|
|
(2 intermediate revisions by the same user not shown) |
Line 2: |
Line 2: |
|
| |
|
| [http://www.mozilla.org/projects/security/pki/nss/fips/secpolicy.pdf Security Policy] | | [http://www.mozilla.org/projects/security/pki/nss/fips/secpolicy.pdf Security Policy] |
|
| |
|
| |
|
| |
| ==Authentication Policy==
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
| == Platform List ==
| |
| * Level 1
| |
| ** Red Hat Enterprise Linux 4 x86
| |
| ** Windows XP Service Pack 2
| |
| ** 64-bit Solaris 10 AMD64
| |
| ** HP-UX B.11.11 PA-RISC
| |
| ** Mac OS X 10.4
| |
|
| |
| * Level 2
| |
| ** Red Hat Enterprise Linux 4 x86_86
| |
| ** 64-bit Trusted Solaris 8 SPARC
| |
|
| |
| == References ==
| |
| [1] P. Kocher, "Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and Other Systems," CRYPTO '96, Lecture Notes In Computer Science, Vol. 1109, pp. 104-113, Springer-Verlag, 1996. (http://www.cryptography.com/timingattack/)
| |
|
| |
| [2] D. Boneh and D. Brumley, "Remote Timing Attacks are Practical," http://crypto.stanford.edu/~dabo/abstracts/ssl-timing.html.
| |
|
| |
| [3] C. Percival, "Cache Missing for Fun and Profit," http://www.daemonology.net/papers/htt.pdf.
| |
|
| |
| [4] N. Ferguson and B. Schneier, Practical Cryptography, Sec. 16.1.4 "Checking RSA Signatures", p. 286, Wiley Publishing, Inc., 2003.
| |
|
| |
| [[Category:NSS]]
| |