NSSCryptoModuleSpec/Section 7: Cryptographic Key Management

From MozillaWiki
Jump to: navigation, search

This is a draft document

Document Description

DTR Section

Assessment

Status

Specification of all aspects of key management;
key generation, key establishment, key entry and output, key storage, and key zeroization.

VE.07.03.01
VE.07.13.01
through
VE.07.17.01
VE.07.19.01
VE.07.24.01
VE.07.39.01
VE.07.40.01
VE.07.41.01

Key Management
Key Zeroization
draft
Description of key protection

VE.07.01.01
VE.07.02.01

Key Management draft
Proof of FIPS approved key generation

VE.07.11.01

Key Generation draft
Security of key generation method

VE.07.13.01

Key Generation draft
Random number generator description VE.07.08.01
VE.07.09.01
VE.07.10.01
RNG draft
Documentation of means to ensure entity association of stored keys

VE.07.39.01

Entity Association Assurance draft
Output of intermediate key generation values

VE.07.15.01
VE.07.15.02

No intermediate key generation values are output from the cryptographic module upon completion of the key generation process. draft
Key generation methods employed by the cryptographic module

VE.07.16.01

Key Generation draft
Key establishment VE.07.17.01
VE.07.18.01
VE.07.19.01
VE.07.21.01
Key Establishment Techniques draft
Key entry and output methods

VE.07.23.01
VE.07.24.01
VE.07.27.01
VE.07.28.01
VE.07.29.01

Key Entry and Output Methods draft
Documentation of means to ensure entity association of entered or output keys

VE.07.25.01

Entity Association Assurance draft
Manual key entry test

VE.09.40.01
VE.09.40.02

N/A. Manual key entry and output methods are not employed by the cryptographic module. draft

Return to: NSSCryptoModuleSpec