Implementation Guidance for FIPS 140-2

1 Implementation Guidance for FIPS 140-2 and the Cryptographic Module Validation Program National Institute of Standards and Technology Canadian Centre for Cyber Security Initial Release: March 28, 2003 Last Update: October 17, 2022 Implementation Guidance for FIPS PUB 140-2 and the Cryptographic Module Validation Program National Institute of Standards and Technology CMVP 2 10/17/2022 Table of Contents OVERVIEW .. 6 GENERAL 7 REQUEST FOR Guidance FROM THE CMVP AND CAVP .. 7 COMPLETION OF A TEST REPORT: INFORMATION THAT MUST BE PROVIDED TO NIST AND CCCS.

2 9 PARTIAL VALIDATIONS AND NOT APPLICABLE AREAS OF FIPS 140-2 .. 11 DESIGN AND TESTING OF CRYPTOGRAPHIC MODULES .. 12 MAINTAINING VALIDATION COMPLIANCE OF SOFTWARE OR FIRMWARE CRYPTOGRAPHIC MODULES .. 13 MODULES WITH BOTH A FIPS MODE AND A NON-FIPS MODE .. 15 RELATIONSHIPS AMONG VENDORS, LABORATORIES, AND 16 REVALIDATION REQUIREMENTS .. 16 FSM, SECURITY POLICY, USER Guidance AND CRYPTO OFFICER Guidance DOCUMENTATION .. 34 PHYSICAL SECURITY TESTING FOR RE-VALIDATION FROM FIPS 140-1 TO FIPS 140-2 .. 35 TESTING USING EMULATORS AND SIMULATORS .. 36 POST-VALIDATION INQUIRIES.

3 37 INSTRUCTIONS FOR VALIDATION INFORMATION FORMATTING .. 38 MOVED TO .. 52 MOVED TO .. 52 REQUESTING AN INVOICE BEFORE SUBMITTING A REPORT .. 52 REMOTE TESTING FOR SOFTWARE MODULES .. 53 LIMITING THE USE OF FIPS 186-2 .. 55 OPERATIONAL EQUIVALENCY TESTING FOR HW MODULES .. 57 TRACKING THE COMPONENT VALIDATION LIST .. 62 SECTION 1 - CRYPTOGRAPHIC MODULE SPECIFICATION .. 65 CRYPTOGRAPHIC MODULE NAME .. 65 FIPS APPROVED MODE OF OPERATION .. 66 FIRMWARE DESIGNATION .. 67 BINDING OF CRYPTOGRAPHIC ALGORITHM VALIDATION CERTIFICATES .. 68 MOVED TO.

4 70 MOVED TO .. 70 MULTIPLE APPROVED MODES OF OPERATION .. 70 MOVED TO .. 72 DEFINITION AND REQUIREMENTS OF A HYBRID CRYPTOGRAPHIC MODULE .. 72 MOVED TO .. 73 MOVED TO .. 74 MOVED TO .. 74 MOVED TO .. 74 MOVED TO .. 74 MOVED TO .. 74 SOFTWARE MODULE .. 74 FIRMWARE MODULE .. 76 PIV REFERENCE .. 79 NON-APPROVED MODE OF 80 SUB-CHIP CRYPTOGRAPHIC SUBSYSTEMS .. 82 PROCESSOR ALGORITHM ACCELERATORS (PAA) AND PROCESSOR ALGORITHM Implementation (PAI) .. 86 MODULE COUNT DEFINITION .. 90 DEFINITION AND USE OF A NON-APPROVED SECURITY FUNCTION.

5 93 SECTION 2 CRYPTOGRAPHIC MODULE PORTS AND INTERFACES .. 98 TRUSTED PATH .. 98 SECTION 3 ROLES, SERVICES, AND AUTHENTICATION .. 101 Implementation Guidance for FIPS PUB 140-2 and the Cryptographic Module Validation Program National Institute of Standards and Technology CMVP 3 10/17/2022 AUTHORIZED ROLES .. 101 BYPASS CAPABILITY IN ROUTERS .. 102 AUTHENTICATION MECHANISMS FOR SOFTWARE MODULES .. 104 MULTI-OPERATOR AUTHENTICATION .. 105 DOCUMENTATION REQUIREMENTS FOR CRYPTOGRAPHIC MODULE SERVICES .. 106 SECTION 4 - FINITE STATE MODEL .. 109 SECTION 5 - PHYSICAL SECURITY.

