purpose computer.
22

edits