Avaya G250 Administration page 508

FIPS
5. The cryptographic module performs the following tests:
Power up Self-Tests:
●
Cryptographic algorithm tests:
TDES Known Answer Test (tests DES performance as well)
●
AES Known Answer Test
●
SHA-1 Known Answer Test
●
HMAC-SHA-1 Known Answer Test
●
DRNG Known Answer Test
●
RSA Known Answer Test
●
Gateway Software Integrity Test (32 bit CRC verification) and Booter Integrity Test
(32 bit CRC verification)
Critical Functions Tests:
NVRAM Integrity test
●
EEPROM Integrity Test
●
Conditional Self-Tests:
●
Continuous Random Number Generator (RNG) test - performed on all RNGs involved
●
in crypto activities in FIPS-approved mode. Performed for PRNG x9.31 and Random
Seed Generator.
Bypass Test
●
Firmware load test
●
6. Users can instruct the module to perform the power-up self-tests via power cycle.
7. Prior to each use, the internal RNG is tested using the conditional test specified in
FIPS 140-2 §4.9.2.
8. Data output is inhibited during key generation, self-tests, zeroization, and error states.
9. The module supports concurrent operators and maintains separation of roles and services.
10. Users can plug-in and use any Avaya Media Module that does not support cryptographic
functionality without restriction.
11. Media modules with cryptographic functionality are considered separate cryptographic
modules that are not included within the cryptographic boundary of a gateway.
508 Administration for the Avaya G250 and Avaya G350 Media Gateways