Re: Fips self-tests

2008-12-22 Thread Michael S. Zick
On Mon December 22 2008, Steve Marquess wrote: > a_l t wrote: > > If I want to validate a stripped down module (let's say > > for simplicity just without the unwanted self tests), is there a fast > > way to do it, or I should expect a 6 months process? > > Six months would be fast. For uncompli

Re: Fips self-tests

2008-12-22 Thread Steve Marquess
a_l t wrote: I understand the requirements of FIPS validation. The product is designed for Federal market so it must has FIPS validation. The code uses only PRNG and AES, it doesn't use any of the other algorithms, that were my question came from. My problem is really not at the start up of the

Re: Fips self-tests

2008-12-22 Thread a_l t
I understand the requirements of FIPS validation. The product is designed for Federal market so it must has FIPS validation.The code uses only PRNG and AES, it doesn't use any of the other algorithms, that were my question came from. My problem is really not at the start up of the system, there I c

Re: Fips self-tests

2008-12-22 Thread Steve Marquess
a_l t wrote: If I want to validate a stripped down module (let's say for simplicity just without the unwanted self tests), is there a fast way to do it, or I should expect a 6 months process? Six months would be fast. For uncomplicated validations I tell my clients to hope for nine months bu

Re: Fips self-tests

2008-12-22 Thread Kyle Hamilton
FIPS 140-2 validation is mandated for encryption modules used by the US federal government when dealing with sensitive-confidential (but not classified) information. I believe it's also mandated for the Canada federal government, as well. This mandate means that even if it takes 10 minutes to ini

Re: Fips self-tests

2008-12-21 Thread a_l t
If I want to validate a stripped down module (let's say for simplicity just without the unwanted self tests), is there a fast way to do it, or I should expect a 6 months process?I also didn't quite understood what you meant in the last sentence: "Where FIPS validation is mandated operations conside

Re: Fips self-tests

2008-12-21 Thread Steve Marquess
a_l t wrote: I'm running it on TI DSP (C6455) and it takes around 1 minute. On Sun, Dec 21, 2008 at 10:28 PM, Victor Duchovni mailto:victor.ducho...@morganstanley.com>> wrote: On Sun, Dec 21, 2008 at 05:28:14PM +0200, a_l t wrote: > I'm using the FIPS approved OpenSSL. In the initializatio

Re: Fips self-tests

2008-12-21 Thread a_l t
I'm running it on TI DSP (C6455) and it takes around 1 minute. On Sun, Dec 21, 2008 at 10:28 PM, Victor Duchovni < victor.ducho...@morganstanley.com> wrote: > On Sun, Dec 21, 2008 at 05:28:14PM +0200, a_l t wrote: > > > I'm using the FIPS approved OpenSSL. > > In the initialization it runs severa

Re: Fips self-tests

2008-12-21 Thread Victor Duchovni
On Sun, Dec 21, 2008 at 05:28:14PM +0200, a_l t wrote: > I'm using the FIPS approved OpenSSL. > In the initialization it runs several self tests which take quite a long > time. > I use only several algorithms from the OpenSSL, is there a way to remove the > self tests of the algorithms that I don'

Re: Fips self-tests

2008-12-21 Thread Steve Marquess
a_l t wrote: Hi, I'm using the FIPS approved OpenSSL. In the initialization it runs several self tests which take quite a long time. I use only several algorithms from the OpenSSL, is there a way to remove the self tests of the algorithms that I don't use (like DSA) without losing the FIPS