198
edits
FIPSFSM: Difference between revisions
→Finite State Model
| Line 16: | Line 16: | ||
'''Access to certificate and key databases''': Only one of the two modes of operation may have the certificate and key databases open at any time. This is enforced by the <code>FC_Initialize</code> and <code>NSC_Initialize</code> functions. When a mode of operation opens the databases, it also causes the other mode (the ''peer'') to close the databases. In the diagram below this is represented by a toggle switch. | '''Access to certificate and key databases''': Only one of the two modes of operation may have the certificate and key databases open at any time. This is enforced by the <code>FC_Initialize</code> and <code>NSC_Initialize</code> functions. When a mode of operation opens the databases, it also causes the other mode (the ''peer'') to close the databases. In the diagram below this is represented by a toggle switch. | ||
[[Image: | [[Image:Dbsw1.png]] | ||
'''Recovery from error states''': If the FIPS Approved mode of the module ever enters the Error state, the NSS cryptographic module library needs to be shut down (transition 3.0) and reinitialized (transition 1.1). | '''Recovery from error states''': If the FIPS Approved mode of the module ever enters the Error state, the NSS cryptographic module library needs to be shut down (transition 3.0) and reinitialized (transition 1.1). | ||