198
edits
NSSCryptoModuleSpec/Section 7: Cryptographic Key Management: Difference between revisions
NSSCryptoModuleSpec/Section 7: Cryptographic Key Management (view source)
Revision as of 23:29, 23 February 2006
, 23 February 2006no edit summary
No edit summary |
No edit summary |
||
| Line 31: | Line 31: | ||
| '''Proof of FIPS approved key generation''' - Provide a validation certificate from a NIST- accredited laboratory.|| | | '''Proof of FIPS approved key generation''' - Provide a validation certificate from a NIST- accredited laboratory.|| | ||
[http://wiki.mozilla.org/VE_07#VE.07.11.01 VE.07.11.01 ] | [http://wiki.mozilla.org/VE_07#VE.07.11.01 VE.07.11.01 ] | ||
|| || | || [http://wiki.mozilla.org/VE_07KeyMgmt Key Generation]|| | ||
|- | |- | ||
| '''Random number generator test''' - Provide 20, 000 consecutive bits from the random number generator for statistical testing per section 4.11 of FIPS PUB 140-1.|| [http://wiki.mozilla.org/VE_07#VE.07.08.01 VE.07.08.01 ] || || | | '''Random number generator test''' - Provide 20, 000 consecutive bits from the random number generator for statistical testing per section 4.11 of FIPS PUB 140-1.|| [http://wiki.mozilla.org/VE_07#VE.07.08.01 VE.07.08.01 ] || || | ||
| Line 40: | Line 40: | ||
| '''Documentation of means to ensure entity association of stored keys''' - Describe the mechanisms or procedures used to ensure that each key will be associated with the correct entity (i.e. person, group or process) to which the keys will be assigned.|| | | '''Documentation of means to ensure entity association of stored keys''' - Describe the mechanisms or procedures used to ensure that each key will be associated with the correct entity (i.e. person, group or process) to which the keys will be assigned.|| | ||
[http://wiki.mozilla.org/VE_07#VE.07.13.01 VE.07.13.01 ] | [http://wiki.mozilla.org/VE_07#VE.07.13.01 VE.07.13.01 ] | ||
|| || | || [http://wiki.mozilla.org/VE_07KeyMgmt Entity Association Assurance]|| | ||
|- | |- | ||
| '''Manually distributed secret keys''' - Indicate the form in which the keys are entered or output (plaintext, split knowledge procedures, encrypted form) | | '''Manually distributed secret keys''' - Indicate the form in which the keys are entered or output (plaintext, split knowledge procedures, encrypted form) | ||