Re: FIPS certification

2014-02-03 Thread Steve Marquess
On 02/03/2014 09:30 AM, Leon Brits wrote: Steve, Thanks for your help so far. Q: How is this certification of the algorithms done? Our device only has a USB interface acting like a smartcard so will the lab (or OSF) use our cryptoki/CSP interface(s) to validate the algorithms or should

FIPS certification

2014-01-30 Thread Leon Brits
Hi all, I've used the FIPS Object Module v2.0.2 in a product which need to be FIPS 140-2 certified. One of the steps in this process is to certify the module algorithms on our platform since it is not one of the platforms which are covered by certificate #1747. I have all these questionnaires

Re: FIPS certification

2014-01-30 Thread Steve Marquess
On 01/30/2014 04:00 AM, Leon Brits wrote: Hi all, I've used the FIPS Object Module v2.0.2 in a product which need to be FIPS 140-2 certified. One of the steps in this process is to certify the module algorithms on our platform since it is not one of the platforms which are covered by

Re: FIPS certification

2014-01-30 Thread Steve Marquess
On 01/30/2014 07:37 AM, Leon Brits wrote: Steve, Thanks for the information. About your last paragraph, I have to ask: The requirements for this product only uses a subset of the algorithms provided by the FIPS Object Module and the DualEC DRBG and RSA1024 etc. is not supported via our

RE: FIPS certification

2014-01-30 Thread Leon Brits
Steve, We are talking past each other - sorry for that but that is the way people like me get to understand these things. First of we have not changed any code of the FIPS Object Module. We simply do not use all of the algorithms based on requirements. The application linking the

Re: FIPS certification

2014-01-30 Thread Stephan Mueller
Am Donnerstag, 30. Januar 2014, 15:49:32 schrieb Leon Brits: Hi Leon, Steve, We are talking past each other - sorry for that but that is the way people like me get to understand these things. First of we have not changed any code of the FIPS Object Module. We simply do not use all of the

Re: FIPS certification

2014-01-30 Thread Steve Marquess
On 01/30/2014 08:49 AM, Leon Brits wrote: Steve, We are talking past each other - sorry for that but that is the way people like me get to understand these things. First of we have not changed any code of the FIPS Object Module. We simply do not use all of the algorithms based on

Re: FIPS certification document for OpenSsl

2008-08-20 Thread Kyle Hamilton
On Tue, Aug 19, 2008 at 5:10 PM, Steve Marquess [EMAIL PROTECTED] wrote: Note YOU MUST FOLLOW THE SECURITY POLICIES EXACTLY OR ELSE THE RESULTING LIBRARY WILL NOT BE COMPLIANT. This includes shutting your UNIX machine down to single-user mode during the build process. It probably would not

Re: FIPS certification document for OpenSsl

2008-08-20 Thread Steve Marquess
Kyle Hamilton wrote: The best conjecture I've come up with: Relying on operating system restrictions to protect the sanctity of the module's security boundary effectively moves one of the most important functions of the module's packaging outside the control of the module. For a chip, you can

Re: FIPS certification document for OpenSsl

2008-08-20 Thread Steve Marquess
Prashant Kumar wrote: Hello All, Where can I find the documentation for OpenSsl FIPS certification ? Any help is appreciated. See http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#918 and http://www.openssl.org/docs/fips/UserGuide-1.1.1.pdf. -Steve M. -- Steve

Re: FIPS certification document for OpenSsl

2008-08-20 Thread Peter Waltenberg
Date: 08/21/2008 02:19 AM Subject:Re: FIPS

FIPS certification document for OpenSsl

2008-08-19 Thread Prashant Kumar
Hello All, Where can I find the documentation for OpenSsl FIPS certification ? Any help is appreciated. Regards, Prashant.

Re: FIPS certification document for OpenSsl

2008-08-19 Thread Kyle Hamilton
the security policy. -Kyle H On Tue, Aug 19, 2008 at 11:02 AM, Prashant Kumar [EMAIL PROTECTED] wrote: Hello All, Where can I find the documentation for OpenSsl FIPS certification ? Any help is appreciated. Regards, Prashant

Re: FIPS certification document for OpenSsl

2008-08-19 Thread Steve Marquess
Kyle Hamilton wrote: It's FIPS validation, not certification. (Not that I'm entirely sure what the difference is, because when a validation is completed a certificate is issued, but I've been corrected enough times by the reps from the Open Source Software Institute that I don't dare call