6 110 OPACITY AND PROBING OF CRYPTOGRAPHIC MODULES WITH FANS, VENTILATION HOLES OR SLITS AT LEVEL 110 TESTING TAMPER EVIDENT SEALS .. 111 PHYSICAL SECURITY ASSUMPTIONS .. 111 LEVEL 3: HARD COATING TEST METHODS .. 116 PHYSICAL SECURITY LEVEL 3 AUGMENTED WITH EFP/EFT .. 118 SECTION 6 OPERATIONAL ENVIRONMENT .. 119 SINGLE OPERATOR MODE AND CONCURRENT OPERATORS .. 119 APPLICABILITY OF OPERATIONAL ENVIRONMENT REQUIREMENTS TO JAVA SMART CARDS .. 120 CORRECTION TO COMMON CRITERIA REQUIREMENTS ON OPERATING SYSTEM .. 121 APPROVED INTEGRITY TECHNIQUES .. 122 SECTION 7 CRYPTOGRAPHIC KEY MANAGEMENT.

7 123 MOVED TO .. 123 USE OF IEEE KEY DERIVATION PROTOCOLS .. 123 MOVED TO .. 124 ZEROIZATION OF POWER-UP TEST KEYS .. 124 STRENGTH OF KEY ESTABLISHMENT METHODS .. 124 MOVED TO .. 127 KEY ESTABLISHMENT AND KEY ENTRY AND OUTPUT .. 127 THE USE OF POST-PROCESSING IN KEY GENERATION METHODS .. 131 PROCEDURAL CSP ZEROIZATION .. 133 USING THE SP 800-108 KDFS IN FIPS MODE .. 134 MOVED TO .. 135 KEY GENERATION FOR RSA SIGNATURE ALGORITHM .. 135 MOVED TO .. 136 ENTROPY CAVEATS .. 136 ENTROPY ASSESSMENT .. 140 ACCEPTABLE ALGORITHMS FOR PROTECTING STORED KEYS AND CSPS.

8 145 ZEROIZATION OF ONE TIME PROGRAMMABLE (OTP) MEMORY .. 147 ENTROPY ESTIMATION AND COMPLIANCE WITH SP 800-90B .. 148 INTERPRETATION OF SP 800-90B REQUIREMENTS .. 151 COMBINING ENTROPY FROM MULTIPLE SOURCES .. 157 SECTION 8 ELECTROMAGNETIC INTERFERENCE/ELECTROMAGNETIC COMPATIBILITY (EMI/EMC) .. 160 SECTION 9 SELF-TESTS .. 161 KNOWN ANSWER TEST FOR KEYED HASHING ALGORITHM .. 161 KNOWN ANSWER TEST FOR EMBEDDED CRYPTOGRAPHIC ALGORITHMS .. 163 KAT FOR ALGORITHMS USED IN AN INTEGRITY TEST TECHNIQUE .. 163 KNOWN ANSWER TESTS FOR CRYPTOGRAPHIC ALGORITHMS .. 165 MODULE INITIALIZATION DURING POWER-UP.

9 171 SELF-TESTS WHEN IMPLEMENTING THE SP 800-56A SCHEMES .. 172 SOFTWARE/FIRMWARE LOAD TEST .. 174 CONTINUOUS RANDOM NUMBER GENERATOR TESTS .. 175 PAIR-WISE CONSISTENCY SELF-TEST WHEN GENERATING A KEY PAIR .. 179 Implementation Guidance for FIPS PUB 140-2 and the Cryptographic Module Validation Program National Institute of Standards and Technology CMVP 4 10/17/2022 POWER-UP TESTS FOR SOFTWARE MODULE LIBRARIES .. 180 REDUCING THE NUMBER OF KNOWN ANSWER TESTS .. 183 INTEGRITY TEST USING 185 NON-RECONFIGURABLE MEMORY INTEGRITY TEST .. 187 SECTION 10 DESIGN 189 SECTION 11 MITIGATION OF OTHER ATTACKS.

10 190 MITIGATION OF OTHER ATTACKS .. 190 SECTION 12 APPENDIX A: SUMMARY OF DOCUMENTATION REQUIREMENTS .. 191 SECTION 13 APPENDIX B: RECOMMENDED SOFTWARE DEVELOPMENT PRACTICES .. 192 SECTION 14 APPENDIX C: CRYPTOGRAPHIC MODULE SECURITY POLICY .. 193 LEVEL OF DETAIL WHEN REPORTING CRYPTOGRAPHIC SERVICES .. 193 LEVEL OF DETAIL WHEN REPORTING MITIGATION OF OTHER ATTACKS .. 194 LOGICAL DIAGRAM FOR SOFTWARE, FIRMWARE AND HYBRID MODULES .. 194 OPERATOR APPLIED SECURITY APPLIANCES .. 195 CRITICAL SECURITY PARAMETERS FOR THE SP 800-90 DRBGS .. 197 FIPS 140-2 ANNEX A APPROVED SECURITY 199 VALIDATION TESTING OF SHS ALGORITHMS AND HIGHER CRYPTOGRAPHIC ALGORITHM USING SHS ALGORITHMS.